What is the best MCP servers and plugin for incident response?

By tashan's measured score: Sentry CLI, Graylog Log Search, Usap Skills, Resolve AI, Monte Carlo Agent Toolkit. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often a capability appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Incident response

Incident response

Q: Who does incident response as part of their job?

This is a process step performed by Computer Network Architects, Network and Computer Systems Administrators, Web Developers, per the O*NET 30.3 occupational database.

'On-call', 'incident', 'postmortem' — SRE vocabulary. tashan measures 12 capabilities for this work. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Sentry CLI primary plugin solid	67	101 ★	active
2	Graylog Log Search primary plugin solid	45	6 ★	active
3	Usap Skills primary plugin solid	44	3 ★	active
4	Resolve AI primary plugin solid	44	3 ★	active
5	Monte Carlo Agent Toolkit primary plugin	60	90 ★	active
6	Firehydrant primary npm	51	7k/wk	abandoned
7	Grafana · grafana primary plugin	48	3 marketplaces	—
8	Copaw Ops primary plugin	36	1 marketplaces	active
9	Openclaw Ops primary plugin	36	1 marketplaces	active
10	Hermes Ops primary plugin	36	1 marketplaces	active
11	Honeycomb primary plugin thin	59	18 ★	active
12	Debugbundle supporting npm solid	52	190/wk	active

Who does this work

O*NET records this as a core process step for 3 occupations, including Computer Network Architects, Network and Computer Systems Administrators, Web Developers.

Recorded there as: "Collaborate with others to resolve information technology issues" / "Document network-related activities or tasks". We publish it under the name practitioners use.

Recently changed in Incident response

6 changes recorded here in the last 45 days, newest and most serious first.

2026-08-26 Firehydrant — firehydrant-mcp now reads as abandoned, was active
2026-08-14 Usap Skills — the tashan score for usap-skills rose to 47.0, from 40.0
2026-08-14 Usap Skills — the tashan score for usap-skills fell to 40.0, from 48.0
2026-08-22 Usap Skills — the tashan score for usap-skills fell to 40.0, from 46.0

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

Other work

Agent configuration Agent development Animation and generated imagery Application development Attribution Audio production Audit Bookkeeping Browser automation CAD modelling Career development Code review Content marketing Contract review Copy editing Copywriting Customer support Dashboards and reporting Data pipelines Data quality Database access Debugging Design critique Document production Exploratory data analysis Financial modelling Hardware design Infrastructure and deployment Knowledge management Literature review Logistics and fulfilment ML engineering Market analysis Messaging and email Model evaluation Observability PRDs and specs Performance optimisation Process automation Product strategy Project management Prompt engineering Query optimisation Recruiting and hiring Regulatory compliance Retrieval systems Risk assessment SEO Sales pipeline Scientific research Security review Software architecture Statistical modelling Technical documentation Test automation Training material User research Version control Video editing Visual design Web development Web research Web scraping

Occupational data from the O*NET 30.3 Database by the U.S. Department of Labor, Employment and Training Administration, used under CC BY 4.0. tashan consolidated its process steps into the terms practitioners use; O*NET does not endorse this site.

See the full Index ›

tashan Pro$6/mo

6 changes across Incident response in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.