Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| io.github.gattjoe/ACMS gattjoe/acms Apple Container MCP Server (ACMS) provides access to Apple's container CLI tool on macOS | |
| Singularity - MCP Discovery & Security Gateway gaurav-kumar-sinha-060705/singularity Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring | |
| Office MCP gauravvvvvvvvvv/office-mcp Local Windows MCP server for creating and reviewing Excel, Word, and PowerPoint files. | |
| sieve-map gautam-u/sieve-mcp Local MCP server for macOS that scans AI coding tool history (Claude Code, Cursor, Copilot, Cline, Codex, Gemini CLI) for leaked secrets. Finds API keys in chat transcripts, redacts with sieve:// placeholders, and runs commands with Keychai | |
| MCP Safety Warden gautamvarmadatla/mcpsafetywarden MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution. | |
| datadiffer gauthierpiarrette/datadiffer Read-only table diffs with segment attribution: which slice of your data changed. | |
| gavel gavelcode/gavel MCP server for gavel, a code-quality gate for Bazel monorepos. Exposes judge, findings, coverage and architecture tools so a coding agent can check its change against the quality gate (lint, coverage, layer rules) before declaring it done — | |
| mcpgawk gawk-dev/mcpgawk Measure MCP servers, pin the approved tool surface, refuse calls to tools that changed. Local-first. | |
| anyhook-mcp gba3124/anyhook-mcp An MCP server that enables coding agents to set up and manage webhook infrastructure, including provisioning endpoints, event logs, replay, and testing. | |
| Bezlo MCP gba3124/bezlo Bezlo MCP: device-preset mobile screenshots, layout diagnostics, see-and-act sessions. | |
| AppFactory gbatistuta0/appfactory An MCP server that lets coding agents take a SwiftUI iOS subscription app from idea to the App Store, covering research and validation, design, code scaffolding, Supabase backend, App Store Connect and RevenueCat setup, localization, analyt | |
| io.github.gblinproject/gblin-treasury-risk-regime gblinproject/gblin-treasury-risk-regime GBLIN on Base for AI agents: risk regime, treasury plan for idle USDC, mint and redeem at NAV. Free. | |
| Cortex MCP Server gbrigandi/mcp-server-cortex MCP Server for Cortex | |
| TheHive MCP Server gbrigandi/mcp-server-thehive MCP Server for TheHive | |
| mcp-server-wazuh gbrigandi/mcp-server-wazuh MCP Server for Wazuh SIEM | |
| io.github.gbrussich52/mainstreet-mcp gbrussich52/mainstreet-mcp Free small-business facts and stateless workflow review kits: quotes, invoices and order handoffs. | |
| io.github.gbrussich52/nyrezone-mcp gbrussich52/nyrezone-mcp Recorded NYC parcel/FAR fields and NYRezone HTML district summaries; no capacity determination. | |
| TravelMind MCP gcszkjpzzv-beep/travelmind_mcp TravelMind: 8 MCP tools for travel (12306 trains, flights, hotels, geocode, planning, policy). | |
| Hevy Coach gcuadros/hevy-mcp Training analytics over your Hevy log: e1RM, PRs, volume, consistency, bodyweight. | |
| COLA Insight ge3m0r/colainsight-data Read-only Social Security COLA data, calculations, history, and official source links. | |
| tech.geckovision/surf geckovision/gecko-surf Point Gecko at an OpenAPI spec; get first-call-correct, auth-hidden agent tools. | |
| Data Studio geek-fun/data-studio-agent Unified MCP server for SQL and NoSQL databases, powered by dockit and sqlkit desktop apps | |
| Geekflare geekflare/geekflare-api-mcp Web search, Google SERP, scraping, screenshots, PDFs, brand data, and website diagnostics. | |
| CropDen: image sizes and AI image tools geektao1024/social-media-image-sizes Platform image sizes with safe zones (free), plus AI extend, upscale and background removal. | |
| Ray notifications gege-mn/ray-mcp Send email, push, Slack, Discord, Telegram and webhook notifications and manage templates with Ray. | |
| SVG to Video gehdoc/svg-to-video Convert animated SVG (CSS/SMIL) to video (MP4/WebM) or image (GIF/aPNG) with in-band delivery. | |
