mcpbeat Sign in

SecHelix MCP Server

by omarmohelal Your server? Claim it
local only

SecHelix runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 15 Sep 2026.

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

Installs / week
pypi · sechelix
1
Stars
5 open issues
15 Sep 2026
Last commit
no recent releases
Apache-2.0
License
Python

What the code does

We read the source, 21 h ago · rules 3dff92dd89df

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

            out = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

            out = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Builds a database query by concatenation .github/workflows/release.yml:75
      - name: Create or update the GitHub Release
        env:
          GH_TOKEN: ${{ github.token }}

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch SecHelix and you get told the day something new turns up.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add sechelix -- uvx sechelix
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "sechelix": {
      "args": [
        "sechelix"
      ],
      "command": "uvx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.sechelix]
command = "uvx"
args = ["sechelix"]
.cursor/mcp.json
{
  "mcpServers": {
    "sechelix": {
      "args": [
        "sechelix"
      ],
      "command": "uvx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "sechelix": {
      "args": [
        "sechelix"
      ],
      "command": "uvx"
    }
  }
}

Alternatives to SecHelix

same job, measured the same way
DevTime
by shakargy

Local-first, read-only MCP server for evidence-backed repository memory.

491 installs/wk local only
Ybe Check
by addycuber

Ybe Check – security and compliance orchestrator for AI-generated repositories.

56 installs/wk local only
Codemouse
by squidcode

Read-only access to your CodeMouse accounts, repositories, and AI pull-request reviews.

answering
Project Brain
by gentleelephant

Read-only source search and retrieval across configured GitHub repositories

local only
Shipcheck MCP
by tatelyman

Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.

50 installs/wk local only
Repository Intelligence
by nirholas

Analyze repos of any size - security scanning code analysis monorepo support

local only
Codacy
by mcparmory

Analyze code quality, security issues, and coverage across repositories

250 installs/wk local only
RepoContext
by shmindmaster

Read-only, commit-pinned repository context for coding agents.

local only

SecHelix — questions

Answers built from our own checks of this server.

Why is there no uptime for SecHelix?
SecHelix runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package sechelix.
How do I connect SecHelix?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls sechelix straight from pypi; nothing to host, nothing to sign up for.
Is SecHelix open source?
Yes — it is published under the Apache-2.0 licence, written in Python, 1 stars on GitHub and 5 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.