What is the best security MCP server?

By tashan's measured score, the highest-ranked are BaseBounty, Cls, Shipyard, Roundtable, Nightshift. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers & plugins, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	BaseBounty npm	58	255/wk	active
2	Cls npm solid	58	253/wk	active
3	Shipyard plugin solid	57	66 ★	active
4	Roundtable plugin deep	57	30 ★	active
5	Nightshift plugin	57	49 ★	active
6	Dvalincode npm	57	582/wk	active
7	Ellmos Controlcenter npm deep	57	510/wk	active
8	UOS Genesis x402 Machine Utilities npm	57	399/wk	active
9	Firsthandapi npm	57	387/wk	active
10	Bray npm solid	57	367/wk	active
11	Agent Passport System — Cryptographic Identity for AI Agents npm solid	57	325/wk	active
12	Privacyscrubber npm	57	315/wk	active
13	Review Assist npm	57	311/wk	active
14	Controldb npm	57	310/wk	active
15	Sytecheck npm	57	300/wk	active
16	Contentrain npm solid	57	292/wk	active
17	Opa npm deep	57	281/wk	active
18	Seegeo npm	57	274/wk	active
19	BailingHub for Business Operations npm	57	261/wk	active
20	DeliverKit npm	57	253/wk	active
21	Aikido plugin thin	56	11 ★	active
22	Immich Photo Manager plugin solid	56	33 ★	active
23	Nuguard plugin	56	21 ★	active
24	Package Intel npm	56	592/wk	active
25	Seatbelt npm solid	56	450/wk	active
26	Chp npm	56	411/wk	active
27	Chamber npm	56	389/wk	active
28	Openttt Pot npm thin	56	380/wk	active
29	Debezium npm	56	371/wk	active
30	Workrail npm	56	366/wk	active
31	Deadchannel npm	56	353/wk	active
32	Un Default npm	56	351/wk	active
33	Keycloak npm	56	345/wk	active
34	Furrow Forms npm	56	345/wk	active
35	Raziel npm solid	56	344/wk	active
36	Kaval npm deep	56	343/wk	active
37	Lauther npm	56	321/wk	active
38	Storefront Guard npm	56	320/wk	active
39	1password npm deep	56	315/wk	active
40	X402 Trust npm solid	56	284/wk	active
41	Zerosmtp npm	56	281/wk	active
42	Countersign npm	56	242/wk	active
43	Emilia Protocol npm	56	239/wk	active
44	Kcp Agent npm solid	56	229/wk	active
45	Delta Witness npm	56	222/wk	active
46	Argus Decision npm solid	56	173/wk	active
47	Shrike npm	56	125/wk	active
48	Free AI Ops npm	56	115/wk	active
49	wcagc — accessibility scanning npm	56	81/wk	active
50	Review Guard npm	56	62/wk	active
51	Semgrep plugin thin	55	10 ★	active
52	Healthclaw Guardrails plugin solid	55	27 ★	active
53	Malchela plugin solid	55	114 ★	active
54	Prodsec Skills Ge Core plugin	55	43 ★	active
55	Proteus plugin	55	29 ★	active
56	Cyber Neo plugin	55	250 ★	active
57	Decionis npm	55	469/wk	active
58	Midplane npm	55	387/wk	active
59	Bastion npm solid	55	328/wk	active
60	Elicitly npm	55	319/wk	active
61	Husk npm	55	318/wk	active
62	Tersign Evidence npm solid	55	309/wk	active
63	Dashclaw npm	55	261/wk	active
64	Compliance · yaktool-compliance-mcp npm	55	187/wk	active
65	Sentinel Scan CLI npm	55	136/wk	active
66	AI Adoption Playbook plugin solid	54	20 ★	active
67	Mcplookup npm	54	527/wk	active
68	Tollbooth Swap API npm solid	54	509/wk	active
69	Secrets Le npm	54	492/wk	active
70	Logi Approval npm	54	437/wk	active
71	A11y Check npm solid	54	424/wk	active
72	SecureStamp Action Proof — Cross-Cloud Public Beta (Unverified) npm	54	350/wk	active
