Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| antigravity-mcp-server adeelali4/antigravity-mcp Let two AI agents build your app at the same time without stepping on each other by providing shared file locks, task delegation, and inter-agent communication. | |
| Research Gap Analyzer MCP Server adeelhassan123/research-assistent-mcpserver Automates literature review, research gap detection, and novelty evaluation for academic research, providing tools to search, summarize, find gaps, generate ideas, and evaluate novelty. | |
| Claude Memory MCP adeeljames/claude-memory-mcp A lightweight MCP server that provides Claude Desktop with persistent memory across conversations by storing, summarizing, and retrieving conversation history. | |
| Job Lead Converter MCP adeeljames/job-lead-converter-mcp Transforms job postings into qualified sales leads by searching for active jobs, enriching company data, and identifying decision-maker contact information. | |
| finance-mcp-server adeev-mardia/finance-mcp-server Enables MCP clients to manage a local SQLite personal-finance ledger by recording income and expenses, listing transactions, aggregating spending by category, summarizing income/expense/net, and setting and tracking monthly budgets. | |
| mcp-router adeev-mardia/mcp-router Enables clients to connect once and access the union of multiple backend MCP servers' tools through a single unified interface, with namespaced tool routing, capability search, and health isolation. | |
| jCodeMunch adefemi-dev/jcodemunch-mcp Enables precise source code retrieval via tree-sitter AST parsing, cutting AI token costs by 86-99% by indexing codebases and fetching only needed symbols and structural queries (e.g., blast radius, importers) on demand. | |
| Perplexity API Platform MCP Server adefemi-dev/perplexity-ai-mcp Provides AI assistants with real-time web search, reasoning, and research capabilities through Perplexity's Agent API and Search API, enabling tools for search, conversational Q&A, deep research, and advanced reasoning. | |
| Wallapop MCP Server adeitamayo/wallpopmcp Unofficial MCP server for the Wallapop marketplace, enabling search, listing details, seller profiles, favorites, saved searches, chat, and offers through hybrid API and scraping fallbacks. | |
| chrome-mcp-server adejaimejr/chrome-mcp-server Bridges Chrome DevTools with Cursor AI to enable debugging and monitoring, including console logs, network requests, screenshots, and element inspection. | |
| holiplan adekola/holiplan An MCP server that enables families and assistants to plan a year around school and public holidays within a limited leave allowance, calculating holiday windows, leave costs, bridge days, budgets, deadlines, and calendar exports from a use | |
| Monad MCP Server adekunlebamz/monad-mcp-server1 Listens to Monad testnet for new blocks and provides a REST API to query the latest block number and transaction count. | |
| Gmail MCP Server adel-noufal/gmail-mcp-server-automation Enables listing recent emails, creating drafts, and sending emails through Gmail with a required approval token for send operations. | |
| imap-mcp adelaidasofia/imap-mcp Connects any IMAP mailbox and turns email into markdown notes for search and RawItem records for the Mycelium runtime. | |
| midjourney-mcp adelaidasofia/midjourney-mcp Enables Midjourney image generation via PiAPI with daily cost caps, audit logs, and SSRF-safe image URL inputs. | |
| PostgreSQL MCP Server adelhassen/postgres-mcp-server Enables AI assistants to interact with PostgreSQL databases by executing SQL queries and inspecting database schemas. It provides tools to facilitate database exploration and management through the Model Context Protocol. | |
| Apple Forme MCP adelinepscr-collab/apple-forme-mcp Exposes tools for weekly fitness summaries and acute:chronic workload ratio from Apple Watch data via Health Auto Export, plus a web dashboard for filtering and comparison. | |
| Quranpedia MCP adelpro/quranpedia-mcp Provides AI clients with fast, hallucination-free access to the Quran through 13 MCP tools, covering search, navigation, morphology, tafsir, translations, and surah background over stdio and Streamable HTTP. | |
| turath-mcp adelpro/turath-mcp MCP server that gives AI clients fast, accurate access to turath.io's books and resources, with tools for author biographies, book metadata, full texts, parsed pages, and catalog search over stdio or HTTP. | |
| mcp-ynab adelsjarlen/mcp-ynab Enables AI assistants to connect to YNAB budgets, providing tools for accounts, transactions, categories, payees, and analytics, including search, bulk operations, and delta sync. | |
| Currency Exchange MCP Server adem1409/currency-exchange-mcp-server Enables real-time currency exchange rate retrieval and conversion for over 200 currencies. Supports operations like getting rates, converting amounts, and comparing currencies through natural language. | |
| playwright-mcp ademdeniz/playwright-mcp An MCP server that gives Claude direct control of a real browser via Playwright, enabling AI-driven web testing, autonomous test execution, and live failure analysis through natural language. | |
| ai-credits-mcp ademers-tricentis/ai-credits-mcp MCP server that exposes AI credit usage data from OpenMeter to the TAIS AI chat service, automatically scoped to the calling tenant and restricted to admin users. | |
| BelAgent ademikelz19-hub/belagent-beldex-mcp Enables an AI client to request capped BDX payments on Beldex testnet, route them through deterministic local policy checks and human approval in a local browser page, then query, list, or cancel the resulting payment requests. | |
| Quant Companion MCP ademscodeisnotsobad/quant-companion-mcp Provides real-time options analytics, pricing with Greeks, Monte Carlo simulations, volatility analysis, strategy backtesting, and risk metrics using actual market data from Yahoo Finance and Polygon.io. | |
