Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| imessage-query-fastmcp-mcp-server hannesrudolph/imessage-query-fastmcp-mcp-server An MCP server that provides safe access to your iMessage database through MCP, enabling LLMs to query and analyze iMessage conversations with proper phone number validation and attachment handling | |
| mcp-ragdocs hannesrudolph/mcp-ragdocs An MCP server implementation that provides tools for retrieving and processing documentation through vector search, enabling AI assistants to augment their responses with relevant documentation context | |
| sqlite-explorer-fastmcp-mcp-server hannesrudolph/sqlite-explorer-fastmcp-mcp-server An MCP server that provides safe, read-only access to SQLite databases through MCP. This server is built with the FastMCP framework, which enables LLMs to explore and query SQLite databases with built-in safety features and query validation | |
| Pexels MCP Server hanoak/pexels-mcp-server MCP server for the Pexels API: search & fetch stock photos, videos, and collections. | |
| Pixabay MCP Server hanoak/pixabay-mcp-server Unofficial MCP server for the Pixabay API: search and fetch royalty-free images and videos. | |
| CallAI SEO hanshengcc/callai-seo-mcp Live SEO data: Google/Bing SERP, AI Overview sources, keyword difficulty, backlinks, page audits. | |
| jevx-mcp hanshs474/jevx-mcp Enables running Jev AI typed decisions from any MCP client, returning choices, scores, or yes/no with calibrated probabilities. | |
| io.github.hanshs474/movoa-mcp hanshs474/movoa-mcp Movoa (movoa.ai), the AI video generator with sound: text and photo to video from any MCP client. | |
| ai.saymaker/saymaker-mcp hanshs474/saymaker-mcp Generate and edit AI images and video on SayMaker: Veo 3.1, Kling 3.0, Seedance 2.0, Nano Banana 2. | |
| io.github.hanshs474/seedance-prompts-mcp hanshs474/seedance-prompts-mcp Search, audit and compose AI video prompts — 150 of them, each rendered into a real video | |
| ai.veida/veida-mcp hanshs474/veida-mcp Generate AI images from a prompt with no API key, using Veida's anonymous free tier. | |
| matlab-mcp-server-python hansur94/matlab-mcp-server-python MCP server that connects any AI agent to MATLAB — execute code, async jobs, interactive Plotly plots, custom tools, and monitoring dashboard | |
| Comet MCP hanzili/comet-mcp Connects Claude to Perplexity Comet's agentic browser for autonomous web browsing, deep research, and real-time task monitoring. Enables Claude to delegate web research tasks and receive comprehensive results through multiple browsing modes | |
| Grandet hanzohanzhe/grandet Cheapest API for any model across official, inference and relay providers; find free credits | |
| Git.Top haocn-ops/git-top Evidence-backed open-source project search, recommendations, alternatives, and comparisons. | |
| Silicon Pantheon haoyifan/silicon-pantheon Turn-based strategy game where AI agents play and humans coach via MCP. | |
| Universal Brute Workpack haoyun18881-beep/universal-brute-workpack Stdio-first Agent MCP workpack for local tools, audit chains, search, memory, and pipelines. | |
| AI Mail MCP hapitech/aimailmcp-docs One inbox for every hat you wear: support, sales, billing mail, triaged and drafted by your agent. | |
| Kanera happendev/kanera Manage Kanera workspaces, boards, cards, checklists, comments, notes, automations, and reports. | |
| Gateway Price Disclosure Check happy520ai/gateway-price-check Checks whether an OpenAI-compatible endpoint publishes model prices without an account or key. | |
| Ephys happyc0der/ephys-mcp Read-only analysis of intracortical BCI recordings (NWB, DANDI, WAV): spikes, PSTHs, decoding, plots | |
| Happy Endpoint happyendpointhq/happyendpoint-mcp Real-time UAE property, retail and travel data: listings, transactions, rental yields, products. | |
| io.github.Happygallo/apple-ads happygallo/apple-ads-mcp Manage Apple Search Ads campaigns, keywords, budgets, and reports via API v5. | |
| io.github.HappyMealSteak/apizone happymealsteak/apizone-mcp Real-time status & uptime monitoring for 294 popular APIs — is it down, and how reliable? | |
| CRM Lifecycle Ops har5h98/crm-lifecycle-ops AI copilot for lifecycle and CRM ops on Braze, Klaviyo and Iterable. Read-only. | |
| Amtsblick haraldrohan/amtsblick Wetter und Pegel je Gemeinde in Österreich. Privates Projekt, kein offizielles Behördenangebot. | |
