Aegis vs Ssid MCP

A side-by-side look at the Aegis and Ssid MCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.

Aegis logoAegisSecurity · Local subprocess (stdio)Credential isolation proxy for AI agents. Injects secrets at the network boundary with domain restrictions, agent authentication, and audit logging. No SDK required — works as a transparent HTTP proxy or MCP server.53GoodAuth: not declaredSsid MCP logoSsid MCPSecurity · Local subprocess (stdio)Identify the manufacturer behind any MAC address; flags randomized/private addresses.56GoodAuth: not declared

Verdict: choose Aegis for security work as a local process; choose Ssid MCP for security as a local process. You can also run both side by side in one mcpServers block.

Which MCP server should you choose?

Aegis logoChoose Aegis when

  • You need dedicated capabilities in the Security domain.
  • You prefer a local stdio subprocess transport.
Explore Aegis

Ssid MCP logoChoose Ssid MCP when

  • You need dedicated capabilities in the Security domain.
  • You prefer a local stdio subprocess transport.
  • You have the keys it needs: SSID_API_KEY.
  • You want tools like get_router_defaults, check_router_compliance, lookup_mac.
Explore Ssid MCP

Feature & specification comparison

Rows where the two servers differ are marked.

SpecAegis logoAegisSsid MCP logoSsid MCP
CategorySecuritySecurity
Quality signal53/100 · Good56/100 · Good
Install commandConfirmedConfirmed
TransportLocal subprocess (stdio)Local subprocess (stdio)
AuthNot declaredNot declared
PricingNot declaredNot declared
Required env varsNone listedSSID_API_KEY
Verified ownerCommunity listingCommunity listing
GitHub stars141
Directory activity 3 views 0 installs 0 upvotes 1 views 0 installs 0 upvotes
ToolsNot listed4

Tools & capabilities

Aegis tools

No tool names declared yet. Check the project README from the listing page.

Ssid MCP tools 4

  • get_router_defaultsDefault gateway IP, admin username and password (or the fact that there is none), credential type and factory-reset steps for a router or gateway model, each cited to the manufacturer's own documentation with the source URL. Pass the ssid.ai slug, or brand plus model. Use after lookup_mac identifies the vendor, or whenever a user asks for a router's default login, factory password, gateway address or reset procedure. Covers the 409-model ssid.ai directory; no listing or wildcard search.
  • check_router_complianceWhether a router model still ships a universal default password, the pattern prohibited for consumer connectable products under the UK PSTI Act and targeted by the EU Cyber Resilience Act, based on the manufacturer-cited credential type, with the ssid.ai Router Compliance Index totals for context. Pass the ssid.ai slug (get it from get_router_defaults). Documentation reading, not legal advice.
  • lookup_macIdentify the organisation behind a MAC address and detect randomized/private (locally-administered) addresses used by modern phones. Resolves the IEEE registries longest-prefix-first, so an address inside a block the IEEE subdivided returns the company that actually holds it (MA-M, MA-S or IAB) rather than the MA-L registrar. Returns vendor, blockType (MA-L | MA-M | MA-S | IAB), block start/end for a sub-block, OUI, kind, randomized flag, confidence and the source registry file. A randomized address keeps vendor: null and adds cidRegistrant when its prefix is a registered Company ID (DA:A1:19 is Google's). For the router's factory login, call get_router_defaults next.
  • submit_correctionPropose a fix to a router model's default gateway IP, username, password, credential type, or reset steps on ssid.ai. Requires an official manufacturer source URL (never an aggregator/forum). Queued for verification — never applied automatically. Use the router's slug from ssid.ai/routers/<slug>. Requires an ssid Pro key ($15/mo, ssid.ai/pricing) sent as SSID_API_KEY or a Bearer token; the three read tools stay free.

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

Aegis

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "getaegis-aegis": {
      "command": "npx",
      "args": [
        "-y",
        "@getaegis/cli"
      ]
    }
  }
}

Ssid MCP

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "ssid-mcp-2": {
      "command": "npx",
      "args": [
        "-y",
        "ssid-mcp"
      ],
      "env": {
        "SSID_API_KEY": "YOUR_SSID_API_KEY_HERE"
      }
    }
  }
}

Frequently asked questions

Aegis is categorized under Security and uses a local stdio subprocess. Ssid MCP belongs to Security and uses a local stdio subprocess. Pick Aegis for security work and Ssid MCP for security.

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.

Aegis has no declared pricing — check the project's own site. Ssid MCP has no declared pricing — check the project's own site. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Yes. MCP clients support multiple servers: add getaegis-aegis and ssid-mcp-2 as separate keys in the same mcpServers object, and your assistant will call tools from either one.

On AllMCPs, Aegis has a quality signal of 53/100 (Good) with 3 views, 0 installs and 14 GitHub stars. Ssid MCP has 56/100 (Good) with 1 views, 0 installs and 1 GitHub stars.