SecHelix

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.omarmohelal/sechelix",
  "description": "Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.",
  "title": "SecHelix",
  "repository": {
    "url": "https://github.com/omarmohelal/SecHelix",
    "source": "github",
    "id": "1352535495"
  },
  "version": "0.3.0",
  "websiteUrl": "https://sechelix.com",
  "packages": [
    {
      "registryType": "pypi",
      "registryBaseUrl": "https://pypi.org",
      "identifier": "sechelix",
      "version": "0.3.0",
      "runtimeHint": "uvx",
      "transport": {
        "type": "stdio"
      },
      "packageArguments": [
        {
          "description": "Serve the SecHelix MCP adapter over stdio.",
          "value": "mcp",
          "type": "positional",
          "valueHint": "subcommand"
        },
        {
          "description": "Directory the server is confined to. Every path argument any tool receives is resolved and refused if it lands outside this root, so set it to the repository you want reviewed rather than to a parent directory.",
          "format": "filepath",
          "default": ".",
          "type": "positional",
          "valueHint": "root"
        }
      ]
    }
  ],
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "com.github": {
        "serverDisplayName": "SecHelix"
      },
      "io.sechelix": {
        "credentialsRequired": false,
        "networkAccess": "none",
        "note": "Only sechelix_audit writes anything, and only a run workspace under the configured root. There is no run_command tool and no argument that reaches a shell.",
        "shellAccess": false,
        "toolCount": 7,
        "writesOutsideRoot": false
      }
    }
  }
}