Helmdeck MCP Server
A self-hosted, containerized platform for AI agents, exposed as Capability Packs - schema-validated, one-shot JSON tools - and native MCP. The defining metric is ≥90% pack success on 7B–30B-class open-weight models, something no frontier-targeting competitor is optimizing for. It runs locally over stdio via the published package.
People connecting browser automation tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Go.
VERIFIED ACTIVE
LAST COMMIT 2026-08-24 · ★ 4 · #79 OF 196 MAINTAINED BROWSER AUTOMATION · VERIFIED 2026-08-25
Apache-2.0 · Go servers · how we verify → /methodology
01 · Install Helmdeck
before you install - you'll need
Set HELMDECK_JWT_SECRET, HELMDECK_VAULT_KEY, HELMDECK_ADMIN_PASSWORD before connecting.
Claude Code
claude mcp add tosin2013-helmdeck -- npx -y @helmdeck/mcp-bridge Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"tosin2013-helmdeck": {
"command": "npx",
"args": [
"-y",
"@helmdeck/mcp-bridge"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem
license Apache-2.0 - declared in the repository
npm package @helmdeck/mcp-bridge - the @helmdeck scope differs from the repo owner (tosin2013); confirm it's the project's official package
registry namespace io.github.tosin2013 is GitHub-verified and matches the repo owner
03 · What Helmdeck can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.29.10 · 2026-06-22
findings extraction now captures handler output on error path (#576) (@tosin2013) · error-path findings extraction - prep CHANGELOG (#577) (@tosin2013)
v0.29.9 · 2026-06-22
draft - the agent that learns from its own lint errors (#574) (@tosin2013) · memory caller selector - admin observability of agent callers (#569) (#571) (@tosin2013) · findings-prefix prompt injection - #570 slice 4…
v0.29.8 · 2026-06-22
pin SessionSpec to hyperframes sidecar - fixes exit 127 (#567) (@tosin2013) · validation-suite sidecar pin hot-fix - prep CHANGELOG (#568) (@tosin2013)
04 · Who maintains Helmdeck
Helmdeck is maintained by tosin2013. We track 2 MCP servers from tosin2013 - 2 actively maintained, 37 combined GitHub stars, oldest repo from Jul 2025. Full record: all servers from tosin2013.
05 · Facts
- repository
- github.com/tosin2013/helmdeck
- website
- https://helmdeck.dev/
- category
- browser automation - ranked #79 of 196 actively-maintained browser automation servers as of 2026-08-25.
- release cadence
- 10+ releases in the last 90 days (latest 2026-06-22)
- registry
- io.github.tosin2013/helmdeck (active, first published 2026-05-09 · 41 versions)
- packages
- npm:@helmdeck/mcp-bridge · oci:ghcr.io/tosin2013/helmdeck-mcp:0.29.10
06 · Helmdeck FAQ
What is Helmdeck?
A self-hosted, containerized platform for AI agents, exposed as Capability Packs - schema-validated, one-shot JSON tools - and native MCP. The defining metric is ≥90% pack success on 7B–30B-class open-weight models, something no frontier-targeting competitor is optimizing for. It runs locally over stdio via the published package.
Is Helmdeck still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 10+ releases in the last 90 days. We re-verify nightly.
How do I install Helmdeck?
Run `npx -y @helmdeck/mcp-bridge`. The README documents 3 environment variables (HELMDECK_JWT_SECRET, HELMDECK_VAULT_KEY, HELMDECK_ADMIN_PASSWORD) to set first. Set HELMDECK_JWT_SECRET, HELMDECK_VAULT_KEY, HELMDECK_ADMIN_PASSWORD before connecting. You can also paste the ready-made client config above.
Does Helmdeck run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Helmdeck
Alternatives to Helmdeck
Maintained browser automation servers if Helmdeck isn't the fit.
- Chrome DevTools MCP MCP server for Chrome DevTools ★ 49,617 · 2026-08-23
- Server Browser MCP server for browser use access ★ 38,704 · 2026-08-05
- Playwright MCP Playwright Tools for MCP ★ 36,436 · 2026-08-21
- Mobile MCP MCP server for iOS and Android Mobile Development, Automation and Testing ★ 5,995 · 2026-08-18
- Agent Device (callstack) MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps ★ 4,212 · 2026-08-24
- Agent Device (callstackincubator) Let AI agents inspect, control, and debug real iOS, Android, desktop, and TV apps ★ 4,211 · 2026-08-24
Pairs well with
Servers that cover what Helmdeck doesn't - only shown when the pairing reason fits the companion.
- Firecrawl MCP Server → web scraping companion web scraping · ★ 7,310
- Tavily MCP → web scraping companion web scraping · ★ 2,351
- Codebase Memory → memory companion memory · ★ 40,198
- Memorix → memory companion memory · ★ 688
- Server Filesystem → filesystem companion filesystem · ★ 38,704
- X402 List MCP → filesystem companion filesystem · ★ 58
More browser automation MCP servers · Lystbot · Brave DevTools MCP · Vibatchium · KeyShot MCP · Trusty Squire
More Go MCP servers · Trip2g · Tripsy · Trino · Figma MCP Go · Patents MCP · see all