What is the best security MCP server?

By tashan's measured score, the highest-ranked are Secops Team, Red, Red Pentest, Red Report, Blue. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers & plugins, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Secops Team plugin	37	1 marketplaces	active
2	Red plugin	37	1 marketplaces	active
3	Red Pentest plugin	37	1 marketplaces	active
4	Red Report plugin	37	1 marketplaces	active
5	Blue plugin	37	1 marketplaces	active
6	Blue Detect plugin	37	1 marketplaces	active
7	Blue Harden plugin	37	1 marketplaces	active
8	Blue Recon plugin	37	1 marketplaces	active
9	Hunt Assess plugin	37	1 marketplaces	active
10	Hunt Recon plugin	37	1 marketplaces	active
11	Patch plugin	37	1 marketplaces	active
12	Patch Plan plugin	37	1 marketplaces	active
13	Patch Recon plugin	37	1 marketplaces	active
14	Chain plugin	37	1 marketplaces	active
15	Chain Scan plugin	37	1 marketplaces	active
16	Chain Recon plugin	37	1 marketplaces	active
17	Sast plugin	37	1 marketplaces	active
18	Sast Scan plugin	37	1 marketplaces	active
19	Sast Fix plugin	37	1 marketplaces	active
20	Sast Recon plugin	37	1 marketplaces	active
21	Siem Rule plugin	37	1 marketplaces	active
22	Resp plugin	37	1 marketplaces	active
23	Resp Playbook plugin	37	1 marketplaces	active
24	Resp Recon plugin	37	1 marketplaces	active
25	Zero Recon plugin	37	1 marketplaces	active
26	Phish plugin	37	1 marketplaces	active
27	Phish Recon plugin	37	1 marketplaces	active
28	Change Policy plugin	37	1 marketplaces	active
29	Compat Recon plugin	37	1 marketplaces	active
30	Gate · tonone-ai plugin	37	1 marketplaces	active
31	Gate Recon plugin	37	1 marketplaces	active
32	Kube Rbac plugin	37	1 marketplaces	active
33	Kube Recon plugin	37	1 marketplaces	active
34	Queue Recon plugin	37	1 marketplaces	active
35	Mesh Recon plugin	37	1 marketplaces	active
36	Guard plugin	37	1 marketplaces	active
37	Guard Design plugin	37	1 marketplaces	active
38	Guard Audit plugin	37	1 marketplaces	active
39	Guard Recon plugin	37	1 marketplaces	active
40	Budget Audit plugin	37	1 marketplaces	active
41	Pave Contribute plugin	37	1 marketplaces	active
42	Warden Scan plugin	37	1 marketplaces	active
43	Audit · soreavis plugin	37	0 ★	active
44	Sustainable Manager plugin	37	2 ★	active
45	Shodan npm solid	37	304/wk	abandoned
46	Sportscore npm solid	37	255/wk	active
47	Vaspera Hardening npm	37	140/wk	active
48	Signet MCP Tools npm deep	37	62/wk	active
49	Korext: AI Code Governance npm solid	37	54/wk	active
50	Contractor License Verification (TradesAPI) npm solid	37	51/wk	active
51	India Regulatory npm deep	37	49/wk	active
52	Domain Deliverability Checker npm solid	37	44/wk	active
53	Safeprompt Dev npm solid	37	44/wk	active
54	Mcpaudit npm	37	10/wk	active
55	Agentic Guardrails plugin	36	0 ★	active
56	Endorlabs plugin	36	1 marketplaces	active
57	Repo Intel plugin solid	36	3 ★	active
58	Rootly · rootly-ai-labs plugin	36	1 ★	active
59	Sentinal Stack plugin solid	36	3 ★	active
60	Reco plugin	36	0 ★	active
61	Ecc · edp43273-glitch plugin	36	0 ★	active
62	Devops Tools · staticaland plugin	36	1 marketplaces	active
63	Hitch plugin	36	0 ★	active
64	Felt plugin	36	3 ★	active
65	Software License Checker plugin	36	1 marketplaces	active
66	Codex Windows Hooks Fix plugin	36	1 marketplaces	active
67	NPM License Declaration plugin	36	1 marketplaces	active
68	Claude Stuff plugin	36	0 ★	active
69	Drdeploy npm	36	58/wk	active
