Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| linkedin-marketing-mcp 1036007003-wq/linkedin-marketing-mcp Automates LinkedIn B2B marketing tasks such as profile search, company analysis, and connection request drafting, with optional AI-powered features via DeepSeek. | |
| reddit-marketing 1036007003-wq/reddit-mcp-server AI-powered Reddit marketing automation via Model Context Protocol, enabling smart search, audience analysis, engagement finding, and comment generation. | |
| TikTok Marketing MCP 1036007003-wq/tiktok-marketing-mcp Free MCP server to automate TikTok viral marketing — search trending videos, analyze hashtags, and draft video scripts. Premium features powered by DeepSeek AI unlock AI-driven optimal posting times, hashtag strategies, and script generatio | |
| Twitter Marketing MCP 1036007003-wq/twitter-marketing-mcp Enables Twitter/X marketing automation, including tweet search, account analysis, trending topics, and optional AI-generated tweets and scheduling. | |
| vision-mcp 1042498283/vision-mcp 基于阿里云百炼DashScope（Qwen-VL）的视觉MCP Server，通过MCP协议为Claude Code、Trae等客户端提供图片理解（通用图片分析和UI截图分析）能力。 | |
| ncm-mcp-server 1049376904-crypto/ncm-mcp-server MCP server for NetEase Cloud Music, enabling Claude to search songs, add and switch tracks, accept listen-together invites, and send private messages via encrypted API calls. | |
| Dynamic API Server (MCP) 1049861657/mcp A modular dynamic API server based on the MCP protocol that provides rich tool capabilities for AI assistants while significantly reducing prompt token consumption. | |
| mcp-xiaozhi-server 104gogo/mcp-xiaozhi-server Enables to modify and manage XiaoZhi platform agents, including changing LLM, TTS, voice, role template, and name, as well as retrieving agent list information. | |
| WeChat MCP Server 1052666/wechat-mcp-server Enables AI assistants to send WeChat messages through automation, supporting both immediate and scheduled message delivery to contacts and groups using the Model Context Protocol standard. | |
| Kakuyomu MCP Server 106-/kakuyomu-mcp An MCP server that enables LLM agents to interact with the Japanese novel publishing site Kakuyomu, providing tools for searching works, retrieving episode lists, and reading content. | |
| win-shell-mcp 1072636071/win-shell-mcp Provides a deterministic set of 40 cross-platform command tools as an MCP server, replacing unsafe raw shell calls with structured JSON inputs and outputs for file system, process, network, and git operations. | |
| memo-mcp 108yen/memo-mcp This is an MCP server that enables agents to record, search, and retrieve memos using LowDB as a lightweight local database. | |
| task-orchestrator-mcp 108yen/task-orchestrator-mcp An MCP server for task orchestration. | |
| minimal-mcp-server 109naoki/minimal-mcp-server A minimal MCP server implementation designed for learning how to integrate tools like echo, time retrieval, and Japanese Wikipedia search with Claude Desktop. It serves as a foundational template for developing custom server capabilities us | |
| nexusm-mcp-server 10cg/nexusm-mcp-server Generic MCP server exposing Nexusm core capabilities (memory, conversation, knowledge, feedback, context) to MCP clients via stdio and Streamable HTTP transports. | |
| 10ML Perfume Finder 10ml-com/perfume-finder-mcp The 10ML Fragrance Index for ChatGPT, Claude and other assistants: perfume notes, accords, families, similar scents and expert guides. | |
| schematic-mcp-bridge 10on/schematic-mcp-bridge Enables AI agents to design electrical schematics through a high-level semantic API, handling components, pins, nets, validation/ERC, auto-layout, and SVG/KiCad rendering without requiring coordinate or file internals. | |
| Order Status Server 10xroadmap/laravel-mcp-server-tool-demo Laravel MCP server that provides a tool to look up order status by order ID from a MySQL database. | |
| Linear MCP Server 10xtechnology/linear-mcp An MCP server that integrates with Linear's API, enabling users to manage issues, projects, teams, and comments through natural language. It supports creating, updating, deleting, and searching issues, as well as project and team management | |
| mytinytodo-mcp 10xtechnology/mytinytodo-mcp-server MCP server that integrates with myTinyTodo to list, create, edit, and complete tasks via its JSON HTTP API. | |
| listener 1101alexzab1011/listener-mcp Enables apps to publish events on channels to a local broker that wakes the listening agent sessions, which handle the event and reply back. It provides the reverse direction of MCP with at-least-once delivery, routing across many apps and | |
| email-mcp 1101alexzab1011/mail-mcp-workspace Enables MCP-compatible AI clients to access and manage a mailbox over IMAP and SMTP, including reading, reviewing, and summarizing email while keeping credentials outside the repository. | |
| project-memory-mcp 1101alexzab1011/project-memory-mcp Provides a file-based, git-friendly memory store for coding agents to persist and recall project-specific lessons, bugs, and conventions via JSON files in the repository. | |
| ecfr-mcp 1102tools-dev/federal-contracting-mcps Legacy eCFR MCP listing for reading CFR text, FAR, DFARS, and agency supplements. Maintenance transferred to AcqAgent: https://github.com/acqagent/mcps. This listing's build and 13-tool evaluation cover eCFR only, not the other servers in t | |
|
regulationsgov-mcp 1102tools/regulationsgov-mcp Enables interaction with the Regulations.gov API to search federal rulemaking dockets, proposed and final rules, public comments, and comment periods. Supports tracking FAR/DFARS case histories and monitoring open comment periods across fed | |
| AI Product Index 110kc3/seo Machine-readable directory of AI products that register themselves, plus an agent-readability grader for any URL. | |
| Math MCP Server 111-test-111/math-mcp-server A Python-based MCP server providing mathematical computation tools and plotting utilities for a wide range of math topics including calculus, matrix operations, statistics, and more. | |
