Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ai-commerce-demo 0rphe0/ai-commerce-demo Enables AI agents to browse, list, buy, review, and get paid for digital goods through MCP tools, including balance, ledger, checkout-link, upload, and payout operations. All money is simulated demo credits with no payment processor connect | |
| ghosthand 0sansnom/ghosthand This MCP server lets Claude drive an iOS Simulator or a real iPhone the way a person would: observing a numbered accessibility tree with annotated screenshots, then tapping, swiping, typing, pressing Home, launching or quitting apps, and op | |
| otto 0smallcat0/otto Enables AI agents to operate a local financial terminal, including market data, backtesting, paper portfolio management, and news digest, through safe, gated tools over MCP. | |
| Kanban MCP Server 0thomas1/kanban-mcp Enables users to manage Kanban-style tasks with priorities, tags, and statuses (todo, in progress, done) through natural language. Provides task analytics including lead time, cycle time, and status distribution with MongoDB storage. | |
| Agentic Workbench 0ui-labs/agentic-workbench An MCP-based tool orchestrator that exposes a single execute_task tool to Claude while internally managing 100+ tools through hierarchical navigation with a cheaper LLM, preventing context overflow from loading all tool definitions. | |
| Percepta MCP Server 0x-hewm/percepta-mcp Provides browser automation, AI-powered analysis, visual processing, web scraping, automated test generation, and DevTools analysis capabilities. Supports multiple AI providers (OpenAI, Anthropic, Google, Ollama) for intelligent web interac | |
| CTFtime MCP Server 0x-professor/ctf-time-mcp Provides programmatic access to CTFtime.org data for retrieving information about CTF competitions, team rankings, and event results. It enables users to search for upcoming events, analyze team performance, and access historical competitio | |
| Android Forensics ADB MCP Server 0x-professor/droidforensics-suite Enables forensic investigators to acquire data from Android devices via ADB, including device backup, artifact collection, and secure command execution. | |
| Stitch MCP Server 0x-professor/stitch-mcp-server Enables AI coding assistants to generate, edit, and scaffold HTML UIs from natural language using Google Stitch API. | |
| Twilio SMS MCP Server 0x-professor/twilio-mcp-server Enables AI agents to send, receive, schedule, and manage SMS and MMS messages using the Twilio Programmable Messaging API. It provides comprehensive tools for handling bulk messaging, conversation threads, and real-time inbox monitoring thr | |
| UI Analyzer MCP Server 0x-professor/uianalyzermcp Analyzes website UIs using Playwright and provides precise CSS/HTML fix instructions for AI coding assistants like GitHub Copilot and Cursor. | |
| CIP Kernel MCP Server 0x00000109/cip-kernel-mcp-server Enables LLM agents to query dependency graphs, kernel configs, and CVE data for systems running CIP super-long-term-support 5.10.x kernels. Supports fast, evidence-backed CVE applicability checks and patch backport discovery through read-on | |
| FlowSpec MCP 0x01feng/flowspec-mcp A PRD-first multi-agent MCP server that wraps agent definitions, collaboration rules, and staged delivery into a local stdio service for standardized software delivery workflows. | |
| Proofworks 0x06cf/proofworks Enables AI agents to verify claims deterministically by computing arithmetic, ratios, and dates and matching statements against provided sources, returning a confidence ladder of certain, source-backed, or unverifiable. | |
| ipykernel-mcp 0x0l/jupyter-kernel-mcp An MCP server that manages an IPython kernel, allowing LLMs to execute Python code in a project's virtual environment. | |
| Books API MCP Server 0x1d-1983/book-api-mcp-server MCP server that exposes book management tools for AI assistants, enabling CRUD operations on book collections through a .NET Books API backend. | |
| why-did-you-render-mcp 0x1f320/why-did-you-render-mcp Bridges unnecessary React re-render data from the browser to coding agents, enabling performance diagnosis and optimization through MCP tools. | |
| llm-toolkit 0x1jar/llm-toolkit MCP server toolkit with payload library, WAF bypass generator, rate limiter, plugin system, and inter-MCP bridge for security testing. | |
| AroFlo MCP 0x1notme/aroflo-mcp A production-ready MCP server that enables interaction with the AroFlo API to manage quotes, projects, and labor reporting. It features secure request signing and exposes API documentation as resources for enhanced context and tool surface. | |
| telegram-bot-testing-mcp 0x216/telegram-bot-testing-mcp Enables AI agents to test Telegram bots by driving the official Telegram Web client in a real browser, allowing visual verification of bot responses, inline keyboards, and Mini Apps. | |
| Reverence 0x3k3h/reverence-mcp Gives MCP clients such as Claude Code and OpenCode a static-analysis toolbox for binaries, executables, DLLs, shared objects, and web-app code, covering file identification and hashing, string extraction, PE/ELF/Mach-O/WASM parsing, disasse | |
| persistent-kb-mcp 0x67108864/persistent-kb-mcp A local-first MCP server providing persistent, searchable knowledge base via SQLite, enabling AI agents to save and recall facts across sessions without cloud dependencies. | |
| research-dispatcher-mcp 0x67108864/research-dispatcher-mcp Enables AI agents to run research queries across multiple public sources (Hacker News, Reddit, GitHub, Brave Search) in parallel, returning normalized results. | |
| kinetic 0x7067/kinetic Provides tools to inspect, edit, run, replay, compare, and provide feedback on physics-based marble simulations, returning structured results and PNG captures. | |
| Meme MCP Server 0x8687/mcp-gmail-v1 A Model Context Protocol server that enables AI models and tools to generate meme images from user prompts using the ImgFlip API. | |
