Versus comparison
Hol Registry vs Lovable
discovering and comparing installable Claude Code, Codex, Cursor, and MCP plugins with publisher and trust signals · AI app generation for product prototypes and front-end experiences
| Decision point | HOL Registry | Lovable |
|---|---|---|
| Best for | discovering and comparing installable Claude Code, Codex, Cursor, and MCP plugins with publisher and trust signals | AI app generation for product prototypes and front-end experiences |
| Category | Development | Development |
| Price | Free | Free + paid plans |
| AIToolsEssentials editorial score | 4.0/5 | 4.2/5 |
Scores are editorial product assessments — job fit, likely output quality, ease of adoption, and operational cost — not lab benchmarks, and no tool here has a published hands-on result. How we score.
Evidence status
Free. Browsing the plugin catalogue and submitting a public plugin repository cost nothing - stated in the catalogue's own FAQ ("list your public repository for free") and in the live https://hol.org/plugins/llms.txt, which sells nothing. No paid tier exists for the catalogue itself; paid credits apply to other HOL registry operations, and HOL Guard is a separately priced product with its own plans. Verified 2026-10-14 from the live /plugins/llms.txt plus the archived catalogue page, because live catalogue HTML is served behind a Cloudflare challenge and returned 403 to every scripted client.
Official sources checked 2026-10-14Open verification questions
- No general site-wide Terms of Service was located. The footer link labelled "Terms of Service" resolves to https://hol.org/points/legal/terms (a points-programme legal page) in both the live app shell and the archived pages, and that page's actual scope could not be read because live HTML is Cloudflare-challenged. Treat the recorded rights_url as the only terms link found, not as confirmed coverage of the catalogue.
- Catalogue size disagrees between HOL's own surfaces: the archived catalogue page (2026-08-31) read "Showing 243 plugins across 16 ecosystems" while the live /plugins/llms.txt says "205 catalog plugins". The listing therefore quotes no figure.
- Retention periods and named subprocessors are asserted in the privacy summary ("the complete policy names categories of providers and explains ... retention") but the full Privacy Policy, stated as last updated 2026-06-29, could not be read from this host. Retention and processor specifics are unverified.
- Security scoring is a fallback static catalogue scan, not a live exploit test - disclosed by the site itself in its FAQ and llms.txt. Any trust score should be read as a weak signal, and the listing's pros/cons say so.
- The privacy summary warns that information written to a public blockchain can be visible to third parties and may be permanent even after an off-chain account is deleted. This applies to HOL Points and registry features rather than the plugin catalogue, but is not itemised per product.
Submitted via the site form by the vendor (name "HOL Plugins", url https://hol.org/plugins, category Development, contact michael@hol.org) - FormSubmit mail timestamped Thu, 2026-10-15 00:22 UTC, i.e. 2026-10-14 in the site's Pacific working date. Editorial entry written independently; no vendor copy reused and no revenue figure inferred. Operator identity verified twice: (1) the site's own About and Contact pages state that "Hashgraph Online DAO LLC operates hol.org", give the business address 852 Long Island Rd, Majuro 96960, Marshall Islands, and publish +1 347-705-7394 and support@hol.org; (2) independently, the GitHub organisation "hashgraph-online" (display name "HOL (Hashgraph Online)", 66 public repositories, created 2024-02-18) lists hol.org as its blog, Marshall Islands as its location and support@hol.org as its email, and its hol-guard repository lists https://hol.org/guard as its homepage (Apache-2.0, 896 stars, last pushed 2026-10-15). Submitted contact michael@hol.org is a real mailbox: SMTP RCPT probe against the domain's own Google Workspace MX returned 250 2.1.5 OK, while a random local part returned 550 5.1.1, proving the domain is not a catch-all. Provenance limits, stated plainly: hol.org serves its HTML, its sitemap.xml, its OpenAPI document and its live API endpoints behind a Cloudflare challenge (403 to every scripted client; only the llms.txt surfaces load), and the interactive browser was unavailable on this host, so the catalogue, About, Contact and Privacy pages were read from Wayback snapshots (catalogue 2026-08-31; About 2026-09-19; Contact 2026-09-19; Privacy 2026-09-24) and cross-checked against the live surfaces that do load: /plugins/llms.txt, /guard/llms.txt, robots.txt and the live 404 app shell, which carries the site's full navigation. Ownership is not in question on any reading.
Free includes 5 daily build credits, capped at 30 per month, plus monthly grants of 20 Cloud credits and 4 credits for AI features in user-built apps. Pro is $25/month per workspace, shared across unlimited users, with 100 monthly credits and additional daily grants. Business is $50/month per workspace, shared across unlimited users, with 100 monthly credits and added SSO, roles, internal publishing, security, and workspace controls. Enterprise uses a company-size-based platform fee and volume-based credit pricing. Credit use varies by feature and task complexity; monthly plan credits expire two months after issue, while daily grants do not roll over.
Official sources checked 2026-10-01Open verification questions
- As of August 21, the effective Terms already grant training rights with a prospective opt-out, while the product documentation says Free and Pro customer-data training begins September 9, 2026. The sources do not fully explain operational use during the intervening period.
- Lovable does not guarantee that AI Output is unique, free of third-party rights, accurate, or suitable for a particular purpose.
- Enterprise pricing is not published as a fixed amount.
Official documentation describes Lovable as generating editable frontend, backend, database, authentication, and integration code from natural language, with GitHub synchronization and shared workspaces. Terms effective August 15, 2026 state that users own Customer Data, including applications, websites, and projects, and own AI Output generated for them, subject to third-party rights in underlying models, training data, or outputs. The Terms permit personal or internal-business use, including creating, deploying, operating, and making built applications available to end users. The Terms grant Lovable a broad license to use Customer Data, including for AI/ML development and training, but users can opt out prospectively for free regardless of plan. The official data-control documentation says Free and Pro customer-data training is scheduled to begin September 9, 2026 and users may opt out before or after that date. Business and Enterprise workspace data is excluded from training by default under organization agreements and DPAs. The April 14, 2026 Privacy Policy says raw or identifiable Personal Data is not used for training, while anonymized or aggregated data may be used. Re-verified 2026-10-01: The official pricing page still matches the recorded Free/Pro/Business credit structure and workspace pricing; no drift detected.
How to decide
Match each platform to your actual workflow constraints. Run one real workflow in each finalist before paying.
Quick recommendation
Use the trial checklist on each review page and the free scorecard to record time-to-result, corrections needed, and monthly cost at your expected volume before committing to a plan.
Get a shareable decision brief for this matchup →
Free · no login · stays on your device
Free Stack Audit
See which AI subscriptions overlap and what you could cut before the next renewal.