Helm Ai MCP Server
@helm-ai/mcp-server
npm
v0.22.0
Published by @helm-ai — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for Helm — run your business operations (projects, CRM, billing, automations, AI agents) from Claude or any MCP client
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 1.2 = 99. What the published surface and source actually contain:
| Points | What was found | Category |
|---|---|---|
| −1.2 | Hardcoded JSON Web Token in server code MTC-SRC-008 | exfiltration |
2. Client adoption risk — 99 − 5 = 94. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
low Hardcoded JSON Web Token in server code (dist/index.js)MTC-SRC-008
A hardcoded JSON Web Token (a public-by-design (anon/publishable) key — RLS, not secrecy, protects it) appears in `dist/index.js:8`. Verify whether this is a real credential; if so, remove and rotate it.
Evidence: JSON Web Token: eyJh…(redacted)
Fix: Remove the secret, rotate it, and load credentials from the environment or a secret store.
Location: server dist/index.js
Tools 143
Each tool and what it can reach — statically extracted from the published source.
helm__agent_send_emailnetwork egresshelm__draft_emailnetwork egresshelm__add_accountno sensitive capabilityhelm__add_contactno sensitive capabilityhelm__add_dealno sensitive capabilityhelm__add_form_fieldno sensitive capabilityhelm__add_form_stepno sensitive capabilityhelm__add_line_item_from_productno sensitive capabilityhelm__add_pipelineno sensitive capabilityhelm__add_pipeline_stageno sensitive capability
Show 133 more tools ↓
helm__add_taskno sensitive capabilityhelm__add_task_commentno sensitive capabilityhelm__archive_productno sensitive capabilityhelm__attach_product_to_accountno sensitive capabilityhelm__attach_product_to_dealno sensitive capabilityhelm__bulk_create_document_foldersno sensitive capabilityhelm__bulk_move_documents_to_folderno sensitive capabilityhelm__cancel_subscriptionno sensitive capabilityhelm__create_agent_objectiveno sensitive capabilityhelm__create_agent_scheduleno sensitive capabilityhelm__create_agent_watchno sensitive capabilityhelm__create_calendar_eventno sensitive capabilityhelm__create_documentno sensitive capabilityhelm__create_document_folderno sensitive capabilityhelm__create_document_pageno sensitive capabilityhelm__create_email_sequenceno sensitive capabilityhelm__create_estimateno sensitive capabilityhelm__create_formno sensitive capabilityhelm__create_invoiceno sensitive capabilityhelm__create_productno sensitive capabilityhelm__create_product_priceno sensitive capabilityhelm__create_projectno sensitive capabilityhelm__create_sequence_emailno sensitive capabilityhelm__create_subscriptionno sensitive capabilityhelm__create_time_entryno sensitive capabilityhelm__create_workflowno sensitive capabilityhelm__delete_agent_objectiveno sensitive capabilityhelm__delete_agent_scheduleno sensitive capabilityhelm__delete_agent_watchno sensitive capabilityhelm__delete_calendar_eventno sensitive capabilityhelm__delete_contactno sensitive capabilityhelm__delete_dealno sensitive capabilityhelm__delete_draftno sensitive capabilityhelm__delete_email_sequenceno sensitive capabilityhelm__delete_form_fieldno sensitive capabilityhelm__delete_form_stepno sensitive capabilityhelm__delete_pipelineno sensitive capabilityhelm__delete_pipeline_stageno sensitive capabilityhelm__delete_product_priceno sensitive capabilityhelm__delete_sequence_emailno sensitive capabilityhelm__delete_time_entryno sensitive capabilityhelm__delete_workflowno sensitive capabilityhelm__detach_product_from_accountno sensitive capabilityhelm__enroll_in_sequenceno sensitive capabilityhelm__execute_workflowno sensitive capabilityhelm__exit_sequence_enrollmentno sensitive capabilityhelm__get_accountno sensitive capabilityhelm__get_accountsno sensitive capabilityhelm__get_agent_objectivesno sensitive capabilityhelm__get_agent_schedulesno sensitive capabilityhelm__get_agent_watchesno sensitive capabilityhelm__get_calendar_eventno sensitive capabilityhelm__get_calendar_eventsno sensitive capabilityhelm__get_contactno sensitive capabilityhelm__get_contactsno sensitive capabilityhelm__get_dealno sensitive capabilityhelm__get_dealsno sensitive capabilityhelm__get_documentno sensitive capabilityhelm__get_document_blocksno sensitive capabilityhelm__get_document_outlineno sensitive capabilityhelm__get_document_pageno sensitive capabilityhelm__get_document_pagesno sensitive capabilityhelm__get_documentsno sensitive