README.md

# Helix Positioning

Publisher branding: Helix GTM Consulting.
This is a draft remote MCP connection package, not the server executable and not a submission approval.

## Manual setup

1. Use the confirmed publisher account and its verified Individual identity. The directory publisher label comes from that verified identity. Do not claim Helix has business verification.
2. Keep this ZIP compressed. Use the portal's remote MCP path and this endpoint: https://impact.gtmhelix.com/mcp
3. When the portal requests a complete plugin ZIP, upload this archive. Do not choose the skills only route for this remote server. Do not add this server to the blocked Research draft.
4. Select no authentication if the portal asks. The preflight reached the public endpoint without credentials. Do not supply an API key or password.
5. Complete the domain verification challenge at the exact address the portal supplies. Do not overwrite another plugin's verification token.
6. Inspect the connected server and run the native tool scan. Confirm 8 tools and inspect every finding.
7. Check that support, privacy, terms, icon and five positive plus three negative review cases imported. A real video recording URL is still needed. No invented video link is bundled.
8. Run all review prompts in the installed ChatGPT host and record the actual results. Backend smoke checks are not a substitute.
9. Review policies, countries, identity and legal declarations yourself before final submission. Do not submit while a required gate is missing.

## Evidence and scope

Source repository: https://github.com/shashwatgtm/impact-mcp
Pinned source commit: d9f55775dbd42e668559a3d244a30696de69f921
Source manifest version and observed live version: 2.2.27
Observed tool count: 8
Captured at UTC: 2026-10-27T10:02:06.113079+00:00
The commit identifies the retrieved source metadata. Matching version strings do not prove deployed code is byte identical to this commit.
All review scenario numbers are synthetic. Real company names in those scenarios are not evidence about those companies and do not imply endorsement.
The public server stays remote and can change after this capture. Check its version and native findings again before submission.
No bundled skill, executable, lifecycle hook, registered app reference, credential or source code modification is included.

## Remaining gates

1. Real reviewer accessible demonstration recording URL missing.
2. Portal domain verification not completed.
3. OpenAI production tool scan not executed.
4. Installed ChatGPT positive and negative workflow tests not executed.
5. Independent answer quality gate not reestablished in this packaging task.
6. Owner must review legal attestations and current policies.