73	Inspectrum npm solid	54	336/wk	active
74	Soldefi npm solid	54	317/wk	active
75	VITNA — Agent Compliance Preflight npm	54	317/wk	active
76	Ibanforge npm deep	54	302/wk	active
77	Arena npm	54	271/wk	active
78	SWT3 AI Witness npm solid	54	241/wk	active
79	Delimit — The merge gate for AI-written code npm solid	54	239/wk	active
80	Graneth npm thin	54	238/wk	active
81	Lens npm	54	230/wk	active
82	Wphealthkit npm	54	221/wk	active
83	Unfragile npm	54	211/wk	active
84	Sverklo npm solid	54	199/wk	active
85	Camoufox · whit3rabbit npm solid	54	184/wk	active
86	Pentest npm	54	168/wk	active
87	Claude Collab Plugin npm	54	165/wk	active
88	Attack Surface npm	54	149/wk	active
89	S Gw npm	54	144/wk	active
90	IntoDNS.ai DNS & Email Security Scanner npm	54	119/wk	active
91	Agent Guards npm thin	53	478/wk	active
92	Tenant Isolation npm	53	463/wk	active
93	Agent Firewall npm thin	53	363/wk	active
94	Payment Guard npm thin	53	361/wk	active
95	Code Guard npm thin	53	348/wk	active
96	Bitcoin Risk Brief npm	53	307/wk	active
97	Shopify Operations npm	53	280/wk	active
98	Koma Gate npm	53	277/wk	active
99	404 Directory npm	53	222/wk	active
100	Zyrax Guard npm	53	216/wk	active
101	Nexus Agents npm solid	53	194/wk	active
102	Weclaude npm solid	53	147/wk	active
103	Inite Club npm	53	146/wk	active
104	Domain Security npm	53	137/wk	active
105	Security · paretools npm	53	77/wk	active
106	Di npm	53	51/wk	active
107	Openweb plugin deep	52	35 ★	active
108	Speclock plugin	52	25 ★	active
109	Vantic npm solid	52	429/wk	active
110	AI Trust npm solid	52	404/wk	active
111	Admob npm deep	52	295/wk	active
112	Metis RWA Research npm	52	273/wk	active
113	Safenode MCP Gateway npm	52	249/wk	active
114	Orangerail npm	52	237/wk	active
115	Agentic OS npm thin	52	217/wk	active
116	Gemini Omni npm solid	52	210/wk	active
117	Oci npm	52	209/wk	active
118	three.ws Autopilot npm	52	201/wk	active
119	ILO Labour Statistics (ILOSTAT) npm	52	176/wk	active
120	Juris UCC Article 9 lien search npm	52	175/wk	active

Recently changed in Security

117 changes recorded here in the last 45 days, newest and most serious first.

2026-08-10 Cls — cls-mcp-server now reaches credentials
2026-08-10 Workrail — @exaudeus/workrail now reaches credentials
2026-08-10 Workrail — @exaudeus/workrail now runs a script when it installs
2026-08-10 Delimit — The merge gate for AI-written code — delimit-cli now reaches filesystem, network

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

46 of these are graded against their own documentation. The rest carry adoption and upkeep signal only. We publish what is measured and name what is not.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Assessment vs Consent Auth0 vs Consent Preflight vs Consent Accessibility Scanner vs Consent Ghl Command vs Consent Fullcourtdefense CLI vs Consent Agent Hooks vs Consent Auth0 vs Assessment Preflight vs Assessment Accessibility Scanner vs Assessment Ghl Command vs Assessment Fullcourtdefense CLI vs Assessment

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›

tashan Pro$6/mo

117 changes across Security capabilities in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.