What is the best security MCP server?

By tashan's measured score, the highest-ranked are Reporelay, Navigator, Attestify OS, Tollary Agent Transaction Guard, Evolith Architecture Governance. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers & plugins, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Reporelay npm	47	43/wk	active
2	Navigator npm	47	42/wk	active
3	Attestify OS npm	47	37/wk	active
4	Tollary Agent Transaction Guard npm	47	36/wk	active
5	Evolith Architecture Governance npm	47	32/wk	active
6	AWS Agents For Devsecops plugin	46	2 marketplaces	—
7	Claude Security plugin	46	2 marketplaces	—
8	Math Olympiad plugin	46	2 marketplaces	—
9	Rootly plugin	46	2 marketplaces	—
10	Security Guidance plugin	46	2 marketplaces	—
11	Frank Grimes plugin	46	2 ★	active
12	Barker Stablecoin Skills plugin	46	3 ★	active
13	Enhance plugin solid	46	3 ★	active
14	Version Sentinel plugin solid	46	3 ★	active
15	Claude Code Sdlc · MCKRUZ plugin	46	4 ★	active
16	Weapp Agent npm solid	46	141/wk	active
17	Agent Gate npm	46	96/wk	active
18	Make Audit npm	46	71/wk	active
19	Paysafe npm solid	46	63/wk	active
20	AIShield Security Scanner npm	46	62/wk	active
21	Assurly npm	46	49/wk	active
22	Palisade npm	46	48/wk	active
23	Bridgistic npm	46	47/wk	active
24	Privacypage npm	46	41/wk	active
25	Redact PDF npm	46	32/wk	active
26	Atlas · latellu npm	46	24/wk	active
27	Stackhawk Hawkscan plugin	45	3 marketplaces	active
28	Stackhawk API plugin	45	3 marketplaces	active
29	Iris plugin solid	45	8 ★	active
30	Mumei plugin	45	2 ★	active
31	Fort plugin solid	45	73 ★	active
32	Raven · giggsoinc plugin solid	45	5 ★	active
33	Punt plugin	45	1 marketplaces	active
34	Laravel Team plugin	45	13 ★	active
35	Hermes · wildcat-finance plugin	45	1 marketplaces	active
36	Local AI plugin	45	1 marketplaces	active
37	Bitwarden Security Engineer plugin	45	1 marketplaces	active
38	Bitwarden Devops Engineer plugin	45	1 marketplaces	active
39	Bitwarden AI Telemetry plugin	45	1 marketplaces	active
40	Protected Paths plugin	45	1 marketplaces	active
41	Kyoso plugin	45	3 ★	active
42	Recourse CLI npm	45	180/wk	active
43	Infomaniak MCP Agent npm deep	45	115/wk	active
44	Kasbah npm solid	45	94/wk	active
45	Guardian · @mcp-guardian npm	45	93/wk	active
46	Vorim npm solid	45	87/wk	active
47	Multimail npm solid	45	84/wk	active
48	Nakodo npm	45	80/wk	active
49	Aga npm	45	76/wk	active
50	Dingdawg Healthcare Agent npm thin	45	75/wk	active
51	Domainintel npm solid	45	69/wk	active
52	Switchboard npm	45	60/wk	active
53	Domain Trust npm	45	54/wk	active
54	Sentrik npm	45	52/wk	active
55	Reportia npm solid	45	52/wk	active
56	Onchain Agent Wallets npm	45	51/wk	active
57	Risk npm	45	40/wk	active
58	Get An Expert Agent npm solid	45	39/wk	active
59	Scanpay npm	45	37/wk	active
60	Inner Security npm	45	20/wk	active
61	Stablecoin reserve attestations npm	45	18/wk	active
62	Nightvision plugin solid	44	2 ★	active
63	Deepread plugin solid	44	4 ★	active
64	Sanctuary Framework plugin solid	44	6 ★	active
65	Usap Skills plugin solid	44	3 ★	active
66	Kernel Vuln Analyzer plugin solid	44	39 ★	active
67	Genesis Tools plugin	44	1 marketplaces	active
68	Genesis Tools · genesiscz plugin	44	1 marketplaces	active
69	Skillforge plugin	44	1 ★	active
70	Eos plugin	44	0 ★	active
71	Oh My Privacy plugin	44	1 ★	active
72	Israel Services plugin	44	2 ★	active
