Ext Ops Panel
Open dashboard
Comparison

claude-security vs io.github.rotem1230/fixme-agent

claude-security is a plugin bundle for AI coding tools published by Anthropic. Marketplaces we read that list it: 1 (Claude Code: claude-plugins-official). io.github.rotem1230/fixme-agent is an MCP server published by rotem1230. Marketplaces we read that list it: 1 (Official MCP Registry). As of our marketplace pass on 2026-10-21. This pair was picked by a reader, not by our comparison rule, so search engines are asked not to index the page.

Where each is published

Where each is published
Marketplaceclaude-securityio.github.rotem1230/fixme-agent
Claude Code: claude-plugins-official Listed
Version: 0.12.0
Forks (GitHub): 4 580
Stars (GitHub): 43 312
Not marked · First seen
Not listed
Official MCP Registry Not listed Listed
Version: 1.3.0
Downloads/month (npm): 106
Downloads/week (npm): 21
Not marked · First seen

Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.

The facts side by side

claude-security vs io.github.rotem1230/fixme-agent
Factclaude-securityio.github.rotem1230/fixme-agent
Marketplaces that list it11
Stars (GitHub) (differs)43 312No figure on GitHub
Forks (GitHub) (differs)4 580No figure on GitHub
Last releaseNot publishedNot published
Where it runs (differs)Installs as a plugin bundleOn your machine (fixme-mcp)
Transport (differs)Not statedstdio
Tools it declaresNot publishedNot published
Environment variables it asks for (differs)Not published1, secrets among them: 1
Hooks it runs (differs)6Not published
Parts of the bundle (differs)14Not a bundle
Licence (differs)SEE LICENSE IN LICENSENot stated
Repository (differs)github.com/anthropics/claude-plugins-officialgithub.com/rotem1230/fixme-mcp
Changes in the last 7 days00
First seen2026-10-112026-10-11

Lines where the two differ have a tinted background and bold values. Where the data itself says which value is better (more marketplaces, a larger figure of the same marketplace, a fresher release, a verified mark on a marketplace that lists both), the better one is also marked green with ▲ and the worse one red with ▼. Where it runs, the transport, the tools, the settings, hooks, the bundle's parts, the licence and the week's changes are marked only as different: more or fewer is not better in itself.

What each says it does

claude-security

In its own words, on Claude Code: claude-plugins-official:

Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.

io.github.rotem1230/fixme-agent

In its own words, on Official MCP Registry:

Real-time AI code quality — 30 validators, 17 languages, 813+ checks

How to run each

claude-security As a Claude Code plugin

Claude Code
/plugin install claude-security@claude-plugins-official

io.github.rotem1230/fixme-agent As a local MCP server: npm package

Claude Code
claude mcp add --env "FIXME_TOKEN=<YOUR_FIXME_TOKEN>" --transport stdio fixme-agent -- npx -y fixme-mcp

Requires: FIXME_TOKEN (secret)

Commands built only from what the marketplaces declare; the full set for every client is on each card.

Tools each declares

Neither one's marketplaces publish a list of tools, so there is nothing to compare.

Settings each asks for

The marketplaces of claude-security publish no settings it asks for, so we do not compare settings.

What it can do: claude-security · What it can do: io.github.rotem1230/fixme-agent · Compare two other plugins

Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-official/blob/HEAD/.claude-plugin/marketplace.json. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.

Where the data comes from: how the catalog is built