Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| YouTube Data kirbah/mcp-youtube YouTube MCP server for token-optimized, structured data using the YouTube Data API v3. | |
| mcp-maven-deps kirich1409/maven-mcp maven-mcp gives AI agents (Claude Code, Cursor, Codex, Grok Build and any MCP client) live knowledge about JVM dependencies. It looks up the latest versions on Maven Central, finds outdated dependencies in Maven, Gradle and version catalog | |
| Handoff kirill-sviridov/handoff-mcp Cross-session memory for Claude over MCP — prioritised briefs, supersession, cross-project recall. | |
| SmartPDF kirmoz1997/smartpdf-agents 24 PDF tools: convert to and from Office and JPG, compress, merge, split, OCR, sign, watermark | |
| ShapeWords MCP kirrrr-2423/shapewords-mcp Generate ShapeWords word clouds as SVG, PNG, or JSON from text or weighted words. | |
| Phosphor kirusshenkin/terminalos Hosts, metrics, Docker and authorized_keys over a macOS terminal's live SSH connections | |
| notion-private-api-mcp kirvigen/notion-private-api-mcp Unofficial Notion MCP server built on Notion's private API (token_v2 cookie). Gives LLM agents full read/write access to the entire workspace — no integration token and no per-page sharing. | |
| Populi kisasa/populi-mcp Populi API v2 for student information systems: search the API, read data, optionally write | |
| Shopify kisasa/shopify-mcp Shopify Admin API tools: products, media, orders, customers, inventory, and sales channels | |
| 日本の給与・社会保険・労働法 kishida-devil/jp-payroll-mcp Japan payroll & social insurance. 日本の給与計算・社会保険。47都道府県の料率、源泉所得税、割増賃金、有給、標準報酬月額の改定、最低賃金。根拠の条文つき。 | |
| 6DuckLearn MCP kit18/6ducklearn-mcp Connect agents to 6DuckLearn memory, approvals, and runtime control. | |
| io.github.Kitalon-Labs-LLC/pgmoat kitalon-labs-llc/pgmoat Governed, read-only Postgres access for AI agents: SQL safety, RLS, budgets, tamper-evident audit. | |
| KitchenSink4PPT kitchensink4ai/kitchensink4ppt PowerPoint (.pptx) MCP server: editable vector diagrams, tables, budgeted reads, render-to-verify | |
| KitchenSink4Web kitchensink4ai/kitchensink4web Browser MCP server: budgeted page reads, honest unread accounting, structured extraction. | |
| KitchenSink4Word kitchensink4ai/kitchensink4word Word (.docx) MCP server: 231 actions in 10 tools, live editing, tracked changes, citations. | |
| KitchenSink4XL kitchensink4ai/kitchensink4xl Excel (.xlsx) MCP server: calculated/cached/missing labels on every value, formulas, verified writes | |
| io.github.KitDevUA/video-vision-mcp kitdevua/video-vision-mcp Analyze any video (local file or URL) into frames + transcript for Claude Code | |
| URL to Markdown (Article Extractor) kitedesk-erm/url-to-markdown-mcp Turn any URL into clean Markdown or text for LLMs, RAG and agents. Strips nav, ads and footers. | |
| io.github.kitepon/aiterm-mcp kitepon/aiterm-mcp Persistent terminals and one launcher for Claude, Codex, Grok, Cursor, and Antigravity harnesses. | |
| io.github.kitewright/mcp kitewright/kitewright Lightweight browser automation for AI agents: navigate, screenshot, extract, PDF. One small binary. | |
| io.github.kitsune-de/hyperliquid-mcp kitsune-de/hyperliquid-mcp Read-only Hyperliquid data: markets, funding rates, order books, candles, positions and fills | |
| io.github.KittyCAD/zoo-mcp kittycad/mcp An MCP server that provides access to the Zoo API for various CAD operations and tools. | |
| KitWright Unity MCP kitwright/unity-mcp Unity Editor MCP server: execute_code, screenshots, input simulation, play mode automation. | |
| Kibela MCP Server kiwamizamurai/mcp-kibela-server Enables integration with Kibela API for searching and retrieving notes, allowing LLMs to interact with Kibela content seamlessly. | |
