What is the best security MCP server?

By tashan's measured score, the highest-ranked are Keymaster, Verify, Passport, Whoisjson, Penni. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers & plugins, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here and ranks them by tashan score — a transparent composite of upkeep, freshness and real adoption. How we measure ›

#	Capability	tashan	Evidence	Health
1	Keymaster npm Security	36	70/wk	active
2	Verify npm Security	36	69/wk	active
3	Passport npm Security	36	63/wk	active
4	Whoisjson npm Security	36	61/wk	active
5	Penni npm Security	36	50/wk	active
6	Finishkit npm Security	36	47/wk	active
7	Shellquote npm Security	36	36/wk	active
8	Harnish plugin Security	35	4 ★	active
9	Managelm plugin Security	35	8 ★	active
10	Yoshi plugin Security	35	1 ★	active
11	Public Repo Readiness plugin Security	35	0 ★	active
12	Railguard plugin Security	35	39 ★	active
13	Singularity Claude plugin Security	35	27 ★	active
14	Sentinelx Prime plugin Security	35	36 ★	active
15	Agenium npm Security	35	139/wk	active
16	AI Scanner npm Security	35	71/wk	active
17	Comfyui npm Security	35	61/wk	active
18	Soul npm Security	35	47/wk	active
19	Pentagonal npm Security	35	44/wk	active
20	Vectordecisions npm Security	35	35/wk	active
21	Agent Trace Triage plugin Security	34	0 ★	active
22	Agentic Swe plugin Security	34	3 ★	active
23	Ff Review plugin Security	34	0 ★	active
24	Lightning Tv Expert Plugin plugin Security	34	3 ★	active
25	Oh My Secuaudit plugin Security	34	3 ★	active
26	Railscto plugin Security	34	12 ★	active
27	Token Inspector plugin Security	34	4 ★	active
28	Fs Dev plugin Security	34	1 marketplaces	active
29	Contextd plugin Security	34	1 marketplaces	active
30	Open Policy Agent plugin Security	34	1 marketplaces	active
31	Discover plugin Security	34	8 ★	active
32	Accelerators npm Security	34	62/wk	active
33	Clevername npm Security	34	50/wk	active
34	Logclaw npm Security	34	49/wk	active
35	Preflight Ios npm Security	34	43/wk	active
36	Noderail npm Security	34	36/wk	active
37	Headless Oracle npm Security	34	34/wk	active
38	Pharma Signal API npm Security	34	34/wk	active
39	Axme Code plugin Security	33	0 ★	active
40	Byom Review plugin Security	33	0 ★	active
41	Ccguard plugin Security	33	0 ★	active
42	Cck plugin Security	33	12 ★	active
43	Claude Crap plugin Security	33	7 ★	active
44	Dyslexia Support Skill plugin Security	33	0 ★	active
45	Eight Eyes plugin Security	33	2 ★	active
46	Harnesskit plugin Security	33	2 ★	active
47	Latio Secure Supply Chain Skills plugin Security	33	15 ★	active
48	Mypowers plugin Security	33	0 ★	active
49	NPM Postinstall Attack Scanner plugin Security	33	1 ★	active
50	Pownie plugin Security	33	24 ★	active
51	Upkeep plugin Security	33	0 ★	active
52	Matrix plugin Security	33	15 ★	active
53	Gepa Observable Migration plugin Security	33	58 ★	stable
54	AI Review Arena plugin Security	33	1 ★	active
55	Codedev npm Security	33	108/wk	active
56	Spaceship npm Security	33	89/wk	active
57	SkillsSafe Security Scanner npm Security	33	59/wk	active
58	Bankregpulse npm Security	33	59/wk	active
59	Security Orchestra npm Security	33	42/wk	active
60	Ordinals npm Security	33	39/wk	active
61	Trust Gate npm Security	33	23/wk	active
62	CertScore.ai — Light mode remote Security	33	0 ★	active
63	Mcpcap python Security	33	50 ★	active
