showoff.build
HOL Guard is local-first runtime control for AI coding agents like Claude Code, Codex and Cursor. It holds risky shell commands, secret reads, MCP tool calls and package installs at a checkpoint on your machine until you approve or block them. Free Apache-2.0 local tool; optional paid Guard Cloud.
what it's for
- Approve or block risky shell commands from Claude Code, Codex or Cursor
- Stop AI coding agents from reading secret files without asking
- Review MCP tool calls and package installs before they run
the story
HOL Guard is local-first runtime control for AI coding agents: risky actions wait for your approve/block decision on your own machine. The local tool is free and open source under Apache-2.0; Guard Cloud is an optional paid add-on. It is not a gateway, not a network firewall and not a complete prompt-injection preventer. Install: pipx install hol-guard && hol-guard init. Maker: HOL.