HOL Guard — Claude Code MCP server: what it does, how to install
A local-first security layer for AI agents. It intercepts terminal commands, file reads, and MCP tool calls to block risky actions before execution.
claude mcp add hol-guard -- uvx hol-guardWhat HOL Guard does
HOL Guard intercepts AI agent operations before they execute on your operating system. It monitors tool calls, terminal commands, dependency installations, and access to private files. If it spots credential exposure, destructive commands, or prompt injections, it can halt the action or route it to a local approval queue.
Everything runs locally on your machine without requiring an account. You can inspect pending approvals, track action receipts, and audit installed tools directly through the CLI. Running the tool requires Python 3.10 or newer, so uvx fails immediately if the host lacks a supported Python environment.
What it helps with
- intercept destructive shell commands before execution
- stop sensitive credentials from leaking into prompts
- check package installations for supply-chain risks
- require manual approval for risky MCP tool calls
Example prompts for the agent
- Check the list of pending approvals in HOL Guard.
- Scan workspace dependencies for supply-chain security risks.
- Audit the current MCP tool configurations for exposed secrets.
How to install HOL Guard
Platform CLI
claude mcp add hol-guard -- uvx hol-guarduvx runs the command named after the package; if the README names another one, use uvx --from hol-guard <command>
Platform CLI
codex mcp add hol-guard -- uvx hol-guarduvx runs the command named after the package; if the README names another one, use uvx --from hol-guard <command>
Config file
{
"mcpServers": {
"hol-guard": {
"command": "uvx",
"args": [
"hol-guard"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from hol-guard <command>
Config file
{
"servers": {
"hol-guard": {
"type": "stdio",
"command": "uvx",
"args": [
"hol-guard"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from hol-guard <command>
Platform CLI
gemini mcp add hol-guard uvx hol-guarduvx runs the command named after the package; if the README names another one, use uvx --from hol-guard <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about HOL Guard
How to install HOL Guard in Claude Code?
Run claude mcp add hol-guard -- uvx hol-guard. You will need uvx available alongside Python 3.10 or newer.
Does HOL Guard require an account?
No, it operates entirely local-first without an account. All approval requests and action receipts stay stored on your machine.
What agent actions does HOL Guard intercept?
It reviews shell execution, file reads, package manager installs, and MCP tool calls to block destructive commands and leaked secrets.
