Is Helmdeck MCP server safe?

Probably. Read the findings first.

C68/100grade C

Use with care. Some checks failed or could not be verified.

How Helmdeck compares

Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

2 medium

Code scan2 source files scanned15/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 6 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

mediumnpm install lifecycle script presentinstall.script

package.json: … "README.md" ], "scripts": { "postinstall": "node scripts/postinstall.js" }, "e…

Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Ui.Vision MCP
MCP server for browser and desktop automation: OCR, image recognition, real mouse and keyboard input
not reviewed
Established
B
Ghostfox
Self-hosted stealth browser for AI agents: Firefox engine + Rust MCP runtime.
not reviewed
Growing
A
Agent Browser
Self-hosted Chrome for AI agents, with a live noVNC view a human can take over.
not reviewed
Growing
B