{"name":"io.github.hashgraph-online/hol-guard","slug":"hashgraph-online-hol-guard","title":"HOL Guard","description":"Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.","url":"https://mcp.market/server/hashgraph-online-hol-guard","rating":null,"grade":"A","score":86,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":45,"stars":630,"forks":74,"downloads_week":null,"last_push_at":"2026-09-19T21:24:21.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/hashgraph-online/hol-guard","website":"https://hol.org/guard","version":"3.0.192","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"hol-guard","version":"3.0.192","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"},{"value":"serve","type":"positional"},{"value":"--stdio","type":"positional"}]}],"tools":[{"name":"create_policy","description":"","write_action":true,"price_micros":0,"input_schema":null},{"name":"fetch","description":"","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_guard_status","description":"","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_policy_creation","description":"","write_action":false,"price_micros":0,"input_schema":null},{"name":"search","description":"","write_action":false,"price_micros":0,"input_schema":null},{"name":"validate_policy","description":"","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":86,"grade":"A","scanned_at":"2026-09-19T21:32:24.532Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-19T21:32:24.497Z","components":{"code":{"score":20,"max":25,"notes":["1500 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"hol_guard-3.0.192/dashboard/src/apps/app-catalog.ts: …key: \"encoded_execution\", example: \"eval(atob(...)) or base64-decoded shell paylo…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"hol-guard","version":"3.0.192","found":true,"license":"Apache-2.0","dependencyCount":21,"publishedAt":"2026-09-19T14:10:38.202486Z","repositoryUrl":"https://github.com/hashgraph-online/hol-guard"}],"repo":{"found":true,"owner":"hashgraph-online","repo":"hol-guard","archived":false,"pushedAt":"2026-09-19T21:24:21Z","stars":630,"forks":74,"openIssues":100,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/160371962?v=4","ownerCreatedAt":"2024-02-18T02:34:33Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/160371962?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":630,"forks":74,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-09-19T21:24:21.000Z","score":45}}}},"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"A","reason":"score 86: eval / new Function used","createdAt":"2026-09-19T21:32:25.181Z"},{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 60: Whole environment serialized (possible credential exfil); Network call to a raw IP address; eval / new Function used","createdAt":"2026-09-19T00:27:29.564Z"}],"reviews":[]}