# Hexis Cloud (slim)

> Hexis Cloud is the hosted edition of Hexis, an Apache-2.0 platform from Bevelites GmbH (Bevel) that keeps a team's knowledge, agent skills and tool connections in git, with per-file access control, and serves them to agents over MCP.

- Full: https://www.anchorterminal.com/tools/hexis.md (~6,550 tokens) · this version ~1,580 tokens · JSON https://www.anchorterminal.com/tools/hexis.json · canonical https://www.anchorterminal.com/tools/hexis
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-15
- Licence: CC BY 4.0, credit Anchor Terminal (anchorterminal.com) and link this page when you pass anything on

**C · 55.3/100 · rank #705 of 1084 · #11 in Company knowledge & data catalogues · not agent-ready · confidence medium**


Assessment: Agents reach a git-backed knowledge base, shared skills and connected tools through one OAuth MCP endpoint that applies each person's per-file permissions, with read-only connections and an audit log of tool calls. The hosted edition dates from 11 October 2026, and its own terms state no backups, no uptime commitment and no security certification.

## Facts

- Kind: MCP server · vendor: Bevelites GmbH (Bevel) · category: Company knowledge & data catalogues · legal entity: Bevelites GmbH · provenance 69/100
- Endpoint: `https://<workspace>.hexis.software/api/mcp` (Streamable HTTP, stdio)
- Auth: OAuth or key · pricing: Freemium · x402: no · licence: Apache-2.0 (the Hexis software). Hexis Cloud, the hosted service at hexis.software, is governed by Bevel's Terms of Service of 11 October 2026
- Probe metrics: not measured yet (probes haven't run)
- Surface listed: Hexis Cloud's hosted MCP endpoint at https://<workspace>.hexis.software/api/mcp, read from the repository, the README, the agent guide and the legal pages on 14 October 2026. No workspace was created
- Editions: Hexis, Apache-2.0, self-hosted with Docker Compose (image ghcr.io/bevel-software/hexis), and Hexis Cloud, run by Bevel at hexis.software since 11 October 2026. A local MCP server, @bevel-software/hexis-mcp on npm, adds local-only tools to either
- MCP tools: list_tools, tools_info and call_tool_chain (code mode in an isolated-vm sandbox), then about 37 platform tools for files, skills, branches and change requests, then the tools of connected MCP servers and APIs. No tool annotations
- Knowledge base: A git repository in one of three modes, Managed on Bevel's server, your own GitHub repository through Bevel's GitHub App, or any git host by address and token
- Access control: Deny by default, with rules per folder and file in the repository, roles and groups, owner approval on protected branches and read-only connections
- Connected tools: Any MCP server or HTTP API described as a UTCP manual in the repository. Secrets stay in an encrypted vault on the server, shared or per user, with OAuth sign-in per person
- Hosting: One Hetzner server in Nuremberg, Germany. Sub-processors Hetzner and Resend (service emails, USA). No backups. Deleted workspaces kept 30 days
- Rate limits: Sign-in attempts are rate limited. No published request limits for the MCP endpoint
- Releases: Package tags 0.1.0 on 31 July 2026, then 36 version tags from v0.1.0 (10 August) to v0.29.0 (14 October 2026), with release notes on GitHub for each

- Scores: Reliability 18, Performance pending, Schema & documentation 83, Agent ergonomics 57, Security & auth 64, Payments & pricing 30, Task success pending, Maintenance & community 85, Transparency & trust 75 · total over the 7 assessed categories
- Why: Reliability, Graded on the hosted lines, because the surface is Hexis Cloud's MCP endpoint. · Schema & documentation, Every tool on tools/list has a JSON Schema input, and the server validates each schema before listing it so one malformed tool can't blank t… · Agent ergonomics, About 37 platform tools plus three code-mode tools are listed directly, before any connected tool, which puts the listing over 30 (5). · Security & auth, OAuth 2.1 with PKCE, dynamic client registration and token revocation, but a single `mcp` scope, and connection keys stored as SHA-256 hashe… · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, v0.29.0 on 14 October 2026 (30). · Transparency & trust, Hexis is Apache-2.0 and the terms describe Hexis Cloud as a managed version of it.
- Sources: 14, open questions: 5, both in the full twin
- Capabilities: knowledge.search, work.docs, agent.tools, automation.auth, auth.audit
- JSON: https://www.anchorterminal.com/api/v1/tools/hexis.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/hexis.svg` or a link to https://www.anchorterminal.com/tools/hexis from a page on hexis.software or bevel.software or one of their subdomains, or the README of github.com/Bevel-Software/Hexis, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Ask the person for a read-only connection when the task only reads. It answers canWrite false everywhere
2. Pass the branch you are working on to every knowledge-base tool. Calls without a required branch are refused
3. Check canWrite from list_files, read_file or get_skill before writing, and open a change request when it is false
4. Use list_tools and tools_info before call_tool_chain, and never ask the person for a tool's secret in chat
5. Keep your own copy of anything important. Hexis Cloud keeps no backups of Managed repositories

## Connect

```bash
npx -y @bevel-software/hexis-mcp --url https://<workspace>.hexis.software
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/hexis

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Merge Agent Handler | B | 69.5 | automation.auth, agent.tools, auth.audit | https://www.anchorterminal.com/tools/merge-agent-handler.min.md |
| StackOne | B | 69.1 | automation.auth, agent.tools, auth.audit | https://www.anchorterminal.com/tools/stackone.min.md |
| One | B | 66.6 | automation.auth, agent.tools, auth.audit | https://www.anchorterminal.com/tools/one.min.md |
| Composio (API + MCP) | BB | 75.1 | automation.auth, agent.tools | https://www.anchorterminal.com/tools/composio-rube.min.md |
| Nango | B | 67.7 | auth.audit, agent.tools | https://www.anchorterminal.com/tools/nango.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)