Security & Testing

blvkware.dev

An MCP server that validates dependency identifiers and manifests before installation or commit, watches identifiers for verdict changes, and helps prevent hallucinated or malicious packages.

1 endpoint4 known toolsFirst detected September 23, 2026Last detected September 23, 2026

ENDPOINT 1

https://api.blvkware.dev/hallux/mcp

No auth detected

MCP server metadata

Name: hallux
Version: 0.1.0

Capabilities

resourcestools

Server instructions

HALLUX tells you whether an identifier actually exists before you act on it. Call hallux_check_command before running any install command. Call hallux_check_manifest after editing a dependency file. These are read-only lookups and cost nothing on the free tier. A `phantom` or `squat` verdict means do not proceed. `unknown` means the check could not be completed and must never be treated as permission.

Known tools 4

hallux_check_command

Call this BEFORE running any command that installs a dependency: npm, yarn, pnpm, bun, pip, uv, poetry, pipx, cargo, go get, dotnet add package, nuget.

Potential side effects

hallux_check

Does this identifier actually exist?

Inferred read-only

hallux_check_manifest

Call this after writing or editing a dependency file, and before committing it.

Inferred read-only

hallux_watch

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.hallux]
url = "https://api.blvkware.dev/hallux/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "hallux": {
      "type": "http",
      "url": "https://api.blvkware.dev/hallux/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: hallux
Remote MCP URL: https://api.blvkware.dev/hallux/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "hallux": {
      "url": "https://api.blvkware.dev/hallux/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "hallux": {
      "type": "http",
      "url": "https://api.blvkware.dev/hallux/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "hallux",
  "transport": "streamable-http",
  "url": "https://api.blvkware.dev/hallux/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for blvkware.dev was fetched 2026-09-24T04:57:02.534Z.

Trust status Neutral

blvkware.dev is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.