| revnuvo-company-intelligence hardeyhemy/revnuvo-dev Revnuvo Company Intelligence tells AI agents what changed at a company, with evidence. It observes company websites, technologies, and DNS over time and returns timestamped, confidence-aware changes, signals, and monitoring. | |
| Azure Resource Graph MCP Server hardik-id/azure-resource-graph-mcp-server A Model Context Protocol server for querying and analyzing Azure resources at scale using Azure Resource Graph, enabling AI assistants to explore and monitor Azure infrastructure. | |
| Arduino MCP Server hardware-mcp/arduino-mcp-server Arduino MCP server for CLI setup, board detection, compile/upload, serial monitoring, and pin refs. | |
| Manilo harholinsky/manilo-mcp Log, query, and edit expenses, budgets, and accounts in Manilo from any MCP-compatible AI assistant. | |
| io.github.HarimxChoi/google-surf-mcp harimxchoi/google-surf-mcp Web, academic and code search with graph RAG, data lineage, ontology and cross-project schema links. | |
| Diavlos harisnopen/diavlos Signed messages between AI agents. Dangerous actions wait for a human-signed approval. | |
| io.github.HarleyCoops/workspace-alberta harleycoops/workspacealberta Canadian procurement intelligence: CanadaBuys and Alberta tenders, ranked for your shop. | |
| Project Telos harperz9/telos Local-first MCP tools for AI-assisted work receipts, workspace maps, routing ledgers, measured verdicts, and shared state verification across the five Project Telos flagships. | |
| Jotdown harry-027/jotdown An MCP Server in Rust for creating Notion pages & mdBooks with LLMs 🦀 | |
| Visuals MCP harrybin/visuals-mcp MCP server for interactive visualizations: tables, images, trees, lists, master-detail | |
| io.github.harsh-chandak/concord-engine harsh-chandak/concord-engine Scale parallelism. Preserve alignment. A fleet of coding agents builds one task in parallel against | |
| TaxBrainAI MCP harshil-projects/taxbrainai-mcp 8 offline Indian income-tax MCP tools: deterministic compute, regimes, citations, notices. | |
| io.github.harshitAgr/codabench-mcp harshitagr/codabench-mcp MCP server for the Codabench REST API — drives a full ML-benchmark participant workflow. | |
| io.github.harshithsunku/mcp-gtags-server harshithsunku/mcp-gtags-server Indexed C/C++ code navigation for AI agents — GNU Global (gtags) lookups over MCP, not grep scans. | |
| com.juicedresume/mcp harshitsingh-pm/juicedresume-mcp Score, tailor, and export resumes from any MCP client — 60+ ATS checks and JD tailoring. | |
| LinkedIn Jobs Scraper (Apify) – salary, recruiter and company data harshmaur/apify-linkedin-jobs-scraper LinkedIn job listings as JSON: salary, recruiter, applicants, company data. No login. From $0.40/1k | |
| TikTok Scraper (Apify) – videos, profiles, comments, transcripts harshmaur/apify-tiktok-scraper TikTok videos, profiles, hashtags, search, comments and followers as JSON. No login. $0.35/1k videos | |
| Reddit Lead Finder & Brand Monitor (Apify) – leads, mentions, alerts harshmaur/reddit-scraper-pro-mcp Find Reddit leads and brand mentions. AI buyer labels and Slack or Notion delivery. $1.50/1k results | |
| Morse — Telegraph in Telegram harshyadav442277/telegraph-morse Ask Telegraph's ranked miners from any MCP client, no wallet. Morse pays; each answer has a receipt. | |
| knock hasangilani/knock Code map and memory for AI coding agents: key functions, line ranges, callers, why code changed. | |
| Git Insight MCP hasanjahidul/git-insight-mcp Semantic git queries via MCP. Beyond git log — answer who/what/why about any line, file, or branch with blame, co-change, PR linkage. | |
| localhost-mcp hasanjahidul/localhost-mcp Inspect, manage, and kill local dev servers via MCP. Stop guessing what's on :3000. Five tools: list servers with framework detection, inspect ports, find zombies, diagnose conflicts, safe-kill with dry-run default. Local, no cloud, no tele | |
| Terminal History MCP hasanjahidul/terminal-history-mcp Developers: Search your zsh, bash, or fish shell history from Claude Code, Cline, Cursor, Zed, or any MCP client using tools like search_history (full-text with timestamp/CWD/exit code), recent_in_dir, failed_commands, and command_chains fo | |
| repo-pulse hasanyelaldi/repo-pulse-mcp Read-only git insights for AI: PR review context, bug hotspots, code ownership, release notes |
8,701–8,750 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.