What is the best security MCP server?

By tashan's measured score, the highest-ranked are Zentric Protocol, Import Guardian, Checker, Tooltrust Scanner, Broke2built Skills. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers & plugins, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Zentric Protocol npm solid	43	108/wk	active
2	Import Guardian npm solid	43	88/wk	active
3	Checker npm solid	43	67/wk	active
4	Tooltrust Scanner npm solid	43	66/wk	active
5	Broke2built Skills npm thin	43	65/wk	active
6	Agent Receipts npm	43	62/wk	active
7	Steam Local npm deep	43	60/wk	active
8	Redacta npm	43	27/wk	active
9	Agent Toolkit · white-hat-lab npm	43	26/wk	active
10	The Poliety npm	43	25/wk	active
11	Auditsocials Compliance npm	43	19/wk	active
12	EthersFlow — Trust Gate for AI Agents npm	43	13/wk	active
13	Aport Guardrails plugin	42	25 ★	active
14	Circumpunct Ethics Virtues Plugin plugin	42	4 ★	active
15	Claude Universe plugin solid	42	71 ★	active
16	Rootly For Claude Code plugin	42	1 marketplaces	—
17	Smb Cybersecurity Policy Kit plugin	42	1 marketplaces	—
18	Tres Finance Plugin plugin	42	1 marketplaces	—
19	Use Slicer Proxy plugin	42	1 marketplaces	—
20	Guardrails Bash plugin	42	1 marketplaces	—
21	Guardrails Docker plugin	42	1 marketplaces	—
22	Guardrails Xcode plugin	42	1 marketplaces	—
23	Wiredforest Test Biblio Minimal plugin	42	1 marketplaces	—
24	Security Guidance · Ralle1976 plugin	42	1 marketplaces	—
25	Platform Assessment plugin	42	1 marketplaces	—
26	Code Quality plugin	42	1 marketplaces	—
27	Smart Contract Development plugin	42	1 marketplaces	—
28	Vebetterdao plugin	42	1 marketplaces	—
29	X 2 Earn Apps plugin	42	1 marketplaces	—
30	Secure GitHub Actions plugin	42	1 marketplaces	—
31	General Counsel Advisor plugin	42	1 marketplaces	—
32	Ra Qm Skills plugin	42	1 marketplaces	—
33	Business Operations Skills plugin	42	1 marketplaces	—
34	Dryrun Remediation plugin	42	1 marketplaces	—
35	Dryrun Pr Review plugin	42	1 marketplaces	—
36	Dryrun Finding Remediation plugin	42	1 marketplaces	—
37	Aka plugin	42	1 marketplaces	—
38	Aka Codex plugin	42	1 marketplaces	—
39	Refactor Council plugin	42	1 marketplaces	—
40	Staff Code Review plugin	42	1 marketplaces	—
41	NextDNS Web UI Architect plugin	42	1 marketplaces	—
42	Shell Wizard plugin	42	1 marketplaces	—
43	Worktree Plus plugin	42	1 marketplaces	—
44	Rubber Duck Tutor plugin	42	1 marketplaces	—
45	Brite Core plugin	42	1 marketplaces	active
46	Hype plugin	42	1 marketplaces	—
47	Skillsgoat plugin	42	0 ★	active
48	Agent Guardrails npm	42	164/wk	active
49	Bouncer npm	42	109/wk	active
50	Scan · CodingSelim npm deep	42	75/wk	active
51	Gridstamp npm	42	68/wk	active
52	Opzyai Security Check npm solid	42	67/wk	active
53	Refinery npm solid	42	63/wk	active
54	Ssid npm solid	42	60/wk	active
55	Defi Guard npm solid	42	60/wk	active
56	Touchstone npm solid	42	52/wk	active
57	Mcpgrade npm	42	50/wk	active
58	Collimer npm	42	46/wk	active
59	Firewalla npm	42	46/wk	active
60	Just Signal npm	42	35/wk	active
61	Get An Expert npm solid	42	31/wk	active
62	Validoria npm	42	29/wk	active
63	Air · thalus-ai npm	42	21/wk	active
64	Qr npm	42	17/wk	active
65	AI Plugins plugin	41	3 marketplaces	active
66	Audit Project plugin solid	41	3 ★	active
67	Deslop · agent-sh plugin solid	41	3 ★	active
68	Secure Sdlc Agents plugin solid	41	12 ★	active
69	Steward plugin	41	1 marketplaces	active
