Filters agent tool calls before execution, blocking scope creep such as credential reads, SSRF, destructive shell or SQL commands, and prompt injection.
接入配置
选择客户端，复制配置，再按项目文档补齐环境变量。
claude mcp add aletheia --env ALETHEIA_OPERATOR_SECRET='<ALETHEIA_OPERATOR_SECRET>' -- npx -y aletheia-mcp~/.codex/config.toml
[mcp_servers.aletheia]
command = "npx"
args = ["-y", "aletheia-mcp"]
env = { ALETHEIA_OPERATOR_SECRET = "<ALETHEIA_OPERATOR_SECRET>" }
# codex mcp add aletheia --env ALETHEIA_OPERATOR_SECRET='<ALETHEIA_OPERATOR_SECRET>' -- npx -y aletheia-mcp~/.cursor/mcp.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"aletheia": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"aletheia": {
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_OPERATOR_SECRET": "<ALETHEIA_OPERATOR_SECRET>"
}
}
}
}需要的环境变量
ALETHEIA_OPERATOR_SECRET
把占位值换成你自己的密钥；不要把密钥提交到代码仓库。