HAL MCP Server

HAL is a Model Context Protocol (MCP) server that provides HTTP API capabilities to Large Language Models. It allows LLMs to make HTTP requests and interact with web APIs through a secure, controlled interface. HAL can also automatically generate tools from OpenAPI/Swagger specifications for seamless API integration. It runs locally over stdio via the published package.

People connecting API integration tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.

VERIFIED ACTIVE

LAST COMMIT 2025-10-22 · ★ 38 · #113 OF 250 MAINTAINED API INTEGRATION · VERIFIED 2026-08-25

MIT · JavaScript servers · how we verify → /methodology

01 · Install HAL

before you install - you'll need

Set HAL_SWAGGER_FILE, HAL_API_BASE_URL, HAL_SECRET_API_KEY, HAL_SECRET_USERNAME, HAL_SECRET_PASSWORD, HAL_SECRET_TOKEN, HAL_SECRET_MICROSOFT_API_KEY, HAL_ALLOW_MICROSOFT, HAL_SECRET_GITHUB_TOKEN, HAL_WHITELIST_URLS, HAL_BLACKLIST_URLS before connecting.

Claude Code

claude mcp add deanward-hal -- npx -y hal-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "deanward-hal": {
      "command": "npx",
      "args": [
        "-y",
        "hal-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package hal-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.DeanWard is GitHub-verified and matches the repo owner

03 · What HAL can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

- Whitelist takes precedence: If both HAL_WHITELIST_URLS and HAL_BLACKLIST_URLS are set, the whitelist is used and a warning is logged - Global filtering: This applies to all HTTP requests, regardless of secrets or tools used - Case-insensitive: URL pattern matching is case-insensitive - No filtering by default: If neither environment variable is set, all URLs are allowed

Latest releases

v1.0.14 · 2025-07-03

Automated release for version v1.0.14 · Installation · bash · npm install [email protected]

04 · Who maintains HAL

HAL is maintained by deanward. It's the only MCP server we track from this author; the repo dates to Jul 2025.

05 · Facts

repository: github.com/deanward/hal
category: API integration - ranked #113 of 250 actively-maintained API integration servers as of 2026-08-25.
registry: io.github.DeanWard/HAL (active, first published 2025-09-09)
packages: npm:hal-mcp

06 · HAL FAQ

What is HAL?

Is HAL still maintained?

Yes - as of 2026-08-25, its last commit was 2025-10-22. We re-verify nightly.

How do I install HAL?

Run `npx -y hal-mcp`. The README documents 11 environment variables (HAL_SWAGGER_FILE, HAL_API_BASE_URL, HAL_SECRET_API_KEY…) to set first. Set HAL_SWAGGER_FILE, HAL_API_BASE_URL, HAL_SECRET_API_KEY, HAL_SECRET_USERNAME, HAL_SECRET_PASSWORD, HAL_SECRET_TOKEN, HAL_SECRET_MICROSOFT_API_KEY, HAL_ALLOW_MICROSOFT, HAL_SECRET_GITHUB_TOKEN, HAL_WHITELIST_URLS, HAL_BLACKLIST_URLS before connecting. You can also paste the ready-made client config above.

Does HAL run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to HAL

Alternatives to HAL

Maintained API integration servers if HAL isn't the fit.

More API integration MCP servers · Agent Skill · Swap Wizard · DataDoe MCP · Hotelbooking · Openapi

More JavaScript MCP servers · Gradus Notation · Amendor · Process · GLM MCP · see all