Open-source local guard for AI coding agents: asks, allows or blocks shell commands, secret reads, MCP tool calls and package installs.

Description

When Claude Code, Codex, Cursor, Gemini CLI or another AI coding agent wants to run a shell command, read a secrets file, call an MCP tool or install a package, HOL Guard steps in first. It is an Apache-2.0 open-source runtime control layer that runs locally on the developer's machine, matches each action against your policy and allows it, blocks it or asks you. Every decision lands in a local history you can review later. Get started with pipx install hol-guard && hol-guard init. Guard Cloud is an optional paid, hosted add-on for teams that want shared policy and decision history. HOL Guard is not a gateway or a network firewall, and it is not a complete defense against prompt injection.