# Bastion Helix Agent Lens (remote · lens.bastionhelix.com)

Web pages for AI agents: may-I-use checks, prompt-injection flags, Markdown, JSON, screenshots

- Trust score: 66/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `lens.bastionhelix.com`: 66/100 (this document), [markdown](https://verifymcp.io/servers/com-bastionhelix-agent-lens/lens.md), [page](https://verifymcp.io/servers/com-bastionhelix-agent-lens/lens)

## Channel facts

- Endpoint: `https://lens.bastionhelix.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 989 tokens (~123/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 74/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 23% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the Bastion Helix Agent Lens MCP server?

Bastion Helix Agent Lens is a hosted endpoint at https://lens.bastionhelix.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-bastionhelix-agent-lens 'https://lens.bastionhelix.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-bastionhelix-agent-lens": {
      "url": "https://lens.bastionhelix.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-bastionhelix-agent-lens": {
      "type": "http",
      "url": "https://lens.bastionhelix.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-bastionhelix-agent-lens]
url = "https://lens.bastionhelix.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-bastionhelix-agent-lens": {
      "type": "remote",
      "url": "https://lens.bastionhelix.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-bastionhelix-agent-lens --url 'https://lens.bastionhelix.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-bastionhelix-agent-lens:
    url: "https://lens.bastionhelix.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-bastionhelix-agent-lens": {
      "Transport": "http",
      "Url": "https://lens.bastionhelix.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-bastionhelix-agent-lens -t streamable-http -u 'https://lens.bastionhelix.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-bastionhelix-agent-lens": {
      "type": "http",
      "url": "https://lens.bastionhelix.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-31 (score 64, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-30 (score 63, 0)

- [functional improvement] Stability: unverified → 0.03

### 2026-10-29 (score 63)

First indexed and scored.

## MCP tools (8)

### `preflight` (~141 tokens)

Check a page before using it

Free. Before an agent spends money or time on a URL: is it allowed (robots.txt for this service and, if you pass user_agent, for your own bot; Content Signals such as ai-input and ai-train; meta robots), does a bot check or sign-in stand in the way, and which engine each task needs — plain fetch, Kitesurf (Cloudflare's lightweight agent browser) or Chromium. Rate-limited per IP.

Input parameters:

- `url` (string, required): The page (http or https)
- `user_agent` (string): Your own bot's robots.txt name (e.g. "MyAgentBot") to check its rules too

### `read` (~130 tokens)

Read a page as clean Markdown

Returns the main content of a web page as clean Markdown with absolute links. Tries the cheapest way that works: plain fetch, then Kitesurf, then Chromium, and reports which one worked. Refuses (and charges nothing) when the site's robots.txt or Content Signals say no, or when a bot check answers instead of the page. Charged only on success. Price: US$0.004 per successful call (API key credits or x402).

Input parameters:

- `engine` (string)
- `max_chars` (integer)
- `url` (string, required)
- `user_agent` (string)

### `actions` (~98 tokens)

List what can be clicked or filled

Returns the forms (with every field, its label and whether it is required), buttons and links on a page, each with a CSS selector an automation tool can use. Uses the rendered page when the HTML alone has none. Charged only on success. Price: US$0.004 per successful call (API key credits or x402).

Input parameters:

- `engine` (string)
- `url` (string, required)
- `user_agent` (string)

### `extract` (~127 tokens)

Get the facts a page publishes, as JSON

No AI model involved: returns the structured data the page already publishes — JSON-LD / schema.org objects (products, articles, events, organisations, breadcrumbs), prices and offers, meta and Open Graph tags, canonical URL, language versions, licence, RSS/Atom/JSON feeds, and HTML data tables as columns + rows. Exact values instead of guesses from text. Charged only on success. Price: US$0.002 per successful call (API key credits or x402).

Input parameters:

- `engine` (string)
- `url` (string, required)
- `user_agent` (string)

### `delta` (~166 tokens)

What changed since last time

For pages an agent checks again and again. The first call returns the page as sections plus a fingerprint; send that fingerprint back as "previous" next time and get only the sections that changed (and the headings of removed ones), or changed:false. Uses HTTP ETag/Last-Modified when the site supports them. Nothing is stored on our side: the fingerprint lives with the agent. Saves tokens on every re-check. Charged only on success. Price: US$0.001 per successful call (API key credits or x402).

Input parameters:

- `engine` (string)
- `previous` (object): The "fingerprint" object from your last delta call for this URL. Leave out on the first call.
- `url` (string, required)
- `user_agent` (string)

### `site` (~99 tokens)

Site card for agents

Free. Everything an agent should know about a website before using it: its llms.txt (and llms-full.txt), sitemap (page count and first URLs), feeds, language versions, Content Signals, and which known AI crawlers and agents its robots.txt allows. Rate-limited per IP.

Input parameters:

- `url` (string, required): Any page of the site
- `user_agent` (string): Your bot's robots.txt name, to check its rules too

### `screenshot` (~98 tokens)

Screenshot a page

PNG screenshot of a page at 1280×800 (or the full page). engine "auto" uses Kitesurf unless the page needs video or WebGL, then Chromium. Charged only on success. Price: US$0.008 per successful call (API key credits or x402).

Input parameters:

- `engine` (string)
- `full_page` (boolean)
- `url` (string, required)
- `user_agent` (string)

### `credits` (~30 tokens)

Credits left on your API key

Free. Credits remaining on the API key sent in the Authorization header (1 credit = US$0.001).

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-bastionhelix-agent-lens/lens#diagnostics

## Score history

- 2026-11-05: 66
- 2026-11-04: 66
- 2026-11-03: 65
- 2026-11-02: 65
- 2026-11-01: 64
- 2026-10-31: 64
- 2026-10-30: 63
- 2026-10-29: 63

## Common questions

### What is the Bastion Helix Agent Lens MCP server?

Bastion Helix Agent Lens is an MCP server listed in the public MCP registry as com.bastionhelix/agent-lens. Web pages for AI agents: may-I-use checks, prompt-injection flags, Markdown, JSON, screenshots. This page covers its hosted endpoint (https://lens.bastionhelix.com/mcp).

### Is the Bastion Helix Agent Lens MCP server safe to use?

Bastion Helix Agent Lens scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Bastion Helix Agent Lens MCP server expose?

Bastion Helix Agent Lens exposes 8 tools: preflight, read, actions, extract, delta, and 3 more. Their descriptions and schemas cost roughly 889 tokens of context every time the server is loaded.

### Does the Bastion Helix Agent Lens MCP server require authentication?

No. We connected to Bastion Helix Agent Lens without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Bastion Helix Agent Lens MCP server still maintained?

Bastion Helix Agent Lens is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://lens.bastionhelix.com/mcp
- Website: https://bastionhelix.com/lens
- Changelog RSS feed: https://verifymcp.io/servers/com-bastionhelix-agent-lens/lens.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-bastionhelix-agent-lens/lens.json
- HTML version of this page: https://verifymcp.io/servers/com-bastionhelix-agent-lens/lens