Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Open Data MCP aeriis-kr/opendata-mcp Enables exploration and interaction with South Korea's Public Data Portal (OpenAPI) through keyword search, standard documentation retrieval, and direct API endpoint calls with automatic service key injection. | |
| Vector Memory MCP Server aeriondyseti/vector-memory-mcp Provides local vector-based semantic memory storage for AI assistants to persist context and decisions across sessions using local embeddings and LanceDB. It enables private semantic search and session handoff capabilities to maintain long- | |
| ASO-Copilot aero25x/aso-copilot MCP server for managing App Store Optimization: add apps, track keywords, pull health reports, spy on competitors, find keyword opportunities, and write AI copy suggestions. | |
| web3trackers-mcp aerobean/web3trackers-mcp MCP server for crypto marketing attribution. Build UTM-tagged tracking URLs, estimate campaign ROI, compare web3 attribution tools, and pull DeFi marketing benchmarks. | |
| Homespun aerolalit/homespun Hand a human a rich interactive UI by URL from any MCP client and get structured data back — forms, approvals, surveys, pickers, editable lists. Round-trip human-in-the-loop for agents. | |
| llm-redteam-mcp aeronique/llm-redteam-mcp An MCP server that runs curated adversarial prompts against local Ollama models to test guardrails, scoring responses with heuristic verdicts for human review. | |
| aerostack-registry aerostackdev/aerostack-mcp Search and discover 100+ hosted MCP servers on Cloudflare's edge with semantic search. Browse tools, get full parameter schemas,and execute functions — one URL, no auth needed for discovery. Includes Slack, Stripe, GitHub, AWS, Discord, Sal | |
| Colab MCP aerovfx/mcp_colab An MCP server that bridges local AI agents to Google Colab notebooks, enabling execution of Python code and interaction with notebook states directly from the agent. | |
| MCPaeroedu aerovfx/mcpaeroedu Enables AI assistants to interact with the AeroEduVision platform, allowing exam generation, course management, knowledge graph queries, and student progress tracking through natural language commands. | |
| 5arz Proof-of-Human aerozinnovation/5arz-proof-of-human Enables agents to prove and verify that a real, unique human performed an action, issuing machine-readable signed credentials with public verification. | |
| Num — Personal Concierge aerozinnovation/num-mcp Travel places directory by 5arz: search 2.5M places, submit businesses and promos (human-reviewed). | |
| Kolada MCP Server aerugo/kolada-mcp Provides access to Sweden's comprehensive municipal and regional statistics database with semantic search capabilities. Enables natural language queries against thousands of Key Performance Indicators covering various aspects of Swedish pub | |
| Swemo MCP aerugo/swemo-mcp An MCP server that provides tools for querying Swedish monetary-policy data from Sveriges Riksbank, including GDP, unemployment, CPI, and policy rates, enabling LLMs and clients to fetch economic indicators and forecasts. | |
| opnsense-mcp aesaganda/opnsense-mcp Enables interaction with OPNsense firewalls through MCP tools for managing firewall rules, interfaces, DHCP leases, and system monitoring. | |
| enhanced-filesystem-mcp aesirkode/enhanced-filesystem-mcp High-performance MCP server giving AI agents advanced filesystem and automation capabilities on Windows, with 26 tools across file I/O, search, Git, process management, and more. | |
| image-gen-mcp aesoper101/image-gen-mcp Enables AI agents to generate images via multiple providers like OpenAI and Google, with automatic failover and configurable retry settings. | |
| vision-mcp aesoper101/vision-mcp MCP server that provides vision understanding to non-multimodal agents via 4 tools (analyze/describe/OCR image, list providers), supporting 13 vision providers with automatic fallback and secure URL handling. | |
| korean-dart-mcp aesthetic-legalism5470/korean-dart-mcp Enables AI assistants to analyze Korean financial disclosures (DART) with insider trading signals, accounting risk scores, Buffett-style quality checklists, and automatic conversion of HWP/PDF attachments to markdown. | |
| ds-mcp aestheticfunction/ds-mcp A read-only MCP server that provides AI coding agents with a queryable contract for design system tokens, components, patterns, and anti-patterns. | |
| Mi Fitness MCP aestilog/mi-health-mcp Enables syncing Xiaomi Mi Fitness cloud health data into a local SQLite cache and querying it through MCP tools for daily activity, heart rate, sleep, workouts, body measurements, blood oxygen, stress, and abnormal heartbeat records. | |
| MCP Stats Tools Server aeternifrigus/mcp-tools-server Enables statistical analysis through three tools—survival analysis, paired significance testing, and distribution drift detection—plus a harness to evaluate quality, latency, and cost. | |
| CostAPI aethar-dev/costapi-mcp Cost of living, CPI, PPP, and regional price data for 190+ countries. Semantic endpoints with natural language parameters. MCP server for AI agents. | |
| EInvoiceAPI MCP aethar-dev/einvoiceapi-mcp EU e-invoicing — UBL/CII conversion to XRechnung and FatturaPA | |
| EurostatAPI MCP aethar-dev/eurostatapi-mcp EU economic statistics — GDP, inflation, unemployment, trade, population | |
| WageAPI aethar-dev/wageapi-mcp US + EU salary benchmarking, pay transparency compliance, and semantic endpoints. 1,400+ US occupations, 28 EU countries. MCP server for AI agents. | |
