Aletheia Runtime Safety & Scope Creep Filter for VS Code
io.github.vikasny30/aletheia-mcp
Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls
client:VS Code
transport:stdio
runtime:npm
Install Aletheia Runtime Safety & Scope Creep Filter in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "aletheia-allow-write",
"description": "ALETHEIA_ALLOW_WRITE",
"password": true
},
{
"type": "promptString",
"id": "aletheia-allow-network",
"description": "ALETHEIA_ALLOW_NETWORK",
"password": true
},
{
"type": "promptString",
"id": "aletheia-allow-loopback",
"description": "ALETHEIA_ALLOW_LOOPBACK",
"password": true
},
{
"type": "promptString",
"id": "aletheia-operator-secret",
"description": "ALETHEIA_OPERATOR_SECRET",
"password": true
}
],
"servers": {
"aletheia-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"aletheia-mcp"
],
"env": {
"ALETHEIA_ALLOW_WRITE": "${input:aletheia-allow-write}",
"ALETHEIA_ALLOW_NETWORK": "${input:aletheia-allow-network}",
"ALETHEIA_ALLOW_LOOPBACK": "${input:aletheia-allow-loopback}",
"ALETHEIA_OPERATOR_SECRET": "${input:aletheia-operator-secret}"
}
}
}
}VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs