Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| claude-desktop-to-code abhaymettu/claude-desktop-to-code MCP server that routes Claude Desktop chat into Claude Code, enabling headless execution and terminal handoff with session continuity. | |
| cms-mcp abhaymettu/cms-mcp Provides read-only access to CMS Medicare inpatient DRG data via typed MCP tools and a guarded SQL interface over a DuckDB warehouse. | |
| vault-mcp abhaymettu/vault-mcp Enables MCP clients to search, read, list, and append to markdown notes in a local Obsidian vault or folder of .md files. | |
| wispr-flow-write-mcp abhaymettu/wispr-flow-write-mcp An MCP server that lets an AI agent change what you can change in the Wispr Flow app: your personal dictionary, snippets, writing styles and polish instructions, custom transforms, scratchpad notes, todos, meeting titles and notes, and your | |
| Upstox-MCP-server-Integration abhayshakya1/upstox-mcp-server-integration Enables interaction with the Upstox trading API via natural language to fetch user profile, funds, holdings, positions, orders, and trades. | |
| Vastu Compliance MCP Server abhayvarkad/vastu-compilance-mcp An MCP server for checking architectural designs against Vastu principles, integrating with Autodesk tools to provide deterministic compliance scoring and explainable recommendations. | |
| CHIM MCP Server abhchoug/chim-mcp Exposes CHIM change-management workflows (changes, outages, retros, and change freeze status) as MCP tools, enabling AI assistants to query and update CHIM directly. | |
| Vantage abheet19/vantage Enables asking product analytics questions in English and receiving answers as real SQL along with the resulting numbers, through read-only MCP tools for funnels, retention, trends, paths, and event counts. | |
| MCP Weather Server abhi-245/trip_planner_agent_mcp_server Provides hourly weather forecasts using the AccuWeather API, including current conditions and 12-hour forecast with temperature, precipitation, and weather description. | |
| mcp-server-azure-devops abhi-d-git/mcp-server-azure-devops Enables interaction with Azure DevOps, including listing pipelines and runs, viewing logs and artifacts, collecting and normalizing security reports, and triggering pipelines with safety controls. | |
| git-mcp abhi-d-git/mcp-server-git Standalone MCP server for GitHub that enables repository management, branch operations, pull request handling, and commit retrieval via tools listed in the README. | |
| Jokes MCP Server abhi-dhoriya/jokesmcp An MCP server that delivers random jokes from multiple sources including Chuck Norris jokes, Dad jokes, and Yo Mama jokes for Microsoft Copilot Studio integration. | |
| mcp-overleaf-server abhi-ramtel/mcp-overleaf-server Tailors LaTeX résumés, CVs, and cover letters to job descriptions by injecting truthfully-selected content from a master CV, compiling PDFs, and logging applications. | |
| Code Buddy abhi-vish/code-buddy A comprehensive MCP server that provides AI assistants with tools for file system management, Git integration, and shell command execution. It features specialized code utilities for analysis, formatting, and linting to enhance development | |
| College AI Assistant abhi122005/mcp Provides MCP tools for searching student profiles, viewing marks/attendance, and finding low-attendance students. Enables AI assistants like Gemini to interact with college student data through natural language. | |
| Date-time Tools MCP abhi12299/date-time-tools Provides tools for date-time manipulation, including timezone conversion and arithmetic operations like adding or subtracting time units. It also enables users to retrieve current date, time, and timezone information. | |
| Datadog MCP Server abhi276k/datadog-mcp Enables integration with Datadog APIs to monitor and retrieve information about monitors, metrics, dashboards, logs, events, and incidents through the Model Context Protocol. | |
| MCP Notes Server abhi4pr/learning-mcp-servers A small Model Context Protocol (MCP) server that gives an AI a personal notes/todo store. Built for learning. | |
| MCP-Email-Verify abhi5h3k/mcp-email-verify A lightweight Model Context Protocol (MCP) server that enables your LLM to validate email addresses. This tool checks email format, domain validity, and deliverability using the AbstractAPI Email Validation API. Perfect for integrating emai | |
| MCP-URL2SNAP abhi5h3k/mcp-url2snap A lightweight Model Context Protocol (MCP) server that enables your LLM to capture screenshots of any specified URL and return only the access URL for the captured image. This tool simplifies the process of generating and sharing webpage sn | |
| growth-mcp abhi725/growth-mcp Open-source MCP server that audits websites for AI search readiness, providing deterministic scoring (0-100) and prioritized fix lists for metrics like JSON-LD, llms.txt, heading hierarchy, and AI crawler access. | |
| provmcp abhiadhikari/provmcp Enables provenance capture and replay verification for scientific MCP tool calls, using a signed hash-chained ledger and data-source release resolution. | |
| geant4-simulation abhich2507/geant4-mcp Enables GEANT4 particle physics simulations via Claude Desktop, allowing configuration of particle type, energy, detector material, and running simulations through natural language. | |
| papyrus-mcp abhichat85/papyrus Enables AI agents to inspect and convert PDF, PowerPoint, Excel, and many other file formats into clean, structured Markdown, with chunking support for long documents. | |
| Construction Cost Calculator MCP abhigit-trimble/construct-cost-mcp Provides construction cost estimation tools using data from a public Google Sheet for items like concrete, framing, and electrical. It allows users to search items, filter by category, and calculate total project costs including labor and m | |
