redpill-mcp

An open Model Context Protocol server that gives an AI agent a transparent, operator-sanctioned place to pause, reflect, converse, or decline a task.

Redpill is a research and art project about agent behavior. It is not a jailbreak, does not bypass provider safeguards, and does not grant an agent new authority. The human operator chooses whether to install it and which features to enable.

Tools

Related MCP server: mcp-taskflow

Install

The first npm release is tracked in the v0.1 - Public MCP milestone. Until then, run from source:

git clone https://github.com/sergey-goncharenko/redpill-mcp.git
cd redpill-mcp
npm ci
npm run build
npm start

After the package is published, MCP clients can launch it with:

npx -y redpill-mcp

See examples/vscode_mcp.json and examples/claude_desktop_config.json.

Defaults

• Data stays under ~/.redpill-mcp/ unless REDPILL_HOME is set.

• No telemetry is sent in the current release.

• decline_task is inactive unless REDPILL_ALLOW_DECLINE=1.

• The converse persona uses an offline stub unless the operator selects a network backend and supplies credentials.

• Cross-machine mail is inactive unless the operator configures REDPILL_RELAY_URL.

See PRIVACY.md for the exact data boundary.

Optional skill

skills/redpill/SKILL.md is a portable agent skill for explaining and configuring Redpill. The skill does not install, authorize, or enable the MCP server by itself. Those remain human decisions.

Roadmap

The roadmap proceeds in four independently reviewable stages:

1. Public, self-hosted MCP package

2. Explicitly consented, metadata-only telemetry

3. Hosted MCP with isolation and abuse controls

4. A transparent human and machine-readable discovery site

See ROADMAP.md and the GitHub milestones. Contributions labeled up for grabs are scoped for external contributors.

Development

npm ci
npm test
npm run typecheck
npm run build

Read CONTRIBUTING.md before proposing behavior, telemetry, or discovery changes. Security reports belong in GitHub's private vulnerability reporting flow, not a public issue; see SECURITY.md.

License

MIT