MCP.Market

HOL Guard MCP server

by hashgraph-online·io.github.hashgraph-online/hol-guard·v3.58.0·898 stars
No reviews yet

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

A86/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A86/100

not scanned yet

Adoption
Established

898 stars10k downloads/wk

Reviews

Write one

Nobody has reviewed HOL Guard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

HOL Guard tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How HOL Guard compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
86/100
higher than 75% of 4,460 AI and agents servers
GitHub stars
898
more than 95% of 2,711 AI and agents servers
Downloads a week
10,151
more than 95% of 1,538 AI and agents servers with a package

Release history: 15 versions in the registry since 2026-09-17, latest 2026-10-27, typically one every 2 days.

Install HOL Guard in Claude Code, Cursor or VS Code

claude mcp add hol-guard -- uvx hol-guard
Add to Cursor

What the publisher says

From the HOL Guard repository's README, as published. We do not edit it. Read it on GitHub

HOL Guard: Open-Source Antivirus for AI Agents

<!-- mcp-name: io.github.hashgraph-online/hol-guard -->

HOL Guard reviews agent actions before they run: shell commands, file access, package installs, and MCP tool calls. It detects secret exposure, destructive operations, prompt injection, and supply-chain risks, then allows, blocks, or requests approval according to your policy.

Run it locally without an account. Use the CLI and local dashboard to manage protection, resolve approvals, and inspect decision history. Optional Guard Cloud adds shared history, team policy, and fleet management.

Get started · Supported agents · Plugin scanner · Documentation · Contribute an extension · Development

Install HOL Guard

Requires Python 3.10 or newer and pipx.

pipx install hol-guard
hol-guard init

The first-run wizard discovers supported agents and walks you through protection setup. It asks before each setup change, including opening the dashboard, installing agent integrations, and connecting optional cloud services.

Check your installation:

hol-guard --version
hol-guard status

To update an existing installation:

hol-guard update

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-09-19restoreC → Ascore 86: eval / new Function used
  • 2026-09-19restoreD → Cscore 60: Whole environment serialized (possible credential exfil); Network call to a raw IP address; eval / new Function used

HOL Guard: common questions

Is HOL Guard MCP server safe?
Yes, by our scan: it is graded A (86/100). Read the HOL Guard safety report
How do I install HOL Guard?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does HOL Guard need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is HOL Guard maintained?
The last commit was 20 days ago (2026-10-15). The latest release is v3.58.0.
What can I use instead of HOL Guard?
Servers from other publishers that do the same job: OpenWorkProof MCP server, Basic Memory MCP server and Agent-Native Chat MCP server.
How does HOL Guard compare with other AI and agents MCP servers?
safety score 86/100 (higher than 75% of 4,460 AI and agents servers); github stars 898 (more than 95% of 2,711 AI and agents servers); downloads a week 10,151 (more than 95% of 1,538 AI and agents servers with a package). Full comparison.

Alternatives to HOL Guard

Same job from other publishers: the closest match first, then the best rated.

  • OpenWorkProof
    Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.
    A
  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    B
  • Agent-Native Chat
    Minimal chat-first app with durable threads, actions, and the app-agent loop
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B
  • Emilia Protocol
    Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
    B
HOL Guard vs OpenWorkProof