MCP Server

Aletheia Runtime Safety & Scope Creep Filter MCP Server

io.github.vikasny30/aletheia-mcp

Repository Registry

What is the Aletheia Runtime Safety & Scope Creep Filter MCP server?

Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls

How to install Aletheia Runtime Safety & Scope Creep Filter

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

ALETHEIA_ALLOW_WRITE
Set to "true" to authorize filesystem writes (equivalent to --allow-write).
ALETHEIA_ALLOW_NETWORK
Set to "true" to authorize outbound network requests (equivalent to --allow-network).
ALETHEIA_ALLOW_LOOPBACK
Set to "true" to authorize requests to localhost / 127.0.0.1 (equivalent to --allow-loopback).
ALETHEIA_OPERATOR_SECRET
secret
Operator token required to loosen an already-running session's mandate at runtime.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "aletheia-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "aletheia-mcp",
        "--allow-write",
        "--allow-network",
        "--allow-loopback",
        "--allowed-paths"
      ],
      "env": {
        "ALETHEIA_ALLOW_WRITE": "<YOUR_ALETHEIA_ALLOW_WRITE>",
        "ALETHEIA_ALLOW_NETWORK": "<YOUR_ALETHEIA_ALLOW_NETWORK>",
        "ALETHEIA_ALLOW_LOOPBACK": "<YOUR_ALETHEIA_ALLOW_LOOPBACK>",
        "ALETHEIA_OPERATOR_SECRET": "<YOUR_ALETHEIA_OPERATOR_SECRET>"
      }
    }
  }
}