What is the best security MCP server?

By tashan's measured score, the highest-ranked are Harness Architect, Hlx Admin API Executor Guarded, Promptguard, Security Watchdog, Skill Security Check. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How many security MCP servers are there?

tashan currently measures 120 capabilities in this category out of its full tracked corpus. The count moves as servers are published and as adoption changes.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often the server appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Security

Security MCP servers, plugins & skills, ranked

Auth, secrets, scanning, identity. tashan measures 120 capabilities here. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Harness Architect plugin	34	2 ★	active
2	Hlx Admin API Executor Guarded plugin	34	1 ★	active
3	Promptguard plugin	34	2 ★	active
4	Security Watchdog plugin	34	1 ★	active
5	Skill Security Check plugin solid	34	3 ★	active
6	Hedwig plugin solid	34	4 ★	active
7	Claude Harness Builder plugin	34	1 ★	active
8	Vibe Sec plugin	34	0 ★	active
9	Security Audit CLI plugin	34	1 marketplaces	active
10	Learning Engine plugin	34	1 marketplaces	active
11	Devils Advocate plugin	34	1 marketplaces	active
12	Document Processing plugin	34	1 marketplaces	active
13	Dev Workflow · yesmarket plugin	34	0 ★	active
14	Conditional Rules Plugin plugin	34	1 marketplaces	active
15	First Principles plugin	34	1 marketplaces	active
16	Giskard Skills plugin thin	33	5 ★	active
17	Attacca plugin	33	2 ★	active
18	Skill Hunter plugin	33	2 ★	active
19	Mimic plugin	33	1 ★	active
20	Keyward plugin	33	1 ★	active
21	Agent Callable plugin solid	32	5 ★	active
22	Karellen Rr plugin deep	32	3 ★	active
23	Concord · zkwasm plugin	32	2 ★	active
24	Onecli plugin	32	1 ★	active
25	Prompt Sentinel V1 plugin	32	1 ★	active
26	Railguard plugin solid	31	39 ★	active
27	Singularity Claude plugin solid	31	27 ★	active
28	Railscto plugin solid	31	12 ★	active
29	Crowdcast plugin solid	31	9 ★	active
30	Managelm plugin solid	31	8 ★	active
31	Yoshi plugin	31	1 ★	active
32	AI Review Arena plugin	31	1 ★	active
33	Prompt Mini plugin solid	30	28 ★	active
34	Agentic Swe plugin	30	3 ★	active
35	Oh My Secuaudit plugin solid	30	3 ★	active
36	Double Check plugin	30	2 ★	active
37	Latio Secure Supply Chain Skills plugin solid	29	15 ★	active
38	Claude Crap plugin solid	29	7 ★	active
39	Adversarial Verify plugin	29	5 ★	active
40	Eight Eyes plugin	29	2 ★	active
41	NPM Postinstall Attack Scanner plugin	29	1 ★	active
42	Auto Approve Compound Bash plugin solid	28	21 ★	abandoned
43	Discover · shinpr plugin solid	28	8 ★	active
44	Security Sweep plugin solid	28	6 ★	active
45	Infynon Pkg plugin solid	28	5 ★	active
46	Dotnet Analyzer plugin solid	28	2 ★	active
47	LLM Secure Patterns plugin	28	1 ★	active
48	Privacypilot plugin	28	1 ★	active
49	Shield · alissonlinneker plugin solid	27	11 ★	active
50	Eterdis Strategy Skills plugin thin	27	5 ★	active
51	Claude Notify plugin solid	27	3 ★	active
52	Backend Security Skills plugin	27	2 ★	active
53	Sciqlab Supply Chain plugin	27	2 ★	active
54	Claude Live Title plugin	27	1 ★	active
55	Hipaalint AI plugin	27	1 ★	abandoned
56	Raven Guard plugin	27	1 ★	active
57	Rubixkube plugin	27	1 ★	active
58	Preflight · Nancy-Chauhan plugin solid	26	13 ★	abandoned
59	Almanax Security plugin solid	26	2 ★	active
60	Dx Guard plugin	26	2 ★	active
61	Cost Guard plugin	26	1 ★	active
62	Simplyprint 3D Printing plugin	26	1 ★	active
63	Agentops plugin solid	25	3 ★	active
64	Auto Research plugin solid	25	3 ★	active
65	Drift Guard plugin solid	25	3 ★	active
66	Freshprobe plugin	25	2 ★	active
67	Claude Code Vulnerability Check plugin	25	1 ★	active
68	Claude Voice Cue plugin	25	1 ★	active
69	Colosseum plugin	25	1 ★	active
70	Software Framework plugin	25	1 ★	active
71	Agent Looker For Claude Cowork plugin	25	1 ★	active
72	CLI Power Skills plugin	25	1 ★	active
73	Deepthink plugin	25	1 ★	active
74	Cmdlens plugin solid	24	11 ★	abandoned
75	Opsera Devsecops plugin solid	24	3 ★	abandoned
76	Claude Perfectionist plugin	24	1 ★	active
77	Compound Workflows plugin	24	1 ★	active
78	Mayiding Skills plugin	24	1 ★	active
79	Threat Modeling Toolkit plugin solid	23	8 ★	abandoned
80	Filling PDF Forms plugin solid	23	6 ★	abandoned
81	Gia Eu AI Act Compliance plugin	23	1 ★	abandoned
82	Claude Project Context Manager plugin solid	22	3 ★	abandoned
83	Claude Security Linter plugin	21	2 ★	abandoned
·	Vanta · @vantasdk npm	not scored yet	16k/wk	abandoned
·	Wooyun Legacy plugin thin	not scored yet	2k ★	abandoned
·	Code Review · vinhltt skill	not scored yet	6 repos	active
·	Verify · yonatangross skill	not scored yet	6 repos	active
·	Audit · LangGuard-AI skill	not scored yet	5 repos	active
·	Audit · aimsise skill	not scored yet	5 repos	active
·	Debug · barnburner121 skill	not scored yet	5 repos	active
·	Security Review skill	not scored yet	5 repos	active
·	Ship · blyatiful1 skill	not scored yet	5 repos	active
·	Verify · datit309 skill	not scored yet	5 repos	active
·	Check · sls-org-testing-06 skill	not scored yet	4 repos	active
·	Checkpoint skill	not scored yet	4 repos	active
·	Code Review · noodlemind skill	not scored yet	4 repos	abandoned
·	Code Review · adihebbalae skill	not scored yet	4 repos	active
·	Code Review · alphaaiservice skill	not scored yet	4 repos	active
·	Investigate · DawnEver skill	not scored yet	4 repos	active
·	Security skill	not scored yet	4 repos	active
·	Security Audit · AvinashP skill	not scored yet	4 repos	active
·	Security Audit skill	not scored yet	4 repos	active
·	Security Review · MaTo8888 skill	not scored yet	4 repos	active
·	Security Review · xu-xiang skill	not scored yet	4 repos	abandoned
·	Security Review · gener8v skill	not scored yet	4 repos	active
·	Validate · stellarshenson skill	not scored yet	4 repos	active
·	Audit · arianlopezc skill	not scored yet	3 repos	active
·	Audit · Cain-Ish skill	not scored yet	3 repos	active
·	Autopilot · productstein skill	not scored yet	3 repos	active
·	Domain Modeling · gustavo-santos-swe skill	not scored yet	3 repos	active
·	Help · yonatangross skill	not scored yet	3 repos	active
·	Learn · laurac8r skill	not scored yet	3 repos	active
·	Outcome Roadmap skill	not scored yet	3 repos	active
·	Pre Mortem skill	not scored yet	3 repos	active
·	Resume · oggeh-dev skill	not scored yet	3 repos	active
·	Scan skill	not scored yet	3 repos	active
·	Security · austintgriffith skill	not scored yet	3 repos	active
·	Security Audit · eblouin-development skill	not scored yet	3 repos	active
·	Security Audit · VilnaCRM-Org skill	not scored yet	3 repos	active
·	Security Check skill	not scored yet	1 ★	active

