Haltproof MCP server
Fail-closed deterministic checks and hash-chained receipts for AI agent outputs via MCP.
0 stars24 downloads/wk
Reviews
Write oneNobody has reviewed Haltproof yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Haltproof tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
haltDrain, isolate, and power-fence a target node group.
keygenGenerate an Ed25519 keypair for attestation signing.
statusReport backend auto-detection results and optional target-group health.
verifyVerify an attestation record's Ed25519 signature and return its timeline.
verify_chainVerify an attestation log's full hash chain, not just one record.
Public scan report
scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it
- Code scan18 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 15 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truehaltproof_cli-0.1.3/src/haltproof/backends/base.py: …mbiguity, and backends never need ``shell=True``. """ node: str operation…
What the publisher says
From the Haltproof repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.RudrenduPaul/haltproof -->
HaltProof
Emergency-shutdown orchestration for Slurm, Kubernetes, and IPMI clusters, with an Ed25519-signed, hash-chained attestation record of exactly what ran.
Signed, dry-run-by-default shutdown orchestration for Slurm, Kubernetes, and IPMI clusters, with a tamper-evident audit trail.
HaltProof is an emergency-shutdown orchestration and cryptographic audit-proof layer for compute clusters. It does not implement a new low-level shutdown mechanism. It coordinates cluster primitives you already trust (Slurm, Kubernetes, IPMI/BMC) and produces a signed, tamper-evident record of exactly what was targeted, what ran, and who authorized it.
pip install haltproof-cli(Full install options, including the npm wrapper, are in Install below.)
Why
Operators already have the tools to drain a Slurm partition, cordon a Kubernetes node pool, or power-fence a physical host over IPMI. What's usually missing is:
instead of three different command sets under pressure.
- One consistent interface across those tools during an incident,
take down the wrong nodes.
- A dry-run-by-default safety rail, so a mistyped target group doesn't
commands were issued, against which nodes, whether each step succeeded, and whether the record itself has been altered or has a piece missing.
- A signed, tamper-evident record of what happened: who ran it, what
HaltProof is that layer. It calls out to scontrol, kubectl, and ipmitool (or mcp-invokable equivalents) and wraps every invocation in an Ed25519-signed, hash-chained attestation.
Install
pip install haltproof-cliAn npm wrapper is also published for Node.js-based tooling and agent runtimes:
npm install -g haltproof-cli[!WARNING]
The npm package requires the Python haltproof-cli package to already be
installed and on PATH. It is a thin execFileSync wrapper, not a
reimplementation. If it can't find the Python CLI, it prints an actionable
error and exits non-zero rather than silently doing something else.
Table of Contents
- Features
- Quickstart
- Commands
- Architecture
- Security model
- MCP server (for AI agents)
- Comparison
- What Is HaltProof, and Why Does It Exist
- FAQ
- Contributing
- License
Features
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
claude mcp add haltproof -- uvx haltproof-cli
Haltproof: common questions
- Is Haltproof MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Haltproof safety report
- How do I install Haltproof?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Haltproof need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Haltproof maintained?
- The last commit was 16 days ago (2026-09-08). The latest release is v0.1.3.
- What can I use instead of Haltproof?
- Servers from other publishers that do the same job: Protect MCP server, Emilia Protocol MCP server and llmtrim MCP server. Compare all Haltproof alternatives.
Alternatives to Haltproof
Same job from other publishers: the closest match first, then the best rated.
- ProtectFail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.not reviewedGrowingC
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
- llmtrimMCP server and proxy that compresses LLM prompts, tool output, and replies to cut token cost.not reviewedEstablishedA
- three.ws BillingAn agent's account economics — plan quotas, metered usage, invoices, receipts, and earnings.not reviewedEstablishedB
- AuscaPay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.not reviewedEstablishedB