Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ui-assert aakashpai/ui-assert Enables coding agents and CI to verify rendered web UIs against design token usage, layout constraints, and accessibility rules, returning concise pass/fail verdicts with actionable findings. | |
| automation-anywhere-mcp aakashr37/automationanywhere-mcp Integrates Claude Desktop with Automation Anywhere Community Edition via FastMCP, enabling AI-driven listing and execution of RPA bots through natural language commands. | |
| Aha! MCP Server aakashrshah/aha-mcpy Enables interaction with Aha! product management platform through GraphQL API. Supports retrieving features, requirements, and pages by reference number, as well as searching documents across Aha! workspaces. | |
| DevTools Lens MCP aakcay5656/devtools-lens-mcp Enables AI agents to inspect and control a live Chromium browser for frontend debugging, providing console logs, network requests, DOM snapshots, and accessibility analysis. | |
| OpenAPI MCP Server aaker/mini-openapi-mcp Transforms OpenAPI 3.x specifications into MCP tools, enabling Large Language Models to interact with REST APIs through standardized MCP protocol. Supports bearer token authentication and all HTTP methods for seamless API integration. | |
| Instagram MCP Server aakritigoyal23/instagram-mcp Enables controlling an Instagram account through natural language, including posting photos, reels, and carousels, reading insights, managing comments and DMs, and handling ads and events. | |
| crocodile-mcp aaldersondev/crocodile-mcp Enables AI assistants to read and decode, generate from scratch, and reset Crocodile Physics 1.7 circuit files (.cyp) without opening the GUI, exposing components, wires, electrical nodes and saved voltages and currents as MCP tools. Genera | |
| mcp-wait aalexuser/mcp-wait Provides a wait tool for AI agents to pause execution until a time duration elapses or a process terminates, useful for polling and waiting for builds/deployments. | |
| mcp-gateway aalhadxx/mcp-gateway A local MCP gateway that aggregates multiple downstream MCP servers behind a single connection, with hot-reload via HTTP admin API or file-watcher and support for large payloads. | |
| Twitter MCP Server aali-1/twitter-mcp-server Model Context Protocol server that enables programmatic interaction with Twitter API, allowing users to post tweets, search for content, and retrieve user timelines through standardized MCP tools. | |
| Catalunya Open Data MCP aalises/catalunya-opendata-mcp Enables discovering, describing, and querying public datasets from Catalunya, including Socrata, IDESCAT, and Open Data BCN portals. | |
| qb-time-mcp-server aallsbury/qb-time-mcp-server Provides unified access to QuickBooks Time API functionality. This server consolidates multiple QuickBooks Time services into a single, efficient interface. | |
| Memory MCP aalokjha-gits/memory-mcp Provides AI agents with persistent, searchable memory using semantic search, auto-linking, and categorization, with zero-config local setup or production-ready external providers. | |
| acp-mcp-agent aalperakiss/acp-mcp-agent Lets an LLM agent drive ANSYS Composite PrepPost to read and edit composite lay-ups, change ply angles and layer counts, check manufacturing rules, and export analysis models and composite definitions, either headlessly via PyACP or live in | |
| robocop-mcp aaltat/robocop-mcp MCP server that helps resolve Robocop static code analysis errors and warnings via LLM, providing tools to get reports and run format. | |
| SciComp Docs Agent aaltoscicomp/scicomp-docs-assistant MCP server for searching and querying Aalto SciComp documentation (Triton HPC guides). Provides tools for finding pages, reading docs, and searching content, usable by any MCP client without an LLM API key. | |
| mcp-server aamagamer/banorte Exposes 38 tools over stdio that let an AI agent read simulated banking data, run financial and economic analyses, manage goals and preferences, and switch user contexts. It also lets the agent compose, validate, and edit declarative UI das | |
| ci-triage-mcp aamar-shahzad/ci-triage-mcp MCP server for GitHub Actions CI failure triage. It wraps the gh CLI to fetch PR checks, failed jobs, and tail/grep failed job logs with ANSI/timestamp stripping and root-cause extraction. | |
| MCP Screenshot Server aamar-shahzad/mcp-screenshot-server Enables capturing screenshots and annotating images with boxes, arrows, text, highlights, and other shapes, plus editing features like blur, crop, and resize with flexible export options. | |
| pdfscope aamaro12/pdfs-for-agents Serves read-only tools that let an agent inspect PDFs step by step: outline a document, search for text or figure values, read pages and tables in order, describe figures and chart data, and render page or block images, with every block cit | |
| Astro Agent aamish-001/astro-agent Provides live astronomical telemetry and space data, including ISS tracking, NASA APOD, and solar weather, via a Model Context Protocol server with SSE and JSON-RPC support. | |
| PII Redaction MCP Server aammasa/cms-ai-pii-redaction-service Enables AI agents to redact PII from text, summarize redacted content, and manage custom redaction patterns across multiple languages. | |
| quarry aamodbhatt/quarry An MCP server (stdio) that exposes schema-exploration tools and a natural-language ask tool, letting other AI apps list tables, describe them, sample rows, and run guarded, read-only SQL against SQLite or DuckDB databases. | |
| mistral-slides-mcp aamorel/mistral-slides-mcp Enables generating Google Slides presentations from a topic, using Mistral to create outlines and storing decks in each authenticated user's own Google Drive via OAuth. | |
| Zoho Analytics MCP Server aanandharuban/mcp_server_for_zoho_analytics Enables AI agents to create and edit Zoho Analytics chart reports, run SQL queries, and browse workspaces and views using natural language. | |
