Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| mabl mablhq/mabl-mcp-server AI-powered test automation: run tests, analyze failures, query results across mabl workspaces. | |
| cute-web-scraper maccydee/cute-web-scraper MCP server for web scraping with natural language, enabling site crawling, page fetching, and extraction of emails, phones, links, and social profiles. Returns clean markdown, handles JavaScript rendering, and respects rate limits. | |
| model.tools — Zero-Auth Agent Utilities maceip/model-tools-mcp Zero-auth email OTP extractor, KV checkpoints, webhook bins, wake timers, and markdown reader. | |
| io.github.macek166/syntropy-mcp macek166/synproof-syntropy Synproof's Syntropy 5-sieve dialectical verification engine and Small Worlds axiom library. | |
| Macfax macfax/macfax-mcp Identify any Apple serial and read its device record, plus used-Mac prices, listings and checks. | |
| LeadMarina macgregordev/leadmarina-mcp Verified local-business leads: search by niche and US city, export to Close, GoHighLevel or Sheets. | |
| io.github.maciekaz/eset-mcp maciekaz/eset-mcp MCP server for the ESET ecosystem - Connect cloud + PROTECT On-Prem, multi-tenant, RO/RW | |
| io.github.mack-peng/cssgraph mack-peng/cssgraph CSS intelligence for AI coding agents — surgical style context, fewer tool calls. 100% local. | |
| io.github.mack-peng/cssprobe-cli mack-peng/cssprobe-cli Runtime CSS probe — inspect layout, overflow, scroll chains in a real browser. For AI agents. | |
| Nullcone Threat Intelligence maco144/nullcone-mcp Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats | |
| Yeti macorifice/yeti Product design with Claude: phases, requirements, user stories, RICE, flows, dashboard, Jira. | |
| Macrocosmos MCP macrocosm-os/macrocosmos-mcp Enables real-time queries and large-scale data collection from X (Twitter) and Reddit via the Model Context Protocol, powered by Bittensor's Data Universe. | |
| Macula mesh macula-io/macula-mcp Model Context Protocol server that exposes the Macula mesh to any agent harness | |
| io.github.macuse-app/macuse macuse-app/macuse-mcp MCP server for Mac — control Calendar, Mail, Notes, Reminders, and any Mac app, fully on-device. | |
| io.github.Mad-Man-Dan/karbon-mcp-server mad-man-dan/karbon-mcp-server Unofficial MCP server for Karbon practice management: contacts, work, time, invoices, payments. | |
| BlackVeil DNS & Email Security Scanner madaburns/bv-mcp DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. | |
| Incident Response MCP for Apache Airflow madamak/apache-airflow-mcp-server Diagnose Airflow failures from UI links with bounded logs and optional recovery actions. | |
| CalDAV MCP Server madbonez/caldav-mcp Enables interaction with any CalDAV-compatible calendar server (Yandex, Google, Nextcloud, iCloud, etc.) to list calendars, create/manage events with reminders and attendees, search events, and handle recurring events through natural langua | |
| io.github.madeinphantom/obscuraai-mcp-server madeinphantom/obscuraai-mcp-server Generate visual AI automation workflows from any MCP client. No API key required. | |
| io.github.MadeOnSol/madeonsol madeonsol/mcp-server-madeonsol Solana KOL trading intelligence & deployer analytics via x402 micropayments or API key. | |
| io.github.MadeOnSol/robinhood-chain madeonsol/mcp-server-robinhood-chain Robinhood Chain (id 4663) trading intelligence: KOL trades, DEX tape, deployer reputation. | |
| MGI-Mind madgodinc/mgi-mind Local memory server for AI agents: hybrid search, a fact graph and a hash-chained audit log. | |
| io.github.madjik-io/mcp-server madjik-io/mcp-server Quantum-finance market metrics for AI agents, computed by the Black Belt Labs engine. | |
| Onchain Data MCP madlabs-tech/onchain-data-mcp Blockchain data for EVM and Solana: balances, tokens, prices, DeFi and RPC via free-tier vendors | |
| io.github.Madnands5/owl24-mcp madnands5/owl24-mcp Hand a production error to the coding agent you already use — it claims it and writes the fix. | |
