Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| reddit-mcp aasper03/reddit-mcp Enables replying to Reddit posts and comments by driving old.reddit.com's comment form through a logged-in Chrome session's cookies, without needing Reddit OAuth approval. Also exposes session-identity, cookie-refresh, and test-comment tool | |
| PM Agent MCP Server aastha-0152/claude-olympics-round1 An MCP server that provides tools for product management tasks like backlog prioritization, feedback analysis, capacity assessment, and dependency mapping. | |
| ocp-triage-mcp aasthapit/mcp-runbook Enables deterministic triage of OpenShift alerts by executing YAML-defined runbooks against an upstream OCP MCP server, collecting auditable evidence bundles for LLM interpretation. | |
| Valhalla MCP Server aatakansalar/valhalla-mcp Integrates Claude Desktop with the Valhalla routing engine to provide OpenStreetMap-based routing and isochrone capabilities. It enables users to calculate travel paths and reachability polygons for various transportation modes using natura | |
| Baby Sensory Analytics MCP Server aathavale25-web/baby-sensory-analytics Cloud-powered analytics server for Baby Sensory World that tracks engagement patterns, favorite themes, colors, and provides AI-powered insights to optimize baby's sensory experience. | |
| antigravity-terminal-mcp aathishwar-13/antigravity-terminal-mcp Windows-focused MCP server for terminal automation with persistent PowerShell sessions, live session logs, and VS Code integrated terminal bridge. | |
| voc-claude-skills aatirar/voc-claude-skills A Voice of Customer pipeline that cross-references feedback from calls, reviews, chat, and other sources to surface only corroborated patterns, routing actionable insights with exact customer quotes to the right people. | |
| MCP Weather Server aaudeon/mcp A Model Context Protocol server that provides real-time weather information and 5-day forecasts to AI assistants, supporting multiple languages and flexible units. | |
| MCP Subagents aaunario-keeper/mcp-subagents Enables hierarchical task planning and execution through recursive code and analysis subagents. Provides a planner tool that decomposes complex tasks and delegates them to specialized subagents with session-aware persistence. | |
| @aauth/praca aauth-dev/proxy An MCP server that brokers discovery and interaction with AAuth resources, providing a fixed set of tools for managing and invoking operations on registered resources. | |
| Gmail no-CASA MCP aavaz-ai/gmail-mcp A minimal MCP server for sending plain-text emails and managing Gmail user labels over stdio, using only gmail.send and gmail.labels OAuth scopes. | |
| Jira Product Discovery MCP aavaz-ai/jira-product-discovery-mcp Exposes generic Jira REST tools and native Jira Product Discovery operations for Jira Cloud, including insights and attachments. | |
| reaper-daw-mcp-server aavishkar-kolte/reaper-daw-mcp-server Enables AI-powered music production by integrating with REAPER DAW via MCP protocol, allowing users to control project settings, MIDI editing, and VST plugins through natural language. | |
| Faultline aawhan0/faultline An MCP-native AI incident response system that empowers agents to investigate production incidents, collect evidence, hypothesize root causes, and drive controlled remediation and recovery verification. | |
| ape aawwcc/ape Enables evidence-gated, multi-session AI coding runs with plan-build-ship state management, coordinating Claude Code and Codex native agents. | |
| codeswarm aaxnet/codeswarm Enables controlling an autonomous multi-agent engineering swarm from MCP clients, including starting and managing tasks, spawning agents, triggering PR reviews, and checking swarm status. | |
| Swagger Navigator MCP Server aaydin-tr/swagger-navigator-mcp Enables AI assistants to discover, search, and interact with REST APIs by parsing OpenAPI/Swagger specifications with intelligent fuzzy search across endpoints, supporting both local and remote API sources. | |
| garmin-mcp aayush-lunawat/garmin-mcp A local MCP server that exposes your Garmin Connect data—sleep, HRV, training readiness, workouts, and more—to any MCP-compatible AI assistant. Runs entirely on your machine and keeps your Garmin credentials private. | |
| Google MCP Server aayush13022/mcp-server-aayush Enables appending to Google Docs and creating Gmail drafts with OAuth 2.0 authentication and an approval gate that requires manual confirmation before each action. | |
| Task Management MCP Server aayush9029/mcp-server Connects AI assistants to a task management API for creating, updating, and tracking tasks with iPhone notifications. | |
| InboxValid MCP Server aayusharmaaa/inboxvalid-mcp-server Enables email address verification through a single MCP tool, returning whether an address is valid, invalid, or risky. | |
| OPRE aayushbohora1/opre-mcp An open-source MCP server that lets AI agents investigate existing websites or applications with a real browser and static analysis, then rebuild functional alternatives through a dependency-ordered, test-driven loop. It provides persistent | |
| mcp-worker-template aayushcharde/mcp-worker-template An MCP server template for Cloudflare Workers with zero runtime dependencies, providing a hand-rolled Streamable HTTP transport that lets you easily define and deploy tools with static bearer token auth. | |
| limitless-reign-mcp aayushchouhan24/limitless-reign-mcp A Discord MCP server SDK that connects AI assistants like Claude and ChatGPT to Discord, providing over 100 tools for natural language control of Discord servers, including channel, message, member, and role management. | |
| senso-mcp aayushdixit27/senso-mcp Enables AI agents to query Senso's public network for verified answers with source URLs and action metadata via MCP. | |