capabilityhelm__get_estimatesno sensitive capabilityhelm__get_formno sensitive capabilityhelm__get_form_statsno sensitive capabilityhelm__get_form_submissionsno sensitive capabilityhelm__get_invoiceno sensitive capabilityhelm__get_invoicesno sensitive capabilityhelm__get_paymentsno sensitive capabilityhelm__get_pipelinesno sensitive capabilityhelm__get_productno sensitive capabilityhelm__get_projectsno sensitive capabilityhelm__get_sequenceno sensitive capabilityhelm__get_subscriptionno sensitive capabilityhelm__get_subscription_mrrno sensitive capabilityhelm__get_taskno sensitive capabilityhelm__get_task_commentsno sensitive capabilityhelm__get_tasksno sensitive capabilityhelm__get_time_entriesno sensitive capabilityhelm__get_workflowno sensitive capabilityhelm__get_workflow_executionsno sensitive capabilityhelm__get_workflow_schemano sensitive capabilityhelm__get_workflowsno sensitive capabilityhelm__list_account_productsno sensitive capabilityhelm__list_document_commentsno sensitive capabilityhelm__list_document_foldersno sensitive capabilityhelm__list_draftsno sensitive capabilityhelm__list_email_sequencesno sensitive capabilityhelm__list_formsno sensitive capabilityhelm__list_product_pricesno sensitive capabilityhelm__list_productsno sensitive capabilityhelm__list_sender_identitiesno sensitive capabilityhelm__list_sequence_enrollmentsno sensitive capabilityhelm__list_subscriptionsno sensitive capabilityhelm__log_activityno sensitive capabilityhelm__move_document_to_folderno sensitive capabilityhelm__patch_documentno sensitive capabilityhelm__pause_sequence_enrollmentno sensitive capabilityhelm__pause_subscriptionno sensitive capabilityhelm__record_paymentno sensitive capabilityhelm__refresh_subscriptionno sensitive capabilityhelm__reorder_pipeline_stagesno sensitive capabilityhelm__reorder_sequence_emailsno sensitive capabilityhelm__resolve_document_commentno sensitive capabilityhelm__resume_sequence_enrollmentno sensitive capabilityhelm__resume_subscriptionno sensitive capabilityhelm__set_form_statusno sensitive capabilityhelm__set_sequence_statusno sensitive capabilityhelm__set_workflow_statusno sensitive capabilityhelm__update_accountno sensitive capabilityhelm__update_account_productno sensitive capabilityhelm__update_agent_objectiveno sensitive capabilityhelm__update_agent_scheduleno sensitive capabilityhelm__update_agent_watchno sensitive capabilityhelm__update_calendar_eventno sensitive capabilityhelm__update_contactno sensitive capabilityhelm__update_dealno sensitive capabilityhelm__update_documentno sensitive capabilityhelm__update_draftno sensitive capabilityhelm__update_email_sequenceno sensitive capabilityhelm__update_form_fieldno sensitive capabilityhelm__update_form_stepno sensitive capabilityhelm__update_invoiceno sensitive capabilityhelm__update_pipelineno sensitive capabilityhelm__update_pipeline_stageno sensitive capabilityhelm__update_productno sensitive capabilityhelm__update_product_priceno sensitive capabilityhelm__update_sequence_emailno sensitive capabilityhelm__update_taskno sensitive capabilityhelm__update_time_entryno sensitive capabilityhelm__update_workflowno sensitive capabilityhelm__upload_attachmentno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (143 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 10
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.22.0 latest |
A 94/100 | 1 | 1.13.0 | 2026-09-07 |
v0.20.0 |
A 94/100 | 1 | 1.13.0 | 2026-09-01 |
v0.18.0 |
A 94/100 | 1 | 1.13.0 | 2026-08-31 |
v0.17.0 |
A 94/100 | 1 | 1.13.0 | 2026-08-25 |
v0.15.0 |
A 94/100 | 1 | 1.12.1 | 2026-08-24 |
Show 5 more versions ↓
v0.14.0 |
A 94/100 | 1 | 1.12.1 | 2026-08-21 |
v0.12.0 |
A 94/100 | 1 | 1.12.1 | 2026-08-14 |
v0.11.0 |
A 94/100 | 1 | 1.12.1 | 2026-08-10 |
v0.10.1 |
A 94/100 | 1 | 1.12.1 | 2026-08-09 |
v0.9.0 |
A 94/100 | 1 | 1.12.1 | 2026-08-02 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @helm-ai/mcp-server --onlineMore in Communication & Collaboration
One key, 100+ models — chat with any LLM and generate video, images, speech. Free trial at 370.ai.
Retired compatibility stub for the AgentCanary MCP server. Daily briefs continue on X and Telegram.
A Backstage plugin that provides a chat interface for interacting with the MCP Servers.
Signal-first Bitcoin intelligence: sovereign, hiring & hashrate signals over MCP.
WhatsApp® reminders and rescheduling for Calendly. Public read-only MCP endpoint.
Open Source Generic MCP Client for testing & evaluating mcp servers and agents