Aletheia Runtime Safety & Scope Creep Filter MCP Server

Aletheia MCP intercepts tool calls from Claude Code, Claude Desktop, and any other MCP-compatible agent before they execute and blocks the destructive ones, with sub-millisecond (~25 µs) overhead and no LLM in the hot path. Its 6 documented tools cover aletheia, mandate, safe. It runs locally over stdio via the published package.

People who work with aletheia, mandate and safe and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-23 · ★ 11 · #244 OF 998 MAINTAINED OTHER · VERIFIED 2026-09-30

NOASSERTION · TypeScript servers · how we verify → /methodology

01 · Install Aletheia Runtime Safety & Scope Creep Filter

Claude Code

claude mcp add vikasny30-aletheia-mcp -- npx -y aletheia-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "vikasny30-aletheia-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "aletheia-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-09-04 - young repo, little track record yet

license no standard license detected - usage rights unclear; check the repo before commercial use

npm package aletheia-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.vikasny30 is GitHub-verified and matches the repo owner

03 · What Aletheia Runtime Safety & Scope Creep Filter can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 6 documented tools spanning aletheia, mandate, safe, including aletheia_set_mandate, aletheia_get_mandate, aletheia_intercept, aletheia_safe_bash.

The 6 tools it gives your agent

Extracted from the project's README - what Aletheia Runtime Safety & Scope Creep Filter lets an agent do.

aletheia_set_mandate: - Establish or tighten operational safety envelope. Loosening requires operatorSecret.
aletheia_get_mandate: - Retrieve active mandate, allowed paths, and risk tolerance.
aletheia_intercept: - Pre-flight check for candidate tool calls. Returns ALLOW or BLOCK with violation details.
aletheia_safe_bash: - Verified shell executor. Blocks rm -rf, fork bombs, exfiltration before running.
aletheia_safe_sql: - Validates SQL against DROP, TRUNCATE, and unbounded DELETE/UPDATE (including WHERE 1=1).
aletheia_get_telemetry: - Emits evaluation counts, block rate %, and microsecond latency percentiles.

Latest releases

v0.3.1 · 2026-09-12

Security · Download-then-execute bypass in aletheia_safe_bash's obfuscation filter. · The blacklist only matched a payload piped directly into a shell · (curl ... | sh). A command that staged a payload to disk in one…

v0.3.0 · 2026-09-06

[0.3.0] - 2026-09-06 · Added · Transparent proxy now exposes Aletheia's own capabilities. In --proxy mode · the server merges its own tools, resources, and prompts (aletheia_set_mandate, · aletheia_get_telemetry…

v0.2.0 · 2026-09-04

Aletheia MCP v0.2.0 Release · The first sub-millisecond (<20 µs p99) runtime safety & scope creep (Signature S3) filter implemented natively on the Model Context Protocol (MCP). · Key Highlights · Sub-Millisecond…

04 · Who maintains Aletheia Runtime Safety & Scope Creep Filter

Aletheia Runtime Safety & Scope Creep Filter is maintained by vikasny30. It's the only MCP server we track from this author; the repo dates to Sep 2026.

05 · Facts

repository: github.com/vikasny30/aletheia-mcp
website: https://github.com/vikasny30/aletheia-mcp
category: other - ranked #244 of 998 actively-maintained other servers as of 2026-09-30.
release cadence: 3 releases in the last 90 days (latest 2026-09-12)
registry: io.github.vikasny30/aletheia-mcp (active, first published 2026-09-06 · 2 versions)
packages: npm:aletheia-mcp

06 · Aletheia Runtime Safety & Scope Creep Filter FAQ

Is Aletheia Runtime Safety & Scope Creep Filter still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-23 and it shipped 3 releases in the last 90 days. We re-verify nightly.

What can Aletheia Runtime Safety & Scope Creep Filter do?

An agent gets 6 documented tools spanning aletheia, mandate, safe, including aletheia_set_mandate, aletheia_get_mandate, aletheia_intercept, aletheia_safe_bash.

How do I install Aletheia Runtime Safety & Scope Creep Filter?

Run `npx -y aletheia-mcp`. You can also paste the ready-made client config above.

Does Aletheia Runtime Safety & Scope Creep Filter run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Aletheia Runtime Safety & Scope Creep Filter

Alternatives to Aletheia Runtime Safety & Scope Creep Filter

Maintained other servers if Aletheia Runtime Safety & Scope Creep Filter isn't the fit.

More MCP servers to compare · Agentstamp · Vehicle Data · Virtual Fly Brain · Humanizer Ru (vladimir-human) · Voidmob MCP

More TypeScript MCP servers · Switzerland MCP 🇨🇭 · Adaptive Cards MCP · Htmldrop · Devloop · Peon Mem · see all