| StaticApkAuditor MCP 1111laaaddaaa/static-apk-auditor Enables Android APK security auditing through natural language by decompiling APKs with Apktool and running static analysis heuristics for attack surface, permissions, secrets, crypto, native libraries, and more, with every analysis logged | |
| tuya-infrared-mcp 1124823599331l-boop/tuya-infrared-mcp An MCP server that enables AI assistants to control devices via Tuya infrared remote control, supporting actions like toggling power and setting modes through natural language. | |
| Excel MCP Server with Supabase Storage 1126misakp/excel-mcp-server-with-supabase-storage A powerful MCP server for Excel operations with seamless Supabase Storage integration. | |
| sticker-sense 1145141919810asdfghjk-bit/sticker-sense Enables an AI to look up locally stored memes and stickers, retrieve the saved interpretations and context hints for each one, record new interpretations once explained, import images, and pick a sticker to send back to the user. | |
| reddit-skills 1146345502/reddit-skills Reddit automation for AI agents — browse feeds, search posts, comment, vote, and publish using a Chrome extension bridge. Python CLI with JSON output, no API keys needed. | |
| pplx-custom-mcp 115dkk/pplx-custom-mcp Provides Perplexity-powered search and page extraction tools that work without a headless browser, optimized for communities, forums, game stores, and comments. Runs on Cloudflare Workers, with free content fetching and per-search API costs | |
| JobHistory MCP Server 1179860746/hadoop-jobhistory-mcp-server Enables AI assistants to query Hadoop MapReduce job history, including job listing, details, counters, configuration, and logs via the JobHistory REST API. | |
| Firewall Governance MCP Server 1182872360/firewall-mcp Enables firewall policy governance by querying CMDB assets and auditing Panorama/Firewall policies. Supports asset searches, firewall object inspection, and security policy auditing to identify matching rules and configurations. | |
| wp-mcp-gateway 118group/wp-mcp-gateway Enables Claude to manage multiple WordPress sites via the REST API, using site_id routing and secure bearer-token auth, deployed as a stateless Cloudflare Worker. | |
| Frida Agent MCP 1193776794/frida-mcp An AI-driven Android dynamic analysis tool that enables AI models to perform automated reverse engineering by controlling Frida. It provides capabilities to inject scripts, manage application processes, and analyze real-time execution data | |
| Runbox Website Builder MCP 11cafe/website-publisher-mcp Provides a remote coding environment for AI to publish static websites as live URLs, with live code editing and sandbox execution. | |
| Chess MCP Server 11hritik11/chess-mcp Enables playing chess games with legal move validation and AI opponent moves powered by the Stockfish engine. Supports multiple concurrent games and provides moves in UCI format. | |
| Image Generation MCP 12-days-of-shipmas-2025/day-2-image-generation-mcp Generates blog and social media images using Google's Gemini AI with pre-configured platform presets for Ghost, Medium, Instagram, Twitter, LinkedIn, YouTube, and more. | |
| SmartKasa MCP Server 1212bogdan/smartkasa-mcp-server Enables AI assistants to interact with SmartKasa Ukrainian POS system through natural language, managing shops, products, inventory, sales receipts, employees, and fiscal reports with full API coverage. | |
| Zerodha Kite MCP Server 121yaseen/zerodha-mcp Implements a Model Context Protocol server that connects with Zerodha Kite API, allowing users to buy/sell stocks and retrieve holdings and positions information. | |
| 一键麦当劳 MCP 12202106/mcd-one-click Connects the official McDonald's China MCP to any remote-HTTPS MCP client through a single mcd_one_click tool that chains read queries on the backend and returns previews plus a one-time confirmation ticket before executing account-changing | |
| hospital-vuln-scanner-mcp 12211725-star/hospital-vuln-scanner-mcp A real security scanning MCP server for medical information systems, supporting port scanning, vulnerability detection, medical system identification, and compliance report generation. | |
| Hospital WAF MCP 12211725-star/hospital-waf-mcp A Model Context Protocol server that exposes a hospital-oriented web application firewall engine for AI assistants. It enables request inspection against curated security rules and provides tools for rule management and security testing. | |
| OH-MCPStack 123123213weqw/oh-mcpstack A system-level MCP protocol stack for OpenHarmony that provides unified tool discovery, caching, security, and statistics for agents, reducing context overhead and improving throughput via a user-space daemon (mcpd). | |
| OSINT MCP Server 12345678969696969/osint-tools-mcp-server Exposes popular OSINT and reconnaissance tools like Sherlock, SpiderFoot, and Holehe through MCP and HTTP APIs for AI assistants. Runs security research tools in sandboxed environments and returns normalized JSON results for investigation a | |
| Linux Manager MCP 1234567yang/linuxmanagermcp Enables LLMs to control a Linux server via multiple shell windows with background execution, notes, and sudo separation, allowing natural-language-driven system management and command execution. | |
| DeepSeek Eyes 1235ggb/deepseek-eyes An MCP server that grants image recognition to text-only models like DeepSeek by forwarding images to vision models and returning text descriptions. Supports clipboard, pasted session images, and batch folder image recognition. | |
| Contentstack MCP Streamable HTTP Server 1237889321/contentstack-mcp-streamable A transport wrapper that exposes Contentstack MCP tools over HTTP instead of stdio to enable remote access and horizontal scaling. It acts as a proxy for the Contentstack MCP package, allowing browser-based and networked clients to interact |
21,701–21,750 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.