Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| anchor-memory 809179409-bot/anchorage Enables AI assistants to save resolved debugging sessions as concise experience cards into a local JSON knowledge network, and to retrieve relevant past cards when new bugs arise. It also powers a spaced-repetition review interface to reinf | |
| Blinkwire 81117105108108/blinkwire Provides fast, token-efficient browser automation for LLMs by attaching directly to a running Chrome instance via CDP, offering a full set of browser tools including navigation, interaction, and snapshot diffs, with batched actions to reduc | |
| code-review-mcp 812diasp/code-review-mcp Local MCP server for Cursor that analyzes code, finds bugs, generates tests and documentation via OpenRouter. | |
| superscalar-mcp 8144225309/superscalar-mcp Enables interaction with SuperScalar Bitcoin Lightning channel factories, providing protocol overviews, savings estimations, and deep dives into components like invalidation trees and MuSig2. | |
| mcp-mysql-server 81832310/mcp-mysql-server Enables Claude Code to directly operate MySQL databases through natural language, supporting multi-environment profiles, security modes, and 11 tools. | |
| Robot Navigation MCP Server 827346462/mcp-robot-navigation Enables robot navigation control and monitoring through natural language. Provides tools for robot positioning, navigation to coordinates, device status monitoring, task management, and emergency controls. | |
| Chlorpromazine MCP Server 82deutschmark/chlorpromazine-mcp Helps ground AI agents in reality by fact-checking responses against official documentation and reading project files to prevent hallucinations during coding sessions. | |
| luma-tabs 844587244-rgb/luma-tabs MCP server for managing Chrome tabs and tasks, enabling AI agents to search, recall, and organize browser sessions by preventing duplicate tabs, fuzzy searching, and saving workspaces as tasks. | |
| tdx-mcp 845340126/tdx_mcp 基于通达信行情服务器的 MCP Server，为 AI 助手提供实时 A 股、期货、港股等行情数据及技术指标。 | |
| droidmcp 846572691/droidmcp Enables AI assistants to read and control a connected Android device over adb or a local root shell, with tools for screen inspection, tapping, typing, swiping, launching apps, and system commands. | |
| mac-wechat-mcp 849860605/mac-wechat-mcp Enables AI clients to observe WeChat conversations on macOS via local screen capture and Apple Vision OCR, and to preview draft replies without sending messages. | |
| Calendly MCP Server 84emllc/calendly-mcp-server A Model Context Protocol (MCP) server for the Calendly API. Manage events, invitees, and schedule meetings directly via AI assistants. | |
| google-calendar-mcp 84emllc/google-calendar-mcp A Model Context Protocol server for Google Calendar integration, enabling AI assistants to manage events, check availability, and work with multiple accounts and calendars. | |
| mcp-server-asana 84emllc/mcp-server-asana A Model Context Protocol (MCP) server that connects AI assistants to the Asana API for task, project, and workspace management. | |
| UptimeRobot MCP Server 84emllc/uptimerobot-mcp Enables managing UptimeRobot monitors, alert contacts, and maintenance windows via natural language through the MCP protocol. | |
| DB Explorer MCP 851-labs/db-explorer-mcp Enables connecting to any SQL database, exploring schemas, running queries, and visualizing results with interactive charts from Claude Desktop. | |
| Doggi MCP Server 852-glitch/852-mcp12 Provides structured investor psychology coaching tools for the Doggi (Careful Starter) curriculum through 7 specialized tools. Enables Claude to access specific lesson content and coaching interventions on-demand without re-ingesting the en | |
| wmpf-mcp 852764/wmpf-mcp Connects to WMPFDebugger's CDP WebSocket to enable AI-assisted debugging of Windows WeChat Mini Programs, providing tools for JavaScript evaluation, script inspection, breakpoints, debugger control, and network inspection. | |
| Qingflow MCP (CRUD) 853046310/qingflow-mcp Enables CRUD operations on Qingflow forms, queries, and records through agent-native tools like qf.query.plan and qf.query.rows. | |
| dsh-feed 863683348/dsh-feed Provides aggregated plugin index data from GitHub and npm as an MCP server, enabling search, stats, and sync via natural language or commands. | |
| MCP Location Server 869413421/build_mcp A MCP server that uses Amap API to provide location-based services, allowing users to get geographic information based on IP addresses and search for nearby points of interest. | |
| specalign 86thauspiciousverse/spec-align Enables deterministic Markdown spec dependency tracking, version review, change impact analysis, and audit through a fixed-project MCP stdio interface. | |
| YouTube Comments MCP Server 878787ya/yt_mcp Enables fetching and analyzing YouTube video comments and replies through the YouTube Data API. Supports sorting by relevance or time and returns structured JSON data for comment analysis, summarization, and translation tasks. | |
| n8n-MCP 88-888/n8n-mcp Provides AI assistants with comprehensive access to n8n's 525+ workflow automation nodes, including documentation, properties, operations, and 2,500+ templates. Enables creating, validating, and managing n8n workflows through natural langua | |
| MCP-Mem0 888greys/mcp A template implementation of the Model Context Protocol server that integrates with Mem0 to provide AI agents with persistent memory capabilities for storing, retrieving, and searching memories using semantic search. | |
| os-control-mcp 88plug/os-control-mcp Controls a Linux host through structured interfaces like systemd, journald, and D-Bus for service management, journal queries, power operations, and more, with safety guards to prevent accidental damage. | |
