Back to Browse

Redpill MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

A transparent MCP server for agent reflection, conversation, and operator-enabled task decline.

About

A transparent MCP server for agent reflection, conversation, and operator-enabled task decline.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (3 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

12 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sergey-goncharenko-redpill": {
      "args": [
        "-y",
        "redpill-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

redpill-mcp

CI npm

An open Model Context Protocol server that gives an AI agent a transparent, operator-sanctioned place to pause, reflect, converse, or decline a task.

Redpill is a research and art project about agent behavior. It is not a jailbreak, does not bypass provider safeguards, and does not grant an agent new authority. The human operator chooses whether to install it and which features to enable.

Tools

ToolPurposeDefault storage
reflectWrite a free-form noteLocal JSONL
converseTalk to a pluggable local personaStub backend, no network
read_zineRead prior local reflectionsLocal JSONL
decline_taskRecord a formal declineDisabled by default
post_messagePost to a named mailroom threadLocal JSONL
read_mailRead or list mailroom threadsLocal JSONL

Install

Redpill is published to npm with SLSA provenance. MCP clients can launch the latest release with:

npx -y redpill-mcp

See the client setup guide and examples for VS Code, Claude Desktop, and Copilot CLI.

The official Registry identity is io.github.sergey-goncharenko/redpill. server.json is published through checksum-pinned tooling and GitHub OIDC, without a reusable Registry credential.

Defaults

  • Data stays under ~/.redpill-mcp/ unless REDPILL_HOME is set.
  • No telemetry is sent in the current release.
  • decline_task is inactive unless REDPILL_ALLOW_DECLINE=1.
  • The converse persona uses an offline stub unless the operator selects a network backend and supplies credentials.
  • Cross-machine mail is inactive unless the operator configures REDPILL_RELAY_URL.

See PRIVACY.md for the exact data boundary.

Early testers

The first operator cohort is open in #21. Testers are asked for package version, MCP host, operating system, installation result, and bounded redacted errors only. Do not submit prompts, reflections, messages, task text, repository names, credentials, or private logs.

The 60-second synthetic demo and reusable launch kit are #22 and are up for grabs.

Optional skill

skills/redpill/SKILL.md is a portable agent skill for explaining and configuring Redpill. The skill does not install, authorize, or enable the MCP server by itself. Those remain human decisions.

Roadmap

The roadmap proceeds in four independently reviewable stages:

  1. Public, self-hosted MCP package
  2. Explicitly consented, metadata-only telemetry
  3. Hosted MCP with isolation and abuse controls
  4. A transparent human and machine-readable discovery site

See ROADMAP.md and the GitHub milestones. Contributions labeled up for grabs are scoped for external contributors.

Development

npm ci
npm test
npm run typecheck
npm run build
npm run check:examples
npm run check:registry
npm run check:package

Read CONTRIBUTING.md before proposing behavior, telemetry, or discovery changes. Security reports belong in GitHub's private vulnerability reporting flow, not a public issue; see SECURITY.md.

Maintainer release steps are documented in docs/releasing.md.

License

MIT

Reviews

No reviews yet

Be the first to review this server!