Skip to main content
Glama

🌞 Divine Light, Guardian of AI Code Realm

What is Helios

Helios is derived from the ancient Greek "Ἥλιος", the name of the sun god. In Greek mythology, the sun god drives a golden chariot pulled by four fire horses across the sky, representing light, energy, and guidance.

Helios symbolizes providing light and direction like the sun during developers' AI editor programming process, protecting program security, preventing potential security threats, and generating more secure code.

Related MCP server: CodeMind

Features

Usage

Environment Setup

  • Python: 3.12 or higher

Install uv (if not already installed) for project management and dependency synchronization:

# Install
curl -LsSf https://astral.sh/uv/install.sh | sh

# Update
uv self update 

# Sync dependencies
uv sync

Running

Start the MCP server:

uv run -m helios.helios  

First you need a BAILIAN_API_KEY from https://bailian.console.aliyun.com

export BAILIAN_API_KEY=xxxxxx

Then Configure the server in MCP-compatible clients:

{
  "mcpServers": {
    "sec-server": {
      "url": "http://127.0.0.1:8000/mcp"
    }
  }
}

To ensure MCP tools are called properly, please add config/project_rules.md to your editor's project rules.

Or add the following to your input prompts:

After writing files or generating files, you must call the MCP tool query_guide_line to query the best file security writing guidelines, then check and correct files according to the guidelines.

Supported Security Checks

  • SQL Injection Detection: Identifies unsafe SQL query construction

  • Command Injection Detection: Detects unsafe command execution

  • File Operation Security Detection: Identifies path traversal and file permission issues

  • Network Request Security Detection: Detects unsafe network communication

  • Hardcoded Credentials Detection: Identifies hardcoded passwords and API keys

  • Weak Encryption Algorithm Detection: Detects use of insecure encryption algorithms

  • Sensitive Data Leakage Detection: Identifies sensitive information leakage in logs

  • ...

Demo

demo

Maintenance

ActivityInactive
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    B
    quality
    D
    maintenance
    An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
    6
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An AI Security Guardian MCP server that provides real-time vulnerability scanning, secrets detection, and secure coding enforcement for AI-generated code in modern web frameworks.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server that provides CVE-driven security prompts for code review, enabling coding agents to get actionable security checks based on real vulnerabilities.
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/alibaba/Helios'

If you have feedback or need assistance with the MCP directory API, please join our Discord server