70	Phasefolio npm	36	57/wk	active
71	Agent4s plugin solid	35	13 ★	active
72	Deployshield plugin solid	35	3 ★	active
73	Forgeproof plugin	35	2 ★	active
74	Hrevn For Claude Code plugin	35	0 ★	active
75	Maxim plugin	35	2 ★	active
76	Sosa Compliance Checker plugin	35	1 marketplaces	active
77	Sosa Governor plugin	35	1 marketplaces	active
78	Php Unserialize Audit plugin solid	35	59 ★	active
79	Mxcp Plugin plugin	35	2 ★	active
80	Compliance Navigator plugin	35	1 marketplaces	active
81	Malicious Behavior plugin	35	1 marketplaces	active
82	Pr Review Html plugin	35	1 marketplaces	active
83	Bitwarden CLI plugin	35	1 marketplaces	active
84	Util Skills plugin	35	1 marketplaces	active
85	Thermonuclear Review plugin	35	1 marketplaces	active
86	Archive First plugin	35	1 marketplaces	active
87	Safari Browser plugin	35	1 marketplaces	active
88	Cybersecurity Reviewer plugin	35	1 marketplaces	active
89	Wf Fake plugin	35	1 marketplaces	active
90	Mac plugin	35	1 marketplaces	active
91	Audit · FabienSalles plugin	35	1 marketplaces	active
92	Security Audit · FabienSalles plugin	35	1 marketplaces	active
93	Security Runtime plugin	35	1 marketplaces	active
94	Dm Review plugin	35	1 marketplaces	active
95	Pipeline plugin	35	1 marketplaces	active
96	Earshot plugin	35	0 ★	active
97	Dmj plugin	35	0 ★	active
98	Field plugin	35	0 ★	active
99	Synthflow plugin	35	0 ★	active
100	Hermit Scribe plugin	35	1 marketplaces	active
101	Ololand Compliance Hooks plugin	35	1 marketplaces	active
102	Interlock plugin	35	0 ★	active
103	Intersynth plugin	35	0 ★	active
104	Emili Kosik Admission Skills plugin	35	1 ★	active
105	GitHub Security npm deep	35	886/wk	abandoned
106	Promptspeak npm	35	119/wk	active
107	Semgrep · VetCoders npm	35	74/wk	active
108	Agentradar npm solid	35	52/wk	active
109	Claude Code · leo000001 npm	35	45/wk	active
110	Attest · attest-mcp npm	35	41/wk	active
111	Tidebase npm solid	35	25/wk	active
112	Secret Safe Env npm	35	23/wk	active
113	Aiwiki npm	35	14/wk	active
114	Fga npm	35	12/wk	active
115	Complyeah npm	35	11/wk	active
116	Leatherhead npm	35	11/wk	active
117	Glimind npm	35	9/wk	active
118	Sonatype Guide plugin solid	34	3 ★	active
119	Agent Smith plugin solid	34	6 ★	active
120	Gh Guard plugin solid	34	15 ★	active

Recently changed in Security

8 changes recorded here in the last 45 days, newest and most serious first.

2026-08-10 Semgrep · VetCoders — mcp-server-semgrep now runs a script when it installs
2026-08-11 Promptspeak — @chrbailey/promptspeak-mcp-server now reaches credentials, database
2026-08-12 Fga — fga-mcp now runs a script when it installs
2026-09-13 Shodan — shodan now reads as abandoned, was active

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

19 of these are graded against their own documentation. The rest carry adoption and upkeep signal only. We publish what is measured and name what is not.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Assessment vs Consent Auth0 vs Consent Preflight vs Consent Accessibility Scanner vs Consent Ghl Command vs Consent Fullcourtdefense CLI vs Consent Agent Hooks vs Consent Auth0 vs Assessment Preflight vs Assessment Accessibility Scanner vs Assessment Ghl Command vs Assessment Fullcourtdefense CLI vs Assessment

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›

tashan Pro$6/mo

8 changes across Security capabilities in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.