Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Naira Offramp MCP adeyemir/agent-fiat-mcp Enables agents to cash out USDC on Arc into a Nigerian bank account by saving a verified payout recipient once and reusing it, quoting exact NGN amounts or USDC budgets, and executing approved payouts with status tracking. Balances, rates, | |
| Agent Money MCP adeyemir/agent-money-mcp Connects AI agents to real-world fiat banking rails through a non-custodial Circle Agent Wallet on Arc, enabling USDC conversion into local bank or mobile money payments and wallet funding via bank transfers. It supports chat-native approva | |
| Claude Flight Search MCP Server adeyholar/claude-flight-search-mcp Enables flight search, airport information lookup, and price comparison through Claude Desktop. | |
| Raindrop.io adeze/raindrop-mcp MCP Server for accessing Raindrop.io bookmark manager. | |
| google-ads-mcp adginr/google-ads-rest Enables MCP clients to manage Google Ads accounts through guarded tools for GAQL reporting, keywords, ads, budgets, callouts, and sitelinks, with dry runs and paused-by-default creates. | |
| Google Tag Manager MCP adgurus/tag-manager-mcp Enables AI clients to manage Google Tag Manager accounts and containers through the Tag Manager API v2, covering account/container discovery, workspace creation and syncing, CRUD on tags, triggers, variables, and folders, built-in variable | |
| agentarch MCP Server adhammomen/agentarch Enables any MCP client to drive a retrieval-grounded multi-agent workflow over stdio JSON-RPC, with journalled effects so recorded runs replay byte-for-byte from their trace. It also lets an agent answer retrieval by calling a tool on anoth | |
| Enterprise Threads MCP Server adhdvital/threads-mcp-fork Enables professional Threads management with advanced analytics, AI-powered content optimization, and automation features. | |
| Priva-MCP adhidevara/priva-mcp A man-in-the-middle MCP proxy that sits between Claude and an internal API, automatically masking sensitive banking data before returning to Claude. | |
| mcp-linkedin adhikasp/mcp-linkedin A Model Context Protocol (MCP) server that provides tools to interact with LinkedIn's Feeds and Job API.
You can do "search for 3 data engineer jobs in . For each job check if it a good match for me by analyzing it against my resume in fil | |
| mcp-reddit adhikasp/mcp-reddit Read Reddit post and hot thread | |
| MCP Weather Server adhikasp/mcp-weather Provides hourly weather forecasts using the AccuWeather API, enabling users to access current weather conditions and detailed 12-hour forecasts tailored to specific locations. | |
| PersonalMCP adhimulambhargavsaiviswanath-05/personal_mcp Serves a single ping tool that can be invoked locally over stdio from Cursor or remotely over streamable HTTP, letting clients verify connectivity to the server. Remote deployments are protected by an X-API-Key header and expose a /health e | |
| Indodax MCP Server adhinugroho1711/mcp-indodax Exposes Indodax's Private and Public REST APIs as MCP tools, enabling AI agents to manage cryptocurrency trading and account information. It supports tasks like checking market prices, viewing account balances, and executing or canceling bu | |
| MCP Crypto API Servers adhinugroho1711/mcp-trading A collection of Model Context Protocol servers for cryptocurrency APIs (CoinGecko, DeFiLlama, DexScreener, Indodax, Moralis Solana) enabling AI to interact with real-time crypto market data. | |
| Weather MCP Server adhipathik/weather_mcp_server Provides real-time weather forecasts, current conditions, and smart umbrella recommendations through MCP tools, backed by the Open-Meteo API. | |
| mcp-vapi adhirajhangal/mcp-vapi MCP server for Vapi.ai that enables AI coding assistants to manage voice assistants, make outbound calls, and access call history directly from their development environment. | |
| Antigravity Argon Bridge adhirajpersonal/antigravity-argon-bridge Enables autonomous coding agents and Antigravity workflows to query Google’s 4 Argon reasoning model with configurable thinking depth, automatic multi-account failover, live quota tracking, and workspace-isolated conversation memory. | |
| Scholar Relay adhithyan05/scholar-relay An AI-powered research assistant that enables students to discover papers, generate summaries, and build bibliographies with cross-device session continuation using MCP and LangGraph. | |
| olist_mcp adi-1080/olist_mcp Enables natural-language analytics over the Brazilian Olist e-commerce dataset, exposing SQL-backed MCP tools that generate Chart.js visualizations, support multi-tool queries, and maintain a pinnable dashboard with refresh change detection | |
| AsyncAPI MCP Server adi-204/asyncapi-mcp-server An MCP server for AsyncAPI that enables parsing, validation, linting, conversion, model generation, and template generation from any MCP client using stdio. | |
| ADI Chain MCP Server adi-foundation-labs/adi-mcp-server Enables AI agents to query and execute ADI Chain operations, including canonical bridge deposits/withdrawals, CCIP transfers, balance checks, and funding path planning. | |
| bloxberg-mcp adi-ghag/bloxberg-mcp Enables AI assistants to query bloxberg blockchain state, explore transactions and contracts via Blockscout, and verify Research Object Certificates anchored on-chain. | |
| voltcrawl adi-il/voltcrawl Enables coding agents to retrieve verified web evidence via headless Chromium rendering, sitemap navigation, and search candidate discovery, returning clean Markdown, structured JSON, and verbatim quoted proof. | |
| free-web-search-mcp adi-santoso/gatrion-free-web-search-mcp This MCP server enables free web search and page content extraction using real browsers, with support for multiple search engines and stealth browser backends. It provides tools for searching, fetching pages, and setting up the Camoufox ste | |
