Is local installation needed?

No, it operates remotely over streamable-http transport.

Can it scan any MCP server?

Yes, agents can direct it to scan specified MCP servers for security issues.

Does it require API keys?

None are specified; access relies on the transport connection.

Helixar Security

Security tools for AI agents scanning MCP servers and chains.

MCP ServerAI & KnowledgeRemote (streamable-http)

View on GitHub

Updated 2026-06-18

What is the Helixar Security MCP server?

Helixar Security equips AI agents with essential security capabilities tailored to the MCP ecosystem. Core functions include comprehensive server scanning, verification of delegation chains using HDP standards, and release auditing to detect potential vulnerabilities or tampering.

Designed for seamless integration with AI workflows, the server supports remote connections via streamable-http. It focuses on proactive security measures without requiring local installation on agent hosts.

Install & connect

Add this to your MCP client config. Pick your client below and copy.

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.helixar.ai/mcp"
    }
  }
}

Example prompts

Once connected, try asking your AI client:

“Scan the MCP server at example.com for security issues

“Validate the HDP delegation chain for my current agent session

“Audit the latest release of the MCP client library for vulnerabilities

“Check if this MCP server has any known delegation problems

Security & permissions

Requires streamable-http remote access; no local filesystem or API keys needed based on transport, but may touch server metadata and chain data during scans.

What you can do with Helixar Security

MCP Server Scanning

Agents can scan remote MCP servers to identify exposed endpoints, misconfigurations, or security weaknesses before integration.

Delegation Chain Validation

Validate HDP delegation chains to ensure trust relationships between agents and services remain intact and authorized.

Release Auditing

Audit software releases and updates for MCP-related tools to confirm integrity and absence of malicious modifications.

How to use Helixar Security

1Add the server URL to your MCP client configuration.
2Ensure your AI agent supports streamable-http transport.
3Connect the agent to the Helixar Security endpoint.
4Issue natural language prompts for scans or validations.
5Review results returned directly in the agent session.