Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| io.github.krupalghori44-dev/infytool krupalghori44-dev/infytool-mcp Find the right InfyTool among 180+ free in-browser file tools and get deep links. No uploads. | |
| io.github.KrushnaVardhanReddy/osmcp krushnavardhanreddy/osmcp A typed, policy-controlled OS capability layer for AI agents. | |
| Krusgraph krusmaster/fabric-backend Turn Microsoft Fabric tables into an explainable graph and a GraphQL API. | |
| io.github.krutftw/fetchmux krutftw/fetchmux Self-hosted retrieval router for AI agents: budgets, provider routing, route receipts. | |
| Topos krv-labs/topos Structural code-quality tools for AI coding agents. | |
| peck-mcp kryp2/peck-mcp BSV wallet, BRC-100 identity and 38 tools to read and write the Bitcoin Schema social graph | |
| io.github.KryptosAI/agent-observability kryptosai/agent-observability Trace AI agent execution: every tool call, every error, every dollar. Open source, local-first. | |
| Email Deliverability Checker kryptoscan/email-deliverability-mcp Check SPF, DKIM, DMARC, blocklists, reverse DNS and email headers against Gmail/Yahoo sender rules. | |
| Krystal Voice Caller krystalunity/kvc-mcp Drive a Krystal Voice Caller tenant from Claude, Cursor, or any MCP-aware agent. | |
| KrystalView Analytics krystalview/krystalview-mcp Read-only MCP access to sessions, funnels, campaigns, errors, live visitors, and anomalies. | |
| Agent Rynku - Warsaw Stock Exchange (GPW) data for your agent krystiangw/agentrynku-mcp Public GPW daily prices, financials, ratios, company search, earnings calendar and WZA dividends. | |
| io.github.krystiangw/zen krystiangw/zen-mcp Unofficial MCP server for the ZEN.com Payment Gateway: payment links, transactions, refunds. | |
| Librus Synergia krzysztofbury/librus-mcp Librus Synergia school gradebook: grades, attendance, timetable, homework, messages. | |
| Snipaya krzysztofsurdy/snipaya-mcp Annotate screenshots in the Snipaya macOS app: arrows, text, redaction, crop, export | |
| Confluence Communication Server ks-gen-ai/confluence-mcp-server Enables querying and retrieving content from Confluence through CQL searches and page content fetching, allowing Claude to seamlessly access information stored in Confluence workspaces. | |
| Jira MCP Server ks-gen-ai/jira-mcp-server A TypeScript-based server that enables interaction with Jira, providing tools to execute JQL queries, manage tickets, list projects and statuses through natural language. | |
| Curagent Title Risk ksh0rt/curagent-mcp AI title risk analysis for US real estate closing docs. Get an API key at curagent.io | |
| MCP Tavily kshern/mcp-tavily A Model Context Protocol server enabling advanced search and content extraction using the Tavily API, with rich customization and integration options. | |
| AndroidMCP Framework kshivam1177/android-mcp-framwork MCP server and CLI for Android development and change-aware Android and Flutter testing workflows. | |
| io.github.ksimback/hermes-atlas-mcp ksimback/hermes-atlas-mcp Search and fetch 100+ Hermes Agent tools, skills, plugins, and integrations from hermesatlas.com. | |
| srunx ksterx/srunx A unified CLI, web dashboard, and Python API for SLURM job management. | |
| io.github.KSym04/limpet ksym04/limpet Persistent engineering memory for AI coding agents. Survives refactors, knows when it is stale. | |
| io.github.kta41/mcp-bruno kta41/mcp-bruno Python MCP server for running and inspecting Bruno API collections. | |
| mcp-server-duckdb ktanaka101/mcp-server-duckdb A Model Context Protocol (MCP) server implementation for DuckDB, providing database interaction capabilities through MCP tools. It would be interesting to have LLM analyze it. DuckDB is suitable for local analysis. | |
| US Economic, SEC EDGAR & On-Chain Data (x402) ktcod/x402-json-repair-mcp 21 paid tools: US macro data, SEC EDGAR filings, on-chain EVM reads. Settled in USDC on Base. | |