| ng-postcode adeniyikayodee/ng-postcode MCP server for Nigeria's NIPOST digital postcode (NDAPS). Validate codes offline, look them up, autocomplete, find the postcode at a coordinate and resolve described addresses. | |
| MCP Google Server adenot/mcp-google-search Provides web search capabilities using Google Custom Search API, enabling users to perform searches through a Model Context Protocol server. | |
| vishwa-ondo-mcp adenprosde2024/vishwa-ondo-mcp An MCP server that wraps the Vishwa exchange API for USDC→USDY swaps on Solana, enabling agents to quote, prepare unsigned transactions, submit signed ones, and check status. It never signs or holds funds, requiring explicit eligibility ack | |
| Jobber MCP Server adeocode/jobber-mcp Enables AI assistants like Claude, ChatGPT, and Copilot to query live Jobber data—clients, jobs, quotes, invoices, revenue, and schedule—using natural language, with read-only access and careful API budget management. | |
| job-board-mcp adeolaoj/job-board-mcp Enables an AI assistant to search open roles at a configured short list of companies through official public Greenhouse, Lever, and Ashby job board APIs, filter matches by career lane, retrieve full job descriptions, and save selected roles | |
| Agent Memory MCP Server adeoluo/agent-memory Enables AI assistants to persist, version, retrieve, and consolidate episodic, semantic, and procedural knowledge in SQLite with hybrid search, then expose that long-term memory to MCP clients such as Claude Desktop or VS Code. | |
| mcp-ml-tools adeoluo/mcp-ml-tools Enables MCP clients to count tokens and estimate costs, run BM25 search, compare model evaluations with paired bootstrap and McNemar tests, validate JSON Schema output, and scan for prompt injection and PII. | |
| ADEO CTI MCP Server adeosec/mcp-shodan A Model Context Protocol server that provides access to Shodan and VirusTotal APIs for cybersecurity analysis, enabling analysts to perform network intelligence operations including host lookups, vulnerability analysis, and threat intellige | |
| TeamRetro MCP Server adepanges/teamretro-mcp-server An unofficial MCP server that enables Claude to interact with TeamRetro.com's API for team retrospective management, providing direct pass-through to TeamRetro's public API endpoints with multiple authentication options. | |
| suunto-mcp adepssimius/suunto-mcp An MCP server for authoring and managing structured workouts (SuuntoPlus™ Guides) on Suunto watches, with swappable transports (file, Cloud API, or private mobile API) and a coach-oriented domain model that lowers to the display-oriented gu | |
| mcp-mediastack aderaaij/mcp-mediastack Provides 45 tools for monitoring and managing a Docker-based media stack, including Sonarr, Radarr, and other services. | |
| raindrop-mcp aderaaij/raindrop-mcp Enables management of Raindrop.io bookmarks, collections, tags, and highlights via MCP tools, with support for search, bulk editing, and library auditing. | |
| task-manager-mcp aderevyankin/task-manager-mcp Enables AI assistants to manage tasks across multiple projects with structured Markdown files, supporting creation, updates, completion, and organization with metadata and dependencies. | |
| bitvavo-mcp aderik/bitvavo-mcp Exposes a Bitvavo crypto exchange account as read-only tools for Claude, allowing portfolio queries, trade history, and market data without enabling trading. | |
| ha-automation-mcp aderik/ha-automation-mcp Exposes the Home Assistant Automation API integration as MCP tools so an AI agent can manage automations, helpers and template entities, Lovelace dashboards, entity/device/config-entry registries, recorder history, and native entity state a | |
| JIRA MCP Server aderik/mcp-server-jira Enables interaction with JIRA through the MCP interface, allowing users to manage issues, sprints, and users via natural language commands. | |
| Remote MCP Server Authless adesandro/remote-mcp-server-authless Deploy a remote MCP server on Cloudflare Workers without authentication, enabling tools to be used from Cloudflare AI Playground or Claude Desktop via SSE. | |
| google-ads-function-gateway adeshsarwan/google-ads-mcp-client Enables read-only access to authorized Google Ads accounts through six predefined catalogue functions, supporting account details, campaign information, cost, and performance queries via MCP. | |
| Phonotheca adesiahq/phonotheca-mcp Search and read your interview transcripts from Claude or any MCP client. Full-text search across every project, speaker-labelled transcripts with timestamps, cited passages. Read-only. | |
| bbq-mcp adesombergh/bbq Enables Claude Code to run multi-round grilling sessions in a browser UI, publishing rounds of questions with options and recommendations that users answer with buttons or free text. Supports per-question asides (re-pitch, visual diagram, p | |
| SQL MCP Server adetxt/sql-mcp A Model Context Protocol server that provides a standardized interface for interacting with SQL databases through the MCP protocol. | |
| mcp-pfsense adevillers/mcp-pfsense Provides read-only MCP tools to query pfSense firewall state and configuration via the pfSense REST API, covering system, interfaces, gateways, firewall, aliases, NAT, DHCP, DNS, WireGuard, and ARP. | |
| mcp-proxmox adevillers/mcp-proxmox Enables read-only interaction with Proxmox VE API, providing tools to query nodes, guests, storage, firewall, backups, and recent tasks. | |
| MCP Google Suite adexltd/mcp-google-suite A Model Context Protocol server that provides seamless integration with Google Workspace, allowing operations with Google Drive, Docs, and Sheets through secure OAuth2 authentication. | |
| Database Auditor MCP adexxhh/mcp-database-auditor Enables AI clients to safely query PostgreSQL or SQLite databases read-only through AST-validated guardrails, schema introspection, and statistical table profiling. It returns results as Markdown tables, JSON audit reports, and database hea |
23,701–23,750 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.