Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.xultrax-web/agent-memory-mcp xultrax-web/agent-memory-mcp Markdown memory for AI agents. Files you can read, edit, grep, and commit. Not a database. | |
| DogPolicies xultrax-web/dogpolicies-mcp Verified dog rules for California and Nevada travel: parks, beaches, hotels, fees, sourced and dated | |
| Ask Xverum xverum-llc/xverum-mcp Find and enrich people from 750M professional profiles, with Next Move Signal job-change scores. | |
| PDF Reader xvvln/pdf-reader-mcp MCP server for extracting text, images, tables, links, annotations, and metadata from PDF files. | |
| io.github.XXO47OXX/spa-reader-mcp xxo47oxx/spa-reader-mcp MCP Server that renders JavaScript SPA pages and extracts LLM-ready Markdown content | |
| io.github.xxxoooxoxo/wiff xxxoooxoxo/wiff Deterministic, resumable multi-agent workflows across Codex, Claude, Cursor, and Kimi. | |
| brain-core xy-claude/brain-core Memory for a Claude Code agent that survives the session: five tools, a markdown vault, all local. | |
| ocular xyun1996/ocular Vision tools for coding agents: screenshots, OCR, UI diffs, errors, tables, and charts. | |
| tc39-mcp xyzzylabs/tc39-mcp Independent MCP server for the TC39 specs (ECMA-262 + ECMA-402): clauses, search, diffs, history. | |
| wasm-mcp xyzzylabs/wasm-mcp Read-only MCP server for the WebAssembly spec: instructions, types, sections, search, proposals. | |
| Xzar xzar-si/xzar-mcp Crash-test your AI agent on real professional decisions, graded against what actually happened. | |
| JVM MCP Server xzq-xu/jvm-mcp-server A JVM monitoring and control platform server based on Arthas that provides a Python interface for monitoring and analyzing Java processes with capabilities for thread analysis, memory monitoring, and performance diagnostics. | |
| Mixer AI y110692/mixerai-mcp Create and edit images, video, music and voice with 100+ AI models and Canvas. | |
| com.balmasai/balmas-mcp yaakovtzedek/balmas-mcp Agents read cleaned copies of your files: PII replaced with local consistent tokens. Read-only. | |
| LyricPatch yaboijbigs/lyricpatch-agent Signup-free lyric editing: upload authorized audio, change words, preview, and download. | |
| WHOOP Health Signals yadheedhya06/mcp-server-whoop Local-first, read-only WHOOP MCP server for recovery, sleep, strain, workouts, and body signals | |
| dev.yafl/mcp yafldev/mcp Agent-first E2EE file transfer over MCP: move files between machines in one tool call, gone in 24h. | |
| AgentLeak yagobski/agentleak Local privacy testing for AI agents. Scan code for PII and secrets, analyze execution traces across internal channels, and redact sensitive text through MCP tools. | |
| ReClip yagyaanshk/reclip Inspect and download authorized media or precise clips locally with yt-dlp. | |
| AimYear yahhi/aimyear-mcp Accountability partner in your agent: one yearly aim, one main step a day, a timer your agent runs. | |
| FrankenSurf yail259/frankensurf Read any web page and search the web: 28 tools, cheapest first, every page checked. | |
| io.github.yakub268/kalshi yakub268/kalshi-mcp Search, analyze, and trade Kalshi prediction markets through Claude Desktop | |
| io.github.YakupEmreYerli/mcp-firefly-iii yakupemreyerli/mcp-firefly-iii Security-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools. | |
| Education Scope MCP yama-tana/education_scope_mcp Classify Japanese curriculum scope, audit grade limits, and search normalized MEXT data. | |
| Repomix yamadashy/repomix Pack local or remote codebases into AI-friendly files that LLMs and coding agents can read or search | |
| Baseline MCP Server yamanoku/baseline-mcp-server MCP server that checks the Baseline status using Web Platform APIs. | |
| japan-corporate-mcp yamariki-hub/japan-corporate-mcp MCP server for searching Japanese corporate data including companies, financials, patents, subsidies, and government statistics via official government APIs. | |
