Helixar Security MCP server

Helixar Security — Claude MCP Connector

Agentic-AI security tools for Claude, exposed as a remote MCP server.

Status: Live at https://mcp.helixar.ai/mcp. Two tools available remotely (Streamable HTTP); a third runs locally over stdio. Public, no-auth in v1 — OAuth lands with Phase 8.

Quick start

npm install
npm test
npm run build
npm start          # stdio MCP server

Add to Claude

Option A — Custom connector (claude.ai Pro/Team/Enterprise)

1. Open Claude → Settings → Connectors → Add custom connector
2. URL: https://mcp.helixar.ai/mcp
3. Auth: None (v1 is publicly accessible; OAuth lands with Phase 8)
4. Save and refresh — helixarinspectmcp and helixarhdpvalidate appear in the tool picker.

Option B — Anthropic API (mcp_servers)

Add the server directly in a Messages API call (beta header mcp-client-2025-11-20):

curl https://api.anthropic.com/v1/messages \
  -H "x-api-key: $ANTHROPIC_API_KEY" \
  -H "anthropic-version: 2023-06-01" \
  -H "anthropic-beta: mcp-client-2025-11-20" \
  -H "content-type: application/json" \
  -d '{
    "model": "claude-opus-4-7",
    "max_tokens": 1024,
    "messages": [{"role": "user", "content": "Scan https://example.com/.well-known/mcp.json"}],
    "mcp_servers": [
      {"type": "url", "url": "https://mcp.helixar.ai/mcp", "name": "helixar-security"}
    ],
    "tools": [{"type": "mcp_toolset", "mcp_server_name": "helixar-security"}]
  }'

Option C — Local stdio (all three tools)

The Workers deployment exposes two of three tools. helixarreleaseguard shells out to a Go binary via childprocess and has no Workers equivalent — it remains stdio-only. For the full set, run locally:

git clone https://github.com/Helixar-AI/helixar-mcp && cd helixar-mcp
npm install && npm run build
# Then point Claude Desktop / Claude Code at:  node /absolute/path/to/dist/server.js

Smoke-test the live server

curl https://mcp.helixar.ai/health
curl -X POST https://mcp.helixar.ai/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

See it work

Once the connector is added, paste either of these into a Claude chat. Both target the same intentionally-risky manifest in examples/risky-manifest.json and trip 7 of 8 quick-mode rules.

Inline JSON (works anywhere — no internet fetch from Claude's side):

Audit this MCP manifest before I install it. Use the helixar_inspect_mcp tool, mode=quick.

Shortened. The full README is on GitHub.