What is the best security MCP server?

By tashan's measured score, the highest-ranked are Supplement Advisor, Quantaseal, Gridstamp, Refinery, Ssid. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers, plugins & skills, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here and ranks them by tashan score — a transparent composite of upkeep, freshness and real adoption. How we measure ›

#	Capability	tashan	Evidence	Health
1	Supplement Advisor npm Security	47	68/wk	active
2	Quantaseal npm Security	47	68/wk	active
3	Gridstamp npm Security	47	63/wk	active
4	Refinery npm Security	47	63/wk	active
5	Ssid npm Security	47	60/wk	active
6	Actionproof npm Security	47	57/wk	active
7	Opzyai Security Check npm Security	47	56/wk	active
8	Scan npm Security	47	56/wk	active
9	Kasbah npm Security	47	52/wk	active
10	Solana Security npm Security	47	51/wk	active
11	Defi Guard npm Security	47	47/wk	active
12	PDF It npm Security	47	39/wk	active
13	Get An Expert npm Security	47	31/wk	active
14	Security Guidance plugin Security	46	2 marketplaces	—
15	Vanta Mcp Plugin plugin Security	46	2 marketplaces	—
16	Audit Project plugin Security	46	3 ★	active
17	Claude Universe plugin Security	46	71 ★	active
18	Deslop plugin Security	46	3 ★	active
19	Secure Sdlc Agents plugin Security	46	12 ★	active
20	Spec plugin Security	46	9 ★	active
21	Agent Trust npm Security	46	72/wk	active
22	Pqs npm Security	46	72/wk	active
23	Onivoro npm Security	46	69/wk	active
24	Mythsensus npm Security	46	68/wk	active
25	Gtm Tech Stack Signal Scraper npm Security	46	59/wk	active
26	Job Board Keyword Signal Scanner npm Security	46	59/wk	active
27	Magician plugin Security	45	11 ★	active
28	Perf plugin Security	45	2 ★	active
29	Xilinx Suite plugin Security	45	376 ★	active
30	Sheepdog plugin Security	45	11 ★	active
31	Fk Eng Agents plugin thin Security	45	1 marketplaces	active
32	Fk Toolkit Ops plugin thin Security	45	1 marketplaces	active
33	Claude Code Statusline plugin Security	45	2 ★	active
34	Mailbuttons (mbag.ai) npm Security	45	60/wk	active
35	Proctor npm Security	45	45/wk	active
36	Marchward npm Security	45	44/wk	active
37	Gatekeeper npm Security	45	42/wk	active
38	Terraform npm Security	45	41/wk	active
39	Siteglass npm Security	45	30/wk	active
40	Stackhawk Hawkscan plugin Security	44	1 marketplaces	active
41	Stackhawk API plugin Security	44	1 marketplaces	active
42	Clover plugin Security	44	0 ★	active
43	Codex Bridge plugin Security	44	1 marketplaces	active
44	Comparative Landscape Brief plugin Security	44	1 marketplaces	active
45	Compounded plugin Security	44	5 ★	active
46	Devflow · KlausFreiberufler plugin Security	44	1 ★	active
47	Rugproof plugin Security	44	9 ★	active
48	Sdlc Wizard plugin Security	44	1 marketplaces	active
49	Sdlc Wizard Cowork plugin Security	44	1 marketplaces	active
50	Bubble Shield plugin Security	44	0 ★	active
51	Skill Cso Review plugin Security	44	1 marketplaces	active
52	Microsoft Todo npm Security	44	107/wk	active
53	AgentTrust — Identity & Trust for A2A Agents npm Security	44	100/wk	active
54	Ghosthunt npm Security	44	57/wk	active
55	HTML Email Playbook npm Security	44	57/wk	active
56	Imagedimensions npm Security	44	43/wk	active
57	Naming Signal npm Security	44	32/wk	active
58	Code Reviewer skill Security	43	2 repos	active
59	AI Plugins plugin Security	43	2 marketplaces	active
60	Claude Patterns plugin Security	43	1 ★	active
61	Clawkeeper plugin Security	43	2 ★	active
62	Records plugin Security	43	1 ★	active
63	Shieldcode plugin Security	43	1 ★	active
