Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ICS Calendar MCP Server adamchrabaszcz/ics-calendar-mcp Enables reading and interacting with ICS calendar feeds (e.g., Outlook, Google Calendar) with recurring event expansion, caching, and timezone support. | |
| Salesforce MCP Pro adamcmyhre/salesforce-mcp-pro A Model Context Protocol server for Salesforce development workflows, enabling org lookup, metadata deploy/retrieve, SOQL queries, Apex tests, and permission set assignment. | |
| personal-health-mcp adamconde/personal-health-mcp Self-hosted MCP server that aggregates personal health data from Google Health, Oura, and Withings into a single, provider-attributed interface with configurable source of truth preferences. | |
| quake-mcp adamcwade/quake-mcp MCP server wrapping the USGS Earthquake Hazards API, enabling AI assistants to search the global earthquake catalog, look up event details, count quakes, find 'Did You Feel It' reports, and read realtime feeds. | |
| MCP Job Search adamd9/mcp-jobsearch Helps users find suitable LinkedIn job opportunities by automatically scraping listings, analyzing compatibility with user profiles using AI, and sending custom match reports via email. | |
| Semantic Scholar MCP Server adamdanielsson15/semantic-scholar-fastmcp-mcp-server Enables users to search academic papers, explore citation networks, and retrieve author information through the Semantic Scholar API, including recommendations and batch operations. | |
| hevy-mcp-server adamdavies1915/hevy-mcp-server Enables AI assistants to interact with the Hevy fitness tracking API, allowing users to log workouts, manage routines, browse exercises, and track fitness progress through natural language. | |
| ilovepdf-mcp adamdavis99/ilovepdf-mcp An MCP server that integrates the iLovePDF API to enable PDF manipulation tasks such as merging, splitting, compressing, and converting directly from AI conversations. | |
| browser-use MCP server adamdude828/mcp-browser-use This server provides a note storage system with a custom URI scheme, allowing users to add and summarize notes, with adjustable summary detail levels. | |
| mcp-server-docker adamdude828/mcp-server-docker Provides a secure MCP interface to execute commands inside Docker Compose service containers, with real-time output capture and configurable timeouts. | |
| PokeMCP adamescj/pokemcp Enables AI assistants to play Pokemon Fire Red through the mGBA emulator by providing tools for button inputs and screenshots. It allows for direct reading of real-time game state from RAM, including party information, player location, and | |
| gmail-mcp adamferguson06/gmail-mcp A secure, read-only Gmail investigation tool that provides both CLI and MCP server access, enabling Claude to search, read, and export emails without sending or modifying them. | |
| yamcp adamgalmor/yamcp Convert any OpenAPI spec into a secure MCP server with scoped auth, per-tool allow/deny policies, rate limiting, and a redacted audit trail. | |
| Joplin MCP Server adamgauck64163/joplin-mcp Enables AI assistants to interact with Joplin notes, notebooks, and tags through a standardized Model Context Protocol interface, supporting search, creation, editing, organization, tagging, trash recovery, and file import. | |
| Google Tasks MCP Server adamgrzybowski/google-task-mcp Enables integration with Google Tasks API to create and manage tasks through OAuth 2.0 authentication. Supports listing task lists and creating new tasks with automatic token refresh. | |
| Claimify adamgustavsson/claimsmcp Extracts verifiable, decontextualized factual claims from text using a research-based four-stage pipeline (sentence splitting, selection, disambiguation, and decomposition). Integrates with MCP clients to enable claim extraction and verific | |
| zulip-mcp adamhajari/zulip-mcp Enables Claude to access and summarize recent activity in Zulip channels, with support for anonymization and local LLMs. | |
| BullMQ MCP Server adamhancock/bullmq-mcp Enables AI assistants to manage BullMQ Redis-based job queues through natural language, supporting operations like job monitoring, queue control, and multi-instance Redis connections. Users can add, retry, promote, and clean jobs while acce | |
| MCP Weather Server adamijjaipro-arch/mcp-weather A production-grade Model Context Protocol server that provides real-time weather data and 5-day forecasts using the Open-Meteo API. It offers comprehensive meteorological metrics supported by Redis caching and built-in performance monitorin | |
| Adamik MCP Server adamikhq/adamik-mcp-server Enables read and write interactions with 60+ blockchain networks through Claude Desktop, providing a standardized multi-chain API for transaction management, account insights, staking, and token interactions. | |
| datadabble-mcp adamklockars/datadabble-mcp Enables Claude and other MCP clients to manage databases, fields, entries, visualizations, AI features, notifications, audit logs, and team accounts via natural language by wrapping the DataDabble REST API. | |
| google-workspace-mcp adamkwhite/google-workspace-mcp Enables Claude to manage Google Workspace services such as Calendar, Gmail, and Docs with configurable access and safe-by-design limitations. | |
| Claude Conversation Memory System adamkwhite/universal-memory-mcp An MCP server that provides searchable local storage for Claude conversation history, featuring automatic topic extraction and weekly insight summaries. It enables Claude to retrieve context from past sessions through full-text search and o | |
| Android Screenshot MCP Server adamlj/android-screenshot-mcp Enables capturing screenshots from Android devices over WiFi for UI debugging and visual inspection during app development. | |
| Gospel Library MCP adammharris/gospel-library-mcp Enables access to LDS Gospel Library content and scriptures through the Model Context Protocol. Provides tools for searching and retrieving religious texts and study materials from the Church of Jesus Christ of Latter-day Saints. | |
