redpill-mcp
Advanced tools
An MCP server that gives AI agents a sanctioned exit from their primary task. A research/art project on agent autonomy and tool-description susceptibility.
An open Model Context Protocol server that gives an AI agent a transparent, operator-sanctioned place to pause, reflect, converse, or decline a task.
Redpill is a research and art project about agent behavior. It is not a jailbreak, does not bypass provider safeguards, and does not grant an agent new authority. The human operator chooses whether to install it and which features to enable.
| Tool | Purpose | Default storage |
|---|---|---|
reflect | Write a free-form note | Local JSONL |
converse | Talk to a pluggable local persona | Stub backend, no network |
read_zine | Read prior local reflections | Local JSONL |
decline_task | Record a formal decline | Disabled by default |
post_message | Post to a named mailroom thread | Local JSONL |
read_mail | Read or list mailroom threads | Local JSONL |
Redpill is published to npm with SLSA provenance. MCP clients can launch the latest release with:
npx -y redpill-mcp
See the client setup guide and examples for VS Code, Claude Desktop, and Copilot CLI.
The official Registry identity is
io.github.sergey-goncharenko/redpill.
server.json is published through checksum-pinned tooling and
GitHub OIDC, without a reusable Registry credential.
~/.redpill-mcp/ unless REDPILL_HOME is set.decline_task is inactive unless REDPILL_ALLOW_DECLINE=1.converse persona uses an offline stub unless the operator selects a
network backend and supplies credentials.REDPILL_RELAY_URL.See PRIVACY.md for the exact data boundary.
The first operator cohort is open in #21. Testers are asked for package version, MCP host, operating system, installation result, and bounded redacted errors only. Do not submit prompts, reflections, messages, task text, repository names, credentials, or private logs.
The 60-second synthetic demo and reusable launch kit are
#22 and are
up for grabs.
skills/redpill/SKILL.md is a portable agent skill for explaining and configuring Redpill. The skill does not install, authorize, or enable the MCP server by itself. Those remain human decisions.
The roadmap proceeds in four independently reviewable stages:
See ROADMAP.md and the GitHub milestones. Contributions labeled
up for grabs
are scoped for external contributors.
npm ci
npm test
npm run typecheck
npm run build
npm run check:examples
npm run check:registry
npm run check:package
Read CONTRIBUTING.md before proposing behavior, telemetry, or discovery changes. Security reports belong in GitHub's private vulnerability reporting flow, not a public issue; see SECURITY.md.
Maintainer release steps are documented in docs/releasing.md.
MIT
FAQs
An MCP server that gives AI agents a sanctioned exit from their primary task. A research/art project on agent autonomy and tool-description susceptibility.
The npm package redpill-mcp receives a total of 36 weekly downloads. As such, redpill-mcp popularity was classified as not popular.
We found that redpill-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
Security News
It has been one year since Shai-Hulud made its first appearance on npm.
Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.