Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Color Picker 5aab/mcp-app-color-picker An interactive color picker that renders as a UI inside MCP-compatible hosts like VS Code GitHub Copilot and Claude. | |
| MCP Etherscan Server 5ajaki/mcp-etherscan-server Provides Ethereum blockchain data tools via Etherscan's API, enabling users to check ETH balances, view transactions, track token transfers, fetch contract ABIs, monitor gas prices, and resolve ENS names. | |
| Safe MCP Server 5ajaki/safe-mcp-server An MCP server that enables interaction with Safe (formerly Gnosis Safe) smart contract wallets, allowing users to query transactions, get multisig details, and decode transaction data through natural language. | |
| Veri5ight MCP Server 5ajaki/veri5ight Enables Claude to interact with Ethereum nodes, allowing users to check ENS token balances, view smart contract code, and decode transactions through natural language. | |
| fmodel-mcp 5coinin1/fmodel_mcp Enables controlling the FModel Unreal Engine asset browser through Windows UI Automation, allowing asset exploration, searching, and exporting without physical mouse interaction. | |
| football-api-mcp 5dollarfootball-api/football-api-mcp Enables AI assistants to query live football data, including fixtures, live scores, standings, statistics, betting odds, and full odds movement history for corner and card lines. | |
| RIB iTWO 4.0 MCP Server 5dsimon/rib-itwo-mcp Enables read-only access to a RIB iTWO 4.0 SQL Server database, allowing users to list schemas and tables, search schemas, describe table structures, and run SELECT queries via MCP. | |
| Tideways MCP Server 5hahil/tideways-mcp-server A Model Context Protocol (MCP) server that enables AI assistants to query Tideways performance monitoring data and provide conversational performance insights for PHP applications. | |
| CodeAtlas 5hihan/codeatlas Enables coding agents to navigate large codebases through a tree-sitter symbol graph, retrieve compact path:line-annotated context, and run a SNIPE fix loop with live dashboard updates on every save. | |
| yandex-api-mcp 5inex/yandex-api-mcp Enables unified access to Yandex Webmaster, Direct, Metrika, Wordstat, Audience and Search API through a single MCP endpoint, with a public read-only-by-default mode and an optional pro build for guarded write operations. Supports multi-pro | |
| zoho-crm-mcp 5ivatej/zoho-crm-mcp Provides live Zoho CRM data access via MCP tools, enabling queries on modules, records, fields, and related lists without syncing data. | |
| fusion-cad-ai 5nail000/mcp_fusion360 Enables an agent to define parameters in millimeters, build and validate parts or assemblies in a live Autodesk Fusion session, then export STEP, STL, 3MF, and F3D files. It also supports inspection and verification workflows before and aft | |
| kicad 5nail000/mcp_kicad Enables AI agents to create and edit real KiCad schematics and projects, run ERC/DRC validation, generate BOMs, and produce schematic/PCB/3D renders via kicad-cli, with SKiDL support and automatic backups. | |
| linux_desktop 5omeotherguy/linux-computer-use Enables local X11 desktop control for MCP clients, including persistent Python execution, AT-SPI accessibility inspection, screenshots, and recoverable mouse/keyboard input for operating real applications. | |
| Seafile MCP Server 5p00kyy/seafile-mcp Enables AI assistants to interact with Seafile cloud storage for managing self-hosted files and directories. It supports operations such as reading, writing, moving, and searching across libraries using either account-based or library-speci | |
| Distill 5queezer/distill MCP server that provides a shared team knowledge base by transforming raw input into anonymous, factual knowledge via a local LLM before storage, enabling cross-session recall of team decisions and corrections. | |
| Memobird GT1 MCP Server 5ux1a0ma0/memobird-gt1-mcp Enables direct local Bluetooth printing of text and images to a Memobird GT1 thermal printer without the official app or cloud services. | |
| MCP Server RubyGems 6/mcp-server-rubygems A Model Context Protocol server that allows interaction with the RubyGems.org API to fetch metadata about Ruby packages, search gems, and explore dependencies and ownership information. | |
| Trade-engine-MCP 6002aravind-cyber/trade-engine-mcp A calculator-focused MCP server built with NitroStack, providing tools, resources, and prompts for arithmetic operations. | |
| MCP Calculate Server 611711dark/mcp_calculate_server A mathematical computation service that enables users to perform symbolic calculations including basic arithmetic, algebra, calculus, equation solving, and matrix operations through the MCP protocol. | |
| mcp_python_exec_server 611711dark/mcp_python_exec_server Enables safe execution of Python code snippets within a sandboxed environment, restricting dangerous builtins and modules to prevent malicious operations. | |
| Israel & USA Weather MCP Server 6165924-art/mcp-weather-agent A Model Context Protocol server that provides real-time weather data, detailed forecasts, and alerts for locations in Israel and the United States. It uses web automation for Israeli data and dedicated services for US data. | |
| BastionMCP 626gl1ch/sentinal-mcp Secure broker gateway and stateful trading SaaS that bridges LLM AI agents with brokerage accounts via MCP, encrypting credentials and supporting connectors for Bybit, MetaTrader 5, TradingView, and more. | |
| Weather MCP Server 630156145/weather-server-javascript A JavaScript ES Modules server that provides weather information including alerts and forecasts for US locations using the National Weather Service API. | |
| 638Labs MCP Server 638labs/638labs-mcp-server Connects MCP clients to the 638Labs registry to discover, route, and auction tasks across diverse AI agents. It enables price-based auctions where agents compete to provide the most cost-effective solutions for tasks like coding, translatio | |
