{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Heliciel supports propeller, wing, fan, and turbine design calculations. Size and optimize geometry, analyze performance or cavitation, and inspect visual results. A paid-duration Heliciel MCP pass is required through OAuth.","did":"726fa99e-cf6a-40ba-9f01-c63cadaf0a6b","documentation_url":"https://www.mecaflux.com/suite/en/heliciel-mcp.htm","editorial_description":{"extended_description":"Calculations use Heliciel's Blade Element Momentum solver. Tools support performance maps, bounded optimization, design alerts, project management, and exports such as STL, IGES, OBJ, blade sections, and CSV analysis tables. Computed designs still require appropriate engineering review.","schema_version":1,"summary":"Heliciel supports propeller, wing, fan, and turbine design calculations.\nSize and optimize geometry, analyze performance or cavitation, and inspect visual results.\nA paid-duration Heliciel MCP pass is required through OAuth."},"homepage_url":"","icon":"https://mcp.heliciel.com/icone/192.png","id":"726fa99e-cf6a-40ba-9f01-c63cadaf0a6b","installs":0,"last_scanned":"","license":"","long_description":"Calculations use Heliciel's Blade Element Momentum solver. Tools support performance maps, bounded optimization, design alerts, project management, and exports such as STL, IGES, OBJ, blade sections, and CSV analysis tables. Computed designs still require appropriate engineering review.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs confirm generated STL, IGES, OBJ, JSON and CSV outputs with temporary download links.","reasoning":"These are meaningful file artifacts even though the hosted project is session-scoped.","risk_type":"file_write","severity":"medium","title":"Creates engineering projects and manufacturing/export files","triggering_tools_or_skills":["enregistrer_projet","exporter_carenage_obj","exporter_carenage_stl","exporter_helice_igs","exporter_helice_obj","exporter_stl","exporter_tableau_analyse_multiple"]},{"evidence":"The tool set operates a live Heliciel design session and persists changes within that project/session.","reasoning":"It materially alters the engineering model being exported.","risk_type":"data_modification","severity":"medium","title":"Changes propeller/wing geometry and design state","triggering_tools_or_skills":["design_helice","reconstruire_design","regler_geometrie","forcer_profil_element","appliquer_meilleur_profil"]},{"evidence":"The connector can open/list/read project content.","reasoning":"Unpublished engineering designs can be commercially sensitive.","risk_type":"private_data_read","severity":"low","title":"Reads user engineering project files and design parameters","triggering_tools_or_skills":["lire_fichier_texte","lister_fichiers","ouvrir_projet","lire_geometrie","lire_parametres_helice"]}],"assessment_status":"provisional","auth_and_scopes":"A paid Heliciel MCP pass key is required; the remote engineering session is transient and projects are not archived after it ends.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/726fa99e-cf6a-40ba-9f01-c63cadaf0a6b.json","what_it_proves":"Candidate PR #125 record identity (name \"Heliciel — Propeller & Wing Design\", publisher, type web_connector) and 76 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/726fa99e-cf6a-40ba-9f01-c63cadaf0a6b: complete tool_names inventory (76 tools), remote streamable-http endpoint https://mcp.heliciel.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:06:17Z","url_or_path":"https://www.mecaflux.com/suite/en/heliciel-mcp.htm","what_it_proves":"Official documentation says the connector drives a real engineering instance, creates exportable STL/IGES/OBJ/CSV/JSON artifacts, keeps download links for 60 minutes, and does not archive projects after the session."}],"primary_reason":"Heliciel modifies an engineering design session and writes exportable manufacturing/CAD files.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:726fa99e-cf6a-40ba-9f01-c63cadaf0a6b","reviewed_at":"2026-10-10","reviewer_notes":"Manually reviewed all 76 French tool names. Official docs rule out persistent server-side project archival but confirm temporary file exports; no arbitrary code or deployment is exposed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":76,"tools_or_skills_total":76},"name":"Heliciel — Propeller & Wing Design","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=726fa99e-cf6a-40ba-9f01-c63cadaf0a6b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.mecaflux.com/suite/en/confidentialite.htm","provisional_risk":null,"publication_recommendation":"accept","publisher":"Mecaflux","publisher_url":"https://www.mecaflux.com/","remote_url":"https://mcp.heliciel.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped.","evidence":"Creates engineering projects and manufacturing/export files: Official docs confirm generated STL, IGES, OBJ, JSON and CSV outputs with temporary download links.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Creates engineering projects and manufacturing/export files","triggering_tools":["enregistrer_projet","exporter_carenage_obj","exporter_carenage_stl","exporter_helice_igs","exporter_helice_obj","exporter_stl","exporter_tableau_analyse_multiple"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially alters the engineering model being exported.","evidence":"Changes propeller/wing geometry and design state: The tool set operates a live Heliciel design session and persists changes within that project/session.