M

MetaMynd AgentSafe Guard – Runtime Governance for AI Agents 

Every AI agent tool call authorized, signed and audited outside the agent

metamynd/agentsafe-guard · unreleased source · d0c114d · Tools & Integrations

by MetamyndOwner verifiedScan grade: Acceptable

You can tell an AI agent to stay under its budget and use approved vendors. It will usually comply, but "usually" is not a control you can show an auditor.

InstallSource
Follow0
Trust Score88Security scan78ComponentsScan pending
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Metamynd Runtime Governance for AI Agents a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Not declared

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • No license declared in the manifest.

About Metamynd Runtime Governance for AI Agents

Metamynd Governance moves the decision out of the agent. Wrap a tool in three lines: every call is checked against a mandate the agent cannot edit, signed, and decided outside its process, and a refused call never reaches your code. Because the gate is default-deny, an agent cannot widen its own authority: ask for an action nobody delegated and the answer is NO_PERMISSION_FOR_ACTION, at $1 or $100,000.

Agent-side, MCP-server-side, Agent2Agent and HTTP guards with zero runtime dependencies, a deterministic open-source evaluator, and a Python client. MIT licensed.

What is MetaMynd AgentSafe Guard – Runtime Governance for AI Agents?

MetaMynd AgentSafe Guard – Runtime Governance for AI Agents is a published tools & integrations plugin for AI coding agents, developed by Metamynd and distributed through the HOL AI plugin registry. Wrap an AI agent's tools so every call is authorized, signed and audited outside the agent's process, and a refused call never runs.

Canonical slug
metamynd/agentsafe-guard
Version
unreleased source · d0c114d · updated Nov 6, 2026

Registry snapshot

Owner verification
Verified on HOL as @metamyndai
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes

Trust and security

Trust & reputation

On-Chain Verified
88

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
78/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/Metamynd/agentsafe-guard
Source commit
d0c114d6e435…
Publisher verified
Yes
Owner verified
@metamyndai
Agent Plugins 1.0
Not detected

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
78
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
C · Acceptable
Version
3.24.2
cisco-skill-scanner: skippedcisco-mcp-scanner: skipped

Manifest Validation

21/31

9 checks

Security

16/16

9 checks

Operational Security

3/6

5 checks

Best Practices

6/9

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

N/A

3 checks · not applicable

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_AUTHOR

The manifest is missing the documented recommended field "author".

Add "author" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/Metamynd/agentsafe-guard/blob/d0c114d6e435d197ff88c0e1484267ee908cefc7/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

1 / 1

MetaMynd AgentSafe Guard – Runtime Governance for AI Agents demo video

Loading reviews

Plugin manifest

{
  "name": "agentsafe-guard",
  "version": "0.0.0",
  "description": "Wrap an AI agent's tools so every call is authorized, signed and audited outside the agent's process, and a refused call never runs",
  "repository": "https://github.com/Metamynd/agentsafe-guard",
  "homepage": "https://github.com/Metamynd/agentsafe-guard",
  "interface": {
    "displayName": "MetaMynd AgentSafe Guard – Runtime Governance for AI Agents",
    "developerName": "Metamynd",
    "category": "Tools & Integrations"
  },
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 9
}

File inventory

.codex-plugin/plugin.json

plugin-manifest

520 bytes

953a0ccfd4a1c9ca…

LICENSE

file

1,420 bytes

0cab1b96e10a2549…

package-lock.json

file

41,799 bytes

ee9fc48babc114d6…

package.json

file

778 bytes

0a5b3cf534382c88…

README.md

file

7,807 bytes

a03d61bb1f1371ce…

README.md

file

7,807 bytes

a03d61bb1f1371ce…

SECURITY.md

file

3,228 bytes

f9548bd3fc7be37d…

tsconfig.json

file

306 bytes

6bb46ed5214e76f1…

Metamynd Runtime Governance for AI Agents — Frequently asked questions

What is Metamynd Runtime Governance for AI Agents?
Metamynd Runtime Governance for AI Agents is an AI plugin in the HOL registry. You can tell an AI agent to stay under its budget and use approved vendors. It will usually comply, but "usually" is not a control you can show an auditor. Metamynd Governance moves the decision out of the agent. Wrap a tool in three…
How do I install Metamynd Runtime Governance for AI Agents?
Install Metamynd Runtime Governance for AI Agents in your harness: Source — https://github.com/Metamynd/agentsafe-guard/releases. Full step-by-step guidance is on the HOL plugin page.
How do I install Metamynd Runtime Governance for AI Agents in Source?
To install Metamynd Runtime Governance for AI Agents in Source, start with https://github.com/Metamynd/agentsafe-guard/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
Is Metamynd Runtime Governance for AI Agents free?
Metamynd Runtime Governance for AI Agents is listed as free on HOL.
How is the Trust Score for Metamynd Runtime Governance for AI Agents computed?
Metamynd Runtime Governance for AI Agents has a HOL Trust Score of 88 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/metamynd%2Fagentsafe-guard/trust
Who publishes Metamynd Runtime Governance for AI Agents?
Metamynd Runtime Governance for AI Agents is published by Metamynd and listed on HOL.
Is Metamynd Runtime Governance for AI Agents available now?
Metamynd Runtime Governance for AI Agents is currently beta according to its latest public launch.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-11-05 to 2026-11-06.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Metamynd Runtime Governance for AI Agents.

Alternatives in Tools & Integrations

See all Tools & Integrations plugins

More from Metamynd

History, reviews, and similar plugins

Latest launch