73	Agent Toolkit plugin	44	2 ★	active
74	Dunnlab Code plugin	44	2 ★	active
75	Statcite plugin	44	1 ★	active
76	Ecc Agentshield npm	44	7k/wk	active
77	Pqs npm solid	44	159/wk	active
78	Mcpskillsio npm	44	123/wk	active
79	Clarxai npm	44	104/wk	active
80	Hookwarden — Webhook Integrity npm	44	93/wk	active
81	Calllint · calllint-mcp npm	44	91/wk	active
82	Solana Security npm solid	44	86/wk	active
83	Valta npm solid	44	78/wk	active
84	Kenwea — Sandbox Attestation & Agent Marketplace npm solid	44	77/wk	active
85	Scannd npm	44	76/wk	active
86	Flagrix npm	44	76/wk	active
87	Mintverdict npm	44	75/wk	active
88	Lotor npm	44	63/wk	active
89	Credda Trust npm	44	61/wk	active
90	Governance npm	44	61/wk	active
91	AgentUtility Prooflayer npm	44	53/wk	active
92	Agent Spend Policy npm	44	52/wk	active
93	Code Eye npm	44	37/wk	active
94	Mail7 Email Validation npm	44	36/wk	active
95	Tripwire Guard — evidence-first injection scanner npm	44	36/wk	active
96	AuditSocials Glossary npm	44	32/wk	active
97	Safe Fetch npm	44	31/wk	active
98	Verifa npm	44	24/wk	active
99	X402 Scan npm	44	16/wk	active
100	Webmcp Today npm	44	14/wk	active
101	Double Shot Latte plugin solid	43	111 ★	stable
102	Apiiro plugin thin	43	3 ★	active
103	Dreamforge Audit plugin solid	43	6 ★	active
104	Langguard Scope plugin	43	5 ★	active
105	Slack · adelaidasofia plugin	43	1 ★	active
106	Fianu Skills plugin	43	1 ★	active
107	Daymade Skill plugin	43	1 marketplaces	active
108	Repomix Safe Mixer plugin	43	1 marketplaces	active
109	Marketplace Health Check plugin	43	1 marketplaces	active
110	GitHub Sensitive Data Cleanup plugin	43	1 marketplaces	active
111	Openclaw · daymade plugin	43	1 marketplaces	active
112	Security · aws-solutions-library-samples plugin	43	1 marketplaces	active
113	Code Analysis plugin	43	1 marketplaces	active
114	Keboola CLI plugin	43	1 marketplaces	active
115	Han Research plugin	43	1 marketplaces	active
116	Agenthood Validation plugin	43	1 marketplaces	active
117	Security Toolkit plugin	43	1 marketplaces	active
118	Verification Harness plugin	43	1 marketplaces	active
119	Secure Coding plugin	43	2 ★	active
120	Rif Runtime plugin	43	1 ★	active

Recently changed in Security

38 changes recorded here in the last 45 days, newest and most serious first.

2026-08-10 Guardian · @mcp-guardian — @mcp-guardian/server now reaches database, filesystem, network
2026-08-10 Ecc Agentshield — ecc-agentshield now reaches filesystem
2026-08-11 Sentrik — sentrik now runs a script when it installs
2026-08-05 Paysafe — the tashan score for paysafe fell to 51.0, from 62.0

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

27 of these are graded against their own documentation. The rest carry adoption and upkeep signal only. We publish what is measured and name what is not.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Assessment vs Consent Auth0 vs Consent Preflight vs Consent Accessibility Scanner vs Consent Ghl Command vs Consent Fullcourtdefense CLI vs Consent Agent Hooks vs Consent Auth0 vs Assessment Preflight vs Assessment Accessibility Scanner vs Assessment Ghl Command vs Assessment Fullcourtdefense CLI vs Assessment

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›

tashan Pro$6/mo

38 changes across Security capabilities in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.