| io.github.yamaru-eu/hardware-probe yamaru-eu/hardware-probe Hardware probe for performance diagnostics, thermal monitoring, and LLM optimization. | |
| claw-tsaver yang1bai/claw-tsaver An MCP server that helps AI agents reduce token usage by compressing, summarizing, and managing conversation/context data more efficiently. | |
| PaletteGet yang7206/paletteget-mcp Curated app, web and mini program color palettes with WCAG contrast and CSS variables. | |
| MCP Server for Apache Airflow yangkyeongmo/mcp-server-apache-airflow Provides a standardized way for MCP clients to interact with Apache Airflow's REST API, supporting operations like DAG management and monitoring Airflow system health. | |
| PersonalizationMCP yangliangwei/personalizationmcp Enables AI assistants to access and interact with personal data from platforms like Steam, YouTube, Bilibili, Spotify, and Reddit for personalized, context-aware interactions. | |
| Memory Bridge (忆桥) yanglinfeng/memory-bridge Evidence-cited knowledge base for internal documents: audit trail, versioning, namespace isolation. | |
| Overleaf yangzichao/mcp-server-overleaf Overleaf MCP server for Claude, Codex, ChatGPT, and Cursor with safe LaTeX editing and review. | |
| Random Design yanislav-igonin/random-design-mcp Generate randomized English Markdown frontend design directions from curated catalogs. | |
| WalkMyPlan yaniv-fink/walkmyplan-mcp Describe a house or upload a DWG/vector-PDF plan and get a walkable, editable 3D model. | |
| WP Agent - WordPress publishing & management with Claude yaniv-fink/wp-agent-mcp WordPress MCP server: publish posts, AI images, SEO and full site management, self-hosted | |
| WPWriter — WordPress AI Content & SEO yaniv-fink/wpwriter-mcp WordPress MCP server: generate SEO posts, AI images, autoblog & WooCommerce on your self-hosted site | |
| cozyvtt-mcp yanjingzhaisun/cozyvtt-mcp Enables an AI agent to act as a DM/KP in a CozyVTT campaign by narrating over chat, rolling server-authoritative dice, moving tokens, switching maps, managing initiative, and accessing character sheets through MCP. | |
| Somiya yankevych/somiya-mcp Your family's Somiya calendar, tasks and lists. Reads; any change waits for you to confirm. | |
| Base Token Facts yankiifr/base-facts-mcp Base token checks for agents: simulated buy and sell, taxes, honeypots. Pay per call in USDC (x402). | |
| Video Extract yanlinglabs/video-extract-mcp Download any video from a URL, or get its transcript and key frames. All local, no API keys. | |
| ScriptFlow MCP Server yanmxa/scriptflow-mcp ScriptFlow is a script workflow management system that transforms complex, repetitive AI interactions into persistent, executable scripts that can be managed, version-controlled, and reused across sessions. | |
| Simple Snowflake MCP yannbrrd/simple_snowflake_mcp Simple Snowflake MCP Server to work behind a corporate proxy. | |
| Inspectrum yannmenec/inspectrum Review coding-agent plans on demand with peer models, attributed findings, and a structured verdict. | |
| gitpro yantrakar/gitpro Read-only checks of which git name, email and SSH key a repository uses, and why. | |
| io.github.yantrikos/yantrikdb-mcp yantrikos/yantrikdb-mcp Cognitive memory for AI agents — semantic recall, knowledge graph, and contradiction detection | |
| io.github.yaotsakpo/inbin yaotsakpo/inbin-mcp No-signup email for AI agents over MCP: trial inbox, verification codes, parsed email events. | |
| io.github.yaotsakpo/ledgerfc yaotsakpo/ledgerfc-mcp Grounded sports predictions plus European soccer and tennis arbitrage data for AI agents. | |
| Yardstick ATS yardstickinc/yardstick-mcp Manage hiring in Yardstick's ATS: jobs, candidates, applications, interviews, and scorecards. |
21,001–21,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.