Helmdeck MCP server
io.github.tosin2013/helmdeck·v0.29.10·4 starsSelf-hosted MCP server: sandboxed browser, desktop, vision, code-edit packs for any agent.
4 stars
Reviews
Write oneNobody has reviewed Helmdeck yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Helmdeck tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned15/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: … "README.md" ], "scripts": { "postinstall": "node scripts/postinstall.js" }, "e…
How Helmdeck compares
Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 68/100
- higher than 30% of 866 Scraping and browsing servers
- GitHub stars
- 4
- more than 72% of 583 Scraping and browsing servers
Install Helmdeck in Claude Code, Cursor or VS Code
Runs npx -y @helmdeck/mcp-bridge on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add helmdeck -- npx -y @helmdeck/mcp-bridge
What the publisher says
From the Helmdeck repository's README, as published. We do not edit it. Read it on GitHub
helmdeck
Today's helmdeck install ran a full 6-step code-edit loop (clone, read, patch,
test, commit, push) on gpt-oss-120b for $0.07. The same loop on Cursor
or Claude Code direct via Sonnet would have cost $0.30+. Same outcome,
~5× cheaper — and the "expensive" stack isn't even the most expensive option.
Most browser agents require GPT-4o or Claude Sonnet to work reliably.
Helmdeck is built for the other 99% of deployments — **local 7B models,
air-gapped environments, and teams that can't send credentials to a
cloud API.** It wraps every browser, desktop, git, and code action
into a single typed JSON call that even a small model can fill in correctly.
The numbers above are the consequence: when packs absorb the work the
LLM would otherwise burn tokens rediscovering, cheap or local models do
agentic work that frontier-model APIs charge 10× more for.
A self-hosted, containerized platform for AI agents, exposed as Capability Packs — schema-validated, one-shot JSON tools — and native MCP. The defining metric is ≥90% pack success on 7B–30B-class open-weight models, something no frontier-targeting competitor is optimizing for.
📊 Full per-task comparison with reproduction recipe at . These are one maintainer's findings; we welcome community reproductions.
Why this exists
Smart models thrive on bash and a README. Weak models stall on open-ended interfaces. Helmdeck closes that gap by hiding browser sessions, desktop actions, credentials, and multi-step workflows behind single typed REST / MCP calls.
Three audiences specifically:
- Self-hosted AI teams who can't leave their VPC and need MCP-native infra that doesn't phone home.
- The LocalLLaMA / Ollama crowd running 7B–30B models — pack contracts keep small models reliable where open-ended tool surfaces fail.
- Security-sensitive orgs who need agents to log into SaaS apps without the model ever seeing a credential (vault-backed placeholder tokens + MCP-level audit).
Status
v0.22.0 shipped — agents that work on free models, with memory. The release closes ADRs 047–050:
- Pipeline routing + routing memory (ADR 047) — the helmdeck.route meta-pack recommends the best pack/pipeline for an intent (with structured gap warnings when nothing fits), backed by per-caller learned defaults surfaced through the helmdeck://routing-guide and helmdeck://my-defaults MCP resources and a Routing Memory management UI.
- Memory write surface + OpenClaw bridge (ADR 048) — helmdeck.memorystore persists durable user facts (read back via helmdeck://my-memory), an optional embedding sidecar powers OpenClaw's memorysearch, and a QMD corpus bridge exposes helmdeck memory to OpenClaw.
- Intent decomposition (ADR 049) — helmdeck.plan turns a multi-action prompt into an ordered, pipeline-aware step plan plus a rewritten_prompt.
- LLM context manager (ADR 050) — internal/llmcontext compacts catalog-heavy prompts to fit small-model context budgets (tiered per-model budgets, cascading select + lexical rank, optional two-pass filter), surfaced through helmdeck://context-budgets and helmdeck://my-plans.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Helmdeck: common questions
- Is Helmdeck MCP server safe?
- With care: it is graded C, so read the findings first (68/100). Read the Helmdeck safety report
- How do I install Helmdeck?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Helmdeck need an API key?
- Yes. The registry entry asks for
HELMDECK_TOKEN. - Is Helmdeck maintained?
- The last commit was 44 days ago (2026-09-21). The latest release is v0.29.10.
- What can I use instead of Helmdeck?
- Servers from other publishers that do the same job: Ui.Vision MCP server, Ghostfox MCP server and Agent Browser MCP server.
- How does Helmdeck compare with other Scraping and browsing MCP servers?
- safety score 68/100 (higher than 30% of 866 Scraping and browsing servers); github stars 4 (more than 72% of 583 Scraping and browsing servers). Full comparison.
Alternatives to Helmdeck
Same job from other publishers: the closest match first, then the best rated.
Ui.Vision MCPMCP server for browser and desktop automation: OCR, image recognition, real mouse and keyboard inputnot reviewedEstablishedB- GhostfoxSelf-hosted stealth browser for AI agents: Firefox engine + Rust MCP runtime.not reviewedGrowingA
- Agent BrowserSelf-hosted Chrome for AI agents, with a live noVNC view a human can take over.not reviewedGrowingB
- Nutrient Document Engine MCP ServerMCP server for self-hosted Nutrient Document Engine: extract, edit, redact, and annotate documents.not reviewedGrowingB
- Stealthy Auto BrowseSelf-hosted MCP server for stealth browser automation with human-like OS-level input.not reviewedGrowingA