Helix GenoSphere
Ask population-genomics questions against 500,000+ exome-sequenced participants with linked EHR data. Helix states every result is a de-identified aggregate count and that no individual record is returned. Five read-only tools, Okta sign-in, approved partners only.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Helix GenoSphere via MCP
https://mcp.hrn-production.helix.com/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Helix GenoSphere Tools & Capabilities (5)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- The aggregate-only guarantee is Helix's claim, not our finding. Helix states it in two documents and the five tool names are consistent with it. But the endpoint refused every anonymous request, so we read no tool schema and cannot confirm that no parameter accepts a participant identifier. Treat it as a documented design, not a tested boundary — and if your use is governed, ask Helix for the de-identification methodology in writing.
- We could not verify the authentication posture. The host returned a byte-identical 118-byte AWS load balancer 403 to every path we tried — the endpoint itself, four
.well-knownmetadata paths, the site root, and a deliberately nonsensical control path. That is a blanket edge block, not an MCP authentication challenge: there was nowww-authenticateheader and no JSON error body. Anthropic's own probe of this server recorded the same 403. SoauthModehere reflects Helix's documentation of Okta sign-in, not our observation, andauthVerifiedis false. - No OAuth scopes are readable, so none can be assessed. With every metadata path blocked we cannot say whether a boundary exists between the five reads — though on a surface with no write tool, the scope question carries much less weight than it would elsewhere.
- Helix publishes no tool list. The five names come from Anthropic's directory. The correspondence with Helix's prose capabilities is one-to-one, but no vendor enumeration exists to diff against.
- The queryable gene panel is a curated subset of the exome. A gene returning unavailable is a statement about the panel, not about Helix's data holdings. Do not read absence as evidence.
- A zero is not a negative result. Helix states explicitly that an empty result means nothing matched within the dataset's scope rather than that the answer is definitively none. Suppressed small counts and true zeros are not distinguished in the output, so neither can be cited as an absence of carriers. This is the most likely way to draw a wrong scientific conclusion from this connector.
- Cohort composition is not a general population. The dataset is drawn from health systems across North America, and Helix's therapeutic-area cohorts are deliberately enriched — over 230,000 cardiovascular and metabolic patients, more than 54,000 on GLP-1 agonists, 25,000+ MASH-enriched records. Prevalence figures reflect this cohort, not the general population. Run
get_dataset_overviewbefore generalising from any count. - Repeated narrow queries are the residual privacy risk, not any single one. Suppression protects small groups per response. An agent that issues many finely-sliced queries in sequence is doing the thing cell suppression exists to resist, and nothing in the tool surface would show you it happened. Do not point an autonomous agent at this connector to enumerate a space — keep genomic queries deliberate and reviewed.
- How an aggregate-only connector sits on a row-level cohort tool is undocumented. Helix's press release says the connector hooks directly into Cohort Builder, which stratifies individual patients. Helix does not explain where aggregation is enforced in that path, and we could not establish it either way.
- Access is gated to agreement-bound partners, so most readers cannot use this connector at all, and licensing the underlying dataset is a separate commercial conversation with Helix.
- This is research data. Helix positions GenoSphere for research and drug development, and its participant materials frame the network as a research study. Nothing here is a clinical or diagnostic result about any person.
Frequently asked questions
Helix states twice that it does not. Its connector page says every result is a de-identified aggregate statistic, a count or a percentage over the cohort, and that the connector never returns individual records, genotypes tied to a person, or protected health information. Its July 2026 press release repeats the claim. We could not test it — the endpoint refused us.
Anthropic's directory lists get_variant_frequency, check_gene_availability, get_dataset_overview, search_concepts and get_patient_count. All five read. Helix publishes no tool list of its own, so these names come from the directory, but each maps onto one capability Helix describes in prose and no described capability lacks a name.
Participants in the Helix Research Network who signed a research consent form. Helix documents that participants agree their coded information may be studied by researchers outside the network, who will not receive directly identifying information, and that participants can withdraw and stop sharing at any time. The cohort exceeds 500,000 exome-sequenced records linked to EHR data.
That is the privacy floor working, not a fault. Helix documents that small groups are masked to protect participant privacy, so a low count is withheld rather than reported. Helix also states a zero or empty result means nothing matched within the dataset's scope rather than that the true answer is definitively none.
No. Helix restricts access to named health system and life sciences partners bound by agreement, not the general public. You need a Helix-provisioned account assigned to the connector before sign-in works. Helix states that enabling the connector without a provisioned account returns a message directing you to contact Helix rather than any data.
No tool name in the listing writes. Helix describes the connector as read-only, Anthropic's directory records its permissions as Read, and all five names are queries — get, check and search verbs. There is no create, update, delete or export verb anywhere in the surface, and no parameter detail was readable to check for a hidden one.
The queryable panel is a curated subset, not the whole exome. Helix states plainly that it holds exome-wide data beyond the panel, so a gene's absence from the panel does not mean Helix lacks data on it. Helix directs coverage questions for a specific gene to mcp@helix.com rather than treating absence as an answer.
Unknown — we could not read them. Every path on the endpoint host, including the RFC 9728 descriptor paths and a nonsense control path, returned a byte-identical AWS load balancer 403 with no www-authenticate header. Helix documents sign-in through its Okta identity provider, but publishes no scope list and the server would not tell us.
Sources
- Helix GenoSphere Claude Connector documentation (retrieved 2026-08-22). Also served as clean Markdown by appending
.md, which is the route we read. · retrieved 2026-08-22 - Helix press release, "Helix Launches GenoSphere MCP Connector in Claude" (retrieved 2026-08-22) · retrieved 2026-08-22
- Helix GenoSphere product page, cohort composition and Explorer cohort builder (retrieved 2026-08-22).
https://www.helix.com/what-we-do/helix-genosphere, which Helix's ownllms.txtstill lists, 307-redirects here. · retrieved 2026-08-22 - Helix Research Network Data & Privacy, participant consent, withdrawal, GINA and safeguards (retrieved 2026-08-22) · retrieved 2026-08-22
- Helix privacy policy, de-identification and re-identification language (retrieved 2026-08-22) · retrieved 2026-08-22
- Helix machine-readable page index,
llms.txt(retrieved 2026-08-22).robots.txtis a blanket allow; noContent-Signaldirective is present. · retrieved 2026-08-22 - Live endpoint probe: a single anonymous MCP initialize request plus four RFC 9728 and OAuth metadata paths and a control path against
https://mcp.hrn-production.helix.com, all returning an identical 118-byte AWS load balancer 403 (2026-08-22) · retrieved 2026-08-22 - Anthropic Connectors Directory entry — , read from our directory snapshot dated 2026-08-16 · retrieved 2026-08-16
- Helix life-sciences contact — <mailto:lifesciences@helix.com> · Connector access — <mailto:mcp@helix.com> · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Healthcare
- Developer
- Helix GenoSphere
- Tools
- 5
- Domain
- mcp.hrn-production.helix.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.