Helix MCP Gateway
Open source · Controlled evaluation

Policy-controlled MCP access to BMC Helix

Give agents a gateway.
Keep control.

A local MCP server that places explicit policy, bounded operations, human review and sanitised audit between authorised AI assistants and BMC Helix.

View source Read documentation
CONTROL PATH / 01LOCAL
Target
DEVQAPROD
  1. 01
    PlanBind target, values and reason
  2. 02
    ReviewDisplay the exact proposal
  3. 03
    ApproveRequire an explicit human decision
  4. 04
    Apply onceExecute the same verified plan
Policy narrows accessNever expands it

Control model

Guardrails that execute in the gateway.

Not instructions a model has to remember.
01

Explicit targets

Every Helix operation selects DEV, QA or PROD. There is no implicit conversational target.

02

Bounded scope

Policies constrain forms, fields, database objects, rows, rates and timeouts per environment.

03

Human approval

Sensitive SQL and write operations separate the proposal from its later execution.

04

Sanitised evidence

Closed audit schemas omit credentials, business payloads, query text and returned rows.

Local architecture

Built around the authorised runtime.

The gateway is installed per user. A Python MCP process communicates over loopback with an authenticated Java bridge, which uses the official AR API libraries already present in the authorised installation.

Proprietary BMC libraries are never copied into the repository, wheel or release.

01

MCP client

Authorised assistant
02

Python gateway

Policy · limits · review · audit
03

Local Java bridge

Authenticated AR API calls
04

BMC Helix

Authorised environment and account

Capability surface

19 focused MCP tools.

A typed surface across five groups, designed for predictable agent workflows.

01

Targets & health

Discover configured environments and confirm readiness before touching external state.

2 tools
02

Forms & entries

Discover authorised forms and fields, run bounded queries and read individual entries.

4 tools
03

Database metadata

Inspect approved database objects and columns through AR API without direct database access.

3 tools
04

Reviewed SQL

Plan, inspect, execute or cancel bounded read-only SQL under an explicit policy.

4 tools
05

Controlled writes

Plan and apply single-entry creation or updates through digest-bound approval workflows.

6 tools

Deliberate limits

What the gateway does not expose.

  • Entry deletion or bulk writes
  • Attachment upload or download
  • Direct database connections
  • Permission elevation
  • Automatic plan approval
  • Unattended production automation

Complementary system

Ground the context before taking controlled action.

Helix MCP Knowledge retrieves source-linked evidence from selected official documentation and authorised project knowledge. Gateway remains the separate, policy-controlled path to live Helix environments.

Explore Helix MCP Knowledge

Current status

Designed for controlled evaluation.

The current release is intended for qualified BMC Helix professionals evaluating agentic workflows. Test the exact policy against a non-production environment before considering broader use.

Review the repository