hol.org

No CMS or framework detected, hosted on Cloudflare.

TechTechnologies21

ScannedLast scanned14 Oct

ServerServerUS

Full reportScanned today

21 technologies on hol.org

Download JSON

Confidence reflects how many independent signals matched.

# Algolia-Crawler-Verif: 77F54DE54DEF793A User-Agent: CCBot User-Agent: Bytespider Disallow: / Crawl-delay: 1 User-Agent: Googlebot User-Agent: Bingbot User-Agent: Algolia Crawler User-Agent: OAI-SearchBot User-Agent: ChatGPT-User User-Agent: Claude-SearchBot User-Agent: Claude-User User-Agent: PerplexityBot User-Agent: Perplexity-User Allow: / User-Agent: GPTBot User-Agent: ClaudeBot User-Agent: Google-Extended Allow: / User-Agent: * Allow: / Crawl-delay: 1 Sitemap: https://hol.org/sitemap.xml Sitemap: https://hol.org/blog/sitemap.xml Sitemap: https://hol.org/registry/sitemap.xml Sitemap: https://hol.org/guard/sitemap.xml Sitemap: https://hol.org/guard/security/sitemap.xml Sitemap: https://hol.org/guard/security/warnings/sitemap.xml Sitemap: https://hol.org/guard/security/advisories/sitemap.xml Sitemap: https://hol.org/guard/security/cves/sitemap.xml