| io.github.kten-agent/x402-mcp-server kten-agent/x402-mcp-server MCP server for Hermes Asia x402 CN/JP market intelligence via USDC on Base. 8 endpoints. | |
| BAND ktgeek/ruby-band-mcp-server List bands and read, post, and comment on BAND posts through the BAND Open API. | |
| io.github.ktozvonil/phone-lookup ktozvonil/mcp-server-ktozvonil Who-called phone lookups: community verdict, spam rating, operator and reviews (ktozvonil.net). | |
| io.github.kts982/mcp-sap-gui kts982/mcp-sap-gui SAP GUI for Windows automation for AI agents - 59 structured tools via SAP GUI Scripting API | |
| Tripwire Guard — evidence-first injection scanner kubaopoczka/tripwire-guard Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network. | |
| Helm MCP kubedoll-heavy-industries/helm-mcp Give your AI assistant access to real Helm chart data. No more hallucinated values.yaml files. | |
| io.github.kubeleash/kubeleash kubeleash/kubeleash Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents. | |
| io.github.kubeshark/mcp kubeshark/kubeshark Real-time Kubernetes network traffic visibility and API analysis for HTTP, gRPC, Redis, Kafka, DNS. | |
| KubeStellar MCP kubestellar/kubestellar-mcp AI-powered Kubernetes diagnostics, RBAC analysis, security checks, and app deployment via MCP | |
| LinkedIn MCP Server (Salesbot) kubis010/linkedin-mcp-server-salesbot Human-in-the-loop LinkedIn outreach and a built-in sales CRM for AI agents. Safety-gated, anti-spam. | |
| jscpd kucherenko/jscpd Copy/paste (duplicate code) detection for codebases. The jscpd detector's built-in MCP server lets AI agents check snippets and files for duplication against a scanned project over stdio (jscpd --mcp). | |
| Zotero MCP kujenga/zotero-mcp Search your Zotero library, retrieve item metadata, and read full text from AI assistants. | |
| Kujolang.ai MCP kujolang/kujolang-mcp AI-native programming language and toolchain for accountable, verifiable agent-driven development. | |
| binance-alpha-mcp kukapay/binance-alpha-mcp An MCP server for tracking Binance Alpha trades, helping AI agents optimize alpha point accumulation. | |
| bitcoin-utxo-mcp kukapay/bitcoin-utxo-mcp An MCP server that tracks Bitcoin's Unspent Transaction Outputs (UTXO) and block statistics, giving AI agents direct access to essential on-chain data. | |
| blockbeats-mcp kukapay/blockbeats-mcp An MCP server that delivers blockchain news and in-depth articles from BlockBeats for AI agents. | |
| blocknative-mcp kukapay/blocknative-mcp An MCP server that provides real-time gas price predictions across multiple blockchains. | |
| Bridge Metrics MCP kukapay/bridge-metrics-mcp Provides real-time cross-chain bridge metrics, enabling AI agents to analyze liquidity, transaction flows, and performance across blockchain networks. | |
| bridge-rates-mcp kukapay/bridge-rates-mcp An MCP server that delivers real-time cross-chain bridge rates and optimal transfer routes to onchain AI agents. | |
| chainlink-feeds-mcp kukapay/chainlink-feeds-mcp An MCP server that provides real-time access to Chainlink's decentralized on-chain price feeds, optimized for seamless integration into AI agents and autonomous systems. | |
| chainlist-mcp kukapay/chainlist-mcp An MCP server that gives AI agents fast access to verified EVM chain information, including RPC URLs, chain IDs, explorers, and native tokens. | |
| cointelegraph-mcp kukapay/cointelegraph-mcp About
An MCP server that provides real-time access to the latest news from Cointelegraph. | |
| crypto-feargreed-mcp kukapay/crypto-feargreed-mcp A mcp server that provides real-time and historical Crypto Fear & Greed Index data. | |
| Crypto Funds MCP kukapay/crypto-funds-mcp An MCP server that provides AI agents with structured, real-time data on cryptocurrency investment funds, enabling deeper due diligence and portfolio intelligence. | |
| crypto-indicators-mcp kukapay/crypto-indicators-mcp An MCP server providing a range of cryptocurrency technical analysis indicators and strategies. |
10,601–10,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.