Helix Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Helix Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A modern, local-first Model Context Protocol (MCP) server built with Python and managed by uv.
This server is designed to work fully offline (e.g. alongside llama-server running local models like Gemma 2) while providing secure workspace operations, offline searching, and modular web capabilities without requiring paid API keys.
watchdog to monitor workspace additions, deletions, modifications, and moves.| Tool Name | Arguments | Description |
|---|---|---|
web_search | query: str, engine: str = "auto", limit: int = 5 | Search the web using DuckDuckGo/Mojeek. |
web_fetch | url: str | Downloads a webpage and cleans it to Markdown. |
workspace_index | None | Indexes all workspace text/code files locally. |
workspace_search | query: str, limit: int = 10 | Instantly queries the local index using FTS5 keywords. |
file_read | path: str | Reads a text/code file (workspace relative). |
file_write | path: str, content: str | Writes content to a file (workspace relative). |
file_delete | path: str | Deletes a file or empty directory. |
file_move | source: str, destination: str | Moves or renames files or directories. |
directory_list | path: str = "." | Lists contents inside a workspace folder. |
file_changes_get | None | Returns a log of recent workspace file changes. |
Install uv if you haven't already:
curl -LsSf https://astral.sh/uv/install.sh | shpowershell -c "irm https://astral.sh/uv/install.ps1 | iex"Clone this repository and set up dependencies:
git clone https://github.com/b1krams/helix-mcp.git
cd helix-mcp
uv syncTo run the MCP server on stdio transport:
uv run python -m helix_mcp.serverAdd the following to your claude_desktop_config.json:
{
"mcpServers": {
"helix-mcp": {
"command": "uv",
"args": [
"--directory",
"/absolute/path/to/helix-mcp",
"run",
"python",
"-m",
"helix_mcp.server"
]
}
}
}(Make sure to replace `/absolute/path/to/helix-mcp` with your actual full workspace path).
Run the offline pytest suite to verify all tools:
uv run pytestFormatting and Linting:
uv run ruff check~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.