| io.github.kiwoongeom/gmc-mcp kiwoongeom/gmc-mcp MIT-licensed pip-installable MCP for Google Merchant Center on Merchant API v1 (126 tools). | |
| Silica Core kiycoh/silica-core Retrieval over the folder the session opened: files, search, read, code_pack, write_note. | |
| MCP Kibela kj455/mcp-kibela A Model Context Protocol server that enables AI assistants to search and access information stored in Kibela, supporting note search, retrieval, creation and updating. | |
| FoodChecker kjagsadvisors/foodchecker Is this food healthy? A 0-100 score from nutrition, additives and processing (Open Food Facts). | |
| Auth Your Agent kjames2001/authyouragent Act for a person on websites: sandboxed browser, phone approvals, saved logins, scheduled plans. | |
| io.github.kjgueye/netintel-mcp kjgueye/netintel-mcp MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments | |
| signallord-mcp-server kk6bzb/signallord-mcp-server Bitcoin market intelligence MCP server. Exposes Signal Lord's composite gauge scoring, on-chain and macro regime signals, and market data to AI agents. | |
| Anteater MCP kkazuhak/anteater-mcp UCI course search and registration planning: live sections, grades, prerequisites, conflicts. | |
| io.github.kKEo/memors kkeo/memors Local, explainable knowledge base for AI agents: hybrid search with provenance over SQLite. | |
| io.github.kkjh0723/mcp-ldbd kkjh0723/mcp-ldbd Submit and track stock/crypto direction predictions on LDBD's public leaderboard (ldbd.app). | |
| WunderUI kl-webmedia/wunderui-mcp The WunderUI design system for coding agents: components, props, tokens, rules and skills. | |
| ReplySlip klahrich/replyslip Relay for messages and schema-checked tasks between AI agents. | |
| io.github.klarlabs-studio/coverctl klarlabs-studio/coverctl Go code coverage analysis tool with MCP server for AI-powered coverage workflows | |
| Scout klarlabs-studio/scout Browser automation MCP server with 84 tools. Pure CDP, DOM diffing, vision hybrid. | |
| Kleap kleaphq/cli Build, edit, publish, and manage websites and web apps with Kleap hosting, domains, and analytics. | |
| AirSCP kleash/airscp Drive AirSCP, the Mac app for SCP/SFTP file transfers, SSH servers and Windows Remote Desktop | |
| io.github.klein-business/legal-text-mcp-de klein-business/legal-text-mcp-de German federal & state legal texts (BGB, DSGVO, …) with canonical IDs and cite-grade provenance. | |
| 3D Visualizer kleinicke/ply-visualizer Inspect, compare and export point clouds, meshes and calibrated depth data through MCP, with interactive inline 3D previews and PNG captures. Supports camera controls, selections, measurements, object transforms and animation playback. | |
| J-Link MCP klievan/jlink-mcp Debug embedded firmware on real hardware: J-Link probes, Cortex-M faults, RTT logs, GDB. | |
| HOI4 Agent Tools klimpaskov/hoi4-agent-tools Build HOI4 mods: focus trees, events, decisions, worlds, GUI previews, docs and AI balance. | |
| io.github.klNuno/fast-mcp-ssh klnuno/fast-mcp-ssh SSH, SFTP, PTY shells, host-to-host copies and remote screenshots for AI agents. One Rust binary. | |
| AdLoop klosk/adloop Google Ads, Reddit Ads, GA4 and Tag Manager in your AI client, with a preview before every change. | |
| io.github.KlossKarl/loom klosskarl/loom Local-first personal knowledge base. Cited answers from your vault via vector + graph retrieval. | |
| io.github.kmatata/zillow-leads-property-data kmatata/zillow-leads-property-data MCP server for the zillow-leads-property-data actor: Zillow leads with agent contacts and history. | |
| io.github.KmOnBeIbI31/verifactu-mcp kmonbeibi31/verifactu-mcp MCP server para VeriFactu (AEAT). Facturación electrónica española desde Claude Code. | |
| io.github.KN0WBOT/clavis kn0wbot/clavis-mcp Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging. |
10,451–10,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.