Monthly report
State of agent plugins: November 2026
By HOL · Reviewed by Michael Kantor · Snapshot taken · Download CSV
Direct answer
In November 2026 the HOL catalog listed 53,114 agent extensions: 1,063 packaged plugins and 52,042 MCP servers. Most plugins target Codex, Claude Code, Cursor, and 45.3% declare two or more runtimes. HOL scanned 79.4% of plugins; 0.5% had at least one high-severity finding. Every number here comes from a stored script and a downloadable CSV.
The catalog at a glance
- Listings
- 53,114
- (+3,449 vs last month)
- Packaged plugins
- 1,063
- (+61 vs last month)
- MCP servers
- 52,042
- 14 scanned by HOL
- Median trust score
- 68
- 844 plugins scored
52,028 listings come from the official MCP registry and have not been scanned by HOL yet. They count toward catalog totals only; every rate below uses the 1,063 packaged plugins as its base.
Where plugins ship
45.3% of plugins declare two or more agent runtimes, and the average plugin declares 1.68. MCP, Agent Skills and other packaging formats appear in the table but do not count as runtimes. The runtime compatibility map shows which runtimes plugins declare together.
| Runtime or format | Plugins | Share of plugins |
|---|---|---|
| Codex | 624 (+13 vs last month) | 58.7% |
| Claude Code | 618 (+18 vs last month) | 58.1% |
| MCPformat | 359 (+17 vs last month) | 33.8% |
| Cursor | 167 (+3 vs last month) | 15.7% |
| Gemini CLI | 133 (+3 vs last month) | 12.5% |
| Agent Pluginformat | 110 (+1 vs last month) | 10.3% |
| OpenCode | 84 (+8 vs last month) | 7.9% |
| Grok | 46 (no change) | 4.3% |
| Agent Skillsformat | 41 (+7 vs last month) | 3.9% |
| Deepseek Harness | 32 (+9 vs last month) | 3% |
| Kimi | 28 (no change) | 2.6% |
| GitHub Copilot | 22 (+1 vs last month) | 2.1% |
| Standaloneformat | 17 (+2 vs last month) | 1.6% |
| Openclaw | 11 (no change) | 1% |
| Ollama | 8 (no change) | 0.8% |
| Qwen | 6 (no change) | 0.6% |
| Cline | 4 (no change) | 0.4% |
| Windsurf | 4 (no change) | 0.4% |
| Openrouter | 2 (no change) | 0.2% |
| Perplexity | 2 (no change) | 0.2% |
| Plugins that bundle | Plugins | Share |
|---|---|---|
| At least one skill | 638 | 60% (−3.7 pts vs last month) |
| At least one MCP server | 256 | 24.1% (−1.3 pts vs last month) |
What scans find
HOL scanned 844 plugins (79.4%). They produced 17,010 findings, 20.15 per scanned plugin on average. 5 plugins (0.5%) had at least one high-severity finding.
| Scan result | Plugins |
|---|---|
| No findings at scan time | 151 (17.9%) |
| Findings to review | 156 (18.5%) |
| Findings to review closely | 531 (62.9%) |
| High-severity findings | 6 (0.7%) |
| Severity | Findings |
|---|---|
| critical | 0 |
| high | 5 |
| medium | 1,899 |
| low | 699 |
| info | 14,407 |
| Category | Plugins affected | Findings |
|---|---|---|
publishability | 682 | 1,876 |
skill-security | 635 | 14,382 |
operational-security | 599 | 604 |
mcp-security | 90 | 98 |
provenance | 21 | 21 |
best-practices | 4 | 5 |
manifest-validation | 3 | 21 |
security | 1 | 3 |
Trust and maintenance
Trust scores follow the published methodology. Owner verification means the publisher proved control of the source repository; continuous scanning means a scanner workflow runs in the repository's CI.
| Signal | Plugins | Share |
|---|---|---|
| Trust score 90–100 | 49 | 4.6% |
| Trust score 75–89 | 205 | 19.3% |
| Trust score 50–74 | 583 | 54.8% |
| Trust score 0–49 | 7 | 0.7% |
| Owner verified | 488 | 45.9% (+1.4 pts vs last month) |
| Continuous scanning in CI | 302 | 28.4% (−1.7 pts vs last month) |
Most installed
From HOL Guard installs that turned on install reporting, ISO week 2026-W43. A listing counts on a runtime once 10 machines report it. The live leaderboards update weekly.
No listing reached 10 reporting machines on any runtime that week.
Clicks on install commands on HOL, 2026-10-03 to 2026-10-30. These are clicks, not installs; listings under 5 clicks are left out.
| Plugin | Clicks |
|---|---|
| ilya-utov/humanizer-ru | 57 |
| filament-labs/codex-usage-and-resets | 22 |
| hredo/ai-command-center | 21 |
| manav-mishra/zero-slop | 14 |
| jia-ming-zhou-felimet/endnote-for-word | 8 |
| djarvur/go-ultimate | 7 |
| agent-kit-startup/agent-kit | 6 |
| havok-holdings-llc/agent402 | 6 |
| win4r/chrome-devtools | 6 |
| joel-farthing/codex-process-jobs | 5 |
Who this report is for
Plugin and MCP server authors deciding which runtimes to ship to, security teams sizing agent extension risk, and analysts tracking the agent plugin market.
Use it to
- Choose which runtimes to package a plugin for, based on where other authors ship.
- Benchmark a plugin scan result against the catalog-wide label and severity mix.
- Cite current counts of agent plugins and MCP servers with a downloadable source.
Not for
- Judging one plugin: open its listing and trust score instead.
- Install or download counts: runtimes do not publish them, so this report does not estimate them.
- A security guarantee: a scan finds known patterns and cannot prove a plugin is safe.
Methodology
On 2026-10-30, a script read every listing from the HOL plugin catalog API (/api/v1/plugins/catalog, 53,114 rows) and aggregated them with one function (scripts/plugins/state-of-agent-plugins.ts). The page and the CSV read the same committed output, so every figure here appears in the download. A plugin counts toward each runtime its listing declares. Shares use packaged plugins as the base unless a row says otherwise.
Limitations
- Most MCP servers come from the official MCP registry and are counted but not scanned, so scan rates use packaged plugins only.
- A plugin counts toward every runtime its manifest or listing declares; the report does not load each plugin in each runtime.
- Trust scores and safety labels follow the published methodology in force on the snapshot date; a methodology change shifts them between editions.
- The snapshot is one point in time. Listings added, removed or rescanned after it are in the next edition.
Other editions
Related
Count your plugin in
Claim your listing to verify ownership, add continuous scanning, and appear in next month's owner-verified share.