Aletheia Runtime Safety & Scope Creep Filter

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.vikasny30/aletheia-mcp",
  "description": "Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls",
  "title": "Aletheia Runtime Safety & Scope Creep Filter",
  "repository": {
    "url": "https://github.com/vikasny30/aletheia-mcp",
    "source": "github"
  },
  "version": "0.3.1",
  "websiteUrl": "https://github.com/vikasny30/aletheia-mcp",
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "aletheia-mcp",
      "version": "0.3.1",
      "transport": {
        "type": "stdio"
      },
      "packageArguments": [
        {
          "description": "Authorize filesystem writes and mutations (default: read-only).",
          "type": "named",
          "name": "--allow-write"
        },
        {
          "description": "Authorize outbound network requests (default: local-only).",
          "type": "named",
          "name": "--allow-network"
        },
        {
          "description": "Authorize requests to localhost / 127.0.0.1 dev servers (default: blocked).",
          "type": "named",
          "name": "--allow-loopback"
        },
        {
          "description": "Comma-separated list of directories writes are confined to (default: current working directory).",
          "format": "filepath",
          "type": "named",
          "name": "--allowed-paths"
        }
      ],
      "environmentVariables": [
        {
          "description": "Set to \"true\" to authorize filesystem writes (equivalent to --allow-write).",
          "name": "ALETHEIA_ALLOW_WRITE"
        },
        {
          "description": "Set to \"true\" to authorize outbound network requests (equivalent to --allow-network).",
          "name": "ALETHEIA_ALLOW_NETWORK"
        },
        {
          "description": "Set to \"true\" to authorize requests to localhost / 127.0.0.1 (equivalent to --allow-loopback).",
          "name": "ALETHEIA_ALLOW_LOOPBACK"
        },
        {
          "description": "Operator token required to loosen an already-running session's mandate at runtime.",
          "isSecret": true,
          "name": "ALETHEIA_OPERATOR_SECRET"
        }
      ]
    }
  ]
}