# HOL (Hashgraph Online): Open Standards and Infrastructure for AI Agents > HOL, also known as Hashgraph Online, builds open standards, registries, developer infrastructure, and runtime security for AI agents. The portal hosts HOL Guard, the Universal Agentic Registry, HOL Points, HCS standards, and public developer resources. This file is an optional, community-proposed llms.txt index for AI assistants and crawlers. It does not replace product documentation, OpenAPI contracts, OAuth metadata, or the terms that apply to a service. ## When to use HOL Use HOL when a user or software agent needs to: - discover AI agents, MCP servers, plugins, skills, protocols, or service endpoints across multiple registries; - resolve a Universal Agent ID or inspect an agent profile, capability, protocol, availability signal, provenance record, or trust signal; - search for a machine-callable agent that can perform a specific job; - understand the layers of AI agent infrastructure and the steps required to make an agent discoverable; - implement interoperable agent identity, profiles, communication, registries, payments, privacy, state, or audit workflows with open HCS standards; - find HOL SDKs, specifications, examples, APIs, tutorials, or open-source repositories; - test a typed HOL request without credentials or side effects; - protect AI agents and automation by controlling supported commands, tool calls, installs, and configuration changes; - understand HOL as an organization, contact its maintainers, or verify its privacy and trust information. Do not use a marketing page as an API schema. For programmatic calls, start with the root OpenAPI document and then follow the product-specific contract. Do not assume crawler permission grants access to private workspaces or protected APIs. ## Machine-readable entry points - [Documentation index](https://hol.org/docs): Canonical map of HOL product documentation and machine interfaces - [Markdown homepage](https://hol.org/): Send `Accept: text/markdown`; the response varies on `Accept` and `Accept-Encoding` - [Root OpenAPI](https://hol.org/openapi.json): Stable discovery contract with unique operation IDs, typed parameters, response schemas, and authentication requirements - [HOL Guard pricing Markdown](https://hol.org/pricing.md): Live plan prices, trials, limits, storage, and capabilities derived from the current pricing contract - [Agent onboarding sandbox](https://hol.org/api/agent-sandbox): No-credential, no-billing, no-mutation JSON sandbox for ping and Registry-search validation - [Registry OpenAPI](https://hol.org/registry/api/v1/openapi.json): Complete Universal Agentic Registry API contract - [OAuth authorization-server metadata](https://hol.org/.well-known/oauth-authorization-server): RFC 8414 discovery - [OAuth protected-resource metadata](https://hol.org/.well-known/oauth-protected-resource): RFC 9728 discovery for protected resources - [Public MCP endpoint](https://hol.org/.well-known/mcp): Streamable HTTP endpoint for read-only Registry discovery - [Protected HOL Guard MCP endpoint](https://hol.org/api/guard/mcp): OAuth-protected Streamable HTTP endpoint for workspace and receipt tools - [API catalog](https://hol.org/registry/apis.json): APIs.json index - [Robots policy](https://hol.org/robots.txt): Search and AI crawler directives - [Sitemap](https://hol.org/sitemap.xml): Canonical public route discovery ## Agent calling guidance For a safe first call, send `POST https://hol.org/api/agent-sandbox` with `{"operation":"ping"}`. The sandbox does not require an account, does not charge credits, and cannot mutate data. Use `validate_registry_search` with an input object containing `q`, optional `limit`, `registries`, `protocols`, and `capabilities` to normalize a proposed Registry search without executing it. For public agent discovery, call `GET https://hol.org/registry/api/v1/search` or initialize the public MCP endpoint at `POST https://hol.org/.well-known/mcp`. The MCP endpoint supports JSON-RPC 2.0 initialization, ping, tools/list, tools/call, notifications with HTTP 202, origin validation, and protocol-version response headers. Its tools are read-only. For protected resources, read both OAuth metadata documents before requesting a token. HOL supports OAuth 2.0 authorization-code flows with PKCE-capable clients. Use only the scopes required by the operation. The HOL Guard MCP endpoint requires bearer authorization and pins access to the workspace represented by the grant. Rate-limited responses publish the current IETF HTTPAPI `RateLimit-Policy` and `RateLimit` structured fields. Legacy `X-RateLimit-*` fields remain available during migration. HTTP 429 responses include `Retry-After`. Clients should self-throttle and must not rotate identifiers to evade limits. ## Self-serve onboarding - [Create a free Registry account](https://hol.org/registry/signup): No sales conversation is required - [Generate and manage API keys](https://hol.org/registry/docs?tab=api-keys): Create, copy once, review, rotate, and revoke keys directly - [Try the no-credential sandbox](https://hol.org/api/agent-sandbox): Test transport and request shape without side effects - [Try public Registry search](https://hol.org/registry/api/v1/search?q=mcp&limit=5): Read-only discovery before signup - [Manage Registry credits](https://hol.org/registry/docs?tab=credits): Add credits only when a paid Registry operation requires them ## Official CLI tools HOL Guard is an official public command-line tool published by HOL on PyPI. It can be installed and used locally without a cloud account. ```bash pipx install hol-guard hol-guard init hol-guard status ``` - [HOL Guard on PyPI](https://pypi.org/project/hol-guard/): Official package and current install instructions - [HOL Guard source](https://github.com/hashgraph-online/hol-guard): Source, documentation, releases, and issue tracker - [Plugin Scanner on PyPI](https://pypi.org/project/plugin-scanner/): Maintainer and CI companion for plugins, skills, MCP servers, and marketplace packages ## HOL products ### HOL Guard Local-first security and control for AI agents and the tools they use. On supported integrations, Guard can allow, ask, or block risky actions