# HOL Plugins Review Free plugin registry for AI coding agents: 792+ entries across Claude Code, Codex, Cursor, and MCP with trust scores and install commands. ## Editor's Score: 68/100 Capability scores 18 because the cross-runtime scope (nine ecosystems, 792 plugins) and trust scoring system are genuinely useful, but the static-only security scan is a real functional gap compared to what a developer might reasonably expect from a 'security-scored' catalog, and per-runtime depth is uneven. Ease of use scores 20 because the catalog is web-only with no account required, filters are clearly labeled, and install commands are surfaced per plugin without extra steps. Value scores 22 because the end-user product is entirely free with no paywalled features, which is hard to fault. Delivery scores 8 because the paid featured placement slots sit at the top of a catalog that also claims to rank by trust, creating a structural conflict between editorial ranking and commercial placement that is not resolved clearly for a first-time visitor. This is a documented design choice visible on the live page, not a rumor, and it directly undermines the catalog's core promise of trust-based ranking. ## Pros - Covers nine or more agent runtimes in one catalog, including Claude Code, Codex, Cursor, MCP, and OpenCode, with runtime-specific install commands on each plugin page. - Trust scores combine publisher identity, activity, and owner-verification signals rather than relying on star ratings alone, and the underlying dataset (HashgraphOnline/hol-plugin-security) is publicly pinnable. - Completely free for end users, with no account required to browse, filter, or retrieve install commands across all 792 listed plugins. ## Cons - Security scanning is explicitly static and catalog-level, not a live exploit test. HOL states this plainly, but it means a malicious plugin that passes the static scan at submission time could still pose a runtime risk. - Featured placement is sold from $200/month with slot counts shown on the catalog page itself, meaning the top of the ranked list is partly a paid position. The line between editorial ranking and sponsored placement is not always clear to a first-time visitor. - The catalog depth varies significantly by runtime. With 792 total plugins spread across nine or more ecosystems, less popular runtimes like Kimi Code or Antigravity CLI may have thin coverage compared to Claude Code or MCP. ## Pricing Freemium. A free tier is available. - Free (end users): Free - Featured placement (publishers): $200/mo Pricing reflects what we saw at the time of review (2026-10). Confirm current pricing on the official site. Category: AI Coding & Dev Tools (https://aitoolseekers.com/category/ai-coding-dev-tools) Official site: https://hol.org/plugins Last verified by a human: 2026-10-14 Reviewed by a human at AI Tool Seekers, a hand-reviewed AI tools directory. Every listed tool is verified by a person before publishing. Scores are editorial opinions from a fixed rubric (capability, ease of use, value, delivery on promise) and cannot be bought; there is no pay-to-rank. Directory: https://aitoolseekers.com This review: https://aitoolseekers.com/tools/hol-plugins Methodology: https://aitoolseekers.com/how-verification-works ## Verdict HOL Plugins is the most practical single place for a developer to compare and install plugins across nine or more agent runtimes without bouncing between ecosystem-specific stores. The security scanning is static catalog-level scoring, not a live exploit test, so it narrows risk rather than eliminating it, and the catalog's depth varies noticeably by ecosystem. Developers who only use Cursor and want a polished, opinionated experience should look at Cursor's own extension marketplace instead. Best for: Developers working across multiple AI coding agent runtimes who need one place to vet and install plugins. Not for: Single-runtime Cursor users who prefer a curated, first-party extension store. ## Overview HOL Plugins is a ranked, searchable registry of plugins for AI coding agents, sitting inside the broader HOL ecosystem alongside HOL Guard (the agent firewall) and the HOL Registry broker. The directory currently indexes 792 plugins spanning Claude Code, Codex, Grok, Kimi Code, DeepSeek Use, Antigravity CLI, MCP servers, Cursor, and OpenCode. That cross-runtime scope is the real differentiator: no individual agent's own store covers more than its own ecosystem, while HOL Plugins lets you filter, compare, and get runtime-specific install commands from one page. Every listed plugin carries a trust score built from publisher identity, activity, and owner-verification signals, plus a static security scan for exposed secrets and provenance issues. HOL is transparent that this is catalog-level scoring, not a live exploit test, and the machine-readable dataset (HashgraphOnline/hol-plugin-security) is publicly pinnable for teams that want to audit it themselves. That honesty is notable in a space where many directories oversell their safety signals. The directory is free for anyone browsing or installing. Plugin publishers can pay for featured placement starting at $200/month, which is how HOL monetizes the catalog. That commercial layer is visible on the page itself, with slot counts shown openly. Whether that transparency reassures or concerns you depends on how much weight you put on editorial independence versus disclosed sponsorship. ## Who should use it A developer running Claude Code for one project, Codex for another, and an MCP server for a third gets the most from HOL Plugins. Instead of checking three separate stores and manually comparing trust signals, they can filter by runtime, sort by trust score, and pull the exact install command for each target environment from one page. The 792-plugin catalog and 1,264 filterable tags mean there is usually something relevant to find, even for newer runtimes like OpenCode or Antigravity CLI. Plugin authors and open-source maintainers who want their work discovered across ecosystems also benefit, since a single submission surfaces the plugin to users of multiple runtimes. That said, developers who work exclusively inside Cursor and want a polished, first-party extension experience should use Cursor's own marketplace directly. Cursor (in our directory) is the better choice for that single-runtime workflow, and its native store has tighter integration with the editor's own update and permission model. ## FAQ Q: Is HOL Plugins free to use? A: Yes. Browsing, filtering, and retrieving install commands for any of the 792 listed plugins is free with no account required. The only paid tier is a featured placement slot for plugin publishers, starting at $200/month. Q: How many plugins are in the catalog and which runtimes are covered? A: The catalog lists 792 plugins as of October 2026, spanning Claude Code, Codex, Grok, Kimi Code, DeepSeek Use, Antigravity CLI, MCP servers, Cursor, and OpenCode. Q: Does the security scan guarantee a plugin is safe to install? A: No, and HOL says so explicitly. The current scanner is a static catalog-level scan, not a live exploit test. It checks for exposed secrets and provenance issues at submission time but cannot catch runtime exploits introduced after listing. Q: What is a trust score and how is it calculated? A: Each plugin's trust score combines publisher identity, activity signals, and owner-verification status. It is not based on star ratings or download counts. The underlying dataset is publicly available at HashgraphOnline/hol-plugin-security. Q: Is HOL Plugins the same as HOL Guard? A: No. HOL Plugins is the plugin discovery catalog. HOL Guard is a separate agent firewall product that intercepts shell commands and file access before they run. Guard has its own pricing tiers: Free, Solo at $4.99/month, Pro at $15/month, and Team at $30/seat/month. Q: Can I submit my own plugin to the catalog? A: Yes. The page includes a Submit Plugin link. Owner-verified listings receive a badge visible to all users browsing the catalog.