Skip to directory
CursorVS Code

About HAL (HTTP API Layer)

Transforms OpenAPI/Swagger specifications into dynamic HTTP tools with secret management and URL restrictions, enabling secure API integration through automatic tool generation from API documentation.

What you can use it for

  • developer tools
Connection and setup
Hosting
Local stdio process
Transport
stdio
Endpoint
Local process; no hosted endpoint documented
Authentication
No credentials were configured; the tested read-only tool “http-get” succeeded in an isolated environment. Other tools may have additional requirements.

Requirements

  • Node.js 18+
  • The npm package repository matched the repository linked from the public profile.

Setup steps

  1. npx -y hal-mcp@1.0.14
Tools

The server returned 8 tools in tools/list. Only “http-get” was invoked with a synthetic read-only input and succeeded.

  • http-get

    Make an HTTP GET request to a specified URL. Supports secret substitution using {secrets.key} syntax where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, headers
    01
  • http-post

    Make an HTTP POST request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, body, headers, contentType
    02
  • http-put

    Make an HTTP PUT request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, body, headers, contentType
    03
  • http-patch

    Make an HTTP PATCH request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, body, headers, contentType
    04
  • http-delete

    Make an HTTP DELETE request to a specified URL with optional headers. Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, headers
    05
  • http-head

    Make an HTTP HEAD request to a specified URL with optional headers (returns only headers, no body). Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, headers
    06
  • http-options

    Make an HTTP OPTIONS request to a specified URL to check available methods and headers. Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.

    Parameters: url, headers
    07
  • list-secrets

    Get a list of available secret keys that can be used with {secrets.key} syntax. Only shows the key names, never the actual secret values.

    08

This server’s available tools can vary by account, permissions, or configuration. The list shown is not its full runtime catalog.

Limitations and notes
  • Runtime verification covered one read-only tool call (http-get); other listed tools were not individually exercised.
Original sources
  • MCP.Directory public profile

    Name, description, publisher identifier, categories, transport, tool inventory, and install configuration.

  • Linked publisher repository

    Repository URL linked from the public profile; npm package repository metadata matched this GitHub repository.

  • npm registry metadata

    Published package version 1.0.14 checked before launch. Registry repository: git+https://github.com/DeanWard/HAL.git.

  • maintainer or vendor reference

    Maintainer README explains generation of named MCP tools from OpenAPI operationIds; effective tool count depends on loaded spec.

Documentation checked 2026-10-28T00:00:00Z. Connection has not been runtime tested.

Views

07 days

Platforms

Local · stdio

Local stdio process

Authentication

No credentials were configured; the tested read-only tool “http-get” succeeded in an isolated environment. Other tools may have additional requirements.

Categories