HOL Plugins
Free plugin registry for AI coding agents: 792+ entries across Claude Code, Codex, Cursor, and MCP with trust scores and install commands.
Are you the maker? Claim this listing to keep info, pricing and screenshots current. Verified via your tool's domain email.
HOL Plugins is the most practical single place for a developer to compare and install plugins across nine or more agent runtimes without bouncing between ecosystem-specific stores. The security scanning is static catalog-level scoring, not a live exploit test, so it narrows risk rather than eliminating it, and the catalog's depth varies noticeably by ecosystem. Developers who only use Cursor and want a polished, opinionated experience should look at Cursor's own extension marketplace instead.
What is HOL Plugins?
HOL Plugins indexes skills, MCP servers, and apps for major coding-agent ecosystems. Filter by runtime, compare trust and publisher verification, and get install guidance per plugin. Free. A scan is not a safety guarantee. Maker: HOL.
How we scored HOL Plugins
Capability scores 18 because the cross-runtime scope (nine ecosystems, 792 plugins) and trust scoring system are genuinely useful, but the static-only security scan is a real functional gap compared to what a developer might reasonably expect from a 'security-scored' catalog, and per-runtime depth is uneven. Ease of use scores 20 because the catalog is web-only with no account required, filters are clearly labeled, and install commands are surfaced per plugin without extra steps. Value scores 22 because the end-user product is entirely free with no paywalled features, which is hard to fault. Delivery scores 8 because the paid featured placement slots sit at the top of a catalog that also claims to rank by trust, creating a structural conflict between editorial ranking and commercial placement that is not resolved clearly for a first-time visitor. This is a documented design choice visible on the live page, not a rumor, and it directly undermines the catalog's core promise of trust-based ranking.
Pros and cons
What we liked
- Covers nine or more agent runtimes in one catalog, including Claude Code, Codex, Cursor, MCP, and OpenCode, with runtime-specific install commands on each plugin page.
- Trust scores combine publisher identity, activity, and owner-verification signals rather than relying on star ratings alone, and the underlying dataset (HashgraphOnline/hol-plugin-security) is publicly pinnable.
- Completely free for end users, with no account required to browse, filter, or retrieve install commands across all 792 listed plugins.
Where it falls short
- Security scanning is explicitly static and catalog-level, not a live exploit test. HOL states this plainly, but it means a malicious plugin that passes the static scan at submission time could still pose a runtime risk.
- Featured placement is sold from $200/month with slot counts shown on the catalog page itself, meaning the top of the ranked list is partly a paid position. The line between editorial ranking and sponsored placement is not always clear to a first-time visitor.
- The catalog depth varies significantly by runtime. With 792 total plugins spread across nine or more ecosystems, less popular runtimes like Kimi Code or Antigravity CLI may have thin coverage compared to Claude Code or MCP.
Key features
HOL Plugins pricing
The plugin directory is entirely free to browse, filter, and use. Featured placement slots for plugin publishers start at $200/month. No paid tiers exist for end users browsing or installing plugins.
| Plan | Price | Who it is for |
|---|---|---|
| Free (end users) | Free | Full access to browse, filter, and retrieve install commands for all 792 listed plugins. No account required. All trust scores, security scan results, and owner-verification badges are visible. |
| Featured placement (publishers) | $200/mo | A featured slot at the top of the plugin catalog for plugin publishers. The page shows 3 of 4 slots open at time of review. This is a publisher-facing commercial tier, not an end-user subscription. |
Pricing reflects what we saw at time of review (2026-10). Always confirm current pricing on the tool's own site.
Who should use HOL Plugins?
A developer running Claude Code for one project, Codex for another, and an MCP server for a third gets the most from HOL Plugins. Instead of checking three separate stores and manually comparing trust signals, they can filter by runtime, sort by trust score, and pull the exact install command for each target environment from one page. The 792-plugin catalog and 1,264 filterable tags mean there is usually something relevant to find, even for newer runtimes like OpenCode or Antigravity CLI.
Plugin authors and open-source maintainers who want their work discovered across ecosystems also benefit, since a single submission surfaces the plugin to users of multiple runtimes. That said, developers who work exclusively inside Cursor and want a polished, first-party extension experience should use Cursor's own marketplace directly. Cursor (in our directory) is the better choice for that single-runtime workflow, and its native store has tighter integration with the editor's own update and permission model.
Skip it if: Single-runtime Cursor users who prefer a curated, first-party extension store.
HOL Plugins alternatives
Frequently asked questions
Is HOL Plugins free to use?+
Yes. Browsing, filtering, and retrieving install commands for any of the 792 listed plugins is free with no account required. The only paid tier is a featured placement slot for plugin publishers, starting at $200/month.
How many plugins are in the catalog and which runtimes are covered?+
The catalog lists 792 plugins as of October 2026, spanning Claude Code, Codex, Grok, Kimi Code, DeepSeek Use, Antigravity CLI, MCP servers, Cursor, and OpenCode.
Does the security scan guarantee a plugin is safe to install?+
No, and HOL says so explicitly. The current scanner is a static catalog-level scan, not a live exploit test. It checks for exposed secrets and provenance issues at submission time but cannot catch runtime exploits introduced after listing.
What is a trust score and how is it calculated?+
Each plugin's trust score combines publisher identity, activity signals, and owner-verification status. It is not based on star ratings or download counts. The underlying dataset is publicly available at HashgraphOnline/hol-plugin-security.
Is HOL Plugins the same as HOL Guard?+
No. HOL Plugins is the plugin discovery catalog. HOL Guard is a separate agent firewall product that intercepts shell commands and file access before they run. Guard has its own pricing tiers: Free, Solo at $4.99/month, Pro at $15/month, and Team at $30/seat/month.
Can I submit my own plugin to the catalog?+
Yes. The page includes a Submit Plugin link. Owner-verified listings receive a badge visible to all users browsing the catalog.
More AI Coding & Dev Tools
See all categoriesGet your tool listed on 300+ directories.
One listing here is a strong start. But the founders who get discovered everywhere are listed everywhere. Our sister site, Free AI Directories, submits your tool to 300+ AI directories for you, every single one by hand, by a real person.
It is a one-time payment of $49, no subscription, and you can follow along as the submissions land. Prefer the slow route? The same site keeps a free list of 450+ directories you can work through yourself.
Get my tool listed on 300+ directoriesOne-time payment, no subscription · 100% human submissions · Free list of 450+ directories included.