HOL Guard
Local-first runtime control for AI coding agents: you approve risky shell, secret, MCP and install actions.
About HOL Guard
Letting an AI coding agent drive your terminal is fast, but you still want a say in what it touches. HOL Guard is local-first runtime control that runs on your own machine alongside Claude Code, Codex and Cursor. Routine work keeps flowing; risky shell commands, secret reads, MCP calls and package installs are held until you approve or deny them, based on the policy you set. Local HOL Guard is free and open source under Apache-2.0, and Guard Cloud is an optional paid add-on. Get started with: pipx install hol-guard && hol-guard init. HOL Guard is not a gateway or a network firewall, and it does not claim to stop every prompt injection. Made by HOL.
Key features
- Runs locally beside Claude Code, Codex and Cursor
- Holds risky shell commands for approval
- Pauses secret reads and MCP calls per your policy
- Checks package installs before they run
- Apache-2.0 open source
Know a tool that should be here?
Submit any AI tool — yours or one you love. Free listing, no link demands, reviewed within 7 days.
Submit a tool