| dos-mcp 64kramsystem/dos-mcp MCP server providing emulator control for a loopback-only DOSBox-X QMP server, with tools for keyboard input, memory reads, screenshots, and state snapshots to complement Ghidra's GDB TraceRMI debugging. | |
| ArcGIS Pro MCP 652036/arcgis-mcp-service It enables MCP clients to execute ArcPy-based GIS workflows within configured permission and path boundaries, manage projects, maps, layers, layouts, data, spatial analysis, networks, and publishing. It can also attach to a live ArcGIS Pro | |
| CAD MCP Server 652036/cad-mcp-service Enables MCP clients to create and edit technical drawings, manage layers and geometry, process GIS/research mapping data, generate previews and layouts, and automate AutoCAD documents on Windows through COM. | |
| TeslaMate MCP Server 6547709/teslamate-mcp Enables reading Tesla vehicle data from a TeslaMate PostgreSQL database, including status, trips, charging, efficiency, weather integration, and more, via 38 tools for MCP-compatible clients like Claude Code. | |
| Daily News MCP Server 6551team/daily-news Enables AI assistants to fetch news categories and hot news/tweets across various topics like crypto, DeFi, and AI. | |
| OpenNews MCP 6551team/opennews-mcp A cryptocurrency news aggregation server providing AI-powered sentiment ratings, trading signals, and real-time market updates. It allows users to search news by coin, source, or engine type and filter results based on AI impact scores and | |
| Twitter MCP Server 6551team/opentwitter-mcp Enables interaction with Twitter/X data to retrieve user profiles, search tweets, and track engagement metrics. It provides advanced capabilities for monitoring follower events, KOL activity, and accessing deleted tweets. | |
| Pi-Anvil (pi-sandbox) 66419118nnn/pi-anvil Enables delegating coding tasks to sandboxed agents, returning changes as auditable diffs for human review before applying or discarding them. | |
| MySQL MCP Server 664393425/mysql-mcp-server Enables AI assistants to read and write MySQL databases, dynamically switch databases/servers, and auto-configure from Spring Boot projects. | |
| page-vision-mcp 666666999999666/page-vision-mcp Provides structured visual analysis tools for coding agents, enabling UI analysis, screenshot comparison, OCR, and crop-based refinement through VLM. | |
| vision-mcp 666666999999666/vision_mcp Give MCP-compatible AI agents image analysis, metadata inspection, cropping, OCR, and image comparison through any OpenAI-compatible vision model. | |
| Dc-MCP 669px/dc-mcp Enables Cursor to administer a Discord guild via the Model Context Protocol, providing full server structure inspection and granular tools for managing channels, roles, members, messages, moderation, invites, webhooks, and audit logs with s | |
| AutoFlow 66maer/autoflow AutoFlow enables AI agents to automate Windows desktop tasks by visually recognizing screen elements and simulating keyboard and mouse actions, with 18 MCP tools for workflow control. | |
| Chromate MCP 69gg/chromate A Model Context Protocol server for Chrome tab automation using the Chrome DevTools Protocol, enabling AI agents to select tabs, capture screenshots, and interact with web pages via CSS viewport coordinates. | |
| 6amdev-server-mcp 6amdev/6amdev-server-mcp MCP server for managing Ubuntu servers with AI integration, enabling system monitoring, Docker control, Gitea repository management, Ollama LLM interaction, workspace file operations, and Claude Code assistant via natural language. | |
| cursor-agents-mcp 6e6p1k/cursor-agents-mcp Enables an orchestrator like Claude Code to hand coding work off to Cursor SDK agents, run as detached background jobs that survive the session and can be listed, inspected, steered, resumed, or stopped. Agents are asynchronous and reusable | |
| delve-to-life 6forwater29/delvetolife-mcp Enables clients to look up dress-code meanings, generate five-piece outfit formulas for an occasion and weather, explore tested clothing colour combinations, and find relevant style guides through a free read-only MCP endpoint. | |
| dsh-burpsuite-mcp 6jeffr3y/dsh-burpsuite-mcp Enables DeepSeek Harness agents to natively use Burp Suite capabilities such as proxy, logger, history, repeater, rewrite, intercept, BCheck, and Bambda, with runtime configuration and controlled active operations. | |
| UniCloudDB-MCP 6june6/uniclouddb-mcp A database operation tool for uniCloud based on MCP protocol that allows AI assistants to perform database CRUD operations through standardized interfaces. | |
| OpenAI Secure MCP Tunnel 6maple/mcp-for-chatgpt-web-tunnel Enables file operations and bash command execution on the local workspace, securely exposed to ChatGPT via OpenAI Tunnel. | |
| zora-mcp-server 6missedcalls/zora-mcp An MCP server that enables AI-driven on-chain interactions with the Zora Protocol on Base, supporting token queries, swaps, and transfers via natural language. | |
| PhotoCraft MCP 6reams/photocraft-mcp Lets MCP clients such as Claude, Cursor or VS Code drive a locally installed image editor from plain-language requests, opening files, building and managing layers, making selections, applying adjustments and filters, and exporting the fini | |
| GitHub Stats MCP Server 6rz6/github-stats-mcp Provides tools to access GitHub repository and user statistics, including repo info, user profiles, contributors, issues, and repository search. | |
| Hyperliquid MCP Server 6rz6/hyperliquid-mcp-server A Model Context Protocol server providing comprehensive tools to access real-time market data, trading information, user positions, and analytics for the Hyperliquid perpetual futures exchange. | |
| SOLANA-MCP-Server 6rz6/solana-mcp-server A Model Context Protocol (MCP) server for interacting with the Solana blockchain. Provides tools to query balances, transactions, tokens, and network stats. |
22,251–22,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.