菜单
Manage the HAL MCP server lifecycle and AI client configuration. Use when the user asks to start MCP, configure an AI client (Copilot, Claude), check MCP health, or understand the MCP transport options.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deploy the local Terraform demo environment in hal. Use to provision and initialize Terraform lab resources.
Route Terraform lab requests to deploy, destroy, inspect status, and manage workspace automation in hal.
Deploy local Vault in hal. Use when the user asks to start Vault, initialize the local control plane, or recover from Vault being offline.
Route user intent to the right Vault lab skill in hal, including CE versus Enterprise constraints, observability wiring, and full-stack scenario guidance.
Deploy, verify, and troubleshoot the Vault JWT auth lab in hal. Use this skill when the user asks to enable JWT auth, configure CI/CD authentication with Vault, debug bound claims, test GitLab or pipeline logins, or reset the JWT demo. Triggers include "enable jwt", "configure jwt", "gitlab vault auth", "pipeline auth", "bound claims", and "hal vault jwt".
Deploy, verify, and troubleshoot the Vault OIDC lab in hal. Use this skill when the user asks to enable OIDC, set up human SSO, debug browser login redirects, inspect Authentik-backed roles, reset the OIDC demo, or configure SCIM provisioning. Triggers include "enable oidc", "Vault SSO", "Authentik", "OIDC callback", "configure oidc", "hal vault oidc", "enable scim", and "vault scim".
| name | mcp |
| description | Manage the HAL MCP server lifecycle and AI client configuration. Use when the user asks to start MCP, configure an AI client (Copilot, Claude), check MCP health, or understand the MCP transport options. |
The hal mcp namespace manages the HAL MCP server — the runtime bridge between AI clients and the live HAL lab environment.
| Mode | Command | Protocol |
|---|---|---|
| stdio (local/dev) | hal mcp serve | 2024-11-05 |
| streamable-HTTP (container) | hal mcp serve --transport streamable-http --http-host 0.0.0.0 --http-port 8080 --http-path /mcp | 2025-03-26 |
hal mcp create # scaffold AI client config (stdio, local dev)
hal mcp create --http # pull ghcr.io/hashimiche/hal-mcp:latest and run container
hal mcp serve # start MCP server in stdio mode (used by HAL Plus)
hal mcp status # check MCP readiness
hal mcp delete # remove MCP managed artifacts
hal mcp policy # print runtime answer/tool policy (read-only)
--http — run the MCP server as a streamable-HTTP container instead of stdio--http-tag <tag> — override the pulled image tag (default latest)hal-mcp container does not mount the host container engine socket and does not run as root.hal_status_baseline) return engine-unavailable in rootless Podman — this is expected.runtime unknown, not product down.hal mcp create configures the AI client config scaffold; it does not start a persistent server process unless --http is used.hal-net alongside HAL Plus.hal mcp serve (stdio) internally — no manual hal mcp serve needed when using HAL Plus.hal mcp create to generate the client config.