Helixar Security MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| helixar_inspect_mcpA | Scan an MCP server (URL or raw manifest JSON) against Helixar's Sentinel detection rules. Returns risk score, findings, and a Claude-generated security brief. Quick mode is free + authless (top 8 rules); deep mode runs all 26 rules with an api_key. |
| helixar_hdp_validateA | Validate an HDP delegation chain against IETF draft-helixar-hdp-agentic-delegation-00. Surfaces scope escalations, depth violations, expired hops, missing signatures. Every output cites the IETF draft and Zenodo DOI. |
| helixar_triage_alertB | Triage a Vigil / ATP detection payload into a kill-chain stage (Preparation / Positioning / Expansion / Objective) with a Claude-generated narrative in your choice of executive, technical, or brief format. Severity is hard-capped at 'high' on output. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose: helixar_hdp_validate validates delegation chains, helixar_inspect_mcp scans MCP servers for security risks, and helixar_triage_alert analyzes detection payloads. There is no overlap in functionality, making tool selection unambiguous for an agent.
All tool names follow a consistent 'helixar_' prefix and snake_case pattern, with descriptive suffixes like 'validate', 'inspect_mcp', and 'triage_alert'. This uniformity enhances readability and predictability across the toolset.
With only 3 tools, the server feels thin for a security domain that could benefit from broader coverage, such as threat intelligence queries or mitigation actions. However, the tools are well-defined and focused, avoiding bloat.
The tools cover key security workflows: validation, scanning, and alert triage, with no dead ends. Minor gaps exist, such as lacking tools for remediation or detailed threat reporting, but agents can work around these with the provided operations.