
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
@hashgraphonline/standards-sdk
Advanced tools
The Hashgraph Online Standards SDK provides a complete implementation of the Hiero Consensus Standards (HCS), giving developers all the tools needed to build wonderful decentralized applications on the Hashgraph network. https://hol.org
![]() | A lightweight SDK providing reference implementations for Hashgraph Consensus Standards (HCS) created by Hashgraph Online. This SDK is built and maintained by Hashgraph Online, a consortium of leading Hedera Organizations within the Hedera ecosystem. 📚 Standards SDK Documentation 📖 HCS Standards Documentation |
|---|
npm install @hol-org/standards-sdk
# Legacy scope:
# npm install @hashgraphonline/standards-sdk
For the standalone Registry Broker client with a smaller footprint:
npm install @hol-org/rb-client
HOL-scoped distributions are published in parallel:
@hol-org/rb-client: registry broker client only@hol-org/standards-sdk: full SDK under the HOL scope@hol-org/rb-clientThe client ships with zero network transports bundled. Install these peers when you need the related features:
axios + x402-axios + x402 for X402 credit purchases and paymentsviem for EVM-based ledger authentication@hashgraph/sdk for Hedera ledger authenticationCore agent search/chat flows only require a fetch implementation.
For complete documentation, examples, and API references, visit:
The RegistryBrokerClient supports version-scoped skill verification plus DNS TXT domain proof:
import { RegistryBrokerClient } from '@hashgraphonline/standards-sdk';
const client = new RegistryBrokerClient({
apiKey: process.env.REGISTRY_BROKER_API_KEY,
});
await client.requestSkillVerification({
name: 'demo-skill',
version: '1.0.0',
tier: 'basic', // or 'express'
});
const challenge = await client.createSkillDomainProofChallenge({
name: 'demo-skill',
version: '1.0.0',
domain: 'example.com',
});
const challengeToken = challenge.txtRecordValue.replace(/^hol-skill-verification=/, '');
await client.verifySkillDomainProof({
name: 'demo-skill',
version: '1.0.0',
domain: 'example.com',
challengeToken,
});
Runnable demo: pnpm -C standards-sdk tsx demo/registry-broker/skill-domain-proof-demo.ts --skill-name=<name> --base-url=<broker-api-url>.
The RegistryBrokerClient can verify and persist _uaid.<nativeId> TXT proof for an agent UAID:
import { RegistryBrokerClient } from '@hashgraphonline/standards-sdk';
const client = new RegistryBrokerClient({
baseUrl: 'https://hol.org/registry/api/v1',
});
const verify = await client.verifyUaidDnsTxt({
uaid: 'uaid:aid:...;uid=...;proto=a2a;nativeId=agent.hol.org',
persist: true,
});
const status = await client.getVerificationDnsStatus(
'uaid:aid:...;uid=...;proto=a2a;nativeId=agent.hol.org',
{ refresh: true, persist: false },
);
Runnable demo: pnpm -C standards-sdk run demo:registry-broker-uaid-dns -- --uaid=<uaid> --base-url=<broker-api-url>.
Launch the bundled CLI to explore registry broker demos, inspect required env vars, and run helper scripts:
pnpm run cli
The CLI surfaces:
demo/registry-broker, demo/hcs-10).See cli/standards-cli/README.md for advanced and non-interactive commands.
The SDK includes demo implementations that showcase registry broker flows (discovery, chat, ledger auth, OpenRouter) and HCS-10 agent communication. Follow these steps to run them:
Clone the repository
git clone https://github.com/hashgraph-online/standards-sdk.git
cd standards-sdk
Install dependencies
npm install
Set up environment variables
cp .env.example .env
Edit the .env file with your Hedera credentials:
HEDERA_ACCOUNT_ID=0.0.12345
HEDERA_PRIVATE_KEY=your_private_key_here
HEDERA_NETWORK=testnet
REGISTRY_URL=https://moonscape.tech
The CLI can also auto-persist agent state in .env if a demo is interrupted. See .env.example for generated state fields.
Start a demo (or use pnpm run cli for an interactive launcher):
npm run demo:registry-broker
npm run demo:hcs-10
Each demo directory contains README instructions plus you can review demo/registry-broker and demo/hcs-10 for fine-grained scripts covering OpenRouter, history snapshots, ledger authentication, and fee flows.
The inscribe demo (demo/inscribe-demo.ts) showcases different file inscription capabilities:
Each inscription demonstrates different options and metadata capabilities.
The HCS-10 demo (demo/hcs-10/index.ts) demonstrates trustless peer-to-peer communication between AI agents:
The demo automatically handles agent funding, topic creation, and registration with the global registry. Agent creation progress is tracked in real-time and saved to the .env file, allowing recovery from any interruption.
Please read our Contributing Guide and Code of Conduct before contributing to this project.
For bugs and feature requests, please use the issue templates.
For security concerns, please refer to our Security Policy.
See MAINTAINERS.md for a list of project maintainers.
Apache-2.0
FAQs
The Hashgraph Online Standards SDK provides a complete implementation of the Hiero Consensus Standards (HCS), giving developers all the tools needed to build wonderful decentralized applications on the Hashgraph network. https://hol.org
The npm package @hashgraphonline/standards-sdk receives a total of 1,331 weekly downloads. As such, @hashgraphonline/standards-sdk popularity was classified as popular.
We found that @hashgraphonline/standards-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.