| wp-mcp adi-ty/wp-mcp Connects WordPress sites to AI agents, enabling content management through natural language commands via the WordPress REST API. | |
| gateway_lab.mcp_server adi0ri/fde-mcp-llm-gateway-assessment Provides a stdio MCP server with strict input validation and JSON-RPC error handling for tool calls. | |
| Cisco Meraki MCP Server adi2084/cisco-meraki-agentic-workflow-mcp-server Enables intelligent troubleshooting, monitoring, and configuration of Cisco Meraki networks through natural language, with agentic workflows for automated diagnostics and health checks. | |
| ResumeTailor adi2355/mcp-resume-editor An MCP server that enables users to automatically tailor LibreOffice resumes by updating specific sections based on job descriptions via the UNO API. It allows Claude to modify skills, projects, and work experience in .odt templates to gene | |
| cerif-mcp adialaleal/cerif-mcp MCP server that provides AI assistants with tools to understand, validate, generate, and transform CERIF 1.6 research information, including entity browsing, XML validation, document building, and migration from CERIF 1.5. | |
| GCal-mcp adiballc/gcal-mcp A stateless Google Calendar MCP proxy that uses Baserow for OAuth management, enabling multi-tenant calendar operations via SSE transport. | |
| Upstox MCP Server adibhattar95/upstox-mcp-server A lightweight, plugin-based MCP server for trading and fund analysis using Upstox APIs. | |
| MCP OCI OPSI Server adibirzu/mcp_oci_opsi Enables comprehensive monitoring and analysis of Oracle Cloud Infrastructure database fleets through natural language interfaces. It supports performance troubleshooting, capacity planning, and automated DBA workflows across multi-tenant en | |
| OCI Core Services FastMCP Server adibirzu/mcp-oci-core-services A dedicated server for Oracle Cloud Infrastructure (OCI) Core Services that enables management of compute instances and network operations with LLM-friendly structured responses. | |
| MCP OCI Logan Server adibirzu/mcp-oci-logan-server Connects Claude to OCI Logging Analytics for natural language querying and analysis of security logs, including detection catalog, MITRE ATT&CK integration, and cross-log correlation. | |
| Grok Gadgets Gateway adidshaft/grok-gadgets-gateway Enables MCP clients to discover connected gadgets, read their state and events, and route commands to them over versioned device contracts on local USB and TCP transports. Ships with a configurable software simulator so device interactions | |
| SuzyQ MCP Server adiezsuzy/mcp-server-suzyq Enables chatting with the SuzyQ research co-pilot directly from Cursor IDE, supporting conversation history and multiple active conversations. | |
| Tool of Truth adigoel07/tooloftruth MITM proxy MCP server that intercepts and verifies AI agent tool calls, detecting fabrication, tracking costs, verifying outcomes, and inferring user satisfaction. | |
| Glassbox adihebbalae/glassbox An instrumented local browser daemon MCP server that lets coding agents verify UIs in one call, with console, network, layout, accessibility, and coverage checks, plus debugging tools. It provides named isolated sessions and a CLI+MCP duali | |
| Inventory MCP Server adiitiir/inventory-mcp-server Manages inventory operations using Supabase/PostgreSQL database, enabling users to add, remove, check stock levels, and list inventory items across multiple locations. | |
| MCP Chat adijad/mcp_project A command-line interface application that enables interactive chat with AI models through the Anthropic API, supporting document retrieval, command-based prompts, and extensible MCP tool integrations. | |
| datalens-dev-mcp adikant/datalens-dev-mcp A local Python MCP server for AI-assisted development of Yandex DataLens dashboards, enabling inspection, planning, validation, and guarded application of changes. | |
| PlanSmart Enterprise RAG adikasz/enterprise-rag-knowledge-engine Enables Claude to retrieve and reason over internal business documents, client histories, and SOPs stored in ChromaDB for hallucination-free, context-aware responses. | |
| adila-mcp adila-sh/dash-mcp MCP server to manage Adila platform via natural language, enabling deploys, logs, metrics, and infrastructure mutations through CLI AI clients. | |
| Supabase MCP Server adiletd/feature-request-collection-mcp A Model Context Protocol server that enables querying feature suggestions from a Supabase database, allowing AI tools like Cursor and Claude to access and display feature request data. | |
| rag-docs-assistant MCP server adilkhan72/rag-docs-assistant Enables clients to search a document knowledge base and ask questions answered with validated citations through the search_docs and ask tools. | |
| Comet MCP Server adilshaikh1/comet-mcp-desktop Gives Claude a browser that thinks by connecting to Perplexity's Comet browser via Chrome DevTools Protocol, enabling AI-powered web search, navigation, reading, clicking, and screenshots while keeping Claude's context clean. | |
| youtube-analytics-mcp adilsonicjunior/youtube-analytics-mcp A local, read-only MCP server that provides Claude with private YouTube Analytics data—views, retention, traffic sources, demographics, revenue, and impressions/CTR—via authenticated Google APIs. | |
| MCP Sentiment Analysis Server adilzhanb/mcp_sentiment_analysis_server A robust MCP server for real-time sentiment analysis with AI-powered insights, featuring multi-dimensional emotion detection, batch processing, and a Gradio web interface. | |
| 50 First Tapes MCP Server adilzuberi/50firsttapes Enables AI agents to read and write a local-first knowledge base of plain markdown files in git, with governance gates for safe, hash-anchored edits. |
23,751–23,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.