| Blender-MCP aayushdubey101/blender-mcp Connects Blender 3D to AI assistants via the Model Context Protocol, enabling natural language driven 3D scene creation, manipulation, and rendering. | |
| Instagram MCP Server aayushjain1811/instagram-mcp A production-ready Remote MCP Server that gives Claude direct, tool-based access to your Instagram Business account through the Meta Graph API — profile data, posts, comments, publishing, insights, analytics, hashtags, messaging, and real-t | |
| tokensense aayushkumbhare/tokensense Model-agnostic context management middleware for LLM-powered workflows, providing persistent selective memory across sub-conversations using RAG over embedded summaries. | |
| Lambda MCP Server aayushmittall/mcp-server A stateless Python MCP server packaged as a custom AWS Lambda container image, exposing basic tools like hello, add, and current_time through an API Gateway HTTP API. | |
| harbor-mcp-server aayushsinghm16/harbor-mcp-server A secure MCP server for querying a subscription business database with AST-based SQL guarding, PII masking, audited two-step write actions, and a seeded demo dataset. | |
| clawmemory-mcp aayuushh365/clawmemory-mcp Enables claude.ai to append durable memory entries to an Obsidian vault on GitHub via tools for listing, reading, and appending markdown files. | |
| mcp-python-repl aazizisoufiane/mcp-python-repl A production-grade MCP server providing a persistent Python REPL with multi-session support, sandboxing, and timeout protection, enabling LLM agents to execute Python code across multiple turns with variables that persist between calls. | |
| Codeforces MCP Server ab-dev007/codeforces_mcp Connects Claude to the Codeforces public API, enabling retrieval of user submissions, profile info, rating history, contest standings, contest status, and contest lists through natural language. | |
| Premiere Pro MCP ab-ishe-k/adobe-premium-pro-mcp Enables MCP clients to perform validated, authenticated project, timeline, media, marker, and export-queue operations in Adobe's video editor through a local UXP panel. It supports safe previews and explicit approval for destructive actions | |
| ab-ibge-mcp-server ab-orbit/ab-ibge-mcp-server Enables AI agents to access Brazilian statistical, geographic, and economic data in real-time via IBGE public APIs. | |
| MCP Web Validator ab-straiker/public-mcp-validator-ev Enables local validation of supplied HTML for SEO metadata and JSON-LD structured data, checking titles, meta descriptions, H1s, image alt attributes, and JSON syntax errors. | |
| ElevenLabs MCP Server ab2005/elevenlabs-mcp-agents Enables seamless integration with ElevenLabs Conversational AI to manage agents, tools, and knowledge base sources. It supports RAG indexing, webhook integration, and document management for building advanced voice-enabled AI agents. | |
| codex-mcp ab300819/codex-mcp A MCP server that enables Claude Code to delegate coding tasks to Codex via the MCP protocol, with task management, security checks, and result verification. | |
| Code Context Provider MCP ab498/code-context-provider-mcp Provides code context and analysis for AI assistants by extracting directory structures and code symbols using WebAssembly Tree-sitter parsers with zero native dependencies. | |
| Computer Control MCP ab498/computer-control-mcp MCP server that provides computer control capabilities including mouse movements, keyboard actions, screenshot capture with OCR, and window management through a unified API. | |
| whoop-mcp ab75173/whoop-mcp Enables Claude to read your WHOOP health data including recovery, sleep, strain, and workouts through the official WHOOP API, so you can ask natural language questions about your fitness metrics. | |
| fusion-reconstruct-mcp ab7646/fusion-reconstruct-mcp Enables LLMs to reconstruct parametric Fusion 360 models from mesh (STL/3MF) or photo inputs by analyzing geometry and creating editable features via a Fusion 360 add-in bridge. | |
| Google Workspace MCP Server ab94-nextleap/ai-agent-mcp-server A secure tool bridge to Google Docs and Gmail via OAuth 2.0, with a console approval gate for write and compose actions. | |
| Abacate Pay MCP Server abacatepay/abacatepay-mcp Enables integration with Abacate Pay API for managing payments, customers, and billing through AI assistants. Supports multi-tenancy, PIX QR codes, discount coupons, and payment simulation with secure per-request API key authentication. | |
| mcp-gateway-sandbox abacop6999/mcp-gateway-sandbox Enables executing arbitrary code and Postman collections in isolated Docker sandboxes via an MCP server, with a real-time web dashboard for management. | |
| acn-preflight-mcp abacore-net/acn-preflight Enables AI agents to run pre-flight checks for GitHub bounty reality, repository contribution readiness, and Base payment surface readiness through hosted x402 endpoints. | |
| Context Fabric abaddollyon/context-fabric A persistent memory and context management system for AI CLI tools that utilizes a three-layer architecture and semantic search to prevent context loss between sessions. It provides time-aware orientation and smart memory routing to help AI | |
| Product Data Tools MCP Server abakhar721/data_mcp-server A basic MCP server setup guide demonstrating how to configure and run Python-based MCP servers with integration examples for Bright Data web scraping and Apify Actors for product data collection. | |
| Vibetest Use abakhru/mcp-python-agent An MCP server that launches multiple Browser-Use agents to test websites for UI bugs, broken links, and accessibility issues. It supports automated testing of both live and localhost development sites using natural language prompts. | |
| jev-mcp abaljeu/jev-mcp Enables agents to call classification, scoring, check, gate, and decide tools against thejevai.com endpoints, including support for sk_* keys and envelope unwrapping. |
22,801–22,850 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.