HOL Standards SDKBLOCK
The official HOL Standards SDK, implementing the standards found in https://hol.org/docs/standards
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Quick Start
npm install @hol-org/standards-sdk # Legacy scope: # npm install @hashgraphonline/standards-sdk
For the standalone Registry Broker client with a smaller footprint:
npm install @hol-org/rb-client
HOL-scoped distributions are published in parallel:
@hol-org/rb-client: registry broker client only@hol-org/standards-sdk: full SDK under the HOL scope
Optional dependencies for @hol-org/rb-client
The client ships with zero network transports bundled. Install these peers when you need the related features:
axios+x402-axios+x402for X402 credit purchases and paymentsviemfor EVM-based ledger authentication@hashgraph/sdkfor Hedera ledger authentication
Core agent search/chat flows only require a fetch implementation.
Documentation
For complete documentation, examples, and API references, visit:
Registry Broker skill verificat
fb71fa79a5d0OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add recursion-sdk --env ALICE_CREATE_PRIVATE_KEY=${ALICE_CREATE_PRIVATE_KEY} --env API_KEY=${API_KEY} --env AUTO_KEY=${AUTO_KEY} --env BOB_PRIVATE_KEY=${BOB_PRIVATE_KEY} -- npx -y @hashgraphonline/[email protected]{
"mcpServers": {
"recursion-sdk": {
"command": "npx",
"args": [
"-y",
"@hashgraphonline/[email protected]"
],
"env": {
"ALICE_CREATE_PRIVATE_KEY": "${ALICE_CREATE_PRIVATE_KEY}",
"API_KEY": "${API_KEY}",
"AUTO_KEY": "${AUTO_KEY}",
"BOB_PRIVATE_KEY": "${BOB_PRIVATE_KEY}"
}
}
}
}Exposed tools (36)
30 read · 6 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
ACCOUNT_CREATE | write | Create new accounts |
ACCOUNT_MANAGEMENT | read | Parent capability for account operations |
ACCOUNT_READ | read | Read account information |
ADMIN_ACCESS | read | Administrative access |
BASIC_ACCESS | read | Basic system access |
CRYPTO_TRANSFER | write | Allows crypto transfers |
HEDERA_ACCOUNT_ID | read | Your Hedera testnet account identifier |
HEDERA_NETWORK | read | Hedera network to connect to |
HEDERA_OPERATOR_ID | read | Alternative name for HEDERA_ACCOUNT_ID (same value) |
HEDERA_OPERATOR_KEY | read | Alternative name for HEDERA_PRIVATE_KEY (same value) |
HEDERA_PRIVATE_KEY | read | Your Hedera account private key (DER or hex format) |
OPENROUTER_API_KEY | read | API key for OpenRouter AI service integration |
REGISTRY_BROKER_API_KEY | read | API key for authenticated registry broker access |
REGISTRY_BROKER_BASE_URL | read | Base URL for the Hashgraph Online registry broker API |
Skill | read | Initial description |
TOKEN_CREATE | write | Create new tokens |
TOKEN_MINT | read | Mint new tokens |
add | write | Add two numbers |
counter-app | read | Complete counter application with UI and actions |
counter-display | read | Displays the current counter value with controls |
counter-module.js | read | HCS-12 Counter Module JavaScript Wrapper |
counter-module.wasm | read | HCS-12 Counter Module |
demo-actions.wasm | read | Demo actions module with counter and toggle actions |
execute | write | Execute lifecycle test |
hcs_messages | read | Browse historical messages from consensus topics |
hcs_topics | read | Access message streams from Hedera Consensus Service topics |
multiply | read | Multiply two numbers |
test | read | Test action |
test-action | read | Test action |
test-assembly | read | Test assembly |
test_resource | read | A test resource |
test_tool | read | A test tool |
topic_search | read | Search for messages in HCS topics by content or timestamp |
topic_submit | write | Submit new messages to Hedera Consensus Service topics |
topic_subscribe | read | Subscribe to real-time messages from HCS topics |
updated-assembly | read | Updated description |
Trust audit
BLOCKgrade F · trust 43/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
* const info3 = KeyTypeDetector.detect(`-----BEGIN PRIVATE KEY-----
EC_PRIVATE: /-----BEGIN EC PRIVATE KEY-----/,
PRIVATE: /-----BEGIN PRIVATE KEY-----/,
const result = new Function(`return ${sanitized}`)();const importModule = new Function('url', 'return import(url)');const importModule = new Function('url', 'return import(url)');Function('return typeof require === "function" ? require : undefined;')();.DS_Store
this.logger.debug(`Fetching token info for ${tokenId}`);this.logger.warn(`No token info found for ${tokenId}`);this.logger.info(`Getting NFTs for token ${tokenId}`);url: zod.string().optional().describe('Override the local URL (defaults to http://127.0.0.1:PORT)'),const targetUrl = opts.url ?? `http://127.0.0.1:${port}`;baseUrl.startsWith('http://127.0.0.1');baseUrl.startsWith('http://127.0.0.1') ||'http://127.0.0.1:4000/api/v1';
'/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBxAQEBUQEA8QEBUPDw8PDw8QDw8PDw8QFREWFhURFRUYHSggGBolGxUVITEhJSkrLi4uFx8zODMsNygtLisBCgoKDg0OFQ8PFS0dFR0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0
` 🧑🚀 Requester decrypted: ${'-----BEGIN PRIVATE KEY-----',
.prettierignore
.prettierrc.json
.swcrc
.prettierrc.json
.DS_Store
} from '../../../src/common/tx/tx-utils';
Gates applied: critical_finding, no_behavioural_pass.
fb71fa79a5d0full audit observations/trust-audit/mcp-server/hashgraph-online__standards-sdk.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | fb71fa79a5d0 | BLOCK | F | 43 | first audit |
Questions
What is the @hashgraphonline/standards-sdk MCP server?
The official HOL Standards SDK, implementing the standards found in https://hol.org/docs/standards
What tools does @hashgraphonline/standards-sdk expose?
36 in total: 30 read-only, 6 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is @hashgraphonline/standards-sdk safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (43/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does @hashgraphonline/standards-sdk need?
It reads ALICE_CREATE_PRIVATE_KEY, API_KEY, AUTO_KEY, BOB_PRIVATE_KEY, CHARLIE_CREATE_PRIVATE_KEY, CLOUDFLARE_API_TOKEN, ERC8004_REGISTRY_KEY, GODADDY_API_KEY, GODADDY_API_SECRET, HCS5_TOKEN_ID, HCS6_TOKEN_ID and HEDERA_MAINNET_OPERATOR_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (fb71fa79a5d0), read on 2026-10-12. The repository is watched and re-audited when it changes.