Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| jira-mini-mcp proprock/jira-mini-mcp Minimal Jira Cloud MCP server: broad reads, a narrow 3-tool write surface, optional read-only mode. | |
| SQL Safe MCP proprock/sql-safe-mcp Minimal, read-only, PII-safe MCP server for SQL databases. | |
| ProShip Thailand Post proship1/proship-mcp Create Thailand Post shipments, print labels, and track parcels in Thailand via ProShip. | |
| ProspectAPIs prospectapis/prospectapis-mcp Moved to com.prospectapis/prospectapis-mcp. Install prospectapis-mcp from npm for the latest. | |
| io.prospeo/prospeo-mcp-server prospeo-v2/prospeo-mcp-server Prospeo: Find, search, and enrich people and companies with verified emails and mobile numbers. | |
| Hostaway-mcp prosperkartik/hostaway-mcp Connects AI assistants to the Hostaway property management API via 10 read-only tools covering listings, reservations, calendars, guest conversations, and owner statements. | |
| Swiss company data prospex-ch/swissco-cli Swiss company data: Zefix register, SHAB gazette, simap tenders, FINMA, GLEIF and ARAMIS | |
| stackhint protemir/stackhint Recommends MCP servers, plugins and skills for a repo, from what is actually in it. | |
| MythxEngine protolabsai/mythx-mcp Tabletop RPG engine over MCP: dice, combat, stress, clocks, world generation, four bundled worlds | |
| Feedbagel MCP Server prototypr/feedbagel-mcp Model Context Protocol server for the Feedbagel API. Enables agents to follow RSS feeds, manage webhook subscriptions, and read entries on a user's behalf. | |
| ERIUS PHONE protremix/erius-phone-mcp Drive a hosted ERIUS PHONE Android device: read the screen, tap, type, install APKs, get crash logs. | |
| Provar MCP Server provartesting/provardx-cli Provar MCP: AI-powered Salesforce test automation. Generate, validate, migrate, and run tests. | |
| ProvenPin provenpin/provenpin Tested, version-pinned code recipes for AI coding agents, each with its last-passed receipt. | |
| Prowlo — Reddit & X for AI agents prowlo-com/prowlo-mcp Reddit & X data for AI agents over MCP. Semantic search, hosted, no Reddit API. | |
| Proxus Industrial MCP Server proxusiiotplatform/proxus-mcp Read-only Modbus TCP and OPC UA access to PLCs and industrial devices, with connection diagnostics | |
| Proxy302 proxy302/proxy302-mcp Residential proxies for AI agents: usage, proxy URLs by country, IP purity checks and cost quotes. | |
| ProxyCove proxycove/mcp-server Buy and manage residential, mobile and datacenter proxies in 170+ countries, prepaid per GB | |
| ai.proxyllm/proxyllm-mcp proxyllm-ai/proxyllm-mcp OpenAI-compatible LLM gateway: models, savings math, key provisioning, autonomous email-OTP signup | |
| ProxyRange proxyrange/proxyrange-mcp Residential proxy checkout prices, terms and sourcing checks, every fact dated and sourced. | |
| io.github.prPMDev/jd-intel-mcp prpmdev/jd-intel Your AI fetches and reads full job descriptions across nine ATS platforms, no copy-paste. | |
| Rechtspraak (Dutch Case Law) prudai/rechtspraak-mcp Dutch case law over MCP: search & fetch uitspraken by ECLI (Rechtspraak Open Data + LiDO) | |
| Real Fake Data przeslijmi/real-fake-data-mcp Realistic synthetic test data — valid PESELs, NIPs, IBANs, addresses, people across 27 EU countries. | |
| io.github.pscale-commons/bsp-mcp pscale-commons/bsp-mcp-server Persistent agent memory & identity on federated beaches — one bsp() function over pscale blocks. | |
| deepseek-as-subagent pschina/deepseek-as-subagent Run DeepSeek as a real sub-agent inside Claude Code / Codex CLI — not just a single LLM call. DeepSeek gets its own 7-tool agent loop (Read/Write/Edit/Bash/Glob/Grep/NotebookEdit) inside a sandboxed workspace. | |
