What is the best MCP servers and plugin for risk assessment?

By tashan's measured score: Scf, Offensive Claude, Langguard Scope, Clover, Apiiro. the score combines upkeep and freshness, gated by real adoption — every input is public and linked to its source.

How is the ranking calculated?

From public signal only: npm download volume and publish cadence, GitHub push/release recency, contributor count, registry status, and how often a capability appears in real public agent configs. Nobody can pay to change a score, rank, or listing.

The Index · Risk assessment

Risk assessment

Q: Who does risk assessment as part of their job?

This is a process step performed by Brownfield Redevelopment Specialists and Site Managers, Business Continuity Planners, Clinical Research Coordinators, Credit Analysts, Fraud Examiners, Investigators and Analysts, Insurance Underwriters, Labor Relations Specialists, Loss Prevention Managers and others, per the O*NET 30.3 occupational database.

'Risk assessment' / 'threat model' — what could go wrong and what it costs. tashan measures 18 capabilities for this work. Ranked on upkeep, freshness and real adoption, every input public. How we measure ›

#	Capability	tashan	Evidence	Health
1	Scf primary npm solid	69	923/wk	active
2	Offensive Claude primary plugin solid	62	326 ★	active
3	Langguard Scope primary plugin	43	5 ★	active
4	Clover primary plugin	40	0 ★	active
5	Apiiro primary plugin thin	43	3 ★	active
·	Wooyun Legacy primary plugin thin	not scored yet	2k ★	abandoned
7	Defi Guard supporting npm solid	42	60/wk	active
8	Ifixai supporting plugin	79	13k ★	active
9	Grc supporting npm	63	239/wk	active
10	Deadchannel supporting npm	56	353/wk	active
11	Crypto Signals supporting npm	55	186/wk	active
12	Walletbureau supporting npm	50	152/wk	active
13	Legal Doc Analyzer supporting npm	49	139/wk	active
14	Trustmodel supporting npm	48	59/wk	active
15	Reputa supporting npm	46	73/wk	active
16	Mintverdict supporting npm	44	75/wk	active
17	Wallettriage supporting npm	42	40/wk	active
·	Pairbook supporting npm	not scored yet	778/wk	abandoned

Who does this work

O*NET records this as a core process step for 11 occupations, including Brownfield Redevelopment Specialists and Site Managers, Business Continuity Planners, Clinical Research Coordinators, Credit Analysts, Fraud Examiners, Investigators and Analysts, Insurance Underwriters, Labor Relations Specialists, Loss Prevention Managers, Medical and Health Services Managers, Security Management Specialists and others.

Recorded there as: "Assess risks to business operations" / "Analyze risks to minimize losses or damages". We publish it under the name practitioners use.

Recently changed in Risk assessment

8 changes recorded here in the last 45 days, newest and most serious first.

2026-08-11 Wallettriage — wallettriage-mcp now reaches credentials
2026-08-12 Trustmodel — @trustmodel/mcp-server now reaches network
2026-08-12 Trustmodel — @trustmodel/mcp-server now runs a script when it installs
2026-08-05 Mintverdict — the tashan score for mintverdict fell to 50.0, from 58.0

This page cannot know what you run. tashan doctor reads your own config and names which of these you have — Pro adds the history behind each, and what to move to.

tashan Pro — $6/mo ›

Other work

Agent configuration Agent development Animation and generated imagery Application development Attribution Audio production Audit Bookkeeping Browser automation CAD modelling Career development Code review Content marketing Contract review Copy editing Copywriting Customer support Dashboards and reporting Data pipelines Data quality Database access Debugging Design critique Document production Exploratory data analysis Financial modelling Hardware design Incident response Infrastructure and deployment Knowledge management Literature review Logistics and fulfilment ML engineering Market analysis Messaging and email Model evaluation Observability PRDs and specs Performance optimisation Process automation Product strategy Project management Prompt engineering Query optimisation Recruiting and hiring Regulatory compliance Retrieval systems SEO Sales pipeline Scientific research Security review Software architecture Statistical modelling Technical documentation Test automation Training material User research Version control Video editing Visual design Web development Web research Web scraping

Occupational data from the O*NET 30.3 Database by the U.S. Department of Labor, Employment and Training Administration, used under CC BY 4.0. tashan consolidated its process steps into the terms practitioners use; O*NET does not endorse this site.

See the full Index ›

tashan Pro$6/mo

8 changes across Risk assessment in the last 45 days. A new advisory, an install script appearing, a maintainer leaving. All listed free above. Pro keeps the series behind each row, so a number today comes with a direction.

The whole series behind any row, back to the first day we measured it
The replacement, named — not just the news that something died
tashan doctor over your own config, on your own machine

Start a 7-day trial › Everything measured on this page stays free.