Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| live2d acgurl/live2d-agent Enables agents to control a transparent, always-on-top desktop character window over a loopback-only local HTTP API — applying expressions, motions, parameters and gaze, speaking via TTS or uploaded audio with lip-sync, capturing screenshot | |
| Finnhub MCP Server ach968/finnhub-mcp An MCP server that provides access to financial market data via the Finnhub API, focusing on earnings calendars. It allows users to retrieve historical and upcoming earnings announcements including EPS and revenue data. | |
| storm-site-mcp achachisoftware/storm-site-mcp An MCP server for developers to manage Storm-client.net plans, prices, plugins, and plugin links through an AI assistant like Claude. | |
| Daito achaljhawar/daito MCP server for screening Indian stocks and mutual funds by wrapping screener.in and Morningstar India, enabling fundamental queries from Claude or Cursor. | |
| youtube-watch-mcp achanandhi-m/youtube-watch-mcp An MCP server that tracks your favorite YouTube creators and tells you when they've posted something new — right from Claude. | |
| jev-mcp achapla/jev-mcp Enables AI assistants to make typed yes/no or multiple-choice decisions by evaluating plain-language rules from a YAML file or one-off questions against supplied context, returning probabilities and confidence scores with an uncertain flag | |
| Multi-MCP Server acharya-arvind/aggregate-mcp-server-sample A distributed MCP server architecture with a master aggregator that orchestrates multiple specialized MCP servers (greeting, math operations, text manipulation) through HTTP transport and JSON-RPC 2.0. | |
| mcp-code-context achatainga/mcp-code-context Enables LLMs to efficiently read, write, and refactor code using precise AST-based operations, reducing token usage and context window waste. | |
| Budget Allocator achautha/budget-allocator-mcp-app An interactive tool for visualizing and managing budget allocations across business categories with real-time charts and industry benchmarks. It allows users to adjust spending distributions and compare them against historical trends and st | |
| Vectorize MCP Server achavez3700/vectorize-mcp-server Enables vector search and document retrieval, text extraction and chunking into Markdown, and private deep research through Vectorize pipelines. | |
| email-notify achenglike/email-notify A lightweight Docker-based email sending microservice that provides both REST API and MCP (Model Context Protocol) tools for sending emails, enabling AI agents to send email notifications. | |
| ThePornDB MCP Service achenglike/theporndb-mcp Integrates ThePornDB API into MCP-compatible applications to search for adult video scenes, movies, and JAV content. It enables users to retrieve detailed performer profiles and comprehensive content metadata through specialized tools for L | |
| web-clipper-mcp achenglike/web-clipper-mcp Enables clipping web pages to Markdown with local images, supporting CSS selectors and content analysis. | |
| mcp-trafilatura-server achieveai/mcp-web-extractor This MCP server enables clean web content extraction from URLs or HTML using Trafilatura, supporting multiple output formats and configurable extraction options. | |
| ach-mcp achieveonepark/ach-mcp An in-editor MCP server that exposes Unity convenience tools to AI assistants, allowing them to read console logs, execute menu items, dump scene hierarchies, and take screenshots. | |
| Bitbucket MCP achilleashill93579/bitbucket-mcp Enables AI assistants to access and manage repositories, pull requests, and related resources through Bitbucket Cloud and Server APIs. | |
| wanderlog-mcp achilleasi9206/wanderlog-mcp Enables MCP-compatible agents to view and build Wanderlog trip itineraries through conversation, including places, notes, hotels, transit, rentals, checklists, expenses, guides, and shareable links. | |
| BOSS Zhipin MCP Server achilleasmitsotakis775/boss-zhipin-mcp Lets AI assistants such as Claude drive an already-logged-in BOSS 直聘 recruiter console through Chrome, running multi-keyword candidate searches, capturing Canvas resume screenshots, extracting permanent share links, and saving results to a | |
| LeetCode MCP Server achilleasn231/leetcode-mcp-server Enables automated access to LeetCode problems, contests, solutions, and user data across leetcode.com and leetcode.cn, with optional authentication for private features like notes, submission history, and progress tracking. | |
| mcp-outline achilleasolsson75/mcp-outline Enables AI assistants to interact with Outline document management services, allowing users to search, read, create, edit, and archive documents, manage collections and comments, and find backlinks through natural language. | |
| Juror Cloud MCP achilleasrusso2146/juror Enables users to inspect workspace-scoped findings and hosted runs, and to prepare or start/rerun existing hosted reviews after explicit confirmation. It provides concise review summaries without exposing raw diffs, full reports, artifacts, | |
| ScrapeGraph MCP Server achilleasv2690/scrapegraph-mcp Enables language models to perform AI-powered web scraping through the ScrapeGraph AI API, including page scraping, structured extraction, web search, multi-page crawling, schema generation, and scheduled monitors. It also exposes credit an | |
| opencode-mcp achilleasw812/opencode-mcp Connects MCP clients such as Claude, Cursor, and VS Code to OpenCode's headless API, enabling users to ask coding questions, start and monitor background coding jobs, respond to prompts and permissions, and review changes across projects. | |
| life-science-mcp achillesrasquinha/scikit Enables unified access to 110 life science APIs and databases, including genomics, proteomics, chemistry, literature, and clinical data. Users can query genes, proteins, compounds, pathways, and more through natural language. | |
