Tank

Spec sheet

Purpose

Tank is a security-first package manager for AI agent packages and skills.Read 11 Oct 2026 · tankpkg.dev

Free plan

YesRead 21 Sep 2026 · tankpkg.dev

Agent integrations

Tank says it works with Claude Code, Cursor, GitHub Copilot, Codex, Windsurf, OpenCode, Cline, and Roo Code.Read 11 Oct 2026 · tankpkg.dev

Authentication

Self-hosted Tank supports GitHub OAuth, any OIDC-compliant identity provider, or email and password.Read 11 Oct 2026 · tankpkg.dev

Availability and license

Tank states that its registry, CLI, and security scanner are free to use and that the project is MIT licensed.Read 11 Oct 2026 · tankpkg.dev

Credential Vault

The Credential Vault tokenizes detected API keys and proxies requests so real credentials stay local, according to Tank’s site.Read 11 Oct 2026 · tankpkg.dev

Dependency resolution

YesRead 21 Sep 2026 · tankpkg.dev

Editor tools

Tank’s MCP server provides 17 tools for installing, searching, scanning, publishing, verifying, and troubleshooting packages from supported editors.Read 11 Oct 2026 · tankpkg.dev

Integrity

Tank pins packages with SHA-512 hashes in a lockfile and detects tampering during verification.Read 11 Oct 2026 · tankpkg.dev

Lockfile support

YesRead 21 Sep 2026 · tankpkg.dev

Organizations and CI

Tank supports organizations with scoped publishing and roles, plus service accounts for CI/CD pipelines.Read 11 Oct 2026 · tankpkg.dev

Package formats

Tank supports seven skill primitives: instruction, hook, tool, agent, rule, resource, and prompt, which can be combined into bundles.Read 11 Oct 2026 · tankpkg.dev

Package scanning

Packages are scanned through six stages: ingestion, validation, static analysis, injection detection, secrets scanning, and dependency audit.Read 11 Oct 2026 · tankpkg.dev

Permission controls

Packages can declare network, filesystem, and subprocess limits, and those exceeding the permission budget are rejected before running.Read 11 Oct 2026 · tankpkg.dev

Private registry auth

YesRead 21 Sep 2026 · tankpkg.dev

Security audit results

Tank says packages receive a transparent 0–10 audit score and a PASS, FLAGGED, or FAIL verdict.Read 11 Oct 2026 · tankpkg.dev

Self-hosted storage

Self-hosted deployments support S3-compatible storage such as AWS, MinIO, and Cloudflare R2, or local filesystem storage.Read 11 Oct 2026 · tankpkg.dev

Self-hosting

Organizations can run Tank with Docker Compose and use their own database, storage, and authentication while keeping data in their network.Read 11 Oct 2026 · tankpkg.dev

Support and community

Tank directs users to GitHub discussions and invites them to contribute to the open-source project.Read 11 Oct 2026 · tankpkg.dev

Supported platforms

Claude Code,Cursor,GitHub Copilot,Codex,Windsurf,OpenCode,Cline,Roo CodeRead 21 Sep 2026 · tankpkg.dev

Plans and prices

Every Tank plan and price →

Where Specifiction places it

• Package Managers#21 of 938.5