Home › Security › Aletheia Runtime Safety & Scope Creep Filter

Aletheia Runtime Safety & Scope Creep Filter

Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls

TypeScript Local macOSWindowsLinux

★ 1 stars Last pushed 2026-09-23 License: NOASSERTION

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 0.3.1)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "aletheia-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ALETHEIA_ALLOW_WRITE": "<YOUR_VALUE>",
        "ALETHEIA_ALLOW_NETWORK": "<YOUR_VALUE>",
        "ALETHEIA_ALLOW_LOOPBACK": "<YOUR_VALUE>",
        "ALETHEIA_OPERATOR_SECRET": "<YOUR_VALUE>"
      }
    }
  }
}

ALETHEIA_ALLOW_WRITE — Set to "true" to authorize filesystem writes (equivalent to --allow-write).
ALETHEIA_ALLOW_NETWORK — Set to "true" to authorize outbound network requests (equivalent to --allow-network).
ALETHEIA_ALLOW_LOOPBACK — Set to "true" to authorize requests to localhost / 127.0.0.1 (equivalent to --allow-loopback).
ALETHEIA_OPERATOR_SECRET secret — Operator token required to loosen an already-running session's mandate at runtime.

This server takes extra arguments — see its repository.