Connect, compile, and debug the boundary.

See the response before you run the call.

Choose a preset to inspect a representative MCP exchange. The transcript is local, deterministic, and contains no real vault id or key.

$ vault_list {}

Choose a preset above to replace this local transcript.

No request is sent. No key is collected or stored.

Six checks from empty vault to reuse.

Progress is stored only in this browser under helios-onboarding-checklist-v1. No vault content, key, filename, or account identifier is recorded.

Configure Streamable HTTP with a scoped Bearer key.

Production endpoint: https://usehelios.co/mcp. Set the raw hk_… value in HELIOS_API_KEY; do not put the word Bearer in the variable itself.

export HELIOS_API_KEY='hk_live_…'
codex mcp add helios \
  --url https://usehelios.co/mcp \
  --bearer-token-env-var HELIOS_API_KEY
codex mcp get helios

[mcp_servers.helios]
url = "https://usehelios.co/mcp"
bearer_token_env_var = "HELIOS_API_KEY"

{
  "mcpServers": {
    "helios": {
      "type": "http",
      "url": "https://usehelios.co/mcp",
      "headers": {
        "Authorization": "Bearer ${HELIOS_API_KEY}"
      }
    }
  }
}

export HELIOS_API_KEY='hk_live_…'
copilot mcp add --transport http \
  --header "Authorization: Bearer $HELIOS_API_KEY" \
  --tools "*" \
  helios https://usehelios.co/mcp
copilot mcp get helios

Fifteen verified MCP tools.

Search by purpose, argument, or tool name. The catalog itself remains visible when JavaScript is disabled.

Carry the raw id across every provenance edge.

A filename is human context. The returned raw id is the canonical address used for reading, ingest, page sources, and internal citations.

1. ADDSource intake

   vault_source_add returns raw metadata. Save its id as rawId.

2. READExact evidence

   Pass vaultId + rawId to vault_source_read.

3. WRITECited seedling

   Put the raw id in sources and the page's internal citation.

4. REVIEWHuman check

   Reader resolves the raw edge so a human can compare the page with evidence.

5. QUERYGrounded reuse

   vault_query returns the maintained evidence page and section.

{
  "vaultId": "01…",
  "title": "OAuth rotation runbook",
  "type": "Source Summary",
  "sources": ["RAW_ID"],
  "body": "# Extracted\n\nRotate keys every 90 days.\n\n# Inferred\n\n(inferred) Schedule a reminder.\n\n# Citations\n\n- [Internal source](raw/RAW_ID/oauth-runbook.md)"
}

Treat status codes as control flow.

Hosted compilation claims a raw source before dispatch. The safe response to a quota or conflict is explicit; blind retries waste time and can hide the real state.

Promotion is a human state transition.

Agent authority stops at a review request. That boundary remains true whether compilation happened in a connected client or the hosted pipeline.

The archive proves what can leave.

Use Settings or GET /v1/vaults/:vaultId/export. The tar.gz carries reconstructable pages, visible raw evidence, complete logs, the agent contract, and checksummed inventories.

vault-export.tar.gz
├── index.md
├── AGENTS.md
├── log.md
├── log.json
├── export-manifest.json
├── raw-files/
│   ├── manifest.json
│   └── … original bytes
└── wiki/
    └── … reconstructed Markdown

Resolve the named boundary first.

Helios keeps API error codes as MCP tool errors. Read the code, verify scope, and change one condition before retrying.