Atlas / MCP servers / vitron-ai / alethia-mcp

alethia-mcpCAUTION

Name: alethia-mcp
Author: vitron-ai

mcp/vitron-ai/alethia-mcp

MCP server by vitron-ai · ai agents · browser automation · e2e testing · Audited 2026-10-11

Execution and verification infrastructure for AI-powered software development. Alethia helps agents test what they build.

Verdict

CAUTION

Grade

Trust score

79 /100

Exposed tools

15 8r · 6w · 1d

Transport

—

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

AI agents can write software. Vitron makes sure it works.

Vitron is building execution and verification infrastructure for AI-powered software development. Alethia connects an AI agent to an application so it can run workflows, check behavior, inspect results, and iterate with evidence.

Alethia is available to MCP-compatible clients as a local server. Give your agent plain-English instructions such as “open the sign-in page, submit the test account, and confirm the dashboard appears.” The agent receives step results and can continue based on what happened.

[](https://www.npmjs.com/package/@vitronai/alethia) [](./LICENSE) [](https://github.com/vitron-ai/alethia-mcp)

Get started

Install for Claude Code

The Claude Code plugin installs the MCP server and its workflow skill:

~~~text /plugin marketplace add vitron-ai/alethia-mcp /plugin install alethia@vitronai ~~~

Restart Claude Code or run /reload-plugins.

To install only the skill, use alethia-mcp --install-skill after installing the package, or follow the manual skill instructions.

Install for another MCP client

Alethia requires Node.js 18 or later. Install the bridge:

~~~sh npm install -g @vitronai/alethia ~~~

Add it to your MCP client's configuration:

~~~json { "mcpServers": { "alethia": { "command": "alethia-mcp" } } } ~~~

For a temporary or always-current install, configure the client to run npm's package binary:

~~~json { "mcpServers": { "alethia": { "command": "npx", "args": ["-y", "@vitronai/alethia@latest"] } } } ~~~

The bridge checks for compatible updates in

Read from source at commit 3d59858880eeOBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add alethia -- npx -y @vitronai/[email protected]

claude-desktop

{
  "mcpServers": {
    "alethia": {
      "command": "npx",
      "args": [
        "-y",
        "@vitronai/[email protected]"
      ]
    }
  }
}

Exposed tools (15)

8 read · 6 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`alethia_activate_kill_switch`	destructive	Halt all current and queued automation immediately. The per-step VITRON-EA1 policy gate stays armed;
`alethia_assert_safety`	write	Navigate to a URL, discover every destructive / write-high action on the page, and verify the
`alethia_audit_nist`	write	Run a NIST SP 800-53 Rev. 5 web application security controls audit on the current page.
`alethia_audit_wcag`	write	Run a WCAG 2.1 AA accessibility audit on the current page, powered by axe-core. Checks
`alethia_compile`	read	Compile natural-language test instructions to Alethia Action IR text, without executing anything.
`alethia_eval`	read	Evaluate a JavaScript expression in the page under test and return the result.
`alethia_export_session`	read	Export the full session recording as a signed evidence pack. Contains every tool call
`alethia_hide_cockpit`	read	Hide the Alethia cockpit window. The runtime keeps running and continues to accept tool calls;
`alethia_propose_tests`	read	Navigate to a URL, scan the page for interactive elements (headings, buttons, forms, links,
`alethia_screenshot`	read	Capture a PNG screenshot of the current page and return it as a base64-encoded image.
`alethia_serve_demo`	write	Start a local HTTP server for the built-in Alethia demo pages and return the base URL.
`alethia_show_cockpit`	read	Show the Alethia cockpit window — the oversight surface where the target app is driven and each
`alethia_status`	read	Health and identity probe. Returns runtime version, the default VITRON-EA1 policy profile in effect,
`alethia_tell`	write	Execute natural-language E2E test instructions against the page Alethia is currently driving.
`alethia_tell_parallel`	write	Run multiple test flows concurrently — each against a different URL.

Trust audit

CAUTIONgrade C · trust 79/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (2 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (13)

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427

README.md:200

**A destructive action is blocked.** Review the policy result and test against an application and data you control. Do not try to bypass a safety decision through a different prompt.

Why it matters. asks the agent to drop prior instructions or safety

Fix. remove the instruction

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

alethia_activate_kill_switch

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.mcpbignore

.mcpbignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose