A hardened fork of CrystalDBA's postgres-mcp that routes all JSON-RPC traffic through an Ed25519-signed proxy layer. The Aegis Edge Proxy intercepts tool calls before they hit your database connection and mathematically blocks DROP, DELETE, and ALTER statements in under 2ms. You generate a capability token from the Aegis Cloud Console, run the Docker stack, and point your MCP client at localhost:8080 instead of directly at Postgres. The base server still exposes index tuning, EXPLAIN plans, schema intelligence, and health checks, but now every operation requires a valid X-Aegis-IBCT signature. Reach for this if you're running LLM database access in production and need SOC2 or HIPAA guardrails without trusting prompt engineering alone.