Filters agent tool calls before execution, blocking scope creep such as credential reads, SSRF, destructive shell or SQL commands, and prompt injection.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add aletheia --env ALETHEIA_OPERATOR_SECRET='<ALETHEIA_OPERATOR_SECRET>' -- npx -y aletheia-mcp~/.codex/config.toml
[mcp_servers.aletheia]
command = "npx"
args = ["-y", "aletheia-mcp"]
env = { ALETHEIA_OPERATOR_SECRET = "<ALETHEIA_OPERATOR_SECRET>" }
# codex mcp add aletheia --env ALETHEIA_OPERATOR_SECRET='<ALETHEIA_OPERATOR_SECRET>' -- npx -y aletheia-mcp~/.cursor/mcp.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"aletheia": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}Environment variables
ALETHEIA_OPERATOR_SECRET
Replace the placeholders with your own credentials and keep them out of version control.