HOL Guard MCP server

by hashgraph-online·io.github.hashgraph-online/hol-guard·v3.0.192

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

A86/100grade A

What users say

No reviews yet

Safety scan

A86/100

Adoption

Established

630 stars

Reviews

Nobody has reviewed HOL Guard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium

Code scan1500 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

mediumeval / new Function usedexec.eval

hol_guard-3.0.192/dashboard/src/apps/app-catalog.ts: …key: "encoded_execution", example: "eval(atob(...)) or base64-decoded shell paylo…

Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

2026-09-19restoreC → Ascore 86: eval / new Function used
2026-09-19restoreD → Cscore 60: Whole environment serialized (possible credential exfil); Network call to a raw IP address; eval / new Function used

claude mcp add hol-guard -- uvx hol-guard

Is HOL Guard MCP server safe?: Yes, by our scan: it is graded A (86/100). Read the HOL Guard safety report
How do I install HOL Guard?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does HOL Guard need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is HOL Guard maintained?: The last commit was in the last day (2026-09-19). The latest release is v3.0.192.
What can I use instead of HOL Guard?: Servers from other publishers that do the same job: mcpm MCP server, Agent-Native Chat MCP server and CHAP Coordinator MCP server. Compare all HOL Guard alternatives.

Same job from other publishers: the closest match first, then the best rated.

mcpm
MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.
not reviewed
Growing
B
Agent-Native Chat
Minimal chat-first app with durable threads, actions, and the app-agent loop
not reviewed
Established
A
CHAP Coordinator
Auditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations.
not reviewed
Established
A
haiku.rag
Local-first agentic RAG with citations - hybrid search, reranking, multimodal document retrieval
not reviewed
Established
A
Dvalincode
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
not reviewed
Growing
A