Recently changed in Security

17 changes recorded here in the last 45 days, newest and most serious first.

2026-08-25 Vanta · @vantasdk — the author of @vantasdk/vanta-mcp-server has declared it unmaintained
2026-08-27 Vanta · @vantasdk — the author of @vantasdk/vanta-mcp-server has declared it unmaintained
2026-09-13 Vanta · @vantasdk — the author of @vantasdk/vanta-mcp-server has declared it unmaintained
2026-08-11 Claude Project Context Manager — claude-project-context-manager now reads as abandoned, was active

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

33 of these are graded against their own documentation. The rest carry adoption and upkeep signal only. We publish what is measured and name what is not.

Head to head

The question people actually ask, answered with two measurements taken the same day by the same scorer.

Assessment vs Consent Auth0 vs Consent Preflight vs Consent Accessibility Scanner vs Consent Ghl Command vs Consent Fullcourtdefense CLI vs Consent Agent Hooks vs Consent Auth0 vs Assessment Preflight vs Assessment Accessibility Scanner vs Assessment Ghl Command vs Assessment Fullcourtdefense CLI vs Assessment

Other categories

Browser & Web Search Database Dev Tools & CI Cloud & Infra Files & Memory Data & Analytics Docs & Knowledge Communication Design AI & Agents Finance & Crypto Productivity Other

See the full Index ›

tashan Pro$6/mo

17 changes across Security capabilities in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.