Hejdar Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hejdar Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Hejdar — runtime policy enforcement for AI agents.
This server exposes hejdar_evaluate as an MCP tool. Any MCP-compatible agent (Claude, ChatGPT, Cursor, custom) can call it to check whether an action is permitted by organizational policy before executing it.
The MCP server is a thin wrapper around the Hejdar API (POST /v1/evaluate). It contains no policy logic — all decisions come from your Hejdar organization's configured policies.
pip install hejdar-mcpOr run directly with uvx:
uvx hejdar-mcpSign up at app.hejdar.com and create an API key in Settings → API Keys.
#### Claude Desktop
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"hejdar": {
"command": "uvx",
"args": ["hejdar-mcp"],
"env": {
"HEJDAR_API_KEY": "hejdar_sk_your_key_here"
}
}
}
}#### Claude Code
Add to your Claude Code MCP settings:
{
"mcpServers": {
"hejdar": {
"command": "uvx",
"args": ["hejdar-mcp"],
"env": {
"HEJDAR_API_KEY": "hejdar_sk_your_key_here"
}
}
}
}#### Direct (stdio)
export HEJDAR_API_KEY=hejdar_sk_your_key_here
hejdar-mcppip install hejdar-mcp or uvx hejdar-mcphejdar_evaluateEvaluate an agent action against your organization's security policies.
Input:
| Parameter | Type | Required | Description |
|---|---|---|---|
action_type | string | Yes | READ, WRITE, DELETE, TRANSFER, or EXECUTE (UPDATE is accepted as an alias for WRITE, matching the Hejdar API) |
resource | string | Yes | Target resource, e.g. customer_database |
agent_name | string | No | Name of the calling agent, e.g. hr-assistant |
context | object | No | Free-form metadata (department, user_id, reason, etc.) |
Output:
{
"decision": "DENY",
"policy_id": "pol_abc123",
"reason": "Deletion of customer data requires manager approval",
"risk_level": "HIGH"
}decision is one of: ALLOW, DENY, WOULD_DENY.
For best results, add this to your agent's system prompt:
You have access to the hejdar_evaluate tool. Before performing any action
that reads, writes, deletes, transfers data, or executes commands on
external systems, you MUST call hejdar_evaluate first.
If hejdar_evaluate returns DENY or WOULD_DENY, do NOT proceed with the
action. Instead, inform the user that the action was blocked by policy
and include the reason provided.| Variable | Required | Default | Description |
|---|---|---|---|
HEJDAR_API_KEY | Yes | — | Your Hejdar API key |
HEJDAR_API_URL | No | https://api.hejdar.com | API base URL (for self-hosted) |
git clone https://github.com/ARKALDA/hejdar-mcp.git
cd hejdar-mcp
pip install -e ".[dev]"
pytestMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.