| Biblical Atlas geiserx/biblical-atlas-mcp Spanish Bible atlas as MCP tools: people, places, events, passages, each linked to its source | |
| VPN Bypass geiserx/vpn-bypass-mcp Read and change VPN Bypass (macOS) routing: domain lists, services, modes, kernel routes, logs | |
| ssh-mcp gelse/ssh-mcp MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging. | |
| ATS Jobs MCP: Ashby, Greenhouse, Lever & SmartRecruiters geminigeorge22/ats-jobs-mcp New job postings since any date from Ashby, Greenhouse, Lever and SmartRecruiters boards. | |
| E-commerce Sales Signals MCP geminigeorge22/ecommerce-sales-mcp E-commerce sales signals: Amazon bestsellers and reviews, eBay sold prices, TikTok Shop, Etsy sales. | |
| E-commerce Search & Rankings MCP geminigeorge22/ecommerce-search-rankings-mcp E-commerce search results and product rankings across Amazon, eBay, Walmart, Google Shopping, Etsy. | |
| Forecast Accuracy & Track Record MCP geminigeorge22/forecast-accuracy-mcp Forecast track records: forecasts vs actuals, earnings beats, prediction markets, archived news. | |
| Google Ads Transparency MCP: Competitor Ads geminigeorge22/google-ads-transparency-mcp Competitor Google ads from the Ads Transparency Center: new, running and stopped, with shown dates. | |
| Gov Tenders & Grants MCP: SAM.gov, Grants.gov, USAspending, UK, EU TED geminigeorge22/gov-tenders-mcp Government tenders, grants, awards and council meetings: SAM.gov, Grants.gov, USAspending, UK, TED. | |
| Sports Betting Stats MCP geminigeorge22/sports-betting-stats-mcp Sports betting stats: sportsbook odds, player props, scores, xG, closing lines, horse racing. | |
| Sports Odds API (BetRivers, Unibet & 22 more books) geminigeorge22/sports-odds-mcp Live odds from 24 Kambi-powered sportsbooks in one call, with the best price per outcome. | |
| Spotify Play Count MCP: Plays & Monthly Listeners geminigeorge22/spotify-play-count-mcp Spotify play counts for any track, album, artist or playlist, plus monthly listeners and followers. | |
| Gemmein gemmeinhq/gemmein-release Gemmein docs, API reference, error explainers and a live integration check for coding agents. | |
| Gemral Edge gemral-edge/gemral-edge-mcp Point-in-time U.S. public records: federal contracts, congressional and insider trades, lobbying. | |
| io.github.gene12williams-design/getdigitalcraft-mcp-render gene12williams-design/getdigitalcraft-mcp-render Deterministic image rendering with exact typography. Pay per call in USDC, no account. | |
| GeneBe genebe-net/genebe-mcp Annotate and classify human genetic variants with GeneBe (ACMG, gnomAD, ClinVar). Research use only. | |
| io.github.genecell/preprint-fulltext genecell/preprint-fulltext bioRxiv/medRxiv/arXiv preprint full text as structured sections for AI agents + search. | |
| loc8n Geographic Data gener8v/gener8v.mcp.geographic-data U.S. demographics, housing, mortgage, migration, and employment data via loc8n API | |
| Generect generect/generect_mcp B2B lead and company data for AI agents: free search, pay only for emails, phones, profiles. | |
| Lingshu Solver genesis-plan/lingshu-solver Deterministic MCP solver for real equation systems (<=6 vars), Krawczyk-certified. | |
| Geniffy geniffy/geniffy-mcp Geniffy is the memory infrastructure for AI applications and agents. | |
| io.github.geniuskey/mcp-server-xlwings geniuskey/mcp-server-xlwings Excel automation via xlwings COM. DRM-protected files, live sessions, VBA macros. Windows only. | |
| BioMCP genomoncology/biomcp Provides LLMs with structured access to critical biomedical databases including PubTator3 (PubMed/PMC), ClinicalTrials.gov, and MyVariant.info through the Model Context Protocol. | |
| MCPSentinel gentaarnezzi/mcpsentinel Precision-first security scanning for Model Context Protocol servers. |
8,201–8,250 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.