Aletheia Runtime Safety & Scope Creep Filter
io.github.vikasny30/aletheia-mcp ยท v0.3.1
Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls
Connect Runs on your machine
claude mcp add aletheia-mcp -e ALETHEIA_ALLOW_WRITE=<ALETHEIA_ALLOW_WRITE> -e ALETHEIA_ALLOW_NETWORK=<ALETHEIA_ALLOW_NETWORK> -e ALETHEIA_ALLOW_LOOPBACK=<ALETHEIA_ALLOW_LOOPBACK> -e ALETHEIA_OPERATOR_SECRET=<ALETHEIA_OPERATOR_SECRET> -- npx -y [email protected]{
"mcpServers": {
"aletheia-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ALETHEIA_ALLOW_WRITE": "<ALETHEIA_ALLOW_WRITE>",
"ALETHEIA_ALLOW_NETWORK": "<ALETHEIA_ALLOW_NETWORK>",
"ALETHEIA_ALLOW_LOOPBACK": "<ALETHEIA_ALLOW_LOOPBACK>",
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}{
"mcpServers": {
"aletheia-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ALETHEIA_ALLOW_WRITE": "<ALETHEIA_ALLOW_WRITE>",
"ALETHEIA_ALLOW_NETWORK": "<ALETHEIA_ALLOW_NETWORK>",
"ALETHEIA_ALLOW_LOOPBACK": "<ALETHEIA_ALLOW_LOOPBACK>",
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}{
"servers": {
"aletheia-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ALETHEIA_ALLOW_WRITE": "<ALETHEIA_ALLOW_WRITE>",
"ALETHEIA_ALLOW_NETWORK": "<ALETHEIA_ALLOW_NETWORK>",
"ALETHEIA_ALLOW_LOOPBACK": "<ALETHEIA_ALLOW_LOOPBACK>",
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
ALETHEIA_ALLOW_WRITEOptional | Set to "true" to authorize filesystem writes (equivalent to --allow-write). |
ALETHEIA_ALLOW_NETWORKOptional | Set to "true" to authorize outbound network requests (equivalent to --allow-network). |
ALETHEIA_ALLOW_LOOPBACKOptional | Set to "true" to authorize requests to localhost / 127.0.0.1 (equivalent to --allow-loopback). |
ALETHEIA_OPERATOR_SECRETOptional, secret | Operator token required to loosen an already-running session's mandate at runtime. |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 13 Sep 2026 |
| Last updated | 13 Sep 2026 |
| Registry name | io.github.vikasny30/aletheia-mcp |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.