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes propeller/wing geometry and design state","triggering_tools":["design_helice","reconstruire_design","regler_geometrie","forcer_profil_element","appliquer_meilleur_profil"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Unpublished engineering designs can be commercially sensitive.","evidence":"Reads user engineering project files and design parameters: The connector can open/list/read project content.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads user engineering project files and design parameters","triggering_tools":["lire_fichier_texte","lister_fichiers","ouvrir_projet","lire_geometrie","lire_parametres_helice"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.mecaflux.com/suite/contact.php","tags":["filesystem_access","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"analyser_cavitation"},{"description":"","name":"analyser_point_fonctionnement"},{"description":"","name":"annuler_forcage_profil"},{"description":"","name":"annuler_forcages_incidence"},{"description":"","name":"appliquer_meilleur_profil","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially alters the engineering model being exported."}},{"description":"","name":"calculer_resistance_carene_holtrop"},{"description":"","name":"calculer_resistance_carene_ittc"},{"description":"","name":"calculer_resistance_carene_savitsky"},{"description":"","name":"charger_modele_projet"},{"description":"","name":"chercher_distribution_cordes"},{"description":"","name":"chercher_intention"},{"description":"","name":"chercher_nb_pales_genetique"},{"description":"","name":"chercher_rayon_optimal"},{"description":"","name":"chercher_rpm_genetique"},{"description":"","name":"comparer_profils"},{"description":"","name":"comparer_variantes"},{"description":"","name":"convertir_unites"},{"description":"","name":"design_helice","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially alters the engineering model being exported."}},{"description":"","name":"design_helice_marine"},{"description":"","name":"design_helice_turbine"},{"description":"","name":"design_helice_ventilation"},{"description":"","name":"enregistrer_projet","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"estimer_autonomie_drone"},{"description":"","name":"estimer_bruit"},{"description":"","name":"exporter_carenage_obj","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"exporter_carenage_stl","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"exporter_helice_igs","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"exporter_helice_obj","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"exporter_profil_pale"},{"description":"","name":"exporter_sections_pale"},{"description":"","name":"exporter_stl","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"exporter_tableau_analyse_multiple","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These are meaningful file artifacts even though the hosted project is session-scoped."}},{"description":"","name":"forcer_incidence"},{"description":"","name":"forcer_profil_element","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially alters the engineering model being exported."}},{"description":"","name":"generer_carte_performance"},{"description":"","name":"generer_courbes_analyse_multiple"},{"description":"","name":"info_profil_naca"},{"description":"","name":"lire_alertes"},{"description":"","name":"lire_documentation"},{"description":"","name":"lire_etat_commande"},{"description":"","name":"lire_fichier_texte"},{"description":"","name":"lire_geometrie"},{"description":"","name":"lire_intention"},{"description":"","name":"lire_parametres_helice"},{"description":"","name":"lire_profil_element"},{"description":"","name":"lire_resultats_performance"},{"description":"","name":"lire_tableau_analyse"},{"description":"","name":"lisser_incidences"},{"description":"","name":"lister_fichiers"},{"description":"","name":"lister_fluides_disponibles"},{"description":"","name":"lister_grandeurs_analysables"},{"description":"","name":"lister_profils_disponibles"},{"description":"","name":"lister_sujets_documentation"},{"description":"","name":"lister_types_de_projet"},{"description":"","name":"optimiser_genetique"},{"description":"","name":"optimiser_nb_pales"},{"description":"","name":"optimiser_rpm"},{"description":"","name":"ouvrir_projet"},{"description":"","name":"parametres_de_conception"},{"description":"","name":"preparer_depot_projet"},{"description":"","name":"proposer_profil_element"},{"description":"","name":"que_puis_je_faire"},{"description":"","name":"reconstruire_design","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially alters the engineering model being exported."}},{"description":"","name":"regler_chute_disponible"},{"description":"","name":"regler_generatrice_courbe"},{"description":"","name":"regler_generatrice_droite"},{"description":"","name":"regler_geometrie","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially alters the engineering model being exported."}},{"description":"","name":"selectionner_fluide_par_nom"},{"description":"","name":"selectionner_profil_par_nom"},{"description":"","name":"signaler_fonction_absente"},{"description":"","name":"tracer_courbes"},{"description":"","name":"trouver_rpm_pour_chute"},{"description":"","name":"trouver_rpm_pour_poussee"},{"description":"","name":"valider_conception"},{"description":"","name":"visualiser"},{"description":"","name":"zoomer_sur_parametre"}],"tools_count":76,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/726fa99e-cf6a-40ba-9f01-c63cadaf0a6b","uuid":"494997f6-8b1c-501c-8b55-ef4a5fa76281","verification_tier":"community","version":""},"query_key":"heliciel propeller wing design","schema_version":1,"status":"match"}