Tank

Free plan APILinuxMacSelf-hostedWebWindows

What Tank is

Tank is a security-focused package manager for AI agent packages and skills. It supports skills, instructions, hooks, tools, agents, rules, resources, prompts, and bundles, with dependency resolution, lockfiles, and private registry authentication. Packages pass through six scanning stages, covering validation, static analysis, injection detection, secrets, and dependency auditing. Tank pins packages with SHA-512 hashes and checks for tampering during verification. Packages can specify network, filesystem, and subprocess limits; those that exceed the permission budget are rejected before running. Its Credential Vault tokenizes detected API keys and proxies requests so the real credentials remain local, according to Tank. It works with Claude Code, Cursor, GitHub Copilot, Codex, Windsurf, OpenCode, Cline, and Roo Code. From supported editors, its MCP server provides 17 tools for package installation, search, scanning, publishing, verification, and troubleshooting. Organizations can self-host with Docker Compose, their own database, storage, and authentication, keeping data within their network. The registry, CLI, and scanner are free, and the project is MIT licensed.

Who it suits

Tank suits developers and organizations managing AI agent packages across its supported environments. It is also relevant to teams that want package scanning, permission limits, or a self-hosted setup.

What it does well

Free registry, CLI, and security scanner
Six-stage package scanning
SHA-512 lockfile pins and tamper checks
Permission limits reject packages before running
Self-hosting keeps data within the organization's network

What to know first

Self-hosting requires Docker Compose
Credential Vault behavior is described as a Tank claim

Limits

Tank’s listed Free plan costs nothing and covers the registry, CLI, and security scanner. No additional free-plan quotas or feature limits are stated.

Plans

Plan	Billed and limits	Price
Free	Registry, CLI, and security scanner; open source under MIT license	Free

As tankpkg.dev lists them, read 11 Oct 2026. The maker's own page has the final word.

Getting started

Visit https://www.tankpkg.dev/.
Choose the registry and CLI or a self-hosted deployment.
For self-hosting, run Tank with Docker Compose and select your database, storage, and authentication.
Connect a supported agent or editor, including Claude Code, Cursor, or Codex.
Use the MCP server tools to search, scan, install, verify, publish, or troubleshoot packages.

Verdict

Tank brings package management and security checks together for AI agent components. Its free, MIT-licensed tools and self-hosting options may suit both individual developers and organizations.

Questions

How much does Tank cost?

The Free plan costs nothing. Tank states that its registry, CLI, and security scanner are free to use.

Which agent platforms does Tank support?

It works with Claude Code, Cursor, GitHub Copilot, Codex, Windsurf, OpenCode, Cline, and Roo Code.

Can Tank be self-hosted?

Yes. Organizations can use Docker Compose with their own database, storage, and authentication, keeping data in their network.

What does Tank scan for?

Its six stages include validation, static analysis, injection detection, secrets scanning, and dependency auditing, as well as ingestion.

Is Tank open source?

Tank states that the project is MIT licensed and invites contributions through GitHub discussions.

Facts from Tank's own pages

Agent integrations: Tank says it works with Claude Code, Cursor, GitHub Copilot, Codex, Windsurf, OpenCode, Cline, and Roo Code. · tankpkg.dev, 11 Oct 2026
Authentication: Self-hosted Tank supports GitHub OAuth, any OIDC-compliant identity provider, or email and password. · tankpkg.dev, 11 Oct 2026
Availability and license: Tank states that its registry, CLI, and security scanner are free to use and that the project is MIT licensed. · tankpkg.dev, 11 Oct 2026
Credential Vault: The Credential Vault tokenizes detected API keys and proxies requests so real credentials stay local, according to Tank’s site. · tankpkg.dev, 11 Oct 2026
Dependency resolution: Yes · tankpkg.dev, 21 Sept 2026
Editor tools: Tank’s MCP server provides 17 tools for installing, searching, scanning, publishing, verifying, and troubleshooting packages from supported editors. · tankpkg.dev, 11 Oct 2026
Free plan: Yes · tankpkg.dev, 21 Sept 2026
Integrity: Tank pins packages with SHA-512 hashes in a lockfile and detects tampering during verification. · tankpkg.dev, 11 Oct 2026
Lockfile support: Yes · tankpkg.dev, 21 Sept 2026
Organizations and CI: Tank supports organizations with scoped publishing and roles, plus service accounts for CI/CD pipelines. · tankpkg.dev, 11 Oct 2026
Package formats: Tank supports seven skill primitives: instruction, hook, tool, agent, rule, resource, and prompt, which can be combined into bundles. · tankpkg.dev, 11 Oct 2026
Package scanning: Packages are scanned through six stages: ingestion, validation, static analysis, injection detection, secrets scanning, and dependency audit. · tankpkg.dev, 11 Oct 2026
Permission controls: Packages can declare network, filesystem, and subprocess limits, and those exceeding the permission budget are rejected before running. · tankpkg.dev, 11 Oct 2026
Private registry auth: Yes · tankpkg.dev, 21 Sept 2026
Purpose: Tank is a security-first package manager for AI agent packages and skills. · tankpkg.dev, 11 Oct 2026
Security audit results: Tank says packages receive a transparent 0–10 audit score and a PASS, FLAGGED, or FAIL verdict. · tankpkg.dev, 11 Oct 2026
Self-hosted storage: Self-hosted deployments support S3-compatible storage such as AWS, MinIO, and Cloudflare R2, or local filesystem storage. · tankpkg.dev, 11 Oct 2026
Self-hosting: Organizations can run Tank with Docker Compose and use their own database, storage, and authentication while keeping data in their network. · tankpkg.dev, 11 Oct 2026
Support and community: Tank directs users to GitHub discussions and invites them to contribute to the open-source project. · tankpkg.dev, 11 Oct 2026
Supported platforms: Claude Code,Cursor,GitHub Copilot,Codex,Windsurf,OpenCode,Cline,Roo Code · tankpkg.dev, 21 Sept 2026

Where Tank stands on Freedom251

Package Managers#20 of 93