MCP.Market

Helmdeck MCP server

by tosin2013·io.github.tosin2013/helmdeck·v0.29.10·4 stars

Self-hosted MCP server: sandboxed browser, desktop, vision, code-edit packs for any agent.

C68/100grade C
What users say
No reviews yet
Be the first
Safety scan
C68/100

full report

Adoption
Growing

4 stars

Reviews

Write one

Nobody has reviewed Helmdeck yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Helmdeck tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

2 medium
  • Code scan2 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: … "README.md" ], "scripts": { "postinstall": "node scripts/postinstall.js" }, "e…
Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Helmdeck compares

Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
68/100
higher than 30% of 866 Scraping and browsing servers
GitHub stars
4
more than 72% of 583 Scraping and browsing servers

Install Helmdeck in Claude Code, Cursor or VS Code

Runs npx -y @helmdeck/mcp-bridge on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add helmdeck -- npx -y @helmdeck/mcp-bridge
Add to Cursor

What the publisher says

From the Helmdeck repository's README, as published. We do not edit it. Read it on GitHub

helmdeck

Today's helmdeck install ran a full 6-step code-edit loop (clone, read, patch,

test, commit, push) on gpt-oss-120b for $0.07. The same loop on Cursor

or Claude Code direct via Sonnet would have cost $0.30+. Same outcome,

~5× cheaper — and the "expensive" stack isn't even the most expensive option.

Most browser agents require GPT-4o or Claude Sonnet to work reliably.

Helmdeck is built for the other 99% of deployments — **local 7B models,

air-gapped environments, and teams that can't send credentials to a

cloud API.** It wraps every browser, desktop, git, and code action

into a single typed JSON call that even a small model can fill in correctly.

The numbers above are the consequence: when packs absorb the work the

LLM would otherwise burn tokens rediscovering, cheap or local models do

agentic work that frontier-model APIs charge 10× more for.

A self-hosted, containerized platform for AI agents, exposed as Capability Packs — schema-validated, one-shot JSON tools — and native MCP. The defining metric is ≥90% pack success on 7B–30B-class open-weight models, something no frontier-targeting competitor is optimizing for.

📊 Full per-task comparison with reproduction recipe at . These are one maintainer's findings; we welcome community reproductions.

Why this exists

Smart models thrive on bash and a README. Weak models stall on open-ended interfaces. Helmdeck closes that gap by hiding browser sessions, desktop actions, credentials, and multi-step workflows behind single typed REST / MCP calls.

Three audiences specifically:

  • Self-hosted AI teams who can't leave their VPC and need MCP-native infra that doesn't phone home.
  • The LocalLLaMA / Ollama crowd running 7B–30B models — pack contracts keep small models reliable where open-ended tool surfaces fail.
  • Security-sensitive orgs who need agents to log into SaaS apps without the model ever seeing a credential (vault-backed placeholder tokens + MCP-level audit).

Status

v0.22.0 shipped — agents that work on free models, with memory. The release closes ADRs 047–050:

  • Pipeline routing + routing memory (ADR 047) — the helmdeck.route meta-pack recommends the best pack/pipeline for an intent (with structured gap warnings when nothing fits), backed by per-caller learned defaults surfaced through the helmdeck://routing-guide and helmdeck://my-defaults MCP resources and a Routing Memory management UI.
  • Memory write surface + OpenClaw bridge (ADR 048) — helmdeck.memorystore persists durable user facts (read back via helmdeck://my-memory), an optional embedding sidecar powers OpenClaw's memorysearch, and a QMD corpus bridge exposes helmdeck memory to OpenClaw.
  • Intent decomposition (ADR 049) — helmdeck.plan turns a multi-action prompt into an ordered, pipeline-aware step plan plus a rewritten_prompt.
  • LLM context manager (ADR 050) — internal/llmcontext compacts catalog-heavy prompts to fit small-model context budgets (tiered per-model budgets, cascading select + lexical rank, optional two-pass filter), surfaced through helmdeck://context-budgets and helmdeck://my-plans.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Helmdeck: common questions

Is Helmdeck MCP server safe?
With care: it is graded C, so read the findings first (68/100). Read the Helmdeck safety report
How do I install Helmdeck?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Helmdeck need an API key?
Yes. The registry entry asks for HELMDECK_TOKEN.
Is Helmdeck maintained?
The last commit was 44 days ago (2026-09-21). The latest release is v0.29.10.
What can I use instead of Helmdeck?
Servers from other publishers that do the same job: Ui.Vision MCP server, Ghostfox MCP server and Agent Browser MCP server.
How does Helmdeck compare with other Scraping and browsing MCP servers?
safety score 68/100 (higher than 30% of 866 Scraping and browsing servers); github stars 4 (more than 72% of 583 Scraping and browsing servers). Full comparison.

Alternatives to Helmdeck

Same job from other publishers: the closest match first, then the best rated.

  • Ui.Vision MCP
    MCP server for browser and desktop automation: OCR, image recognition, real mouse and keyboard input
    B
  • Ghostfox
    Self-hosted stealth browser for AI agents: Firefox engine + Rust MCP runtime.
    A
  • Agent Browser
    Self-hosted Chrome for AI agents, with a live noVNC view a human can take over.
    B
  • Nutrient Document Engine MCP Server
    MCP server for self-hosted Nutrient Document Engine: extract, edit, redact, and annotate documents.
    B
  • Stealthy Auto Browse
    Self-hosted MCP server for stealth browser automation with human-like OS-level input.
    A