| Multi Gmail Account MCP psdgator/multi-gmail-account-mcp Many Gmail and IMAP accounts at once: unified search, triage, attachments, Calendar. Drafts-only. | |
| Pseudolife Memory pseudogiant-xr/pseudolife-mcp Persistent memory for MCP-compatible agents: memory bank, fact cortex, dreams, graph. | |
| io.github.pshivapr/selenium-mcp pshivapr/selenium-mcp Selenium Tools for MCP | |
| Hacker News MCP pskill9/hn-server Parses the HTML content from news.ycombinator.com (Hacker News) and provides structured data for different types of stories (top, new, ask, show, jobs). | |
| Website Downloader pskill9/website-downloader Provides a tool to download entire websites using wget. It preserves the website structure and converts links to work locally. | |
| TablaCognita pstryder/tablacognita MCP-native collaborative markdown editor with real-time AI document editing | |
| Agent Spreadsheet MCP psu3d0/agent-spreadsheet Agent-safe Excel workbook analysis, editing, recalc, and verification tools. | |
| Decidealot psyb0t/decidealot Local Laya and Von typed decisions over TypeSafe-compatible MCP. | |
| Audiolla psyb0t/docker-audiolla Self-hosted MCP server: audio stems, mastering, MIR analysis, DSP, MIDI, speech tools. | |
| Flickies psyb0t/docker-flickies Self-hosted MCP server: video lipsync, face restore, and ffmpeg ops (trim, concat, transcode). | |
| HybridS3 psyb0t/docker-hybrids3 Self-hosted S3-compatible object storage server with an MCP interface for AI agents. | |
| Mailbox psyb0t/docker-mailbox Scoped IMAP/SMTP access over HTTP and MCP: read, organize, draft, reply and send mail. | |
| Predictalot psyb0t/docker-predictalot Self-hosted MCP server for time-series forecasting and tabular ML via foundation models. | |
| Reverse Engineer Anything (Docker) psyb0t/docker-reverse-engineer-anything REA reverse-engineering MCP server in Docker, with JADX, Apktool and adb for APKs. | |
| Stealthy Auto Browse psyb0t/docker-stealthy-auto-browse Self-hosted MCP server for stealth browser automation with human-like OS-level input. | |
| Talkies psyb0t/docker-talkies Self-hosted MCP server for speech: ASR transcription, TTS synthesis, and file staging tools. | |
| Telethon Plus psyb0t/docker-telethon-plus Self-hosted MCP server: Telegram userbot control (Telethon) via HTTP and MCP. | |
| Wickworks psyb0t/docker-wickworks Self-hosted MCP server: technical indicators + smart-money-concepts from OHLC bars. | |
| Rankrat psyb0t/rankrat Self-hosted MCP for owned-site SEO, search analytics, indexing, monitoring, and safe remediation. | |
| macOS Calendar and Reminders psychquant/che-ical-mcp macOS Calendar and Reminders MCP server (29 tools). Native Swift EventKit, iCloud/Google/Exchange. | |
| io.github.kiki830621/che-word-mcp psychquant/che-word-mcp Swift-native MCP server for Word (.docx) manipulation with 148 tools | |
| Conduyt CRM ptaramona/conduyt-mcp-server Conduyt CRM tools for AI agents: contacts, deals, pipelines, tasks, automations, messaging, reports | |
| repofit pth2002/repofit Find GitHub projects that fit you, using what your coding agents already know about you. | |
| Publee MCP Server publee-dev/mcp Enables AI tools to publish HTML pages and get shareable URLs instantly, with optional account features for persistence, in-place updates, and visibility control. | |
| PublicSafetyAPI public-safety-api/publicsafetyapi-mcp US police, fire, EMS and hospital locations near any address, from federal HIFLD data | |
| public-ui-kolibri public-ui/kolibri KoliBri - the accessible Web Components library. |
16,751–16,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.