Local-first runtime control for AI coding agents. Runs beside Claude Code, Codex and Cursor and holds risky shell commands, secret reads, MCP calls and package installs for your approval.
Verdict: HOL Guard is best for developers who let Claude Code, Codex or Cursor run commands on their machine.
Local-first runtime control for AI coding agents. Runs beside Claude Code, Codex and Cursor and holds risky shell commands, secret reads, MCP calls and package installs for your approval. Source
Best for
Developers who let Claude Code, Codex or Cursor run commands on their machine
Pausing destructive commands, secret reads and package installs for approval
Keeping a local audit trail of AI agent actions
Not for
Building or hosting AI agents
Teams that need shared policy without a paid Team plan
Strengths & trade-offs
Strengths
Local protection works offline without an account
Apache-2.0 source with adapters for many coding agents
Reviews shell commands, file access, MCP calls and package installs before they run