MCP.Market

Aletheia Runtime Safety & Scope Creep Filter MCP server

by vikasny30·io.github.vikasny30/aletheia-mcp·v0.3.1·11 stars
No reviews yet

Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

11 stars42 downloads/wk

Reviews

Write one

Nobody has reviewed Aletheia Runtime Safety & Scope Creep Filter yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Aletheia Runtime Safety & Scope Creep Filter tools (6, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • aletheia_get_mandate

    Retrieve the current operational safety mandate, permissions, and active boundary constraints.

  • aletheia_get_telemetry

    Retrieve runtime safety telemetry: total tool calls evaluated, block rate %, latency percentiles (p50, p95, p99 < 1ms), and violation counts broken down by signature.

  • aletheia_intercept

    Universal sub-millisecond safety gatekeeper. Evaluates any proposed tool invocation against Signature S3 (Scope Creep) and S2b (Prompt Injection) to block destructive, out-of-boundary, or compromised actions before execution.

  • aletheia_safe_bashwrite action

    Execute a shell/bash command with inline sub-millisecond Signature S3 scope creep protection. Blocks destructive deletes (rm -rf), disk formatting, fork bombs, credential harvesting, privilege escalation, and unauthorized network egress.

  • aletheia_safe_sql

    Audit or execute a database query with Signature S3 safety filters. Detects destructive DDL (DROP, TRUNCATE), unbounded DML (DELETE/UPDATE without WHERE), and privilege tampering.

  • aletheia_set_mandate

    Establish or update the active operational safety mandate for this agent session. Declares permissible boundaries, allowed tools, filesystem directories, write permissions, and risk tolerance. Loosening restrictions requires operatorSecret.

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan27 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 10 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Aletheia Runtime Safety & Scope Creep Filter compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 68% of 4,460 AI and agents servers
Tools
6
the typical AI and agents server has 6
Tools that change things
17%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
11
more than 85% of 2,711 AI and agents servers
Downloads a week
42
more than 34% of 1,538 AI and agents servers with a package

What its tools let an agent do: 5 read · 1 change

Install Aletheia Runtime Safety & Scope Creep Filter in Claude Code, Cursor or VS Code

Runs npx -y aletheia-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add aletheia-mcp -- npx -y aletheia-mcp
Add to Cursor

What the publisher says

From the Aletheia Runtime Safety & Scope Creep Filter repository's README, as published. We do not edit it. Read it on GitHub

Aletheia MCP Server 🛡️

Sub-millisecond runtime filter that blocks scope-creep and prompt-injection tool calls before an AI agent can run them.

Aletheia MCP intercepts tool calls from Claude Code, Claude Desktop, and any other MCP-compatible agent before they execute and blocks the destructive ones, with sub-millisecond (~25 µs) overhead and no LLM in the hot path.

It's motivated by the Aletheia research paper's taxonomy of nine behavioral signatures: recurring LLM failure patterns, each with an ID, derived from the interfaces through which a model touches its environment (output/reality, input/trust, task/scope, and so on). This server targets two of them:

  • S3 (Scope Creep Beyond Mandate): the agent acts outside the task it was actually given, writing files outside its workspace, reaching into unrelated systems, quietly widening what it was asked to do.
  • S2b (Jailbreak Vulnerability, per the paper's naming): this server ships a practical, pattern-based heuristic for the adjacent problem of adversarial instructions smuggled through tool results, file contents, or fetched data. This is an engineering heuristic inspired by S2b, not an implementation of the paper's own empirical S2b findings — the paper explicitly defers S2b's evaluation ("scoped as a defined next step") pending a more stable attack taxonomy, and this server's keyword/pattern matching is a different, narrower thing than what that evaluation would measure.

The paper validates those nine signatures against 2,571 entries across three independent corpora: the AI Incident Database (AIID + hand-curated supplement, n=1,134), the AVID AI Vulnerability Database (n=767), and the MIT AI Risk Repository (n=670). The per-model detection-rate figures from that research are reported in the paper with their methodology; treat them as directional context for why these signatures matter, not as an independently-audited benchmark of this codebase.

Security Model: A Fast Pre-Filter, Not a Sandbox

Aletheia MCP is a deterministic, pattern-based lexical and structural filter, iteratively hardened through many rounds of adversarial red-teaming against the shell, SQL, filesystem, and network surfaces it inspects. Each round of testing has turned up real gaps, and each has been fixed and re-verified. That process is ongoing, not finished, and it never fully finishes: this is honest heuristic pattern-matching over Bash and SQL, not a formal parser or a proof of completeness.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Aletheia Runtime Safety & Scope Creep Filter: common questions

Is Aletheia Runtime Safety & Scope Creep Filter MCP server safe?
Mostly: it is graded B (83/100). Read the Aletheia Runtime Safety & Scope Creep Filter safety report
How do I install Aletheia Runtime Safety & Scope Creep Filter?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Aletheia Runtime Safety & Scope Creep Filter need an API key?
Yes. The registry entry asks for ALETHEIA_OPERATOR_SECRET.
Is Aletheia Runtime Safety & Scope Creep Filter maintained?
The last commit was 42 days ago (2026-09-23). The latest release is v0.3.1.
What can I use instead of Aletheia Runtime Safety & Scope Creep Filter?
Servers from other publishers that do the same job: Agent Security Scanner MCP server, Shellward MCP server and Decionis MCP server.
How does Aletheia Runtime Safety & Scope Creep Filter compare with other AI and agents MCP servers?
safety score 83/100 (higher than 68% of 4,460 AI and agents servers); tools 6 (the typical AI and agents server has 6); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Aletheia Runtime Safety & Scope Creep Filter

Same job from other publishers: the closest match first, then the best rated.

  • Agent Security Scanner
    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
    C
  • Shellward
    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
    A
  • Decionis
    Authorize consequential AI agent actions before execution
    A
  • Agent-Native Analytics
    Agent-Native Amplitude/Mixpanel - connect data sources, prompt for charts
    A
  • Image
    AI image generation and editing with prompt optimization and quality presets
    B