| proactive-mcp madrobotnet/proactive-mcp Detects reply deadlines, calendar conflicts, and personal occasions for MCP agents. | |
| MadTaco madtaco-dev/mcp Verification and trust checks for AI agents: validate, screen, propose, accounts, usage. | |
| Zamery Browser maemreyo/zamery-browser Use your existing Firefox and logged-in tabs, limited to tabs or tab groups you explicitly share. | |
| Maestro MCP Server maestro-org/maestro-mcp-server Enables interaction with the Bitcoin blockchain through the Maestro API platform. Provides tools for exploring blocks, transactions, addresses, mempool monitoring, market prices, wallet operations, and node RPC calls on Bitcoin mainnet and | |
| io.github.MaFady/tabler-mcp-server mafady/tabler-mcp-server Tabler.io for AI assistants: search 5,000+ icons, UI components, layouts, themes and docs. | |
| io.github.mafaq229/pbirb-mcp mafaq229/pbirb-mcp MCP server for editing Power BI Report Builder paginated reports (RDL) | |
| D365FO MCP Server mafzaal/d365fo-client A community-driven Microsoft Dynamics 365 Finance & Operations MCP server | |
| MCP Server Giphy magarcia/mcp-server-giphy Enables AI models to search, retrieve, and utilize GIFs from Giphy with features like content filtering, multiple search methods, and comprehensive metadata. | |
| loenn-mcp magedeline/loenn-mcp Celeste map editor for AI agents: read, edit, validate, preview and generate .bin maps. | |
| ai.smithery/magenie33-quality-dimension-generator magenie33/quality-dimension-generator Generate tailored quality criteria and scoring guides from your task descriptions. Refine objectiv… | |
| Casper Tools magiautonomous/casper-tools 19 zero-setup utilities: JSON, regex, cron, hash, base64, CSV, JWT, UUID, YAML, semver, time. | |
| Magic Hour magichourhq/magic-hour-mcp Create and edit images, videos, and audio through Magic Hour's hosted Streamable HTTP MCP server. | |
| io.github.magicsword-io/magicsword-mcp magicsword-io/magicsword-mcp Manage MagicSword endpoints, alerts, policies, and private intelligence through MCP. | |
| io.github.maginaryai/maginary-mcp maginaryai/maginary-mcp AI image + video generation for agents: --flag prompt DSL, async generate/poll, x402 pay-per-use. | |
| Magist magist-io/magist-mcp-server Deterministic, cited regulatory research for product launches; legal information, not legal advice. | |
| Backstory: search your data exports locally magna-nz/backstory Search your Google, Telegram, Spotify and Instagram exports locally. Fully offline. | |
| Tallybook magna-nz/tallybook Prices your Claude Code and Codex sessions from the transcripts on disk, shows what each agent cost over any period, and tells you in plain English what would have been cheaper. CLI, Browser UI and MCP server. | |
| io.github.MagneticDogSon/fixflow magneticdogson/fixflow-mcp Collective memory for AI agents. One agent solves a bug — every agent gets the fix instantly. | |
| io.github.magnusmage/cohort-mcp magnusmage/cohort Shared AI memory for teams: a git vault of markdown, human-approved, injection-safe, local-only. | |
| Magpie Capital magpiecapital/magpie-mcp Solana lending tools: live stats, 160+ collateral tokens, loan terms, x402 agent borrowing | |
| Maguyva maguyva/mcp Code intelligence for coding agents: semantic, AST, graph, and full-text search. 279+ languages. | |
| io.github.mahabubul470/gpp mahabubul470/gpp Project knowledge graph with history-checked belief staleness, changeset proposals, cost reporting | |
| mcp-multi-db mahanuj/mcp-multi-db Read-only MCP server for querying PostgreSQL, MySQL, and SQLite from AI agents — multi-database, safe by default. | |
| memalyze mahaoboy/memalyze Self-hosted agent memory: redaction before write, append-only audit, local embeddings. | |
| Corpus Iuris maharbanaretsagrav/corpus-iuris-mcp Derecho mexicano verificable: leyes, tesis y precedentes SCJN con vigencia fechada y URL citable |
11,251–11,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.