Install
One command
npm install -g @vitronai/alethia The runtime auto-downloads on first use. Signed and verified. No signup.
vitron.ai
Safe by default Local-first Patent Pending
Every other agent test runtime will click Delete if you tell it to. Alethia's safety gate won't — no override, no flag. Only a human, watching live, can let it through.
Tell it "click Sign In and verify the dashboard loads" and it compiles the plain English to deterministic browser actions, runs them in a real browser on your machine, and logs every step in a signed audit trail.
No test scripts. No browser drivers. No data leaves your infrastructure.
Install
npm install -g @vitronai/alethia The runtime auto-downloads on first use. Signed and verified. No signup.
Configure your agent
{
"mcpServers": {
"alethia": {
"command": "alethia-mcp"
}
}
}
That's it. Restart Claude Code. The cockpit opens automatically with live step highlights.
Set ALETHIA_HIGHLIGHTS=0 in your MCP env for headless / CI mode.
Run it
Test my app at http://localhost:3000 — navigate to it, assert the main heading is visible, and take a screenshot.
The cockpit opens live so you can watch each step. EA1 blocks any destructive action by default — you can approve one live if you choose to. Try alethia_serve_demo for a built-in demo app.
See it run
The cockpit shows the agent driving in plain English with EA1 gating each step. Every session is scrubbable and signed, so a human reviewer can replay exactly what happened.
Approve / Deny decision —
then every session replays scrubbable and every policy decision lands in the signed
audit log.
What matters
Delete, purchase, transfer: blocked by default. No flag, no programmatic override, no permissive mode — the only way one runs is a human watching live approving that exact action. Playwright and Playwright MCP have no equivalent gate at all. Every step is policy-checked and logged in a tamper-proof audit trail. Learn about EA1 →
Your agent verifies as fast as it can think. Zero-IPC means no CDP round-trip per action. More iterations per dollar, longer autonomous sessions. Run the benchmark →
No cloud. No telemetry. No data leaves localhost. One signed binary download, then fully offline. Air-gap ready for regulated and defense environments.
Side by side
We built Alethia for agent-driven verification of Chromium-targeting web apps — that's a deliberate scope, not a gap. It goes deep on safety, compliance, and agent performance where Playwright MCP doesn't. Cross-browser coverage and multi-language bindings are out of scope by design; the table below shows exactly where Alethia and Playwright MCP each win.
| Alethia | Playwright MCP | |
|---|---|---|
| Safety | ||
| Fail-closed EA1 safety gate | ✓ | ✗ |
| Fail-closed origin allowlist (never arbitrary URLs) | ✓ | ✗ |
| Kill switch (emergency halt) | ✓ | ✗ |
| Per-action human approval (live, not a config flag) | ✓ | ✗ |
| Compliance & Evidence | ||
| Tamper-proof signed audit pack (Ed25519) | ✓ | ✗ |
| Per-step integrity fingerprint (SHA-256) | ✓ | ✗ |
| Accessibility audit (WCAG 2.1 AA via axe-core) | ✓ | ✗ |
| Performance | ||
| Typical call (ms) | ~13 ms | ~200 ms |
| Agent-native MCP interface | ✓ | ✓ |
| Zero-IPC in-process execution | ✓ | ✗ |
| Scope | ||
| Plain-English test authoring | ✓ native | ✗ |
| Cross-browser (Firefox, WebKit) | ✗ by design | ✓ |
Every feature row is verifiable against the respective runtime's source or tools. The benchmark numbers come from our reproducibility kit; every dev can re-run it locally and get their own numbers.
Who it's for
Agent tool builders
Embed Alethia in your agent's decide-act-verify loop. Plain English in, structured results out. Compact bundled snapshots instead of per-action accessibility trees that grow with page size.
Enterprise & regulated teams
No data leaves your infrastructure. Cryptographically signed audit trails. U.S. patent, U.S. company, no foreign filings. Built for defense, federal, and regulated environments.
Go deeper
Alethia's architecture is designed from scratch for AI agents, not adapted from human test tooling. Explore the details when you're ready.
Architecture
Zero-IPC execution, agent perception layer, DOM diffs, smart assertions, conditional steps. 10 capabilities that CDP tools can't replicate.
Safety
The first browser automation framework with built-in runtime-enforced ethical guardrails. Destructive actions blocked by default, cryptographically audited.
Access
Developer
Enterprise + partnerships