70	Hooks Toolkit plugin	41	1 marketplaces	active
71	Extension Audit plugin	41	1 marketplaces	active
72	Agentic Eval plugin	41	1 marketplaces	active
73	Ludus Environment Guide plugin	41	1 marketplaces	active
74	Doublecheck Agent plugin	41	1 marketplaces	active
75	Extension Reviewer Agent plugin	41	1 marketplaces	active
76	Proofgate Review plugin	41	1 marketplaces	active
77	Evidence Guard plugin	41	1 marketplaces	active
78	Dsg Governance plugin	41	1 marketplaces	active
79	Compliance Ising Z3 plugin	41	1 marketplaces	active
80	Interflux plugin	41	1 ★	active
81	Toraco plugin	41	0 ★	active
82	Health API npm	41	77/wk	active
83	Agent Perms npm	41	75/wk	active
84	Actionproof npm solid	41	73/wk	active
85	Job Board Keyword Signal Scanner npm solid	41	67/wk	active
86	Quantaseal npm	41	65/wk	active
87	Bugglo npm	41	27/wk	active
88	Teralynk npm	41	22/wk	active
89	Phoenix Zero — L2 Health Oracle npm	41	7/wk	active
90	Clover plugin	40	0 ★	active
91	Cortex · alphaaiservice plugin	40	1 ★	active
92	Sdlc Wizard plugin	40	1 marketplaces	active
93	Sdlc Wizard Cowork plugin	40	1 marketplaces	active
94	Bubble Shield plugin	40	0 ★	active
95	Np Governance plugin	40	1 marketplaces	active
96	Clojure plugin	40	1 marketplaces	active
97	Clojure Security plugin	40	1 marketplaces	active
98	Fp Security Reviewer plugin	40	1 marketplaces	active
99	Archyl Developer plugin	40	2 ★	active
100	Memsom plugin	40	3 ★	active
101	Preflight · assert-not-singularity plugin	40	0 ★	active
102	Orie plugin	40	0 ★	active
103	Roles plugin	40	0 ★	active
104	Edamame plugin	40	0 ★	active
105	Weilliptic Receipts plugin	40	0 ★	active
106	Plinth plugin	40	0 ★	active
107	Bws npm	40	408/wk	active
108	Pop Pay npm solid	40	129/wk	active
109	Securecode npm	40	78/wk	active
110	Ghosthunt npm solid	40	73/wk	active
111	Stdio Shellguard npm	40	62/wk	active
112	Onchain Safety npm thin	40	59/wk	active
113	Negbit npm	40	47/wk	active
114	Terraform · rajsir npm solid	40	41/wk	active
115	AI Supply npm thin	40	36/wk	active
116	Pagerduty plugin solid	39	5 ★	active
117	Sourcegraph plugin solid	39	4 ★	active
118	Ts Ddd Controller plugin	39	1 marketplaces	active
119	Ts Ddd Use Case plugin	39	1 marketplaces	active
120	Egc Compliance plugin	39	0 ★	active

Recently changed in Security

19 changes recorded here in the last 45 days, newest and most serious first.

2026-08-10 Air · thalus-ai — @thalus-ai/mcp-air now reaches database
2026-08-11 Firewalla — firewalla-mcp-server now reaches credentials, network
2026-08-27 Ssid — ssid-mcp now reads as abandoned, was active
2026-08-05 Steam Local — the tashan score for steam-local-mcp fell to 49.0, from 59.0

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

26 of these are graded against their own documentation. The rest carry adoption and upkeep signal only. We publish what is measured and name what is not.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Assessment vs Consent Auth0 vs Consent Preflight vs Consent Accessibility Scanner vs Consent Ghl Command vs Consent Fullcourtdefense CLI vs Consent Agent Hooks vs Consent Auth0 vs Assessment Preflight vs Assessment Accessibility Scanner vs Assessment Ghl Command vs Assessment Fullcourtdefense CLI vs Assessment

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›

tashan Pro$6/mo

19 changes across Security capabilities in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.