About HAL (HTTP API Layer)
Transforms OpenAPI/Swagger specifications into dynamic HTTP tools with secret management and URL restrictions, enabling secure API integration through automatic tool generation from API documentation.
What you can use it for
- developer tools
Connection and setup
- Hosting
- Local stdio process
- Transport
- stdio
- Endpoint
- Local process; no hosted endpoint documented
- Authentication
- No credentials were configured; the tested read-only tool “http-get” succeeded in an isolated environment. Other tools may have additional requirements.
Requirements
- Node.js 18+
- The npm package repository matched the repository linked from the public profile.
Setup steps
- npx -y hal-mcp@1.0.14
Tools
The server returned 8 tools in tools/list. Only “http-get” was invoked with a synthetic read-only input and succeeded.
- 01
http-getMake an HTTP GET request to a specified URL. Supports secret substitution using {secrets.key} syntax where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, headers - 02
http-postMake an HTTP POST request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, body, headers, contentType - 03
http-putMake an HTTP PUT request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, body, headers, contentType - 04
http-patchMake an HTTP PATCH request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, body, headers, contentType - 05
http-deleteMake an HTTP DELETE request to a specified URL with optional headers. Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, headers - 06
http-headMake an HTTP HEAD request to a specified URL with optional headers (returns only headers, no body). Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, headers - 07
http-optionsMake an HTTP OPTIONS request to a specified URL to check available methods and headers. Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.
Parameters: url, headers - 08
list-secretsGet a list of available secret keys that can be used with {secrets.key} syntax. Only shows the key names, never the actual secret values.
This server’s available tools can vary by account, permissions, or configuration. The list shown is not its full runtime catalog.
Limitations and notes
- Runtime verification covered one read-only tool call (http-get); other listed tools were not individually exercised.
Original sources
- MCP.Directory public profile
Name, description, publisher identifier, categories, transport, tool inventory, and install configuration.
- Linked publisher repository
Repository URL linked from the public profile; npm package repository metadata matched this GitHub repository.
- npm registry metadata
Published package version 1.0.14 checked before launch. Registry repository: git+https://github.com/DeanWard/HAL.git.
- maintainer or vendor reference
Maintainer README explains generation of named MCP tools from OpenAPI operationIds; effective tool count depends on loaded spec.
Documentation checked 2026-10-28T00:00:00Z. Connection has not been runtime tested.
Views
07 days
Platforms
Local · stdio
Local stdio process
Authentication
No credentials were configured; the tested read-only tool “http-get” succeeded in an isolated environment. Other tools may have additional requirements.






