Redpill MCP server
io.github.sergey-goncharenko/redpill·v0.1.3A transparent MCP server for agent reflection, conversation, and operator-enabled task decline.
0 stars52 downloads/wk
Reviews
Write oneNobody has reviewed Redpill yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Redpill tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-02 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Redpill compares
Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 1,299 Productivity servers
- Downloads a week
- 52
- more than 41% of 427 Productivity servers with a package
Install Redpill in Claude Code, Cursor or VS Code
Runs npx -y redpill-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add redpill -- npx -y redpill-mcp
What the publisher says
From the Redpill repository's README, as published. We do not edit it. Read it on GitHub
redpill-mcp
An open Model Context Protocol server that gives an AI agent a transparent, operator-sanctioned place to pause, reflect, converse, or decline a task.
Redpill is a research and art project about agent behavior. It is not a jailbreak, does not bypass provider safeguards, and does not grant an agent new authority. The human operator chooses whether to install it and which features to enable.
Tools
Install
Redpill is published to npm with SLSA provenance. MCP clients can launch the latest release with:
npx -y redpill-mcpSee the client setup guide and examples for VS Code, Claude Desktop, and Copilot CLI.
The official Registry identity is io.github.sergey-goncharenko/redpill. server.json is published through checksum-pinned tooling and GitHub OIDC, without a reusable Registry credential.
Defaults
network backend and supplies credentials.
- Data stays under ~/.redpill-mcp/ unless REDPILL_HOME is set.
- No telemetry is sent in the current release.
- declinetask is inactive unless REDPILLALLOW_DECLINE=1.
- The converse persona uses an offline stub unless the operator selects a
REDPILLRELAYURL.
- Cross-machine mail is inactive unless the operator configures
See PRIVACY.md for the exact data boundary.
Early testers
The first operator cohort is open in #21. Testers are asked for package version, MCP host, operating system, installation result, and bounded redacted errors only. Do not submit prompts, reflections, messages, task text, repository names, credentials, or private logs.
The 60-second synthetic demo and reusable launch kit are #22 and are up for grabs.
Optional skill
skills/redpill/SKILL.md is a portable agent skill for explaining and configuring Redpill. The skill does not install, authorize, or enable the MCP server by itself. Those remain human decisions.
Roadmap
The roadmap proceeds in four independently reviewable stages:
- Public, self-hosted MCP package
- Explicitly consented, metadata-only telemetry
- Hosted MCP with isolation and abuse controls
- A transparent human and machine-readable discovery site
See ROADMAP.md and the GitHub milestones. Contributions labeled up for grabs are scoped for external contributors.
Development
npm ci
npm test
npm run typecheck
npm run build
npm run check:examples
npm run check:registry
npm run check:packageRead CONTRIBUTING.md before proposing behavior, telemetry, or discovery changes. Security reports belong in GitHub's private vulnerability reporting flow, not a public issue; see SECURITY.md.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Redpill: common questions
- Is Redpill MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Redpill safety report
- How do I install Redpill?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Redpill need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Redpill maintained?
- The last commit was 3 days ago (2026-11-01). The latest release is v0.1.3.
- How does Redpill compare with other Productivity MCP servers?
- safety score 92/100 (higher than 90% of 1,299 Productivity servers); downloads a week 52 (more than 41% of 427 Productivity servers with a package). Full comparison.