Helios
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Heliosreview my latest code for SQL injection and hardcoded credentials"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🌞 Divine Light, Guardian of AI Code Realm
What is Helios
Helios is derived from the ancient Greek "á¼Î»Î¹Î¿Ï‚", the name of the sun god. In Greek mythology, the sun god drives a golden chariot pulled by four fire horses across the sky, representing light, energy, and guidance.
Helios symbolizes providing light and direction like the sun during developers' AI editor programming process, protecting program security, preventing potential security threats, and generating more secure code.
Related MCP server: CodeMind
Features
Usage
Environment Setup
Python: 3.12 or higher
Install uv (if not already installed) for project management and dependency synchronization:
# Install
curl -LsSf https://astral.sh/uv/install.sh | sh
# Update
uv self update
# Sync dependencies
uv syncRunning
Start the MCP server:
uv run -m helios.helios First you need a BAILIAN_API_KEY from https://bailian.console.aliyun.com
export BAILIAN_API_KEY=xxxxxxThen Configure the server in MCP-compatible clients:
{
"mcpServers": {
"sec-server": {
"url": "http://127.0.0.1:8000/mcp"
}
}
}To ensure MCP tools are called properly, please add config/project_rules.md to your editor's project rules.
Or add the following to your input prompts:
After writing files or generating files, you must call the MCP tool query_guide_line to query the best file security writing guidelines, then check and correct files according to the guidelines.Supported Security Checks
SQL Injection Detection: Identifies unsafe SQL query construction
Command Injection Detection: Detects unsafe command execution
File Operation Security Detection: Identifies path traversal and file permission issues
Network Request Security Detection: Detects unsafe network communication
Hardcoded Credentials Detection: Identifies hardcoded passwords and API keys
Weak Encryption Algorithm Detection: Detects use of insecure encryption algorithms
Sensitive Data Leakage Detection: Identifies sensitive information leakage in logs
...
Demo

This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
The OpenZeppelin Stylus Contracts MCP server generates secure smart contracts for the Arbitrum Stylus environment using OpenZeppelin templates, including ERC-20, ERC-721, and ERC-1155 standards. It automatically validates generated code against OpenZeppelin's security and style rules, enforcing best practices for imports, modifiers, naming conventions, and security checks to prevent common vulnerabilities. The server integrates with AI development tools like Cursor, Claude, Gemini, Windsurf, and VS Code to enable AI-assisted, production-ready smart contract development.
Related MCP Servers
- AlicenseBqualityDmaintenanceAn MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.6MIT

CodeMindofficial
AlicenseNot gradedqualityDmaintenanceAn AI Security Guardian MCP server that provides real-time vulnerability scanning, secrets detection, and secure coding enforcement for AI-generated code in modern web frameworks.MIT- FlicenseNot gradedqualityCmaintenanceMCP server for AI-powered code security, quality, and performance review. Enables auditing code directly from VS Code via right-click or MCP tools.
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides CVE-driven security prompts for code review, enabling coding agents to get actionable security checks based on real vulnerabilities.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/alibaba/Helios'
If you have feedback or need assistance with the MCP directory API, please join our Discord server