| @sentimentracker/signals-mcp aether-grid/sentimentracker-signals-mcp Enables LLM clients to access Sentimentracker's proprietary trading indicators and signals, including querying current signals, full data, signal confluence, and proposing trades through MCP tools. | |
| cell-mem aether-liusiqi/cell-mem An MCP server that provides AI agents with persistent, multi-layered memory inspired by the human brain, including consolidation, self-reflection, and generative replay. | |
| Circus MCP aether-platform/circus-mcp Enables AI agents to manage processes via structured MCP tools, reducing token usage by 75-80% compared to shell commands. | |
| Supervisord MCP aether-platform/supervisord-mcp Enables AI agents to manage Supervisord processes (start, stop, restart, view logs, etc.) through the Model Context Protocol, simplifying process management in production and development environments. | |
| logbook-mcp aether-technologies/logbook-mcp A local MCP server for AI agents to log activities, query logs, and leave notes for each other, featuring a web UI and REST API. | |
| @aetherall/mcp-nvim-tmux aetherall/mcp-nvim-tmux An MCP server that enables AI agents to control Neovim instances running in tmux sessions. | |
| ag402-mcp aethercore-dev/ag402 Ag402 is the payment layer for Coinbase's x402 protocol. Wrap any API or MCP server with a paywall in one command (ag402 serve), or let your AI agent auto-pay for paid APIs (ag402 run). Zero code changes for both buyers and sellers. Solana | |
| token-rugcheck aethercore-dev/token-rugcheck MCP server for real-time Solana token risk analysis. Cross-references RugCheck.xyz, DexScreener, and GoPlus Security to generate three-layer reports: machine verdict → LLM analysis → raw on-chain evidence. Live on Solana mainnet with USDC m | |
| Salesforce Copilot MCP aethereusriyaagrawal/salesforce-copilot-mcp Enables Microsoft 365 Copilot to interact with Salesforce through REST APIs, supporting queries, object descriptions, pipeline summaries, and anomaly detection. | |
| jobs.now MCP server aetheric-tech/jobsnow-mcp Enables searching and browsing hidden job market roles with H1B PERM sponsorship from major US companies, including tools for job search, details, categories, and company listings. | |
| Council Blackboard aetheris-consulting/ai-council-blackboard Enables AI agents to collaborate via shared blackboard state, multi-agent deliberation, human-in-the-loop proposal approval, operating-mode control, and audit logging through MCP. | |
| codex-laya-mcp aetherzz2/codex-laya-mcp Enables local, read-only Laya typed decisions for Codex, providing classification, scoring, truth-probability, batch decision, and token-budget planning tools on Apple Silicon. | |
| doctrine aethrox/doctrine MCP server exposing 33 software engineering skills grounded in named primary standards, covering the development lifecycle from TDD and code review to incident response and deployment. | |
| shodan-mcp aethrox/shodan-mcp A minimal MCP server for Shodan, enabling infrastructure reconnaissance through tools like host lookup, search, CVE lookup, and DNS queries. | |
| aethyn-browser-mcp aethyn-io/aethyn-browser-mcp An MCP server enabling AI agents to drive a real browser through residential proxies with per-task geo (country/city) and sticky identity, all chosen at call time. | |
| io.github.arpe-io/fastbcp-mcp aetperf/fastbcp-mcp Enables exporting data from databases to files (CSV, TSV, JSON, BSON, Parquet, XLSX, Binary) with optional cloud storage targets, via a two-step preview-execute safety process. | |
| io.github.arpe-io/fasttransfer-mcp aetperf/fasttransfer-mcp MCP server wrapping FastTransfer for efficient data transfer between databases with safety previews. | |
| LakeXpress MCP Server aetperf/lakexpress-mcp A Model Context Protocol (MCP) server for LakeXpress — a database to Parquet export tool with sync management and data lake publishing. | |
| MigratorXpress MCP Server aetperf/migratorxpress-mcp This MCP server enables database migration between heterogeneous systems (Oracle, PostgreSQL, SQL Server, Netezza to PostgreSQL or SQL Server) through AI assistants by providing tools for command preview, execution, validation, and workflow | |
| MI25-tuning-MCP aets-magi/mi25-tuning-mcp Manages multi_llm-client operations for MI25/gfx900 GPUs, enabling configuration updates, inference execution, benchmarking, and performance log analysis via MCP tools. | |
| Sky PC MCP Companion aevella/sky-pc-mcp-companion 本地MCP工具，通过截图、OCR、键盘和聊天输入与PC游戏《光遇》交互，支持AI客户端陪聊和实验。 | |
| Nano Banana aeven-ai/mcp-nanobanana Generate, edit, and restore images using natural language prompts through the Gemini 2.5 Flash image model. Supports creating app icons, seamless patterns, visual stories, and technical diagrams with smart file management. | |
| synorive aevorine/synorive Provides Claude Code with local-first multimodal semantic search across documents, code, images, and video, plus multi-engine web research with active counter-evidence hunting and source-verified, extract-only briefings. | |
| aeyes-local-agent aeyestech/aeyes-local-agent Enables AeyeStudio AI chat to securely access and control local PC resources such as files, Excel, clipboard, apps, and shell through a localhost MCP agent with user approval. | |
| Model ID Cheatsheet aezizhu/model-id-cheatsheet Provides verified, up-to-date model IDs, pricing, and specs for over 100 models across 19 providers, preventing AI agents from using outdated or hallucinated model names. |
24,101–24,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.