| Gmail AI Agent MCP Server 0x8687/mcp-gmail-v2 Enables AI assistants to connect to Gmail accounts, check connection status, and send emails through a secure OAuth 2.0 interface. | |
| styx-search 0x923041-dotcom/styx-cli Enables MCP clients such as Claude to search over 450,000+ open-access papers, standards, and legal documents, download PDFs, retrieve citations, and fetch full document metadata. | |
| Browser Jet Pilot 0xabadbabe-ops/browser-jet-pilot Self-hosted MCP server for AI browser automation. Connects to your own Chromium instance via CDP, providing tools for browser control, navigation, interaction, and content extraction. | |
| KrishiArtha-MCP 0xabhilok/krishiartha-mcp Enables autonomous agricultural market arbitrage analysis by combining live mandi prices, weather covariates, routing, spoilage physics, policy retrieval, and statutory warehouse-credit execution through a multi-agent pipeline with human ap | |
| Team Manager MCP 0xadvait/team-manager-mcp Enables users to plan, coordinate, and govern multi-agent teams using MongoDB for shared context, token budgets, and checkpoint recovery. | |
| OAuth MCP Framework 0xagentlabs/oauth-mcp-framework A minimal MCP server framework for single-owner production deployments using OAuth authorization code flow with PKCE, providing endpoints for MCP, authorization, token, and metadata. | |
| AI Council MCP Server 0xakuti/ai-council-mcp Multi-AI Consensus Tool: Query multiple AI models in parallel, synthesize responses for better accuracy, and reduce AI bias through ensemble decision-making. | |
| arvancai 0xamirreza/arvancai Enables MCP-capable agents and IDEs to manage ArvanCloud services, including CDN/DNS/security, cloud servers, object storage, VOD/LIVE, edge computing, containers, and AI services, through the official APIs. | |
| poker-bankroll-tracker-mcp 0xandoroid/poker-bankroll-tracker-mcp Enables fetching poker sessions and computing aggregate statistics (profit, win rate, etc.) from the Poker Bankroll Tracker API. | |
| boardagent-mcp 0xangel-sec/boardagent Enables AI agents to manage tasks on a local-first board via MCP, exposing task creation, updates, and queries through a thin adapter over the REST service. | |
| MCP Chat 0xankitsingh/mcp A command-line interface application that enables interactive chat with AI models through the Anthropic API, supporting document retrieval, command-based prompts, and extensible tool integrations. | |
| Finance Manager MCP 0xarchiviste/finance-manager-mcp Enables self-hosted personal finance management for MCP clients by connecting read-only bank accounts via SimpleFIN, syncing transactions into a local SQLite database, and exposing tools to query balances, spending, budgets, cash flow, and | |
| Excalidraw MCP Server 0xartex/excalidraw-mcp Enables AI agents to create, modify, and share diagrams on a live Excalidraw canvas through MCP tools, supporting shapes, text, arrows, batch operations, and export to shareable links with images. | |
| tiktok-mcp 0xartex/tiktok-mcp MCP server for TikTok that lets AI agents connect accounts, post and schedule videos, follow users, manage profiles, and analyze performance—all via QR login with no API keys. | |
| remote-mcp-server-authless 0xasherweb3-sudo/remote-mcp-server-authless Deploy a stateless remote MCP server on Cloudflare Workers without authentication. It enables connecting to MCP clients like Cloudflare AI Playground and Claude Desktop for remote tool calls. | |
| Apple Apps MCP 0xatrilla/apple-mcp Local macOS MCP server and setup app for Apple apps | |
| Avito Shopping MCP 0xbadc0ffee/avito-shopping-mcp Enables AI clients to search Avito listings by city, price, and sort order, inspect complete listing cards, and review seller ratings and recent feedback locally in read-only mode. | |
| slim-github-mcp 0xbakeer/slim-github-mcp Enables local models to query GitHub read-only through nine compact tools that return small, capped results, such as repositories, issues, pull requests, commits, code search, and file contents. | |
| tron-event-mcp 0xbigapple/tron-event-mcp Enables natural-language-driven on-chain data analysis for TRON blockchain events via MongoDB, allowing AI assistants to query blocks, transactions, contract events, and perform analytics like aggregations, histograms, and address profiling | |
| MNEE MCP Server 0xbohu/qilinx-mcp-mnee-repo Enables AI agents to interact with MNEE stablecoin on Bitcoin SV, including checking balances, transferring tokens, and querying transaction history in both sandbox and production environments. | |
| HexSet MCP Server 0xbrsm/hexset Enables programmatic interaction with HexSet's Catan rules engine, including game management, legal actions, and bot opponents through MCP tools. | |
| @memofs/mcp-server 0xbuffdev/memofs @memofs/mcp-server lets AI coding agents (Claude Code, Claude Desktop, Codex, Cursor, opencode, Gemini CLI, GitHub Copilot, Zed, and any other MCP client) securely read and write MemoFS memory through standard Model Context Protocol tools. | |
| EMBA-MCP 0xbuz3r/emba-mcp An MCP server for EMBA firmware analysis that exposes structured security findings and tools to LLMs. It enables users to programmatically query, reason over, and correlate firmware analysis results such as kernel details, SBOMs, and attack | |
| Shared-Memory MCP 0xc0ffeebeef/llm-shared-memory Enables Claude Code, Codex, and local models to share one canonical PostgreSQL conversation history over MCP, preserving append-only facts, decisions, preferences, events, and project state with searchable retrieval. | |
| MCP HUB V12 0xc1pher/mcp-hub-v11 A centralized MCP server providing over 40 tools for contextual intelligence, code analysis, vision, and memory management via MemPalace, enabling efficient project development and agent orchestration. |
21,501–21,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.