Alternatives to HOL Guard
HOL Guard is a MCP server by hashgraph-online: Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. If it doesn't fit your setup, these 12 MCP servers cover similar ground. They are ordered by how closely they match HOL Guard and by our rank, which weighs adoption, freshness and documentation; money never changes the order. Shellward leads the list (most GitHub stars here (139); active in the last 30 days). 1 of them is published by the company behind the product. Each entry shows data reasons to switch, and you can open a side-by-side comparison with HOL Guard.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
HOL Guard
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
12 alternatives
Ordered by how closely each matches HOL Guard (shared product, category or stated alternative) and by rank.
- 1Shellward
jnMetaCode
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
- Most GitHub stars here (139)
- Active in the last 30 days
★ 139Last active Sep 28, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 2MCP Observatory
KryptosAI
MCP security scanner.
- Active in the last 30 days
- Open source (MIT)
★ 135↓ 515/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 3Agent Security Scanner MCP
sinewaveai
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
- Open source (MIT)
★ 124Last active Sep 2, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
BFreshness: B–Security: not graded yet - 4Tool Poisoning Scanner
GuardBee
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
- Most weekly downloads here (1.1K)
- Active in the last 30 days
★ 1↓ 1.1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5Prompt Injection Scanner
GuardBee
Scans RAG content/scraped pages for indirect prompt injection
- Active in the last 30 days
- Open source (MIT)
★ 1↓ 1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 6CodeInspectus
Synvoya
Local-first MCP security scanner and CLI for AI-generated applications.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 49Last active Oct 4, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7mcpm
getmcpm
MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.
- Active in the last 30 days
- Open source (MIT)
★ 3↓ 448/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 8mcp-audit
saagpatel
Scan, enumerate, and risk-score every MCP server configured on your machine.
- Active in the last 30 days
- Open source (MIT)
★ 4↓ 122/wkLast active Oct 14, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 9Mastyf AI
mastyf-ai
Runtime proxy for MCP security, cost governance & audit
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 21↓ 35/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 10AIShield Security Scanner
lm203688
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
- Active in the last 30 days
- Open source (MIT)
★ 2Last active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 11Safeprompt
safeprompt.devOfficial
Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.
- Published by the vendor
★ 2Last active Oct 6, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 12SEO Webmaster MCP
JvnnDev
Audit any public URL for SEO.
- Active in the last 30 days
- Open source (MIT)
★ 2Last active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet