Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ZynoHosting zyno-io/zynohosting-cli Manage ZynoHosting sites and create, discover, embed, and configure ZynoForms through local stdio. | |
| io.github.zyntarasystems/human-dispatch-mcp zyntarasystems/human-dispatch-mcp MCP server that dispatches physical-world tasks to humans through a unified API | |
| Periphery Code Audit zyntx-lab/periphery-mcp-server Swift code analysis with Periphery - detect unused code and improve code quality | |
| unfour zyqzyq/unfour Local-first backend developer workspace exposing API debugging, SSH, database, workspace, and diagnostics tools to AI agents through a local MCP server | |
| io.github.zz-plant/ambit zz-plant/ambit Capability graph of your agent stack: what it can do, what to set up next, what breaks. | |
| weighted-compact zzallirog/weighted-compact Local-first inspectable memory substrate for Claude Code. Three read-only MCP tools (search_pairs, compact_session, substrate_info) over a signal-scored parse of ~/.claude/projects/, zero outbound calls. | |
| Agent Memory Bridge zzhang82/agent-memory-bridge MCP-native, local-first memory for coding agents that turns real sessions into reusable decisions, gotchas, and domain knowledge. | |
| WorldRole zzn199216/worldrole-mcp Free remote and overseas job search with sources and eligibility checks. Usage limits apply. | |
| OtterSnap zzzjy765/ottersnap-mcp Give AI agents eyes on any web page: pixel-perfect screenshots, print-ready PDFs, branded OG images, code images, and structured page extraction (JSON or Markdown). | |
| ruah 0-big/ruah-mcp Enables AI agents to remove backgrounds, compress, resize, crop, AI-upscale, and strip metadata from images entirely on the local computer, so files never leave it. | |
| pixelgate 0-br/pixelgate Enables Claude Code to generate and edit images through two MCP tools, routing requests to GPT Image models via a local CLIProxyAPI gateway using a ChatGPT subscription, with input validation and artifacts/receipts written to a specified di | |
| agent-friend 0-co/agent-friend General purpose toolbox for AI applications | |
| Google Ads Gateway MCP 0-shiv/google-ads-gateway-mcp A Codex MCP server that wraps the Google Ads Gateway Worker to provide list_accounts and run_gaql tools, enabling natural language querying of Google Ads accounts and running GAQL queries without storing credentials. | |
| 2Captcha MCP 0-soft/2captcha-mcp MCP server that exposes the full 2Captcha API surface to Claude Code, enabling solving of 31 captcha types, management tools, and webhook integration for asynchronous solves. | |
| Manus MCP 0-soft/manus-mcp An MCP server that gives Claude Code full programmatic control over Manus.im through the official Manus API v2, implementing all documented endpoints and composite tools for common workflows. | |
| Tracker MCP Server 0-to-1-labs/tracker Enables AI agents to manage Kanban boards, cards, sessions, and automations through a unified MCP interface with real-time updates, supporting delegation, agent sessions, and human-in-the-loop interactions. | |
| chat-with-hermes 00000linlin/chat-with-hermes Enables ChatGPT web to read local files, search code, run shell commands, and drive a local Codex CLI via an official MCP connector, with human approval for risky commands and full audit logging. | |
| trayfeel 00011110/trayfeel Enables AI agents to control a Linux optical drive tray as an emotive actuator, with tools for status, motion primitives, emotion choreographies, and diagnostics. | |
| MCP Server PR Pilot 0010aor/mcp-pr-pilot A Model Context Protocol server that generates pull request descriptions, commit messages, and code reviews from actual code changes using git diff. | |
| Planora MCP Server 002-aditya/planora-mcp Connects MCP-compatible AI assistants such as Claude Desktop, Cursor, and Windsurf to a Planora account so they can list, read, create, edit, and delete markdown notes and folders, export files as PDF download links, and manage active devic | |
| Cocktails RAG MCP Server 00200200/cocktails-rag-mcp Provides cocktail recommendations using a Retrieval-Augmented Generation (RAG) pipeline powered by LangChain, FAISS, and Groq. It enables users to search for cocktail recipes and receive personalized drink suggestions through natural langua | |
| tokencut 00200200/usagetrim Enables AI coding agents to compress terminal output and file context in real time, preserving full error tracebacks while reducing token consumption by 60-85%. | |
| quark-mcp 007bba/quark-mcp Enables zero-API-cost visual understanding, text Q&A, image generation, and video analysis by driving the Quark browser's built-in AI chat page via CDP and Playwright. | |
| mail-mcp 007hacky007/mail-mcp An Apple Mail MCP server that enables reading emails, listing mailboxes, searching messages, handling attachments, and creating drafts, with no ability to send mail. | |
| notes-rag-pg 00aimlds00/notes-rag-pg Provides SQL-backed semantic search over indexed notes using pgvector, exposing tools to search and list note sources via natural language. | |
| Weather MCP Server 00aimlds00/weather-mcp-server Enables US weather forecasts and active alerts through National Weather Service data via get_forecast and get_alerts tools. | |
| agent-mailbox 00cyre/agent-mailbox Enables any agent to send a message by name into a live chat or another agent's conversation, and to receive replies by long-polling an inbox cursor that yields each message exactly once, in order, in roughly a tenth of a second. Also lets | |
