HALLUX

dev.blvkware/halluxVersion 0.1.0

Check that a package, module or DOI exists before an agent installs, imports or cites it.

Status

Responds132 msNov 14, 2026, 14:25 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:25 UTC
Latency: 132 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://api.blvkware.dev/hallux/mcpResponds132 msNov 14, 2026, 14:25 UTC

No sign-in

Claude Code

claude mcp add --transport http hallux https://api.blvkware.dev/hallux/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: hallux
Remote MCP server URL: https://api.blvkware.dev/hallux/mcp

Cursor

{
  "mcpServers": {
    "hallux": {
      "url": "https://api.blvkware.dev/hallux/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"hallux","type":"http","url":"https://api.blvkware.dev/hallux/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

6 tools

Tools of HALLUX
	Description		Read-only	Idempotent	Open world
`hallux_account`Show remaining credits for the API key in use (or free-tier status), pricing, and where to buy credits with PayPal.	Show remaining credits for the API key in use (or free-tier status), pricing, and where to buy credits with PayPal.	No	Yes	Yes	Yes
`hallux_check`Does this identifier actually exist, and is it safe? Call before acting on any name you recalled rather than read: a package to install, a module to import, a Docker image, a GitHub Action or repo, a DOI to cite. Verdicts: exists (proceed, but read `risk`), deprecated (use `successor`), absent (not in the registry; do not proceed), phantom (absent AND models repeatedly invent it), squat (a name models invent that someone has since registered; treat as hostile), unknown (could not verify; never treat as permission). For names that exist, `risk` flags typosquats, LLM-style name conflations, brand-new packages and names registered after agents looked them up.	Does this identifier actually exist, and is it safe? Call before acting on any name you recalled rather than read: a package to install, a module to import, a Docker image, a GitHub Action or repo, a DOI to cite. Verdicts: exists (proceed, but read `risk`), deprecated (use `successor`), absent (not in the registry; do not proceed), phantom (absent AND models repeatedly invent it), squat (a name models invent that someone has since registered; treat as hostile), unknown (could not verify; never treat as permission). For names that exist, `risk` flags typosquats, LLM-style name conflations, brand-new packages and names registered after agents looked them up.	No	Yes	Yes	Yes
`hallux_check_command`Call this BEFORE running any command that installs or runs a dependency: npm/yarn/pnpm/bun install, npx, pip/uv/poetry/pipx, cargo add, go get, dotnet add package, gem install, composer require, dart pub add, docker pull/run, git clone. Language models invent plausible package names that have never existed, and attackers register those names because they can predict them (slopsquatting). Installing one runs attacker code. You cannot tell by looking at the name. Pass the command exactly as you intend to run it. Decision: ALLOW (run it), REVIEW (tell the user about the risk signals first), BLOCK (do not run; use `successor` if given, otherwise tell the user), UNVERIFIED (registry unreachable; do not treat as safe).	Call this BEFORE running any command that installs or runs a dependency: npm/yarn/pnpm/bun install, npx, pip/uv/poetry/pipx, cargo add, go get, dotnet add package, gem install, composer require, dart pub add, docker pull/run, git clone. Language models invent plausible package names that have never existed, and attackers register those names because they can predict them (slopsquatting). Installing one runs attacker code. You cannot tell by looking at the name. Pass the command exactly as you intend to run it. Decision: ALLOW (run it), REVIEW (tell the user about the risk signals first), BLOCK (do not run; use `successor` if given, otherwise tell the user), UNVERIFIED (registry unreachable; do not treat as safe).	No	Yes	Yes	Yes
`hallux_check_manifest`Call after writing or editing a dependency file and before committing or installing. Checks every dependency in one pass, including dev and optional groups, where an invented name usually arrives. Exact pinned versions are verified too. Supported: package.json, requirements.txt, pyproject.toml, Pipfile, Cargo.toml, go.mod, Gemfile, composer.json, .csproj / packages.config, pubspec.yaml, mix.exs, Dockerfile, .github/workflows/.yml.	Call after writing or editing a dependency file and before committing or installing. Checks every dependency in one pass, including dev and optional groups, where an invented name usually arrives. Exact pinned versions are verified too. Supported: package.json, requirements.txt, pyproject.toml, Pipfile, Cargo.toml, go.mod, Gemfile, composer.json, .csproj / packages.config, pubspec.yaml, mix.exs, Dockerfile, .github/workflows/.yml.	No	Yes	Yes	Yes
`hallux_report`Report identifiers a model produced that turned out not to exist. HALLUX verifies each against its registry and records only absent ones as attestations in the public hallucination ledger, which is how names graduate to `phantom` and get watched for squatting. Requires an API key.	Report identifiers a model produced that turned out not to exist. HALLUX verifies each against its registry and records only absent ones as attestations in the public hallucination ledger, which is how names graduate to `phantom` and get watched for squatting. Requires an API key.	No	No	Yes	Yes
`hallux_watch`Register identifiers for a signed webhook when their verdict changes: phantom -> squat (someone registered a name models invent) or absent -> exists. Use for a name that came back absent/phantom which the user still intends to use, or a dependency set worth monitoring. Requires an API key; costs 25 credits ($0.02) per identifier per 30 days.	Register identifiers for a signed webhook when their verdict changes: phantom -> squat (someone registered a name models invent) or absent -> exists. Use for a name that came back absent/phantom which the user still intends to use, or a dependency set worth monitoring. Requires an API key; costs 25 credits ($0.02) per identifier per 30 days.	No	No	No	Yes

Details

Registry status: Active
Published: Sep 23, 2026
Updated: Sep 23, 2026
Website: https://blvkware.dev/hallux/⁠ (opens in a new tab)
Repository: Not given
Categories: Uncategorized
GDPR: Not declared

Are you the operator? Claim this listing