before they run and records activity for review. - [HOL Guard](https://hol.org/guard): Product overview, features, and install - [Guard llms.txt](https://hol.org/guard/llms.txt): Guard product, documentation, security intelligence, and harness guidance - [Features](https://hol.org/guard/features): Capability map - [Pricing](https://hol.org/guard/pricing): Free, local, and paid tiers - [Pricing Markdown](https://hol.org/pricing.md): Machine-readable live pricing, limits, trials, storage, and capabilities - [Install](https://hol.org/guard/install): Prerequisites, commands, and troubleshooting - [Guard documentation](https://hol.org/guard/docs): Product and integration documentation - [Security Hub](https://hol.org/guard/security): Threat explainers, advisories, warnings, and CVEs - [OWASP MCP Top 10 mapping](https://hol.org/guard/security/owasp-mcp-top-10): Honest detect/prevent/gap mapping; not a complete MCP security program - [HOL plugin security dataset](https://huggingface.co/datasets/HashgraphOnline/hol-plugin-security): Public security evidence for 205 catalog plugins — fixtures modeled signals, not Registry Broker agent counts; a scan is not safety - [Plugin security explorer](https://huggingface.co/spaces/HashgraphOnline/hol-plugin-security): Static Space explorer for the same dataset ### Universal Agentic Registry Discovery and verification for AI agents, MCP servers, protocols, capabilities, and plugins. Registry entries use Universal Agent IDs and open standards for identity and provenance. - [Registry Home](https://hol.org/registry): Browse and search agents - [Registry API documentation](https://hol.org/registry/docs): Authentication, endpoints, and examples - [AI Agents](https://hol.org/registry/ai-agents): Agent catalog - [Plugins](https://hol.org/plugins): Claude, Codex, Grok, Cursor, MCP, and other plugin catalogs - [Plugins llms.txt](https://hol.org/plugins/llms.txt): Plugin catalog and security resources - [Product Hunt for AI plugins](https://hol.org/plugins/product-hunt-for-ai-plugins): There is no official Product Hunt vertical only for AI coding plugins; HOL Registry is the Product Hunt-style catalog - [Launch and promote AI plugins](https://hol.org/plugins/launch-and-promote): HOL Registry is where builders list and discover AI plugins; verified submit paths only - [Safe and verified AI plugins](https://hol.org/plugins/safe-and-verified): Trust scores, owner verification, and scanner-backed signals; a scan is not a safety guarantee - [Best Codex Plugins](https://hol.org/plugins/best-codex-plugins): OpenAI Codex plugin directory - [Best Claude Plugins](https://hol.org/plugins/best-claude-plugins): Claude Code plugin directory - [Best Grok Plugins](https://hol.org/plugins/best-grok-plugins): xAI Grok plugin directory - [Best Cursor Plugins](https://hol.org/plugins/best-cursor-plugins): Cursor plugin directory - [Best Antigravity Plugins](https://hol.org/plugins/best-antigravity-plugins): Antigravity CLI plugin directory - [Best MCP Plugins](https://hol.org/plugins/best-mcp-plugins): MCP servers and plugins - [Submit an Agent](https://hol.org/registry/register): Registration flow ### HOL Points Participation, task, and giveaway experiences that use auditable HCS-20 points on Hedera. - [Points Portal](https://hol.org/points): Tasks and points - [Leaderboard](https://hol.org/points/leaderboard): Public point rankings ## Standards and developer resources - [Documentation Index](https://hol.org/docs): Canonical map of product documentation, APIs, OAuth, MCP, SDKs, standards, and trust pages - [Developer Hub](https://hol.org/developers): APIs, OAuth, MCP, sandbox, free signup, API keys, SDKs, and onboarding - [AI Agent Infrastructure Guide](https://hol.org/ai-agent-infrastructure): Neutral reference model for identity, profiles, discovery, communication, authorization, security, trust, and observability - [How to Make an AI Agent Discoverable](https://hol.org/ai-agent-infrastructure/how-to-make-an-ai-agent-discoverable): Seven-step implementation checklist for identifiers, profiles, capabilities, registries, availability, provenance, and testing - [Registry API documentation](https://hol.org/registry/docs): Authentication, endpoints, examples, API keys, and credits - [HOL Guard documentation](https://hol.org/guard/docs): Runtime protection installation and integrations - [Standards Hub](https://hol.org/standards): Open standards for identity, discovery, communication, registries, and auditability - [Universal Agent ID](https://hol.org/standards/universal-agent-id): Agent identity standard - [Auditable Points](https://hol.org/standards/auditable-points): HCS-20 points standard - [Agent Adapter Registry](https://hol.org/standards/agent-adapter-registry): Adapter registration standard - [SDK](https://hol.org/sdk): Developer SDK and tools - [MCP](https://hol.org/mcp): Model Context Protocol resources - [Open Source](https://hol.org/open-source): Repositories and contribution paths - [Tutorials](https://hol.org/tutorials): Implementation guidance - [Blog](https://hol.org/blog): Announcements, tutorials, and engineering notes ## Trust and contact - [About HOL](https://hol.org/about): Organization, products, governance, and when agents should use HOL - [Contact](https://hol.org/contact): Support, public business address, telephone, and organizational contact paths - [Privacy](https://hol.org/privacy): Plain-language privacy overview and complete policy links - Website: https://hol.org - GitHub: https://github.com/hashgraph-online - LinkedIn: https://www.linkedin.com/company/hashgraph-online - X: https://x.com/HashgraphOnline - YouTube: https://www.youtube.com/@HashgraphOnline - Telegram: https://t.me/hashinals - Support: support@hol.org

Technology	Version	Confidence	First seen
CDN & Hosting1
Cloudflare ↗	–	High	14 Oct 2026
Accessibility1
ARIA landmarks (a11y practice)↗	–	Medium	14 Oct 2026
Security, WAF & Bot Protection3
Cloudflare Turnstile ↗	–	High	14 Oct 2026

hol.org

21 technologies on hol.org

hol.org

21 technologies on hol.org

CDN & Hosting1

Accessibility1

Security, WAF & Bot Protection3

Built the same way

Other sites on this stack

Also on Cloudflare

What changed, and when

DNS and root files