Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Opener 3viky/mcp-opener Enables opening files, folders, and URLs across different operating systems with special support for Linux Flatpak Firefox installations, handling filesystem sandboxing restrictions automatically. | |
| VaultAssist 3xcaffeine/mcp-server Enables natural language control over Google Workspace (Gmail, Drive, Calendar, Sheets, Slides, Tasks) through secure OAuth 2.1 authentication, with vault-level security and multi-user isolation. | |
| douyin-dm-mcp 3xian/douyin-dm-mcp Enables reading and sending Douyin private messages through a persistent browser profile, with dry-run and authorization safeguards. | |
| runkeep-mcp 3xjn/runkeep Enables management of long-running development processes (such as dev servers, compilers, and watchers) from MCP hosts. Provides tools to start, stop, restart, check status, view logs, and send input to managed processes. | |
| mcp-error-handler 4-life/mcp-error-handler Turns application errors into reviewed pull requests by automating root-cause analysis, Jira ticket creation, local and CI test gates, and GitHub PRs, with a human as the final merge gate. | |
| claimbase 4-r-c-4-n-4/claimbase Provides a compiled knowledge substrate, extracting atomic claims from an append-only capture log and querying a bitemporal claim graph over MCP. Read-only by default, with opt-in writes for trusted sources. | |
| Books API MCP Server 400861/my-mcp-server A demo MCP server that proxies a Flask REST API for books, providing tools to list books, get book details, list genres, and check API health via HTTP transport. | |
| 402ai-mcp 402ai-net/402-ai-mcp MCP server for 402ai.net, a Lightning-paid API proxy, providing AI model tools with automatic catalog synchronization and NWC auto-topup. | |
| @402md/mcp 402md/mcp An MCP server that transforms SKILL.md files into executable tools for AI agents, allowing them to discover and pay for services via the x402 protocol. It supports automatic payments on Stellar and EVM networks, enabling seamless integratio | |
| four02-commerce-mcp 402protocol/402protocol-four02-commerce-mcp Enables MCP-capable agents to create, verify, and pay EIP-712 USDC invoices on Ink, and read onchain commerce reputation for ERC-8004 agents. | |
| taap-mcp 402protocol/402protocol-taap-mcp Enables an agent to provision and manage a trading wallet, claim it via passkey, fund it, and trade tokens by prompting while defaulting to simulated paper mode and enforcing owner-only withdrawals and approved routers. | |
| gm-regiment-mcp 402protocol/gm-regiment-mcp Enables MCP agents to create Ink wallets, register ERC-8004 identities, send daily GM messages on gm.ink, and check GM status with dry-run safety and gas gating. | |
| MySQL MCP Server 404-error-notfound/mcp_mysql Enables comprehensive MySQL database operations including cross-database queries, performance analysis, health monitoring, and AI-assisted database management with role-based access control. | |
| colab-mcp 404f0x/better_colab_mcp Local-first MCP server for controlling Google Colab as a development, shell, file, and training runtime, with tools for notebook editing, GPU acceleration, and file transfer. | |
| FL Studio MCP Server 404kidwiz/fl-studio-mcp Real-time AI-assisted music production, advanced composition, mixing, and VST coordination for FL Studio via bidirectional MIDI & WebSockets, exposing over 100 tools for comprehensive DAW control. | |
| skillrouter 404kidwiz/skillrouter Enables agents to search a large skill library and read matching skill instructions on demand through two MCP tools, keeping only a small core preloaded and avoiding context bloat. | |
| research-mcp 404simon/research-mcp A read-only FastMCP server for academic research that lets agents search papers, inspect metadata, follow citation graphs, generate BibTeX, and read full texts of open-access PDFs via semantic scholar, OpenAlex, arXiv, DBLP, and Crossref. | |
| wikicfp-mcp 404simon/wikicfp-mcp Read-only MCP server for WikiCFP that enables searching academic conferences, browsing categories, and retrieving call-for-papers details. | |
| Zotero MCP 404simon/zotero-mcp Read-only MCP server for your local Zotero library. Browse collections, inspect paper metadata, and extract full-text from PDFs via FastMCP tools. | |
| MCP QA Server 404yeti/mcp-qa-server A reusable MCP server for QA automation testing that enables running tests across web apps, APIs, CLI tools, and more directly from Claude Desktop. | |
| geo-explorer 423357/geo-explorer Enables MCP clients to browse Java, TypeScript, and Python study tracks, generate Markdown coding challenges, and create simulated certificates from local data. | |
| Dynamic MCP Server 42research/dynamic_mcp Enables crash dump analysis and kernel debugging by integrating the real crash utility with automatic dump discovery, kernel matching, and session management. | |
| jgrants-mcp 42tahara/jgrants-mcp MCP server that enables LLMs to search and retrieve Japanese government subsidy and grant information via natural language, wrapping the Jグランツ public API. | |
| Mongo-MCP 441126098/mongo-mcp Enables LLMs to interact with MongoDB databases through a complete suite of CRUD operations, administrative tasks, and index management tools. It supports database and collection handling, aggregation pipelines, and comprehensive server mon | |
| mcp-powerschool 443pablo/mcp-powerschool A FastMCP server for PowerSchool that enables students to check grades, assignments, grade history, and attendance through the Model Context Protocol. | |
| ImgBB MCP Server 450689994/imgbb-mcp Enables uploading images to ImgBB for free hosting and returns public URLs, supporting both local files and URLs. | |
