# HOL Guard

> Local-first runtime firewall that intercepts AI coding agent tool calls before they execute

**Website:** https://hol.org/guard

## Overview

HOL Guard is a local-first runtime firewall for AI coding agents. It intercepts tool calls (shell, secrets, MCP, package installs) before they execute. Apache-2.0. Install: pipx install hol-guard && hol-guard init. Scan is not a safety guarantee. Maker: HOL. Free.

## Features

- Intercepts shell commands before they execute
- Guards secrets, MCP calls and package installs
- Local-first and open source under Apache-2.0

## Best For

- Developers

## Details

HOL Guard is a local-first runtime firewall for AI coding agents. It intercepts tool calls (shell, secrets, MCP, package installs) before they execute, so risky actions are surfaced for approval instead of running silently. Apache-2.0 licensed. Install: pipx install hol-guard && hol-guard init. Scan is not a safety guarantee. Maker: HOL. Free.