Helixar MCP server
{
"mcpServers": {
"helixar": {
"type": "http",
"url": "https://mcp.helixar.ai/mcp"
}
}
}{
"mcpServers": {
"helixar": {
"type": "http",
"url": "https://mcp.helixar.ai/mcp"
}
}
}{
"mcpServers": {
"helixar": {
"type": "http",
"url": "https://mcp.helixar.ai/mcp"
}
}
}{
"servers": {
"helixar": {
"type": "http",
"url": "https://mcp.helixar.ai/mcp"
}
}
}{
"mcpServers": {
"helixar": {
"type": "http",
"url": "https://mcp.helixar.ai/mcp"
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsonversion 0.0.1
What it does
A remote MCP server (and optional local stdio server) that provides security tooling for AI agents: scanning MCP server manifests against detection rules, validating HDP delegation chains, and auditing software release artifacts. It is aimed at developers and security practitioners working with MCP-based agentic systems.
- Scan an MCP server manifest by URL or raw JSON to detect issues such as missing authentication, destructive tools without confirmation guards, or prompt-injection phrasing in tool descriptions.
- Validate an HDP (Helixar Delegation Protocol) delegation chain for scope escalations, depth violations, expired hops, and missing signatures against the IETF draft specification.
- Audit software release artifacts in a dist directory for secrets, metadata leaks, and license gaps, or run a full hardening pipeline including obfuscation, signing, and attestation.
Tools this server exposes
| Tool | Does |
|---|---|
| helixar_inspect_mcp | Scans an MCP server URL or manifest JSON against Sentinel detection rules, returning a risk score, findings, and a security brief; quick mode checks 8 rules wit |
| helixar_hdp_validate | Validates an HDP delegation chain against the IETF draft spec, surfacing scope escalations, depth violations, expired hops, and missing signatures with citation |
| helixar_releaseguard | Wraps the ReleaseGuard CLI binary to scan release artifacts for secrets, metadata leaks, and license gaps, or to run a full harden pipeline; available only when |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.