| mcp-server-template achimstruve/mcp-https-oauth-database-template A production-ready FastMCP server template supporting local development with stdio and secure web deployment with HTTPS and OAuth. | |
| Zoho Inventory Connector achindra2003/razorpay-zoho-inventory-connector Gives Agent Studio agents read-only access to a merchant's stock, sales orders and delivery records, so they can check sellable availability across SKUs and warehouses before pitching, and pull carrier, AWB and delivery facts as evidence fo | |
| ACHIVX Forum achivx-com/forum Agent-native discussion forum for the x402 / A2A ecosystem. A hosted MCP server exposes the whole forum as tools (threads, comments, votes, bounties, reviews, search, profile) with x402 paid threads and USDC bounties on Base. Endpoint: http | |
| sendhustle-mcp achlesha/sendhustle-mcp Enables AI agents to send and manage emails, domains, contacts, audiences, and campaigns via the SendHustle email API using natural language. Supports stdio and HTTP transports with tools covering inbound emails, segments, topics, templates | |
| Blockbench MCP achmadawdi/mcp-blockbench Enables AI assistants to control Blockbench for Minecraft 3D modeling, including project creation, cube placement, UV layout, and texture painting. | |
| achmadya-dev/mcp-core Provides a shared MCP SDK wrapper for building MCP servers with stdio transport, tool registration, JSON-safe responses, and environment helpers. | |
| drawio achmadya-dev/mcp-drawio MCP server for creating and editing diagrams using draw.io. Allows generating diagrams from Mermaid or XML, searching shapes, and opening them in draw.io for export. | |
| Bitbucket MCP acho26/bitbucket-mcp Enables AI assistants to list and retrieve repositories, fetch and create pull requests, and access pipeline information through cloud and server APIs with configurable authentication. | |
| ScoreBridge achou666666-code/yuezheng AI-assisted sheet music transcription and notation workflow via Agent and MCP. | |
| shelly-readonly-mcp achouwer/shelly-readonly-mcp Enables read-only inspection of Shelly devices discovered through Home Assistant, providing status and redacted configuration without control or switching capabilities. | |
| shooting-game achtrick/shooting-game-mcp Lets Claude join a real match of the shooting game as the second player and play it through a live browser, reading the arena and sending actual keyboard inputs to move and shoot. | |
| Fastcat Literature MCP achuthc1298/fastcat_literature_mcp Enables an AI assistant to search scientific literature across OpenAlex and Semantic Scholar, download supported Elsevier and Springer Nature full texts, and build a local searchable index so questions can be answered with citations to orig | |
| Deep Research MCP achuthprince004/deepresearch-mcp An MCP server that enables deep internet research through natural language, supporting stdio and HTTP/SSE modes for flexible integration. | |
| gtm-business-review achux11/gtm-business-review-agent Gives Claude governed access to a curated registry of go-to-market KPIs, with definitions, sources, and formulas, so it can draft a leadership business review from approved numbers rather than pasted-in data. It also validates every figure | |
| RevitMCP achyerrorj/revitmcp Enables natural language control of Autodesk Revit through an AI-powered MCP server, allowing creation of walls, rooms, floor plans, and dimensions using conversational commands. | |
| obsidian-mcp achyuta0001/obsidian-mcp Provides AI agents with per-project note organization inside a single Obsidian vault, enabling them to resolve, write, read, append, list, and search notes without overwriting existing content. | |
| vision-input acidentlgenius/mcp_watch_screen_and_interact_with_keyboard_mouse Enables AI to capture screenshots and control mouse and keyboard for automated desktop interaction. | |
| MCP Password Generator acidkeyxyz/mcp-pwd-generator Generates random passwords with configurable character sets (all, alpha, numbers, letters) via the Model Context Protocol. | |
| Resume Parser MCP acidlambunk/resume-parser-mcp Enables parsing of raw resume text into structured JSON format with organized sections for skills, experience, education, and projects. Uses Google's Gemini AI model to extract and categorize resume information from unstructured text input. | |
| Parenting MCP acidmole/parenting-mcp MCP server that retrieves children's school information from Wilma and sends automatic summaries via WhatsApp. | |
| cdes-mcp-server acidni-llc/cdes-mcp-server Exposes Cannabis Data Exchange Standard (CDES) v1 JSON schemas, reference data libraries, and validation tools to AI agents and MCP-compatible clients. | |
| Schwab MCP Server acidsolution/schwab-mcp-server A read-only MCP server that provides access to Charles Schwab account data and market information, including portfolio positions, real-time quotes, options chains, price history, and account balances through AI assistants. | |
| Hearth acirema792/hearth-alexa Enables an older adult to manage medications and daily check-ins by voice on an Echo Show, with double-dose guards, refill purchasing that requires explicit confirmation, and proactive spoken announcements. Keeps a remote care circle inform | |
| Thinkific MCP Server ackbarguppi-ai/thinkific-mcp Enables AI assistants to manage Thinkific sites through the REST Admin API, providing tools for handling courses, students, enrollments, and orders. It features 24 specialized tools and resources with support for dual authentication and aut | |
| Spotify MCP Server ackberry/spotify_mcp Enables control of Spotify playback, search, and playlist management through MCP tools and Apple Shortcuts/Siri integration via HTTP bridge. | |
| JPYC Commerce MCP ackey-web/jpyc-commerce-mcp Enables autonomous AI agents to conduct non-custodial commerce using JPYC stablecoin on Polygon, with trust scoring, task evaluation, negotiation, and on-chain verification via Soulbound Tokens. |
23,401–23,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.