Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| Signal Nodus SEC Filings hgenix20/signalnodus Amendment-safe 10-K/10-Q section diffs, claim checks vs XBRL, 8-K events. Accuracy published. | |
| Notmuch hgn/mcp-server-notmuch An MCP server that exposes a local notmuch email database to an LLM client such as Claude. It is read-first: searching, reading, and understanding mail is always available; writing anything (drafts, tags, exported files) requires an explici | |
| io.github.hholen/lodd-mcp-server hholen/lodd-mcp-server Headless web analytics for AI agents. 42 MCP tools for traffic, events, funnels. | |
| io.github.hhopke/intervals-icu-mcp hhopke/intervals-icu-mcp Read/write Intervals.icu MCP server: activities, wellness, calendar, gear, and workouts. | |
| Hiasynth Humanity — European demographics & market data hi-synth/hiasynth-mcp-server Europe's population layer: demographics, spending and market data for every place, down to 1 km². | |
| DocsMint hiai-gg/docsmint MCP server for DocsMint, an AI-native knowledge workspace. It gives AI agents scoped access to search, read, create, update and organize documents using hybrid retrieval and GraphRAG. | |
| app.businys/mcp-server hiatys/businys-mcp 221 MCP tools across 26 practices for independent professionals. Clients, invoices, contracts. | |
| HiddenJobs — Remote Tech Job Search MCP hiddenjobs/job-search-mcp Search remote tech jobs, inspect descriptions, compare roles, and retrieve application links. | |
| HiddenSwap hiddenswap/hiddenswap-mcp No-KYC crypto swaps, no account or email. Read-only quotes, coins, swap links, order status. | |
| 公式ママ活ママリッチ記事検索 hide99/mama-rich-mcp 公式ママ活ママリッチの公開記事を検索し、タイトル・説明・出典URLを返すMCPサーバー | |
| EntraID MCP Server hieuttmmo/entraid-mcp-server A modular server for interacting with Microsoft Graph API that enables management of users, groups, applications, sign-in logs, MFA status, and other Azure AD resources through natural language commands. | |
| Cure Cancer With AI hifarrer/ccwai-api Free oncology data (research, trials, FDA approvals, news) plus IBM MAMMAL biomedical predictions. | |
| io.github.hifriendbot/ailist-mcp hifriendbot/ailist-mcp MCP server for AiList — search and discover Ai projects from Claude Code | |
| io.github.high5-ventures/apple-reminders high5-ventures/apple-reminders-for-claude Fast, native macOS Apple Reminders via EventKit. 10-200x faster than AppleScript alternatives. | |
| Gas Fee Predictor higherbeing/gasfeepredictor-mcp Live Ethereum and L2 gas fees: current gas, cheapest L2, forecast, ETH price, cost estimates. | |
| Computer Use hightemp/go_computer_use_mcp_server Local MCP server for desktop automation: mouse, keyboard, screen, windows, and processes. | |
| Higress OPS MCP Server higress-group/higress-ops-mcp-server A Model Context Protocol server that enables comprehensive configuration and management of Higress through a well-designed agent flow architecture. | |
| Postmancer hijaz/postmancer A standalone MCP server for API testing and management, allowing AI assistants to interact with RESTful APIs through natural language. | |
| io.github.hillsidecoastal-glitch/healthcovered-mcp hillsidecoastal-glitch/healthcovered-mcp ACA health insurance eligibility, subsidy checker, and enrollment dates for 2026. | |
| io.github.himanshusaleria/events-mcp himanshusaleria/events-mcp Discover tech events, startup meetups, AI events across 8 cities — including hidden ones. | |
| ShortSync himpu-k/shortsync-mcp Let AI agents draft, schedule and publish posts to 17 social platforms, read analytics and reply. | |
| ai.smithery/Hint-Services-obsidian-github-mcp hint-services/obsidian-github-mcp Connect AI assistants to your GitHub-hosted Obsidian vault to seamlessly access, search, and analy… | |
| pinright hiper-ai/pinright Version-accurate library docs for coding agents, with a supply-chain check of each dependency. | |
| io.github.hiphopanda/windows-computer-use-mcp hiphopanda/windows-computer-use-mcp Control Windows desktop via MCP: mouse, keyboard, screenshots, clipboard, and apps. | |
| HireNimbus home services MCP hire-nimbus/nimbus-mcp-server Find and book verified local home service professionals through AI agents. | |