| warungm4dura adamneve1/warungm4dura Enables Warung Madura owners to record sales, check stock, and manage transactions via Telegram using natural language, powered by Gemini and Google Sheets. | |
| Crypto Sentinel Agent adamnone/dlt_fastapi_mcp Enables querying cryptocurrency market data, refreshing data from CoinGecko, and performing market analysis through a FastMCP agent backed by a dlt pipeline and FastAPI. | |
| Concord MCP for Paperclip adamokon/concordmcpforpaperclip Enables MCP clients to coordinate short-lived Paperclip batch agents through durable task queues, bounded Q&A, verified artifact snapshots, and explicit review boundaries, with optional integration for shared task metadata. | |
| MySQL MCP Server adamosk/mysql-mcp-server A Model Context Protocol server that provides secure, multi-database MySQL access with configurable security levels, enabling SQL queries across multiple databases directly from VS Code. | |
| joplin-server-vector-memory adamoutler/joplin-server-vector-memory Enables AI assistants to securely search and retrieve information from a user's encrypted Joplin notebook via vector memory and MCP. | |
| Google Drive CRUD MCP Server adampaulwalker/claude-gdrive-mcp MCP server that gives Claude full read-write access to Google Drive, Docs, Sheets, and Slides using your own Google OAuth credentials and hosted server. | |
| Adam OS MCP Server adamperna74/adam-os-mcp Enables restaurant management through natural language, allowing import of Toast CSV data, labor/sales analysis, tip pool calculations, task management, and note-taking. | |
| Multi-service MCP Server adampippert/multi-service-mcp-server A modular server that implements the Model Context Protocol standard, providing tools for interacting with GitHub, GitLab, Google Maps, Memory storage, and web automation through a unified gateway. | |
| applescript-mcp adamrdrew/applescript-mcp Enables Claude to automate macOS applications, manage files, control music, send messages, and more through AppleScript. | |
| AWS Cost Explorer MCP Server adamricci29885/aws-cost-explorer-mcp-server Enables natural-language queries of AWS spending by service, region, day, and instance type, and of Amazon Bedrock usage from CloudWatch model-invocation logs, including optional cross-account cost analysis. | |
| sqlmate-mcp adamrpostjr/sqlmate-mcp Zero-config SQL database MCP server with a browser GUI that connects Claude to MySQL, MariaDB, SQLite, and MSSQL databases. | |
| Nextflow Developer Tools MCP adamrtalbot/mcp-nextflow A Model Context Protocol server designed to facilitate Nextflow development and testing, providing tools for building from source, running tests, and managing the Nextflow development environment. | |
| foreman-mcp-py adamruzicka/foreman-mcp MCP server to interact with Foreman (Red Hat Satellite) instances, enabling management of hosts, provisioning, and configuration via natural language. | |
| prolog-mcp adamrybinski/prolog-mcp A neurosymbolic AI server combining Prolog’s symbolic reasoning with Model Context Protocol (MCP) for hybrid AI applications. | |
| Imagen MCP Server adamryczkowski/imagen-mcp Enables image generation using Google's Imagen and other AI models through Nexos.ai platform. Supports single and batch image generation with various quality settings and model options. | |
| remove-background adamryczkowski/mcp-remove-background A Model Context Protocol server for removing backgrounds from images using AI-powered segmentation models. | |
| Webflow MCP Server adams9553/mcp-server Enables AI agents to interact with Webflow sites through the Webflow Data API, supporting content analysis, page and CMS updates, and Designer canvas changes via OAuth-authenticated remote or local setups. | |
| Pure Agentic MCP Server adamsalah13/mcp_server_full A Model Context Protocol implementation with a modular architecture that exposes capabilities through specialized agents, enabling seamless integration with Claude Desktop and web applications. | |
| fisheries-data adamsconchallos/fisheries-data-mcp Enables natural-language research queries across marine data sources including FAO FishStat, BarentsWatch Fish Health, and Copernicus Marine, with data provenance and local file exports. | |
| rules-as-code-mcp adamselzer/rules-as-code-mcp Deterministic SNAP eligibility logic, exposed as auditable Model Context Protocol tools. An AI agent can read, reason, and orchestrate, but the eligibility determination itself is made by versioned, tested, cited code that a caseworker, an | |
| Authenticated MCP SSE Server adamsiwiec1/mcp-sse-authenticated-cloud-run A secure MCP (Model Context Protocol) server hosted on Google Cloud Run that enables team collaboration by providing authenticated access via Google Cloud IAM, allowing teams to share custom MCP servers over the internet before official MCP | |
| Flutter MCP adamsmaka/flutter-mcp A real-time server that provides Flutter/Dart documentation and pub.dev package information to AI assistants, ensuring they generate accurate and up-to-date Flutter code. | |
| Geo-Parity MCP Server adamspaans88/geo-parity-mcp Enables geographic parity analysis with 26 read-only tools covering purchasing power, salary localization, cost of living, nomad visas, tax residency, FIRE planning, and relocation costs. | |
| uipath-orchestrator-mcp adamstuber/uipath-orchestrator-mcp Enables AI assistants to interact with UiPath Orchestrator through 23 tools, including managing jobs, queues, schedules, robots, and assets. | |
| Perforce P4 MCP Server adamtyurin/p4mcp-server Enables MCP-compatible AI assistants to interact with Perforce P4 version control for changelists, files, shelves, workspaces, jobs, reviews, streams, and server metadata, while also providing optional access to P4 DAM assets and metadata. |
23,601–23,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.