How do I install Nova Research (CIVAI)?

Install Nova Research (CIVAI) in your harness: Claude Code — /plugin marketplace add civai-technologies/research-agent-mcp-by-nova-civai; Cursor — npx skills@1.7.4 add civai-technologies/research-agent-mcp-by-nova-civai. Full step-by-step guidance is on the HOL plugin page.

How is the Trust Score for Nova Research (CIVAI) computed?

Nova Research (CIVAI) has a HOL Trust Score of 76 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/civai-technologies%2Fresearch-agent-by-nova/trust

Who publishes Nova Research (CIVAI)?

Nova Research (CIVAI) is published by civai-technologies and listed on HOL.

Nova Research (CIVAI)

civai-technologies/research-agent-by-nova · v1.0.0 · Tools & Integrations

by civai-technologiesScan grade: Good

MCP server: hosted deep research and sourced report generation over live web search; tool discovery is open, tool calls need a Nova account

Install Source Claim this plugin

Follow0

Trust Score76 Security scan88 Components1

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Nova Research (CIVAI) a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Claude Code
MCP
Antigravity CLI
Cursor

1 MCP server

Before you install

Sign-in: Not declared
Settings it asks for: Nova API key (secret)
Declared access: Not declared
License: MIT

Check before relying on it

The publisher has not verified ownership on HOL.

What is Nova Research (CIVAI)?

Nova Research (CIVAI) is a published tools & integrations plugin for AI coding agents that works with Claude Code, MCP, Antigravity CLI and Cursor, developed by civai-technologies and distributed through the HOL AI plugin registry. MCP server: hosted deep research and sourced report generation over live web search; tool discovery is open, tool calls need a Nova account.

Canonical slug: civai-technologies/research-agent-by-nova
Version: v1.0.0 · updated Nov 2, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/civai-technologies/research-agent-mcp-by-nova-civai
Homepage: https://nova.civai.co/agent/research-agent
Documentation: https://nova.civai.co/agent/research-agent
Support: https://nova.civai.co/api-keys
Privacy: https://nova.civai.co/privacy
Terms: https://nova.civai.co/terms
Canonical profile: https://hol.org/registry/plugins/civai-technologies%2Fresearch-agent-by-nova
Owner verification: Not verified
Scanner: HOL plugin scanner
Security result: Needs review
Digest verified: Yes

Trust and security

Trust & reputation

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100/100

Maintenance

40/100

MCP server setup

100/100

Plugin Security

88/100

Provenance

70/100

Publisher Quality

75/100

Provenance

Plugin root: .
Source repo: https://github.com/civai-technologies/research-agent-mcp-by-nova-civai
Source commit: c44c82d5e604…
Publisher verified: No
Owner verified: Not owner verified
Agent Plugins 1.0: Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: codex-plugin-scanner
Grade: B · Good
Version: 3.24.2

codex:hol-plugin-scanner-L1zpnz / cisco-skill-scanner: skippedcodex:hol-plugin-scanner-L1zpnz / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

13/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

13/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

6/9

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

N/A

3 checks · not applicable

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

10/10

3 checks

[gemini:.] Security

13/16

6 checks

[gemini:.] Operational Security

N/A

5 checks · not applicable

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked 2026-11-02. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 3 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

1
Add the marketplace
Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.
claude code
2
Find the marketplace and plugin names
The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.
shell
3
Install the plugin
Substitute the plugin entry name and the marketplace name shown by the previous step.
claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "$schema": "https://json.schemastore.org/claude-code-plugin.json",
  "name": "research-agent-by-nova",
  "displayName": "Research Agent by Nova (CIVAI)",
  "version": "1.0.0",
  "description": "I do everything related to research and reports",
  "author": {
    "name": "CIVAI TECHNOLOGIES",
    "email": "[email protected]",
    "url": "https://nova.civai.co"
  },
  "homepage": "https://nova.civai.co/agent/research-agent",
  "repository": "https://github.com/civai-technologies/research-agent-mcp-by-nova-civai",
  "license": "MIT",
  "keywords": [
    "deep-research",
    "web-research",
    "reports"
  ],
  "icon": "./assets/logo.svg",
  "documentationUrl": "https://nova.civai.co/agent/research-agent",
  "supportUrl": "https://nova.civai.co/api-keys",
  "privacyPolicyUrl": "https://nova.civai.co/privacy",
  "termsOfServiceUrl": "https://nova.civai.co/terms",
  "userConfig": {
    "nova_api_key": {
      "type": "string",
      "title": "Nova API key",
      "description": "Programmatic Nova API key from https://nova.civai.co/api-keys",
      "required": true,
      "sensitive": true
    }
  },
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "Research Agent by Nova (CIVAI)",
    "developerName": "civai-technologies"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL: https://github.com/civai-technologies/research-agent-mcp-by-nova-civai
Marketplace path: Unknown
Source path: .
Install policy: Unspecified

File inventory

.claude-plugin/plugin.json

file

1,360 bytes

c6daa9d56271c5f9…

.codex-plugin/plugin.json

plugin-manifest

1,157 bytes

b90d56038ae73577…

.cursor-plugin/plugin.json

file

861 bytes

0e295bff692d48c4…

.registry/mcp.json

mcp-config

178 bytes

afdda84b63fe6713…

gemini-extension.json

file

299 bytes

7a4673fb5e50355e…

LICENSE

file

1,428 bytes

b1edc0e2661a7509…

README.md

file

2,803 bytes

6ee350ebcab78a7e…