Install and scan
pip install Aletheore
aletheore scan .
Builds .aletheore/air.json, .aletheore/air.toon, and history snapshots.
For developers and coding agents
Install Aletheore from PyPI, scan a repository locally, and expose the same evidence to CLI queries, MCP tools, AIRview, dashboard views, and managed audits.
pip install Aletheore
aletheore scan .
aletheore query endpoints
aletheore dashboard
CLI workflow
The deterministic scan writes AIR, Aletheore's Intermediate Representation. Downstream commands read AIR instead of scanning blindly again.
pip install Aletheore
aletheore scan .
Builds .aletheore/air.json, .aletheore/air.toon, and history snapshots.
aletheore audit .
aletheore audit . --managed
Use your own provider locally, or run a managed audit with an Aletheore API token.
aletheore index .
aletheore query search-codebase "auth flow"
aletheore dashboard .
Build a local semantic index, ask targeted questions, and inspect evidence visually.
Query subcommands
imports
imported-by
symbols
cluster
branch
changes
secrets
vulnerabilities
licenses
endpoints
dead-code
hotspots
layer-violations
database
infrastructure
environment-variables
symbol-source
search-codebase
answer
evidence-for-endpoint
evidence-for-symbol
evidence-for-dependency
ownership
MCP server
Aletheore's MCP server exposes repository evidence as structured, TOON-encoded tool results. Agents can ask for imports, owners, endpoints, symbols, semantic search, source evidence, and managed audits without pasting the whole repository into context.
aletheore mcp .
Evidence contract
Everything downstream reads the same deterministic evidence. AIRview, dashboard, query, MCP, and audits do not invent files, routes, symbols, or owners that are not present in AIR.
Canonical repository evidence: modules, symbols, dependencies, endpoints, architecture, security, ownership, and history.
TOON-encoded evidence for agent-facing and model-facing contexts where token cost matters.
Snapshots used for changes, drift, and continuity between scans.
Depth without mystery
AI-written subsystem pages and dependency diagrams grounded in deterministic architecture clusters.
Agents request focused evidence instead of dragging entire repositories into model context.
Secrets, vulnerabilities, dependencies, endpoints, and infrastructure findings trace back to source.
aletheore healthcheck runs GET-only checks against mapped API endpoints and saves the result locally.
The CLI scan runs locally. Managed and hosted flows use derived evidence according to the selected workflow.