← Back to search

io.github.DeanWard/HAL

DeanWard Scanned 3h ago

HAL (HTTP API Layer) - An MCP server that provides HTTP API capabilities to Large Language Models

D
40 / 100

Versions

1.0.14latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 13

http-get
annotations: none low

Make an HTTP GET request to a specified URL. Supports secret substitution using {secrets.key} syntax where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string headers record
http-post
annotations: none low

Make an HTTP POST request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string body string headers record contentType string
http-put
annotations: none low

Make an HTTP PUT request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string body string headers record contentType string
http-patch
annotations: none low

Make an HTTP PATCH request to a specified URL with optional body and headers. Supports secret substitution using {secrets.key} syntax in URL, headers, and body where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string body string headers record contentType string
http-delete
annotations: none low

Make an HTTP DELETE request to a specified URL with optional headers. Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string headers record
http-head
annotations: none low

Make an HTTP HEAD request to a specified URL with optional headers (returns only headers, no body). Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string headers record
http-options
annotations: none low

Make an HTTP OPTIONS request to a specified URL to check available methods and headers. Supports secret substitution using {secrets.key} syntax in URL and headers where 'key' corresponds to HAL_SECRET_KEY environment variables.

url string headers record
list-secrets
annotations: none low

Get a list of available secret keys that can be used with {secrets.key} syntax. Only shows the key names, never the actual secret values.

docs_search
annotations: none low

Search through the API documentation, schemas, components, and examples. Returns relevant matches based on your query.

limit number query string
docs_components
annotations: none low

Get a complete list of all available presentation components and their descriptions

docs_schemas
annotations: none low

Get all available data schemas and their structure

docs_endpoints
annotations: none low

Get all available API endpoints and their documentation

docs_example
annotations: none low

Get a complete example of how to structure presentation data

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 63

low
Tool 'http-get' has no annotations annotation_checker · 100%
low
Tool 'http-post' has no annotations annotation_checker · 100%
low
Tool 'http-put' has no annotations annotation_checker · 100%
low
Tool 'http-patch' has no annotations annotation_checker · 100%
low
Tool 'http-delete' has no annotations annotation_checker · 100%
low
Tool 'http-head' has no annotations annotation_checker · 100%
low
Tool 'http-options' has no annotations annotation_checker · 100%
low
Tool 'list-secrets' has no annotations annotation_checker · 100%
low
Tool 'docs_search' has no annotations annotation_checker · 100%
low
Tool 'docs_components' has no annotations annotation_checker · 100%
low
Tool 'docs_schemas' has no annotations annotation_checker · 100%
low
Tool 'docs_endpoints' has no annotations annotation_checker · 100%
low
Tool 'docs_example' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.22.0 (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.3.4 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-26w7-cxv4-gfx2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-376h-93r7-7g6f) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-49w6-73cw-chjr) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-5ff5-9fcw-vg88) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-c4pw-33h3-35xw) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-fvmw-cj7j-j39q) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-g735-7g2w-hh3f) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-ggxq-hp9w-j794) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-hr2q-hp5q-x767) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-j687-52p2-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-m85w-3h95-hcf9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-whqg-ppgf-wp8c) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-wrwg-2hg8-v723) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-x3h8-62x9-952g) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-xf8x-j4p2-f749) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@4.15.0 (GHSA-xr5h-phrj-8vxv) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: http-get manifest_parser · 85%
info
Tool: http-post manifest_parser · 85%
info
Tool: http-put manifest_parser · 85%
info
Tool: http-patch manifest_parser · 85%
info
Tool: http-delete manifest_parser · 85%
info
Tool: http-head manifest_parser · 85%
info
Tool: http-options manifest_parser · 85%
info
Tool: list-secrets manifest_parser · 85%
info
Tool: docs_search manifest_parser · 85%
info
Tool: docs_components manifest_parser · 85%
info
Tool: docs_schemas manifest_parser · 85%
info
Tool: docs_endpoints manifest_parser · 85%
info
Tool: docs_example manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 886 components sbom_generator · 100%
high
Authorization Bearer Token found in DeanWard-HAL-cc02a64/SECRETS_USAGE_EXAMPLES.md secret_scanner · 70%
critical
Database URL with Password found in DeanWard-HAL-cc02a64/SECRETS_USAGE_EXAMPLES.md secret_scanner · 85%
high
Generic API Key Assignment found in DeanWard-HAL-cc02a64/docs/src/pages/index.astro secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%