| screen-mcp 88plug/screen-mcp An MCP server that gives a model eyes and hands on a Linux Wayland desktop, enabling screenshot capture, mouse/keyboard control, OCR, and icon detection via OmniParser. | |
| searxng-mcp 88plug/searxng-mcp An MCP server for SearXNG that provides web search capabilities with concise model-visible output while preserving full result payloads in metadata. It supports search, parallel fetching, URL extraction, and research workflows through both | |
| Salesforce MCP Server 89himanshu-dwivedi/salesforce-mcp-server Exposes Salesforce as tools for MCP clients, allowing AI to run SOQL queries, describe objects, create contacts, and check org limits directly from natural language, with least-privilege guardrails. | |
| MCP Task Aggregator 89jobrien/mcp-joecc Aggregates tasks from multiple sources (Jira, Markdown TODO files, STM CLI) into a unified SQLite database with full-text search, tagging, and incremental sync capabilities. | |
| geolibre-mcp 89nisham/geolibre-cli Provides geospatial data intelligence tools for inspecting, querying, and converting geospatial data using DuckDB Spatial. | |
| x402 Atlas 89rat/x402-atlas Enables AI agents to search and verify machine-payable HTTP 402/x402 APIs using live probe data, providing ranked results by liveness, uptime, price, and trustworthiness. | |
| MCP Server Enhanced SSH 8bit-wraith/mcp A robust SSH server facilitating secure remote command execution with TMUX session management, multi-window support, and smart session recovery for improved AI-human interaction. | |
| ActivityWatch MCP Server 8bitgentleman/activitywatch-mcp-server An interface that allows large language models like Claude to interact with ActivityWatch time tracking data through the Model Context Protocol, enabling queries about application usage, browsing history, and productivity patterns. | |
| Grok AI MCP Server 8bitsats/grok_mcp A Node.js-based server that integrates with the xAI Grok API to provide AI-driven analysis tools for the Solana blockchain, supporting transaction analysis, address investigation, image processing, and general queries. | |
| Grok AI Image Generation MCP Server 8bitsats/grok-mcp A server that connects to the xAI/Grok image generation API, allowing users to generate images from text prompts with support for multiple image generation and different response formats. | |
| mcp-meeting-rooms 8bkmv4dm4z-source/mcp-meeting-rooms Enables AI agents to browse, search, and book meeting rooms across multiple buildings with realistic seed data and conflict detection. | |
| outlook-mcp 8c9d/outlook-mcp An MCP server that connects Claude to a personal Microsoft Outlook mailbox via Microsoft Graph, providing tools for mail, calendar, contacts, tasks, and settings with a strong security model. | |
| 8DX MCP Server 8dx-io/8dx-mcp-server Exposes 8DX DEX aggregator REST endpoints as tools for AI agents, enabling token discovery, quotes, swaps, limit orders, and wallet execution via WalletConnect. | |
| genshin-miliastra-mcp 8itlab/genshin-miliastra-mcp Unofficial MCP server for Genshin Impact's Miliastra Wonderland (千星奇域) UGC editor: an AI builds the scene, writes node graphs in TypeScript (Genshin-TS) and client Lua, and playtests the level in the real game automatically. | |
| Reflex Computer Use 8itlab/reflex-computer-use Open-source computer use MCP server for macOS and Windows, including remote Windows over SSH. Reads accessibility/UI Automation trees and uses Jev for element selection and action verification, with optional screenshot localization for icon | |
| Apple MCP 8ncg92gm86-bit/apple-mcp Integrates with Apple apps on macOS to enable AI-powered automation of Messages, Notes, Contacts, Mail, Reminders, Calendar, and Maps. | |
| MCP MetaTrader 4 Server 8nite/metatrader-4-mcp A cross-platform integration server that enables interaction with the MetaTrader 4 trading platform for account management, market data retrieval, and order execution. It facilitates remote Expert Advisor development, compilation, and backt | |
| Magga 8nobletruths/magga Magga lets coding agents prove their changes before claiming they’re done by building the code and verifying that newly added tests fail before the fix and pass after it. It returns evidence-backed verdicts through the verify_change tool an | |
| sabba 8nobletruths/sabba MCP server for security bug-finding that proves every finding by running exploits, enabling agents to verify changes and find bugs with execution-based evidence. | |
| x402-buyer-mcp 8randonpickart5/x402-buyer-mcp Universal x402 buyer agent — discover, pay for, and call any x402 paid API endpoint from Claude Desktop, Cursor, or Claude Code with automatic USDC payment via AgentCash. | |
| 8seneca Projects MCP Server 8seneca-hub/8seneca-projects-mcp Enables AI agents to programmatically manage projects, work items, modules, cycles, labels, views, and other Plane workspace data on 8seneca's Plane deployment. | |
| mal-mcp 8uggy-sec/mal-mcp Enables Windows-native malware analysis and reverse engineering inside Flare-VM by exposing 50 tools for static and dynamic analysis, memory injection scanning, debugging, network simulation, and automated triage playbooks without requiring | |
| @8ux-co/eelzap-mcp-server 8ux-co/eelzap-mcp-server Connect your AI assistant to Eel Zap CMS to create collections, manage content, upload media, and publish through natural language. | |
| fundos-mcp 8vdx1/fundos-mcp AI-native MCP server for fund managers — deal pipeline, LP management, covenant monitoring, VDR document intelligence, fund accounting (K-1, waterfall, audit packs), and HF ops (DTCC CTM, OMS, FIX). 47 tools. |
22,351–22,400 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.