AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
helm-ai-kernel
helm-ai-kernel logo

helm-ai-kernel

Active·★ 60·Apache-2.0·Updated 2026-10-22

HELM AI Kernel acts as a fail-closed execution firewall, intercepting AI agent requests to enforce default-deny policies and quarantine unknown tools. It provides verifiable evidence through signed receipts and EvidencePacks for audit and tamper checks, ensuring secure and governed AI operations.

#AI Agent Security#Execution Firewall#Policy Enforcement#Verifiable Evidence#MCP Quarantine#LLM Governance
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides
#Runtime Security
$ Install
$ brew install mindburnlabs/tap/helm-ai-kernel
↗ Visit site★ GitHub
01

Features

01Enforces fail-closed, default-deny execution policies for AI agent tool calls.
02Provides a Multi-tool Call Protocol (MCP) wrapper to quarantine unknown tools before execution.
03Generates signed receipts and offline-verifiable EvidencePacks for audit and tamper-proofing of agent decisions.
04Offers an OpenAI-compatible proxy for integrating existing AI clients with policy enforcement.
05Supports multiple language SDKs (Go, Python, TypeScript, Rust, Java) for developer integration.
02

Compatibility

Homebrew
CLI
Verified via docs
Go
SDK
Verified via docs
Python
SDK
Verified via docs
TypeScript
SDK
Verified via docs
Rust
SDK
Verified via docs
Java
SDK
Verified via docs
03

Quick start

1
$ brew install mindburnlabs/tap/helm-ai-kernel
04

Use cases

↳Governing and securing AI agent interactions with external systems and infrastructure.
↳Auditing and verifying the decisions (ALLOW, DENY, ESCALATE) made by AI agents for compliance.
↳Protecting against unauthorized or risky actions by AI agents through execution firewalls.
↳Integrating a security layer into existing OpenAI-compatible AI client workflows.
05

Alternatives

⚡Top VS:
VSmcp-hangar★18→VSheddle★14→VSADR★2.1k→VS

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Compatibility03Quick start04Use cases05Alternatives
AgentHound
★452
→
mcp-hangar logo
mcp-hangar★ 18
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
VSCompare→
heddle logo
heddle★ 14
Heddle — The policy-and-trust layer for MCP tool servers. Turn YAML configs into validated, policy-enforced MCP tools.
VSCompare→
ADR logo
ADR★ 2.1k
ADR (Agentic Detection and Response): open-source telemetry sensor and dual-agent detection framework for securing MCP-based AI agents.
VSCompare→
AgentHound logo
AgentHound★ 452
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
VSCompare→
DashClaw logo
DashClaw★ 313
🛡️The governance runtime for AI agents. Intercept actions, enforce guard policies, require approvals, and produce audit-ready decision trails.
VSCompare→
agents-shipgate logo
agents-shipgate★ 90
The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI + GitHub Action.
VSCompare→
pic-standard logo
pic-standard★ 68
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
VSCompare→
ephemora-cell logo
ephemora-cell★ 48
Ephemora Cell — The execution layer for untrusted AI-generated code. Fast, capability-based WASM execution with explicit CPU, memory, time, I/O, and filesystem limits.
VSCompare→
See all alternatives →
Mindburn-Labs /
helm-ai-kernel
↗

Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.

60Apache-2.0
Last commit1d ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit