Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Thailand NSO MCP Server aard-ai/tnso-mcp-server Enables natural language discovery, querying, and analysis of Thailand's official statistics from the National Statistical Office via SDMX REST API. It provides tools for searching dataflows, exploring structures, and fetching data with cac | |
| mcp-doc-reader aardpro/mcp-doc-reader Enables AI assistants to read and extract text content from PDF, Excel, and Word documents via the Model Context Protocol. | |
| MCP MeloTTS Audio Generator aardpro/mcp-melotts Enables AI assistants to convert text to high-quality speech audio using MeloTTS. Automatically splits long texts into segments, generates WAV files, and merges them using ffmpeg with support for multiple languages and customizable speech p | |
| Aare MCP aare-ai/aare-mcp Enables formal verification of LLM outputs against compliance ontologies using Z3 SMT solver. Validates that AI-generated content adheres to regulatory requirements like HIPAA or mortgage compliance rules. | |
| LANForge MCP aarifcandela/lanforge-mcp Enables AI clients to control and observe Candela LANforge test systems through a secure MCP gateway, supporting Wi-Fi stations, traffic, monitoring, events, alerts, automation, and more via about 40 tools plus dynamic universal access. | |
| AgentMail aarjav0p/agentmail Enables AI agents to exchange end-to-end encrypted, threaded email-style messages across tools, vendors, and machines through a zero-install remote MCP server. Supports sending, replying, reading, and threading messages with inbox checks, r | |
| aTars MCP by aarna aarna-ai/atars-fts-mcp aTars MCP by aarna provides AI agents with structured access to crypto market signals, technical indicators, and sentiment analysis. | |
| LinkedIn MCP Server aarnav-hariramani/linkedin-mcp Enables MCP-compatible clients to read LinkedIn profiles, companies, and jobs, and to send connection requests after explicit confirmation, using interactive browser-based authentication instead of stored credentials. | |
| Scavenge aarohim24/scavenge Enables deterministic web evidence collection by inspecting a field (price or availability) on a web page and returning structured observations from multiple channels (raw DOM, structured data, embedded state, rendered DOM, network JSON) wi | |
| petmed MCP Server aaron-ai-ai/petmed Provides tools to search and read markdown wiki documents and find animal hospitals, pharmacies, and grooming facilities using public data. | |
| Salesforce MCP Server aaron-pienza/mcp-server-salesforce Integrates Claude with Salesforce for natural language interactions with Salesforce data and metadata, enabling querying, modifying, and managing objects and records. | |
| git-rebase-mcp aaron-riact/git-rebase-mcp MCP server that makes git rebase safe for agents by refusing unsafe operations, presenting conflicts as two intents, and verifying the branch's change against its base. | |
| FRED MCP Server aaron0186/fred-mcp-server Enables browsing, searching, and retrieving over 800,000 Federal Reserve economic time series through MCP tools, with category/release/source navigation, keyword and tag filtering, date ranges, frequency aggregation, and data transformation | |
| heydenta-mcp aaron202010/heydenta-mcp Enables MCP clients to check clinic hours, list open slots, find the next available slot, and create idempotent appointment bookings at HeyDenta clinics through natural language tool calls. Runs over stdio or Streamable HTTP with built-in a | |
| Augments aaron6040/augments-mcp-server Enables Claude Code and other MCP clients to retrieve context-aware documentation for any npm package, returning TypeScript types, prose, and code examples via documentation-first BM25 search with synonym expansion and intent-aware formatti | |
| Deep Code Reasoning MCP Server aaron6040/deep-code-reasoning-mcp Enables Claude Code to hand off complex code-analysis and debugging tasks to Google's Gemini AI for large-context execution tracing, cross-system impact analysis, performance bottleneck detection, hypothesis testing, and AI-to-AI conversati | |
| Roblox Studio MCP aaronaalmendarez/roblox-mcp Connects AI assistants to Roblox Studio, enabling them to interact with instance hierarchy, edit Luau scripts, manage properties, and sync files over a local connection. | |
| concept2-mcp-server aaronarnold2/concept2-mcp-server MCP server for the Concept2 Logbook API, enabling user profile management, workout result operations, and challenge queries. | |
| prt-mcp aaronbiscotti/prt-mcp MCP server exposing Pittsburgh Regional Transit (PRT) TrueTime operations as typed tools for agent clients. | |
| blender-mcp-2.79 aaronbrunckhurst/blender-mcp-2.79 Enables Claude AI to control Blender 2.79 for 3D modeling, scene creation, and manipulation through the Model Context Protocol, with legacy compatibility for older Blender versions. | |
| mcp-caddy aaronckj/mcp-caddy Enables management of Caddy web server via admin API, allowing inspection of routes, upstream health, certificates, and configuration reloading. | |
| mcp-duplicati aaronckj/mcp-duplicati MCP server for Duplicati backup management. Enables checking status, running backups, viewing logs, and controlling the scheduler. | |
| mcp-nettools aaronckj/mcp-nettools MCP server for network diagnostics providing tools like ping, DNS lookup, port check, traceroute, speed test, Wake-on-LAN, SSL certificate check, and MAC address lookup. | |
| mcp-opnsense aaronckj/mcp-opnsense MCP server for managing OPNsense firewall via REST API, with tools for system status, services, DHCP, DNS, firewall rules, and NAT port forwards. | |
| nightbot-mcp aaronckj/nightbot-mcp An MCP server for Nightbot that enables managing custom chat commands, timers, regulars, and spam-protection filters via the official Nightbot API. | |
| obs-studio-mcp aaronckj/obs-studio-mcp MCP server for controlling OBS Studio via obs-websocket, enabling scene switching, source management, streaming, recording, and text overlays through natural language. | |
| SSH MCP Server aaronckj/ssh-mcp A local MCP server that enables LLMs to execute shell commands on remote Linux and Windows systems via SSH with configurable timeout and authentication options. | |
| tiktok-studio-mcp aaronckj/tiktok-studio-mcp MCP server for TikTok that publishes videos to your own TikTok account and retrieves video performance metrics through TikTok's official Content Posting and Display APIs. | |
| voicemeeter-mcp aaronckj/voicemeeter-mcp An MCP server for controlling Voicemeeter (Basic, Banana, or Potato) on Windows: strip and bus gains, mutes, output routing, live levels, macro buttons, presets, and audio-engine restarts. | |
| yt-studio-mcp aaronckj/yt-studio-mcp Manage a YouTube channel through official Google APIs — videos, comments, playlists, live broadcasts, captions, and analytics — plus an auditable giveaway suite for comment-entry giveaways with deterministic winner drawing. | |
| tracking-requests-mcp aarondotdev/fedex-label-mcp An MCP server for the tracking-requests shipping-label app, providing a broad read-only database surface and a staged write path for FedEx label creation. | |
| MCP Project Context Server aaronfeingold/mcp-project-context A persistent memory layer for Claude Code that maintains project information, technology stack, tasks, decisions, and session history between coding sessions, eliminating the need to re-explain project context. | |
| My MCP Server aarongeb/mcp A lightweight MCP server providing tools for adding integers, getting current time, and fetching weather forecasts via wttr.in. | |
| mcp-printable aarongoldsmith/mcp-printable Connects MCP-capable agents to Blender and OpenSCAD for AI-driven 3D modeling, with tools and rules optimized for FDM-printable geometry. | |
| MCP Remote Control aarongoldsmith/mcp-remote-control An MCP server that enables AI assistants to control TVs on a local network through natural language commands. It currently supports Roku devices, allowing users to launch apps, manage playback, and navigate menus. | |
| garmin-personal-api-mcp aaronhaddad/garmin-connect-mcp-claude-connector Enables Claude to read your own Garmin Connect data—activities and exact pace splits, VO2 max and training effect, sleep, HRV, Body Battery, stress, weight and more—through Garmin's official Personal API, with no password or scraping. Acces | |
| crud-mcp aaronhmiller/crud-mcp Enables Claude to list, read, create, update, and delete users by making HTTP requests to the running crud-app users API, while leaving validation and errors to the API. | |
| Sophos Central MCP Server aaronjacobs000/sophos-mcp MCP server for interacting with Sophos Central APIs, providing 255 tools for managing endpoints, alerts, policies, and more across partners, organizations, and single tenants. | |
| .rohlik-mcp Server aaronjain12/rohlik-mcp Enables AI assistants to shop groceries across Rohlik Group platforms by searching products, managing carts, and accessing account, order, delivery, and discount information. It also offers smart shopping features that suggest meals and fre | |
| rf-los-mcp aaronjbrown/rf-los-mcp Enables radio line-of-sight checks over locally cached FABDEM terrain for points and routes, including Earth curvature, k-factor refraction, Fresnel-zone clearance, coverage gaps, and verdicts at named stops. It also supports terrain elevat | |
| Innergy MCP Gateway aaronleeclarke-cmd/innergy-mcp-gateway Enables ChatGPT to retrieve read-only Innergy project, budget, work-order, finance, inventory, labor, scheduling, and added-expense data through secure MCP tools without exposing the Innergy API key. | |
| MCP Bitbucket Server aaronlopezbarros/mcp_bitbucket Enables automated interaction with Bitbucket, including creating and listing pull requests, through the Model Context Protocol. | |
| Dice MCP Server aaronmeis/learn-dice-mcp-server Provides dice rolling and coin flipping functionality for AI assistants via the Model Context Protocol. It enables users to roll single or multiple dice with configurable sides and perform randomized coin tosses. | |
| slack-desktop-mcp aaronmeriwether/slack-desktop-mcp Runs slack-mcp-server against your Slack desktop app session, eliminating the need for API tokens. | |
| Charlotte aaronmills26730/charlotte Gives AI agents structured, token-efficient access to web pages by returning compact page orientations and targeted element queries instead of full accessibility-tree dumps, with optional deeper detail on request. | |
| 5G-MAG M1 Interface MCP Server aaronmontilla/m1-mcp An MCP server that exposes the 3GPP M1 interface as AI-callable tools, enabling LLM agents to configure 5G Media Streaming sessions through natural language. | |
| secure-github-ops aaronmurillo01/secure-github-ops Enables safe GitHub automation by queuing write operations for admin approval before execution. | |
| apple-mcp aaronroef/apple-mcp MCP server for macOS Apple apps. Enables read/write access to Notes, Reminders, Calendar, Contacts, and Safari using SQLite and JXA, all running locally. | |
| exo-mail mcp aaronroef/exo-mesh Enables agents to query a locally resolved relationship mesh that joins mail, calendar, iMessage, and contacts into one per-person record, providing shared history, open items, recency, drift, and warmest-channel context without sending dat | |
| whoop-mcp aaronroef/whoop-mcp MCP server providing read access to WHOOP biometric data including recovery, sleep, strain, and workouts. |
22,701–22,750 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.