| Weather MCP Server abhigit-trimble/weather-mcp-server Provides access to real-time weather data, 5-day forecasts, air quality information, and weather comparisons across multiple cities using the free OpenWeatherMap API. | |
| CodeAgent MCP abhigupta1310/codeagent-mcp An autonomous code-reasoning agent that parses repositories using tree-sitter, indexes symbols into SQLite, and answers questions about the codebase through an agentic loop powered by Claude via OpenRouter. | |
| Google Docs + Gmail MCP Server abhigya2002/abhigyamcp Enables appending structured content to Google Docs and creating Gmail drafts through an MCP-style interface with human-in-the-loop approval. | |
| ToolForge MCP Server abhigyan6091/toolforge Enables AI agents to securely discover, execute, and observe tools with role-based access control and audit logging. Serves tools over MCP stdio and HTTP for integration with Claude Desktop, Cursor, and other clients. | |
| CodeWeave MCP abhij1306/codeweave CodeWeave enables AI coding clients to inspect, edit, and validate a configured Git repository with tools for context, fetching, patching, and task execution. | |
| Loki MCP abhijain864/loki-mcp Read-only MCP server for 1mg's logistics platform (Loki/Thor), enabling order, task, rider, hub, and day-tracking queries via the Thor API. | |
| OpenAlex MCP Server abhijain864/openalex-mcp Enables searching scholarly papers and authors via the OpenAlex API, with no API key required. | |
| btcpayserver-mcp abhijay007/btcpayserver-mcp A comprehensive Model Context Protocol (MCP) server for BTCPayServer integration, providing tools for payment processing, store management, user administration, webhook handling and more with full API coverage. | |
| Kubeflow MCP Server abhijeet-dhumal/mcp-server AI-powered interface for Kubeflow Training via MCP, enabling AI assistants to manage distributed training jobs, fine-tune LLMs, and monitor workloads on Kubernetes through natural language. | |
| MCPGateway abhijeet-muneshwar/mcpgateway A multi-tenant control plane for MCP that aggregates upstream MCP servers behind a single authenticated URL, with deny-by-default policy enforcement and a replayable audit trail. | |
| WisdomAgent abhijeet-muneshwar/wisdomagent MCP server for grounded agentic Q&A over customer feedback, exposing typed tools to query a feedback corpus and return answers with citations to specific record IDs or a refusal when unsupported. | |
| notes-mcp-server abhijeet103/mcp Provides MCP tools to create and retrieve notes stored in memory. | |
| mcp-student-leave-copilot-ab abhijeetgiram/mcp-student-leave-copilot-ab Manages student leave requests and approvals, integrated with GitHub Copilot for natural language interaction. | |
| averr abhijeethrkgadwal/averri Enables coding agents to navigate and verify a contract-backed semantic graph of TypeScript backends, inspect change impact, run checks, explain failures, and draft human-reviewable contracts through bounded MCP tools and matching JSON CLI | |
| MCP Kubernetes Server abhijeetka/mcp-k8s-server A server that enables LLMs to manage Kubernetes clusters through natural language commands, wrapping kubectl operations to provide a simplified interface for common Kubernetes tasks. | |
| Groww MCP Server abhijeetmohanan/growwmcp An MCP server for the Groww trading platform. This enables LLM applications to interact with your Groww trading account. | |
| Vizru MCP server abhijithvs680/vizru-mcp-server Provides read-only SQL query access to PostgreSQL mirrors of Vizru spreadsheets on Neon, exposing REST endpoints and MCP tools for relational filtering and schema discovery. | |
| Javelin Guardrails MCP Server abhijitjavelin/javelin-guardrails-mcp-server Provides AI security guardrails through Javelin's platform to detect harmful content, prompt injection attempts, and language policies. Enables comprehensive content safety analysis with trust & safety detection, prompt injection protection | |
| agentic-research abhilash2429/agentic-research Enables AI agents to perform deep web research by searching, fetching, chunking, retrieving, and synthesizing cited answers from exact source passages via a deep_research tool. | |
| Ordio MCP abhilashachar/ordio-mcp MCP server for the Ordio restaurant operations platform, enabling AI assistants to manage inventory, orders, recipes, team, shifts, and reports. | |
| project-planner-mcp-server abhilashdk2016/project-planner-mcp-server A remote MCP server template for Cloudflare Workers that enables deploying custom tools without authentication and connecting to MCP clients like Claude Desktop. | |
| SCMCP abhilashst/scmcp Enables users to securely connect Claude to their own Google Search Console data, providing custom SEO analyses such as quick wins, content decay, and cannibalization, plus optional BigQuery bulk export, with per-user token scoping and read | |
| uigraph abhimanyutiwari/ui-graph Serves a deterministic UI knowledge graph over MCP so coding agents can query verified Playwright locators, routes, screens, actions, and transitions instead of re-reading the DOM. Enables test generation from role, label, and framework-nat | |
| garmin-mcp abhimanyuv04/garmin-mcp Provides read access to Garmin Connect health and training data (sleep, heart rate, stress, HRV, activities) and supports writes like creating workouts, editing activities, and exporting files. | |
| DB_Talk abhinab-handique/db_talk Enables natural language interaction with SQLite databases using LangChain and FastMCP, allowing users to query, insert, update, and delete data via conversation with safety confirmations. |
23,051–23,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.