| Scholar MCP Server 45645678a/scholar-mcp A local academic tool that enables searching across nine academic sources, downloading PDFs, and performing AI-powered analysis of research papers. It also supports generating citation networks and recommending papers based on local workspa | |
| Memory MCP Worker 45black-limited/memory-mcp-worker Provides cross-device access to a persistent knowledge graph via Cloudflare Workers, enabling memory storage and retrieval through both MCP protocol and REST API with full-text search capabilities. | |
| mcp-serial-bridge 46nori/mcp-serial-bridge Enables AI agents to control serial port devices (modems, instruments, embedded boards) via MCP tools for listing ports, connecting, and sending/receiving commands. | |
| remote-agents 47-ronn/remote-agents-mcp A unified MCP-compatible system for controlling fleets of remote machines through AI agents. | |
| codex-app-server-mcp 4714407/codex-app-server-mcp Bridges MCP clients such as Claude Code and Cursor to independent Codex app-server sessions, letting them start, poll, steer, review, compact, cancel, and answer prompts for asynchronous Codex tasks over local stdio or a remote authenticate | |
| Todo MCP Server 48hour-solutions/todo-mcp-server A TypeScript-based server that enables AI agents to create, prioritize, and manage ordered task lists for complex projects. It provides tools for task tracking, status filtering, and progress statistics with persistent storage. | |
| @marketbasketanalysis/mcp 48x-ai/marketbasketanalysis-mcp Enables AI agents to access real co-purchase intelligence and merchant operations tooling from an ecommerce store's order history, including product recommendations, bundle analysis, insights, replenishment forecasts, and merchant ops workf | |
| Zotero MCP 4965898/zotero-online-mcp Enables AI assistants to fully access and manage online Zotero libraries through 82 tools, including searching, reading, citing, organizing, and analyzing items, with optional previewed writes and support for stdio and Streamable HTTP/SSE t | |
| TraeBridge MCP Server 497187419/traebridge Enables AI clients to control the user's already-open, logged-in browser pages in real time over a local WebSocket channel, without Playwright, Puppeteer, Selenium, or any browser driver. Exposes tools for navigation, semantic page snapshot | |
| mcp-venus-os 4alvit/mcp-venus-os MCP server for Victron Venus OS that enables reading battery, PV, grid, and inverter data via D-Bus and MQTT, and safely controlling inverter mode and charge limits. | |
| smart-ra 4aprilmayjune6/smart-ra MCP server that automates audit risk assessment from Korean DART disclosures, providing deterministic risk signals, going-concern scoring, and memo draft generation without LLM judgment. | |
| FastREA 4b2a/fastrea Enables AI agents to execute automated reverse engineering workflows by wrapping Ghidra's decompilation engine in a streamlined headless orchestration layer. It flattens native machine code into unified C exports while minimizing agent cont | |
| jupsearch-mcp 4cya/jupsearch-mcp Enables MCP clients to run unified web searches across multiple providers such as Exa, Serper, Tavily, Firecrawl, and Jina, fusing results with reciprocal rank fusion, and to extract readable content from public web pages, PDFs, and video p | |
| @4da/mcp-server 4da-systems/4da Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning. | |
| codex-mcp-server 4dhxm/codex-mcp-server Bridges MCP clients with local Codex CLI to execute autonomous coding tasks, manage threads, and inspect history via SQLite state. | |
| Arcane MCP 4ears-me/arcane-mcp Enables AI assistants to manage Docker containers, images, volumes, networks, and compose projects through Arcane's API. Provides comprehensive tools for environment, container, image, volume, network, project, and system operations. | |
| MCP LINE Server 4geru/mcp-handson Enables AI assistants to send LINE messages, including text, stamps, Flex Messages, and check message quotas through the LINE Messaging API. | |
| Gyuniverse Discord Bridge 4hglee-ops/gyuniverse-discord-bridge Enables AI clients to read Discord channels, recent messages, and searchable history, then turn that evidence into freshness-aware team context, briefs, decision baselines, and signed checkpoint diffs through remote MCP and GPT Actions. It | |
| Gyuniverse GitHub Projects MCP 4hglee-ops/gyuniverse-github-projects-mcp Enables AI clients such as ChatGPT and Claude to safely read, analyze, update, verify, and audit GitHub Projects v2 through OAuth-secured MCP connections with role-based access control, guarded writes, bulk preview/approval/apply, checkpoin | |
| SubTrack 4hmad69/subtrack-mcp Tracks subscriptions and recurring bills with flexible billing cycles, and provides upcoming renewals and spending summaries. | |
| slide-deck-mcp 4hum-ai/slide-deck-skill Enables creating and managing AI-powered slide decks on deck.4hum.ai with tools to save, update, generate images, and list decks. | |
| FastMCP Gateway 4human-ai/o2mcp Automatically converts OpenAPI specifications into MCP servers, allowing tools like Claude Desktop to interact with your REST APIs through a standard protocol. | |
| EVE ESI LLM Bridge 4i7/eve-esi-llm-bridge MCP server that connects EVE Online's ESI API to LLM clients, enabling reading private and public EVE data, resolving names and IDs, and optionally executing a small allowlist of write actions. | |
| Veyrqel 4i7/veyrqel Enables ChatGPT to drive persistent PowerShell 7 and WSL2 Kali PTY sessions on an operator's own Windows machine through a self-hosted, authenticated MCP relay. Sessions survive across tool calls, letting the model submit input, read increm |
22,151–22,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.