Mmcp.market

Haltproof MCP server

by RudrenduPaul·io.github.RudrenduPaul/haltproof·v0.1.3

Fail-closed deterministic checks and hash-chained receipts for AI agent outputs via MCP.

A85/100grade A
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
Growing

0 stars24 downloads/wk

Reviews

Write one

Nobody has reviewed Haltproof yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Haltproof tools (5)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • halt

    Drain, isolate, and power-fence a target node group.

  • keygen

    Generate an Ed25519 keypair for attestation signing.

  • status

    Report backend auto-detection results and optional target-group health.

  • verify

    Verify an attestation record's Ed25519 signature and return its timeline.

  • verify_chain

    Verify an attestation log's full hash chain, not just one record.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

1 medium
  • Code scan18 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 15 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumsubprocess with shell=Trueexec.shell-true
    haltproof_cli-0.1.3/src/haltproof/backends/base.py: …mbiguity, and backends never need ``shell=True``. """ node: str operation…
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Haltproof repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.RudrenduPaul/haltproof -->

HaltProof

Emergency-shutdown orchestration for Slurm, Kubernetes, and IPMI clusters, with an Ed25519-signed, hash-chained attestation record of exactly what ran.

Signed, dry-run-by-default shutdown orchestration for Slurm, Kubernetes, and IPMI clusters, with a tamper-evident audit trail.

HaltProof is an emergency-shutdown orchestration and cryptographic audit-proof layer for compute clusters. It does not implement a new low-level shutdown mechanism. It coordinates cluster primitives you already trust (Slurm, Kubernetes, IPMI/BMC) and produces a signed, tamper-evident record of exactly what was targeted, what ran, and who authorized it.

pip install haltproof-cli

(Full install options, including the npm wrapper, are in Install below.)

Why

Operators already have the tools to drain a Slurm partition, cordon a Kubernetes node pool, or power-fence a physical host over IPMI. What's usually missing is:

instead of three different command sets under pressure.

  1. One consistent interface across those tools during an incident,

take down the wrong nodes.

  1. A dry-run-by-default safety rail, so a mistyped target group doesn't

commands were issued, against which nodes, whether each step succeeded, and whether the record itself has been altered or has a piece missing.

  1. A signed, tamper-evident record of what happened: who ran it, what

HaltProof is that layer. It calls out to scontrol, kubectl, and ipmitool (or mcp-invokable equivalents) and wraps every invocation in an Ed25519-signed, hash-chained attestation.

Install

pip install haltproof-cli

An npm wrapper is also published for Node.js-based tooling and agent runtimes:

npm install -g haltproof-cli

[!WARNING]

The npm package requires the Python haltproof-cli package to already be

installed and on PATH. It is a thin execFileSync wrapper, not a

reimplementation. If it can't find the Python CLI, it prints an actionable

error and exits non-zero rather than silently doing something else.

Table of Contents

  • Features
  • Quickstart
  • Commands
  • Architecture
  • Security model
  • MCP server (for AI agents)
  • Comparison
  • What Is HaltProof, and Why Does It Exist
  • FAQ
  • Contributing
  • License

Features

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add haltproof -- uvx haltproof-cli
Add to Cursor

Haltproof: common questions

Is Haltproof MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Haltproof safety report
How do I install Haltproof?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Haltproof need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Haltproof maintained?
The last commit was 16 days ago (2026-09-08). The latest release is v0.1.3.
What can I use instead of Haltproof?
Servers from other publishers that do the same job: Protect MCP server, Emilia Protocol MCP server and llmtrim MCP server. Compare all Haltproof alternatives.

Alternatives to Haltproof

Same job from other publishers: the closest match first, then the best rated.

All Haltproof alternatives →
  • Protect
    Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.
    C
  • Emilia Protocol
    Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
    B
  • llmtrim
    MCP server and proxy that compresses LLM prompts, tool output, and replies to cut token cost.
    A
  • three.ws Billing
    An agent's account economics — plan quotas, metered usage, invoices, receipts, and earnings.
    B
  • Ausca
    Pay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.
    B

More from RudrenduPaul →