What is the best security MCP server?

By tashan's measured score, the highest-ranked are Consent, Assessment, Ifixai, Cybersecurity Skills, Agent Skill Creator. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers & plugins, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Consent npm	85	60k/wk	active
2	Assessment npm	80	12k/wk	active
3	Ifixai plugin	79	13k ★	active
4	Cybersecurity Skills plugin	75	32k ★	active
5	Agent Skill Creator plugin	74	2k ★	active
6	Prowler plugin	74	15k ★	active
7	Auth0 npm deep	74	4k/wk	active
8	Agt Governance plugin ✓ Microsoft	72	6k ★	active
9	Claude Bughunter plugin	72	4k ★	active
10	Preflight npm	72	4k/wk	active
11	Accessibility Scanner npm deep	71	3k/wk	active
12	Ghl Command npm solid	71	3k/wk	active
13	Fullcourtdefense CLI npm	71	3k/wk	active
14	Agent Hooks npm	71	2k/wk	active
15	Safety Net plugin deep	70	1k ★	active
16	1Claw Vault npm solid	70	2k/wk	active
17	Kya OS npm	70	1k/wk	active
18	Hephaestus plugin	69	1k ★	active
19	Shieldcortex npm solid	69	2k/wk	active
20	Remnux npm	69	2k/wk	active
21	Prodcheck npm	69	2k/wk	active
22	Marrow npm deep	69	1k/wk	active
23	Observatory npm deep	69	1k/wk	active
24	Pathmode npm	69	1k/wk	active
25	Docguard npm	69	1k/wk	active
26	Scf npm solid	69	923/wk	active
27	Tuteliq npm thin	69	485/wk	active
28	Governance SDK npm deep	68	3k/wk	active
29	ArcBounty npm	68	2k/wk	active
30	Pushci npm	68	2k/wk	active
31	Exceptd Skills npm	68	1k/wk	active
32	Coderabbit plugin solid	67	142 ★	active
33	Nah plugin deep	67	457 ★	active
34	Dotagents plugin	67	217 ★	active
35	Depwire CLI npm solid	67	2k/wk	active
36	Arc 1 npm	67	1k/wk	active
37	Clinicaltrialsgov npm solid	67	802/wk	active
38	Agentsmesh npm solid	67	731/wk	active
39	Codeguard Security plugin thin	66	276 ★	active
40	Knowledge Rail npm	66	890/wk	active
41	Chat Recall npm	66	440/wk	active
42	Sonarqube plugin solid	65	98 ★	active
43	Lighthouse npm	65	1k/wk	active
44	Tokenectomy Razor npm	65	955/wk	active
45	Pseudonym npm	65	891/wk	active
46	Claudestat npm	65	597/wk	active
47	Hivelore npm	65	580/wk	active
48	Agent Security Scanner npm solid	65	508/wk	active
49	Qodo plugin solid	64	44 ★	active
50	Raptor Loop Hunt plugin	64	217 ★	active
51	Deckprobe npm	64	311/wk	active
52	Auth0 · auth0 plugin solid	63	40 ★	active
53	Youdotcom Agent Skills plugin	63	50 ★	active
54	Zscaler plugin deep	63	41 ★	active
55	Mcpfusion npm	63	1k/wk	active
56	Nemesis Shield npm	63	946/wk	active
57	PDF Verify npm	63	693/wk	active
58	Ges npm	63	649/wk	active
59	Skarn npm	63	620/wk	active
60	Ccs npm	63	467/wk	active
61	Csvbox npm	63	244/wk	active
62	Grc npm	63	239/wk	active
63	Very Good AI Flutter Plugin plugin	62	146 ★	active
64	Offensive Claude plugin solid	62	326 ★	active
65	Dogwood plugin	62	302 ★	active
66	Repo Forensics plugin	62	165 ★	active
67	Nel Veil npm	62	1k/wk	active
68	NPM Sentinel npm solid	62	924/wk	active
69	Argot npm solid	62	708/wk	active
70	Yotta Verify npm	62	678/wk	active
71	Didwork npm	62	563/wk	active
72	Decionis CommerceGate npm	62	504/wk	active
73	Npmjs npm	62	383/wk	active
74	Nlpm plugin solid	61	95 ★	active
75	Reolink CLI plugin deep	61	80 ★	active
76	Cedulon npm	61	662/wk	active
77	Fq 239 Audit npm	61	638/wk	active
78	Jazz AI npm deep	61	567/wk	active
79	Codeinspectus npm deep	61	520/wk	active
80	Omitly npm	61	453/wk	active
81	Trainbud npm	61	420/wk	active
82	Black Duck Security Scanner npm solid	61	302/wk	active
83	Verglos npm solid	61	277/wk	active
84	Certscore npm	61	186/wk	active
85	DNS npm solid	61	140/wk	active
86	Crowdstrike Falcon Foundry plugin solid	60	22 ★	active
87	Armorclaude plugin solid	60	44 ★	active
88	Memstack plugin thin	60	410 ★	active
89	Arc plugin solid	60	69 ★	active
90	Proxy · node9 npm	60	710/wk	active
91	Cotal AI npm	60	647/wk	active
92	Phi Guard npm	60	538/wk	active
93	Mailpouch npm deep	60	492/wk	active
94	Electron npm	60	489/wk	active
95	AI Agent Firewall npm solid	60	454/wk	active
96	Hitl npm	60	416/wk	active
97	Rad Security npm	60	394/wk	active
98	Getmcpm npm	60	371/wk	active
99	Patchloom npm deep	60	349/wk	active
100	Intelthreadlinqs npm solid	60	334/wk	active
101	Socketsecurity npm	59	926/wk	active
102	Nist Nvd npm solid	59	728/wk	active
103	Marketnow npm	59	619/wk	active
104	Symfony Agent npm	59	570/wk	active
105	Shield Kya npm	59	569/wk	active
106	Node9 AI npm solid	59	524/wk	active
107	Pkgtruth npm	59	493/wk	active
108	A2a Trustgate npm	59	435/wk	active
109	Thumbgate npm solid	59	406/wk	active
110	Iris Eval npm	59	346/wk	active
111	Arko npm	59	316/wk	active
112	Piomin Spring Boot Template plugin	58	1k ★	active
113	Jk plugin	58	82 ★	active
114	Fetch npm	58	529/wk	active
115	Whoisxmlapi npm	58	460/wk	active
116	Opedd — Licensed Content for AI npm solid	58	441/wk	active
117	Netintel npm thin	58	430/wk	active
118	Getplexa npm solid	58	336/wk	active
119	Delega npm	58	327/wk	active
120	Dryrun npm	58	288/wk	active

Recently changed in Security

184 changes recorded here in the last 45 days, newest and most serious first.

2026-08-05 Ghl Command — ghl-command now reaches browser, credentials
2026-08-05 Argot — argot now runs a script when it installs
2026-08-10 Agent Hooks — @pushary/agent-hooks now reaches network
2026-08-10 Agentsmesh — agentsmesh now reaches filesystem

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

46 of these are graded against their own documentation. The rest carry adoption and upkeep signal only. We publish what is measured and name what is not.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Assessment vs Consent Auth0 vs Consent Preflight vs Consent Accessibility Scanner vs Consent Ghl Command vs Consent Fullcourtdefense CLI vs Consent Agent Hooks vs Consent Auth0 vs Assessment Preflight vs Assessment Accessibility Scanner vs Assessment Ghl Command vs Assessment Fullcourtdefense CLI vs Assessment

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›

tashan Pro$6/mo

184 changes across Security capabilities in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.