64	Nekzus NPM Sentinel remote Security	33	18 ★	active
65	Automox python Security	33	10 ★	active
66	Invinoveritas remote Security	33	4 ★	active
67	Dotnet Analyzer plugin Security	32	2 ★	active
68	Infynon Pkg plugin Security	32	5 ★	active
69	Kotlinsense plugin Security	32	1 ★	active
70	LLM Secure Patterns plugin Security	32	1 ★	active
71	Mpp Inspector plugin Security	32	2 ★	active
72	Opinionated Prisma Skills plugin Security	32	2 ★	active
73	Privacypilot plugin Security	32	1 ★	active
74	Skillforge Autoresearch plugin Security	32	1 marketplaces	active
75	The Courtroom plugin Security	32	9 ★	active
76	Vitals plugin Security	32	40 ★	active
77	Arc Security npm Security	32	48/wk	active
78	Security npm Security	32	31/wk	active
79	ThinkNEO Control Plane remote Security	32	3 ★	active
80	Auto Approve Compound Bash plugin Security	31	21 ★	active
81	Claude Code Tokenbudget plugin Security	31	1 ★	active
82	Claude Meta Skills plugin Security	31	1 ★	active
83	Claude Notify plugin Security	31	3 ★	active
84	Docker Image Scan plugin Security	31	0 ★	active
85	Eterdis Strategy Skills plugin Security	31	5 ★	active
86	Memorydetective plugin Security	31	1 ★	active
87	Raven Guard plugin Security	31	1 ★	active
88	Rubixkube plugin Security	31	1 ★	active
89	Security Sweep plugin Security	31	6 ★	active
90	Shield plugin Security	31	11 ★	active
91	Throwing plugin Security	31	0 ★	active
92	Package Registry npm Security	31	658/wk	abandoned
93	Stylemcp npm Security	31	76/wk	abandoned
94	Aikido · Bajuzjefe npm Security	31	53/wk	active
95	Cloaked npm Security	31	32/wk	active
96	Godavaii npm Security	31	16/wk	active
97	Almanax Security plugin Security	30	2 ★	active
98	Backend Security Skills plugin Security	30	2 ★	active
99	Claude Live Title plugin Security	30	1 ★	active
100	Claude Project Bootstrap plugin Security	30	0 ★	active
101	Craft Statusline plugin Security	30	2 ★	active
102	Cync plugin Security	30	0 ★	active
103	Defluff plugin Security	30	0 ★	active
104	Genesis Governance Claude plugin Security	30	0 ★	active
105	Hipaalint AI plugin Security	30	1 ★	active
106	Karellen Lsp plugin Security	30	0 ★	active
107	Prompt Squeeze plugin Security	30	1 ★	active
108	Sciqlab Supply Chain plugin Security	30	2 ★	active
109	Smarthealthconnect plugin Security	30	1 ★	abandoned
110	Zig Lsp plugin Security	30	0 ★	active
111	Harness · kamilseghrouchni plugin Security	30	0 ★	active
112	Pii Scrub plugin Security	30	0 ★	active
113	Spicedb Dev plugin Security	30	2 ★	active
114	Orchestraprime npm Security	30	50/wk	active
115	DJZS Trust remote Security	30	3 ★	active
116	Bidda Compliance remote Security	30	1 ★	active
117	ContrastAPI remote Security	30	32 ★	active
118	Terse Md plugin Security	29	0 ★	active
119	Agentops plugin Security	29	3 ★	active
120	Blueprint Sdlc plugin Security	29	0 ★	active

0 of these have been expertise-graded against their documentation; the rest carry adoption and upkeep signal only. We publish what is measured and say plainly what isn't.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Auth0 vs Xmcp Auth0 vs NPM Sentinel Auth0 vs Qverisai Auth0 vs AI Agent Firewall Auth0 vs Accessibility Scanner Auth0 vs Next Lane Auth0 vs Frappe Inspector NPM Sentinel vs Xmcp Qverisai vs Xmcp AI Agent Firewall vs Xmcp Accessibility Scanner vs Xmcp Next Lane vs Xmcp

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›