MCP tool surface
15 tools. Plain English in, structured results out.
Two different places to type, two different formats. The "Ask for it" examples below are what you say to your AI agent (Claude Code, Cursor, etc.) in your own words — the agent turns that into the format Alethia actually runs. If you're typing directly into the cockpit's own NLP window instead, skip the agent and write one instruction per line, for example:
navigate to http://localhost:3000/login
click Sign In
assert the dashboard heading is visible alethia_tell
Ask for it: "Sign in and verify the dashboard loads." Supports
conditional steps (if cookie banner exists, click Accept) and safety
assertions (expect block: click Delete, to confirm EA1 blocks a destructive
action rather than treating the refusal as a failure).
Ask for it: "Sign in with the password 'hunter2' and verify it works — this is a real login test."
Typing into password, token, or credit-card fields is blocked by default — framing it as
a legitimate auth or payment check is enough for the agent to enable
allowSensitiveInput for that call; you don't need to mention the flag yourself.
Drives the browser with plain English and reports what changed, whether anything was blocked, and a tamper-evident record of the run.
| Param | Type | Required | Description |
|---|---|---|---|
instructions | string | yes | One or more plain-English test instructions, newline-separated. |
name | string | no | Short label for the run, shown in cockpit history and audit trails. Strongly recommended. |
allowSensitiveInput | boolean | no | Allows typing into password, token, credit card, and other sensitive fields. Only for legitimate auth/payment flow tests. |
alethia_tell_parallel
Licensed 2 concurrent free, 10 with a license.
Ask for it: "Check the dashboard and the settings page at the same time."
Runs several test flows at once, each against its own page, and reports all results together.
Headless mode only. Each parallel spec runs in its own hidden window with no cockpit view — there's no way for a human to watch it live, so this tool refuses to run in an interactive cockpit session and only works under ALETHIA_HEADLESS=1 / CI.
| Param | Type | Required | Description |
|---|---|---|---|
specs | array | yes | Each item has url, instructions, and an optional name. |
alethia_compile
Ask for it: "Show me what that test would do before you run it."
Previews a test — what it would do — without actually running anything against the page.
| Param | Type | Required | Description |
|---|---|---|---|
instructions | string | yes | Plain-English instructions to preview. |
alethia_serve_demo
Ask for it: "Serve the demo pages so I can see them in the preview panel."
Starts a local server for Alethia's built-in demo pages so they're reachable at a real localhost URL instead of a file path.
No parameters.
alethia_eval
Ask for it: "How many items are in that list right now?"
Answers questions plain-English steps can't — counting elements, reading computed styles, checking stored values.
| Param | Type | Required | Description |
|---|---|---|---|
expression | string | yes | JavaScript expression to evaluate in the page context. |
alethia_screenshot
Ask for it: "Take a screenshot so I can see what that looks like."
Captures what the browser is currently showing.
No parameters.
alethia_status
Ask for it: "Is Alethia actually running? What version?"
A quick health check — confirms Alethia is reachable and reports its current state.
No parameters.
alethia_assert_safety
Ask for it: "Prove the safety gate actually blocks destructive actions on this page."
Finds every destructive action on a page and confirms the safety gate blocks each one — proof the gate holds before trusting an agent against a real environment.
| Param | Type | Required | Description |
|---|---|---|---|
url | string | yes | The URL to navigate to and audit. |
alethia_activate_kill_switch
Ask for it: "Stop everything right now — something looks wrong."
An emergency stop. Halts all automation immediately; only a human can clear it from the cockpit.
| Param | Type | Required | Description |
|---|---|---|---|
reason | string | no | Optional explanation that lands in the audit trail. |
alethia_audit_wcag
Licensed Free via the bundled 14-day trial — team@vitron.ai for more.
Ask for it: "Audit this page for accessibility."
Runs a real WCAG 2.1 AA accessibility audit using axe-core — the same engine behind Google Lighthouse's accessibility checks.
Automated testing — axe-core or any other engine — catches roughly a third to half of WCAG issues. Real coverage, not a toy check, but still not a substitute for manual review and testing with actual assistive technology.
No parameters.
alethia_audit_nist
Licensed Free via the bundled 14-day trial — team@vitron.ai for more.
Ask for it: "Audit this page for compliance and security."
Checks the page against 8 NIST SP 800-53 controls covering login/session handling, credential hygiene, and input validation. Some controls are checked against real behavior, not just markup.
Most NIST SP 800-53 controls are organizational or infrastructure controls that can't be assessed by inspecting a rendered page. Treat this as an early signal during development, not as compliance evidence for an audit or ATO package.
No parameters.
alethia_export_session
Eval only Production use needs a commercial license.
Ask for it: "Export a signed evidence pack of everything you just did."
Produces a signed, tamper-evident record of the full session — every action, input, output, and safety decision.
No parameters.
alethia_propose_tests
Ask for it: "Generate tests for this page — I haven't covered it yet."
Scans a page and drafts a starter test suite, including a safety check for every destructive control it finds.
| Param | Type | Required | Description |
|---|---|---|---|
url | string | yes | The URL to navigate to and scan. |
alethia_show_cockpit
Ask for it: "Show me the cockpit — I want to watch this happen live."
Opens the live oversight window so you can watch the agent drive the page in real time.
No parameters.
alethia_hide_cockpit
Ask for it: "Hide the cockpit, just keep it running in the background."
Hides the oversight window. Everything keeps running underneath.
No parameters.