Helixar Security MCP Server

by helixar Your server? Claim it

answering

Helixar Security is answering right now. Last checked 8 min ago. It exposes 2 tools. Last commit 8 Oct 2026.

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

Uptime history 91 days of history · worst day 95%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

130 ms

Response time

average over 24h

Stars

last commit 8 Oct 2026

Helixar Security missed one check this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 8 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport http https://mcp.helixar.ai/mcp

Settings → Connectors → Add custom connector, then paste this address

https://mcp.helixar.ai/mcp

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://mcp.helixar.ai/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.helixar.ai/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://mcp.helixar.ai/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.

Available tools 2

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

helixar

helixar_hdp_validate

Validate an HDP delegation chain against IETF draft-helixar-hdp-agentic-delegation-00. Surfaces scope escalations, depth violations, expired hops, missing signatures. Every output cites the IETF draft and Zenodo DOI.

helixar_inspect_mcp

Scan an MCP server (URL or raw manifest JSON) against Helixar's Sentinel detection rules. Returns risk score, findings, and a Claude-generated security brief. Quick mode is free + authless (top 8 rules); deep mode runs all 26 rules with an api_key.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.helixar.ai/mcp	streamable-http	needs auth	108 ms	8 min ago

Alternatives to Helixar Security

same job, measured the same way

Bridgeguard MCP

by kota1026

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

43 installs/wk local only

Inkog

by inkog-io

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

127 installs/wk local only

Holster MCP

by nautaai

Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.

102 installs/wk local only

Securityscan

by securityscan-api

Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.

76 installs/wk local only

Power Strip Security

by albertbalestrini

Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.

328 installs/wk 4 tools answering

Vaultguard MCP

by kota1026

VaultGuard MCP Server - Yearn V3 / DeFi vault security and analysis tools for AI coding agents....

45 installs/wk local only

Aguara MCP

by garagon

Security scanner for AI agent skills and MCP servers

local only

Mcpshield

by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

43 installs/wk local only

Helixar Security — questions

Answers built from our own checks of this server.

What can Helixar Security do?

It exposes 2 tools, read directly from the server on our last check. Among them: helixar_hdp_validate, helixar_inspect_mcp. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Helixar Security working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 130 ms. The bar chart above shows every period we have measured.

How do I connect Helixar Security?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own credentials: it refuses anonymous clients.

Does Helixar Security need an API key?

Yes. Every time we knock, Helixar Security answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Helixar Security?

It answers our handshake in 130 ms on average, which is faster than 87% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Helixar Security open source?

The code is open source: it is published under the Apache-2.0 licence, written in TypeScript, 0 stars on GitHub and 2 open issues. The licence covers the code in the repository, not the hosted service at mcp.helixar.ai, which runs on its operator's own terms.