64	Ts Ddd Controller plugin Security	43	1 marketplaces	active
65	Ts Ddd Use Case plugin Security	43	1 marketplaces	active
66	Ts Ddd Value Object plugin Security	43	1 marketplaces	active
67	Pop Pay npm Security	43	112/wk	active
68	Cropgraph npm Security	43	72/wk	active
69	Dep Scope npm Security	43	67/wk	active
70	Arcxs Protocol npm Security	43	58/wk	active
71	Safeprompt Dev npm Security	43	56/wk	active
72	e2a — email for AI agents npm Security	43	54/wk	active
73	Securityscorecard npm Security	43	53/wk	active
74	Voice Truthgate npm Security	43	31/wk	active
75	Utdk npm Security	43	28/wk	active
76	Iconfont npm Security	43	23/wk	active
77	Pagerduty plugin Security	42	5 ★	active
78	Harness Sast And Sca plugin Security	42	3 ★	active
79	AWS Agents For Devsecops plugin Security	42	1 marketplaces	—
80	Code Modernization plugin Security	42	1 marketplaces	—
81	Rootly plugin Security	42	1 marketplaces	—
82	Auto Memory plugin Security	42	154 ★	active
83	Claude Code Kit plugin Security	42	4 ★	active
84	Claude Launchpad plugin Security	42	6 ★	active
85	Fresh Eyes Review plugin Security	42	1 marketplaces	—
86	Hs plugin Security	42	30 ★	active
87	Hunter For Claude plugin Security	42	1 marketplaces	—
88	Idle Timing plugin Security	42	4 ★	active
89	M365 It Admin Library plugin Security	42	1 marketplaces	—
90	Qt Development plugin Security	42	1 marketplaces	—
91	Remote System Maintenance plugin Security	42	1 marketplaces	—
92	Repo Intel plugin Security	42	3 ★	active
93	Rootly For Claude Code plugin Security	42	1 marketplaces	—
94	Signet plugin Security	42	38 ★	active
95	Smb Cybersecurity Policy Kit plugin Security	42	1 marketplaces	—
96	Trove plugin Security	42	3 ★	active
97	Vibekanban plugin Security	42	3 ★	active
98	Testdino plugin Security	42	1 marketplaces	—
99	Tres Finance Plugin plugin Security	42	1 marketplaces	—
100	Raindrop API plugin Security	42	1 marketplaces	—
101	Use Slicer Proxy plugin Security	42	1 marketplaces	—
102	Guardrails Bash plugin Security	42	1 marketplaces	—
103	Guardrails Docker plugin Security	42	1 marketplaces	—
104	Guardrails Xcode plugin Security	42	1 marketplaces	—
105	Reflection plugin Security	42	1 marketplaces	—
106	Security Guidance · Ralle1976 plugin Security	42	1 marketplaces	—
107	Platform Assessment plugin Security	42	1 marketplaces	—
108	Auth0 OAUTH Plugin plugin Security	42	1 marketplaces	—
109	Infinite Video plugin Security	42	1 marketplaces	—
110	Code Quality plugin Security	42	1 marketplaces	—
111	Agent SDK Dev · varaku1012 plugin Security	42	1 marketplaces	—
112	Explanatory Output Style · varaku1012 plugin Security	42	1 marketplaces	—
113	Keyward plugin Security	42	1 ★	active
114	Ari npm Security	42	77/wk	active
115	Audit Trail npm Security	42	57/wk	active
116	Domain Deliverability Checker npm Security	42	44/wk	active
117	Funding Press Signal Scanner npm Security	42	42/wk	active
118	India Regulatory npm Security	42	42/wk	active
119	Byakugan npm Security	42	39/wk	active
120	Uuaid npm Security	42	20/wk	active

2 of these have been expertise-graded against their documentation; the rest carry adoption and upkeep signal only. We publish what is measured and say plainly what isn't.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Auth0 vs Xmcp Auth0 vs NPM Sentinel Auth0 vs Qverisai Auth0 vs AI Agent Firewall Auth0 vs Accessibility Scanner Auth0 vs Next Lane Auth0 vs Frappe Inspector NPM Sentinel vs Xmcp Qverisai vs Xmcp AI Agent Firewall vs Xmcp Accessibility Scanner vs Xmcp Next Lane vs Xmcp

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›