| Magic MCP aanchalakto/magic-mcp A template for deploying remote Model Context Protocol servers to Cloudflare Workers with built-in OAuth authentication. It enables hosting secure, serverless MCP tools accessible via SSE transport for clients like Claude Desktop. | |
| sanban aancw/sanban Enables AI agents to manage kanban boards with tasks, including creating boards, items, moving between columns, and searching. | |
| cPanel MCP Server aandersen2323/cpanel-mcp-server A complete MCP server enabling AI assistants to manage cPanel hosting through natural language, including file, database, email, subdomain, and system operations. | |
| Oh My Cassette aanderson33/oh-my-cassette Enables AI coding agents to turn a folder of raw clips into a finished, beat-synced montage from a single natural-language prompt, handling shot selection, pacing, music matching, subtitles, transitions, and picture-in-picture. It returns a | |
| OMOP MCP Server aandresalvarez/omop-mcp Enables natural language exploration of OMOP CDM databases for concept discovery, patient count queries, and cohort SQL generation with support for multiple database backends. | |
| MCP Microsoft Office aanerud/mcp-microsoft-office Connects AI assistants to Microsoft 365 accounts to manage emails, calendars, files, and Teams messages. It offers 71 tools and supports multi-user environments through a secure, customizable server architecture. | |
| MCP Reddit Server aanerud/reddit-mcp A comprehensive MCP server for Reddit that provides 8 tools for fetching posts, comments, and subreddit info, plus a REST API and Azure deployment support. | |
| Equipment Health MCP Server aankitpaudel/equipment-health-mcp An AI agent system that monitors manufacturing equipment health using the Model Context Protocol (MCP). Enables answering natural language questions about equipment status, maintenance, and anomalies through MCP tools. | |
| CocoIndex Code MCP Server aanno/cocoindex-code-mcp-server A Model Context Protocol (MCP) server that provides a RAG (Retrieval Augmented Generation) tool with hybrid search capabilities combining vector similarity and keyword metadata search for code retrieval. | |
| mcp-netbird aantti/mcp-netbird MCP Server for Netbird | |
| NightWatch aanya5678/nightwatch Enables context-aware home safety monitoring by exposing tools to retrieve recent Ring events, household context, deterministic activity assessments, and alert explanations over MCP. | |
| BSN Inventory MCP aapatil67/inventory-mcp Enables identification of BSN SKU/material and real-time inventory availability through natural language queries and vector search. | |
| codex-workbuddy-mcp aaperture/codex-workbuddy-mcp Enables AI coding orchestrators to delegate local development and self-testing to the WorkBuddy desktop CLI via stdio, exposing tools to start tasks, query progress, record independent review verdicts, continue rework in the original sessio | |
| garmin-mcp aapiskotin/garmin-mcp Enables creating, previewing, scheduling, and managing Garmin Connect workouts, plus reading activities and health metrics, all through a local MCP server. | |
| MCP Memory System aaqqjj/mcp-memory-system Enables AI assistants to maintain persistent conversations and context between sessions through automated saving and global installation across projects. Provides zero-configuration memory persistence with automatic conversation history pre | |
| Autodesk Unified MCP Gateway aaradhya-dev-tamrakar/autodesk-mcp Enables AI assistants to discover and route commands to running Autodesk desktop applications through a dynamic local registry, avoiding port conflicts and static reconfiguration. | |
| CSI ETABS MCP Bridge aaradhya-dev-tamrakar/etabs-mcp Enables AI coding assistants to directly control CSI ETABS for structural and seismic analysis, including model inspection, material/section definition, frame generation, solver execution, and result extraction through natural language. | |
| google-classroom-mcp aaradhya-dev-tamrakar/google-classroom-mcp Enables MCP clients to interact with Google Classroom, providing tools to manage courses, coursework, submissions, announcements, materials, and rosters, including actions like turning in and reclaiming assignments. | |
| localsend-mcp aaradhya-dev-tamrakar/localsend-mcp Enables AI assistants to discover nearby devices over local Wi-Fi/LAN and directly send or receive files, text, and clipboard content using the LocalSend protocol. | |
| rhino-mcp aaradhya-dev-tamrakar/rhino-mcp Connects AI assistants to Rhinoceros 3D and Grasshopper, enabling generative NURBS geometry, parametric definition solving, layer manipulation, and viewport capture. | |
| sketchup-mcp aaradhya-dev-tamrakar/sketchup-mcp Enables AI assistants to query SketchUp models, extrude massing volumes, configure solar shadows, and capture viewport renderings through MCP tools. | |
| typora-mcp aaradhyadt/typora-mcp Enables programmatic control of the Typora Markdown editor on Windows, including document creation, status monitoring, draft recovery, theme management, and Typora-styled HTML rendering. | |
| Printify MCP for Claude aaravbedi04-stack/printify-mcp Enables chat-driven management of a print-on-demand store: listing shops, creating, updating and publishing products, browsing blueprints and print providers, uploading designs, checking orders, plus a raw REST passthrough for advanced call | |
| mcp-dlp aaravjain151/mcp-dlp A data-loss-prevention (DLP) layer for AI agents that intercepts document reads, scans for sensitive data, and redacts or blocks it before it reaches the model, with audit logging. | |
| GA4 MCP Server aarcheco/ga4-mcp-server Connects Claude to Google Analytics 4 for querying website analytics via natural language, enabling traffic summaries, top pages, traffic sources, and user engagement. |
22,651–22,700 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.