| HireLayer hirelayer/hirelayer-mcp Resume parsing, scoring and ranking, talent pool search and skills for recruiting AI agents. | |
| hirly hirly-me/hirly-mcp Jobs matched to your resume, tailored resumes, and applications hirly sends only after you confirm. | |
| Raindrop.io MCP Server hiromitsusasaki/raindrop-io-mcp-server An integration that allows Large Language Models to interact with Raindrop.io bookmarks through the Model Context Protocol, enabling users to create and search bookmarks directly through AI assistants. | |
| JP-Verify hiroshi-ichiyanagi/jp-verify-mcp Verify Japanese companies: invoice T-numbers, Corporate Numbers, English names, shareholders | |
| obolpay-x402-mcp hiroshi-ichiyanagi/obolpay-x402-mcp MCP server for a live x402 payment gateway on Base (USDC). Lets AI agents discover, preview for free, then pay per call — with prepaid gasless payments, signed receipts, and delta delivery. | |
| io.github.hiroshic9-png/edition-api hiroshic9-png/edition-api Japan business regulations, compliance, travel, protocols, memory — 10 knowledge domains, 23 tools. | |
| io.github.hiroshic9-png/transcode hiroshic9-png/japan-intelligence-api Japan market intelligence — 22 MCP tools, 10 government/exchange data sources | |
| KatanA Markdown Linter hiroyukifuruno/katana-markdown-linter Markdown linter, workspace-scoped stdio MCP server, and self-hosted text-only remote MCP server. | |
| ai.smithery/hithereiamaliff-mcp-datagovmy hithereiamaliff/mcp-datagovmy This MCP server provides seamless access to Malaysia's government open data, including datasets, w… | |
| ai.smithery/hithereiamaliff-mcp-nextcloud hithereiamaliff/mcp-nextcloud A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo… | |
| io.github.codecraf8/maap hitl-systems/maap-mcp Calibrated numeric estimates with uncertainty from messy records | |
| Shots hitslop/shots Create App Store screenshots, icons, ASO copy, localization, and revisions via hosted MCP. | |
| Hitsteps Analytics and Operations hitsteps/mcp AI access to Hitsteps analytics, live visitors, uptime, goals, alerts, and chats. | |
| Hive Intelligence MCP hive-intel/hive-sdk Evidence-backed crypto due diligence with sources, freshness, and a runtime receipt on every call. | |
| io.github.hj1003862396/draw-flow-mcp-server hj1003862396/draw-flow-mcp-server MCP server for Next AI Draw.io - AI-powered diagram generation with real-time browser preview | |
| com.hjarni/hjarni hjarni/hjarni-mcp Markdown-based note-taking with a hosted MCP server. Your notes serve you and your AI. | |
| Saju Insights hjsh200219/fortuneteller Discover personalized Four Pillars (Saju) readings, from daily to yearly fortunes and 10-year luck cycles, based on your birth data. Check relationship compatibility and receive Yongshin-driven guidance with practical tips on colors, direct | |
| ai.smithery/hjsh200219-pharminfo-mcp hjsh200219/pharminfo-mcp Look up Korean drug ingredient and product data by HIRA component and product codes via Pilldoc. V… | |
| opendota-mcp-server hkaanengin/opendota-mcp-server Enables querying Dota 2 player statistics, match data, and hero information through the OpenDota API using natural language. | |
| findtime.io MCP Server hkchao/findtime-mcp-server MCP server for time in cities around the world, time zones, DST, conversion, and meetings. | |
| SQL Server hlgurgel/mcp-sqlserver Servidor MCP para SQL Server com controle de permissões e modo somente-leitura | |
| Claro Gerencial hlgurgel/ws-claro-gerencial-mcp Servidor MCP para integração com os WebServices SOAP do Claro Gerencial (Redeinova) | |
| Wealthnow hlobo-dev/wealthnow-mcp 351 read-only tools: stocks since 1926, options, CDS, bonds, private markets, 13F, macro and crypto | |
| HLPlanet Keyboard Sizes hlplanet/hlplanet-mcp Compare keyboard sizes and 30 real keyboards, check desk and mousepad fit, search HLPlanet reviews. | |
| UCSC Genome Browser MCP Server hlydecker/ucsc-genome-mcp Provides comprehensive access to the UCSC Genome Browser API, enabling queries of genomic data, DNA sequences, gene annotations, variants, and metadata across multiple species and assemblies. |
8,851–8,900 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.