| Lwa MCP 00face/lwa-mcp Enables local-first model routing and persistent tool library management, allowing automated workflow detection and conversion of stable patterns into reusable tools. | |
| Amnesia 00sodj/amnesia Enables agents to govern the memory store they already run by gating what gets written, filtering recall by caller identity and memory validity, executing verifiable forgetting, and recording refusals and deletions in a hash-chained audit t | |
| mail-mcp-oauth 00thies-blip/mail-mcp-oauth Enables Claude to read, search, send, and manage email across multiple IMAP/SMTP accounts through OAuth 2.1-secured MCP tools. | |
| legacy-db-mcp 0103juan/legacy-db-mcp Lets an LLM explore a cryptic legacy ERP schema in plain language through a semantic layer (table listing, column descriptions, published dictionary) and run single read-only SELECT queries that return capped results. Enforces safety at the | |
| secop-mcp 0103juan/secop-mcp Enables an LLM to answer questions about Colombian public procurement from the SECOP II electronic contracts open dataset on datos.gov.co, with typed queries that are built into SoQL by the server. A column allowlist and local entity direct | |
| prospector 011-sam-110/prospector Mine Reddit for unmet needs — a plug-and-play topic miner that doubles as an MCP server so Claude can do Reddit research. | |
| Feishu Bitable MCP Server 011011100/feishu-mcp Enables interacting with Feishu (Lark) multidimensional tables through MCP tools. Supports listing tables, reading records, searching records and apps, and getting views. | |
| uc-mcp 0111-0222/uc-mcp A read-only, date-aware MCP server that lets Claude Code (or any MCP client) search the UnknownCheats forum and read threads using your own logged-in session, labeling every result with a UTC date and age so stale offsets and signatures are | |
| pdf-translate MCP 0123saksham/mcp-pdf-translate Local MCP server for Claude Desktop that translates PDF files using a pipeline of extraction, parallel API translation, checking, and applying. | |
| kaomoji-mcp 0124212/kaomoji-mcp Enables retrieving a random kaomoji based on a mood or natural-language query, with access to over 96,000 entries across 30 moods. Also provides a tool to list available moods and their entry counts. | |
| quran-mcp 01283865399/quran-mcp Enables AI assistants to retrieve canonical Quran text, translations, scholarly tafsir, full-text search, and word-level morphology from verified Quran data. | |
| 01 Protocol MCP Server 01ai-admin/01ai_01protocol_mcp Enables creation, verification, and evolution of cryptographically verifiable AI agent identities (.01ai) via MCP for Claude Desktop and other MCP clients. | |
| github-repository-analyzer 01aniket/github-repository-analyzer Enables natural-language analysis of GitHub repositories by exposing repository metadata, source code retrieval, search, and file reading as MCP tools, with answers grounded in the actual repository content. | |
| CampusPilot MCP 01fe25bec314-coder/campuspilot-mcp Enables students to track assignments and exams, create study plans that distribute hours before deadlines, and generate fill-in-the-blank quizzes from notes. | |
| synology-filestation-mcp 01men/synology-filestation-mcp Enables AI agents to manage files on Synology NAS via the File Station API, supporting operations like browsing, searching, uploading/downloading, creating, renaming, copying, moving, deleting, compressing, and extracting. | |
| qpTwin 01pouria/qptwin Enables AI coding agents to analyze repository architecture, changed-file and diff impact, dependency and endpoint exposure, API contract compatibility, architecture boundaries, bounded capacity simulations, and security/quality evidence th | |
| base-tx-explain 0200project/base-tx-explain Explains any Base mainnet transaction hash by returning a structured JSON with action type, assets moved, risk flags, and cost details, using deterministic on-chain decoding without LLM. | |
| ACE-MCP 0215andrewfeng/ace-mcp Enables AI clients to perform local code search, indexing, and analysis across Java, JavaScript/TypeScript, .NET/C#, and Python projects through the MCP protocol. | |
| Google Workspace MCP Server 021food/google-workspace-mcp Enables Claude Code to interact with Google Workspace services (Drive, Docs, Sheets, Slides, Forms, Gmail) via OAuth 2.0 authentication and natural language commands. | |
| notion-ai-mcp-tool-bridge 022512db-netizen/notion-ai-mcp-tool-bridge Enables Notion AI to invoke client-side local tools through MCP callbacks, bridging OpenAI-compatible chat completions to Notion's agent runtime and returning tool results for continuation. | |
| ResearchMind MCP 02mahmoudhamam/researchmind-mcp Enables researchers to interact with a personal corpus of academic papers through semantic search, grounded question answering with source citations, and document summarization or comparison via MCP tools. | |
| TrendRadar MCP Server 02siteiq/trendradar Enables AI assistants to monitor and analyze public opinion, trends, and news from multiple platforms, with support for RSS, keyword filtering, AI translation, sentiment analysis, and trend predictions via natural language conversation. | |
| bubble-agent-mcp 0308ya9392/bubble-agent-mcp MCP server that helps users discover fast-growing internet conversations and trending topics in real time. Compatible with AI assistants like Claude, Codex, and Cursor, it enables natural language search for emerging discussions. |
21,401–21,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.