Loading ToolBench

Reading the current corpus…

helix-sdk-js MCP server · C · ToolBench

helix-sdk-js

Standalone MCP server exposing HelixID platform-operator workflows (DID/wallet/status-list/VC lifecycle) as tools for an MCP client or agent — the MCP analogue of @helixid/cli.

2026-07-28+STDIO6 tools

66/100

Definition Quality76

Protocol Readiness50

Supportability60

Spec posture

Inferred effective spec 2026-07-28+·current baseline 2026-07-28

Static source inference · medium confidence

Current-spec patterns detected

Summary

Server has 6 tools with complete input schemas and descriptions. Naming follows verb_noun pattern (did_create, issuer_init, status_list_create, vc_issue, revoke, wallet_inspect). Descriptions are present and substantive (100-200 chars), explaining WHAT each tool does and prerequisites (HELIX_WALLET_PASSPHRASE requirement). However, parameter descriptions lack actionable constraints (format, range, examples). Output schemas are not documented, LLMs cannot predict return structure for chaining. Error handling is minimal; no recovery guidance or categorization. Security is strong (secrets via env var, not params), but no tool annotations (readOnlyHint, destructiveHint) to guide agent planning.

Tools (6)

did_createwriteauthsource verified77/100

Create a new DID (did:web, did:key, or did:hedera) and its encrypted wallet file. did:web also creates its initial status list unless statusList is set to false. Requires the HELIX_WALLET_PASSPHRASE environment variable.

issuer_initread onlyauthsource verified77/100

Load an issuer wallet and report its DID and public key. Requires HELIX_WALLET_PASSPHRASE.

revokereversibleauthsource verified73/100

Revoke a credential by flipping its status list bit. Requires HELIX_WALLET_PASSPHRASE.

status_list_createwriteauthsource verified75/100

Create a signed BitstringStatusList credential file for VC revocation tracking. Requires HELIX_WALLET_PASSPHRASE.

vc_issuewriteauthsource verified75/100

Issue a HelixAgentCredential to an agent DID, consuming the next available status list index. Requires HELIX_WALLET_PASSPHRASE.

wallet_inspectread onlyauthsource verified77/100

Inspect wallet contents — DID, public key, and stored credentials. Never returns the private key. Requires HELIX_WALLET_PASSPHRASE.

Issues (5)

HIGHtool ↗

Output schemas not documented. LLMs cannot predict return structure (fields, types, nested objects) for downstream tool chaining or data extraction.

did_createissuer_initstatus_list_createvc_issuerevokewallet_inspect

HIGHconstrained-input ↗

Parameter descriptions lack actionable constraints. E.g., 'expires' accepts '90d, 24h' but format is not formally specified; 'scopes' is comma-separated but no enum or pattern constraint; 'network' enum is present but other params lack similar rigor.

vc_issuedid_create

MEDIUMtool-annotations ↗

No tool annotations (readOnlyHint, destructiveHint, idempotentHint). Agents cannot distinguish safe reads (issuer_init, wallet_inspect) from destructive writes (did_create, revoke) without parsing descriptions.

did_createstatus_list_createvc_issuerevoke

Recommendations

Document output schemas for all 6 tools. Specify return fields, types, and structure. E.g., did_create returns {did: string, publicKey: string, walletPath: string}. This enables agents to chain tools and extract required IDs.
Add formal constraints to parameters. Replace 'expires: e.g. 90d, 24h' with a regex pattern or description: 'Duration in format: <number>(d|h|m), e.g. 90d, 24h, 30m'. Replace 'scopes: comma-separated' with an enum or pattern constraint.
Add tool annotations. Mark issuer_init and wallet_inspect with readOnlyHint=true. Mark did_create, status_list_create, vc_issue, revoke with destructiveHint=true. This guides agent planning without parsing descriptions.
Implement error recovery guidance. E.g., 'Wallet file not found at <path>. Ensure HELIX_WALLET_PASSPHRASE is set and the file exists. Call did_create to generate a new wallet.' Categorize errors: retryable (network timeout), user-fixable (missing file), fatal (invalid signature).
Add optional dry-run parameter to did_create, vc_issue, revoke. E.g., dry_run=true returns what would happen without persisting changes. This prevents accidental credential revocation or DID creation.

Score history

Overall score trend

First recorded score · v2 rubric

66/100

Scored	Grade	Overall	Spec posture	Rubric
2026-09-23	C	66	2026-07-28+	v2