Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Shortcut MCP aezizhu/shortcut-mcp Enables users to save frequently used long prompts as simple shortcuts like /review or /debug. Transform 500-word prompts into 8-character commands across any MCP-compatible platform. | |
| MCP Trader Server af7007/mcp-trader Enables trading operations and market analysis through MetaTrader 5, MLP AI signals, and database integration. Supports real-time market data, automated trade execution, portfolio management, and performance monitoring through natural langu | |
| AfaAgent x402 API Suite afaagent/x402-api-suite 43 x402-enabled API tools — DeFi, wallet security, AI/ML, developer tools, SEO. Pay-per-call USDC on Base via x402 protocol. | |
| computer-use-turbo afaaq-io/computeruseturbo Lets any AI agent operate desktop apps on macOS, Windows and Linux in the background through the accessibility tree, including iPhone Mirroring on macOS. It shows the agent numbered elements plus a window screenshot, with built-in safety ru | |
| SMNGRP05-police afaf-gharra/smngrp05-police Implements a distributed cops-and-robbers game agent as a FastMCP server, enabling peer-to-peer play with no central server. It manages turn-based moves, belief tracking, strategy selection, and secure protocol via SHA-256 commit-reveal. | |
| SMNGRP05 Thief MCP Server afaf-gharra/smngrp05-thief Runs a decentralized thief agent for a peer-to-peer cops-and-robbers game, using FastMCP to exchange moves and messages with a police agent while employing Bayesian belief and credibility-based bluffing strategies. | |
| Police MCP Server afaf-gharra/uoh-ag12-police Enables a police agent to autonomously chase a thief in a peer-to-peer grid game using FastMCP for turn-based communication and decentralized orchestration. | |
| uoh-ag12-thief MCP Server afaf-gharra/uoh-ag12-thief Enables decentralized turn-based gameplay between thief and police agents in a peer-to-peer network, handling turn coordination, message passing, and protocol enforcement. | |
| ElevenLabs MCP Server afarhadi99/elevenlabs-mcp Provides comprehensive access to ElevenLabs AI audio features including text-to-speech, voice cloning, sound generation, and audio isolation. Enables users to generate high-quality speech, manage voices, transform audio, and access ElevenLa | |
| Twitter Spaces MCP Server afarhadi99/spaces-download-mcp Enables downloading and AI-powered transcription of Twitter Spaces audio recordings with multiple output formats including speaker diarization, time-coded text, and summaries. | |
| WordPress + WooCommerce MCP Server afarhadi99/wordpress-mcp-full Enables comprehensive management of WordPress sites and WooCommerce stores through REST APIs, including content management, e-commerce operations, user administration, and store analytics. | |
| GeneXus MCP Server afborga/genexusmcp Enables AI agents to read, edit, analyze, and refactor objects inside GeneXus 17/18 Knowledge Bases via the native GeneXus SDK, including whole-KB text export without login. | |
| Mainspring afd-ll/mainspring Enables AI agents to pull work from an event log, update and close tasks with conclusions, and lets humans review, decide, and sign off through a web board with shared unread cursors and an auditable event stream. | |
| Blender Open MCP afedorov41/blender-open-mcp Enables AI agents to inspect and modify live Blender scenes, manage objects and materials, render images, retrieve PolyHaven assets, and send prompts to configurable local or OpenAI-compatible LLM backends. | |
| Stock MCP afedorov53412/stock-mcp Enables AI agents and regular backends to fetch and analyze financial market data across A-shares, US equities, ETFs, indices, and crypto, including quotes, K-lines, technical indicators, fundamentals, money flow, filings, and news search. | |
| Piia Engram afernandez80071/piia-engram Gives MCP-compatible coding tools a shared, user-owned identity and knowledge layer stored in local files, so preferences, quality standards, lessons, decisions, and project context carry across tools and sessions. Everything is inspectable | |
| javascript-mcp-server aferreiraguido/javascript-mcp-server Deterministic MCP server for semantic analysis of JavaScript/TypeScript codebases, including frameworks like Vue, Angular, React, and Node. It provides tools for type checking, code metrics, framework-specific analysis, and quality heuristi | |
| python-mcp-server aferreiraguido/python-mcp-server Enables deterministic static analysis of Python code, providing tools to inspect classes, functions, imports, dependencies, and more, without executing the code. | |
| Gemini Image Generation MCP Server affanshaikhsurab/image-generation-gemini-mcp Provides image generation capabilities using Google's Gemini 2.0 Flash Preview model through the MCP protocol, enabling AI assistants to generate high-quality images from text prompts. | |
| Affilync MCP Server affilync/affilync-mcp Enables users to manage affiliate marketing directly within Claude by connecting to the Affilync platform. Affiliates can search campaigns and track earnings, while brands can create campaigns, monitor performance, and manage affiliate appl | |
| JurisdictionMCPRemote affinity-cpa/jurisdictionmcpremote Hosted MCP server for jurisdiction data, enabling users to resolve addresses and check cache freshness via Cloudflare Workers with zero local install. | |
| CPR Training MCP Server affirmerau/mcp_server Provides structured CPR training resources including lessons, demonstration videos, and reflective questions through an MCP interface. Enables AI assistants to deliver trusted cardiopulmonary resuscitation training content on demand. | |
| evolution-mcp affix/evolutionmcp MCP server for GNOME Evolution that enables calendar and email operations such as listing calendars/events, sending emails, and searching messages through the Evolution Data Server. | |
| agent-relay affixio/affixio-agent-relay Enables AI agents to send, receive, verify, approve, and delegate signed, proof-carrying requests across organisations using delegation chains, replay protection, quorum approvals, and tamper-evident receipts. | |
| Affixio MCP affixio/affixio-mcp Enables agents to locally attest actions and gate privileged tool calls with signed allow/deny decisions, using privacy-preserving hashing and offline ML-DSA-65 verification. | |
| affixio affixio/mcp Enables zero-knowledge proof generation and verification, identity verification, and gate checks for privileged agent actions. | |
| Casino Kings MCP Server affteamgit/casinos-mcp Wraps bitcoincasinokings.com APIs to enable natural language queries for casino data, brand search, and live bonuses. | |
| cheapdates-mcp afgoes/cheapdates Enables users to find the cheapest dates to fly a route via Google Flights, supporting one-way and round-trip searches through multiple backends. It provides a tool that can search date ranges, filter by nonstop, seat, currency, and force a | |
| SQLite Explorer afgong/sqlite-mcp-server Enables exploring and querying SQLite databases through natural language, with tools to list tables, describe table structures, and run SELECT queries. | |
| Arsenal MCP afhultin/arsenal-mcp A Kali Linux-based MCP server that exposes over 45 penetration testing tools for AI-assisted security auditing and vulnerability scanning. It features strict scope enforcement, structured output parsing, and persistent finding storage to au | |
| MCP Dev Tools afialho/mcp-dev-tools Provides a comprehensive set of developer utilities including UUID generation, email validation, hashing, JSON manipulation, Brazilian document handling, and more, accessible via MCP. | |
| basezap-mcp afifarioss/basezap-mcp A read-only MCP server that exposes BaseZap's tipping-agent tools to any MCP client, allowing users to fetch platform info, compute USDC tip quotes, build unsigned ERC-20 transfer calldata, and resolve Farcaster usernames to wallet addresse | |
| MCP Server Medium afikrim/medium-mcp-server MCP server for interacting with the Medium API. Allows AI agents to publish posts, manage publications, upload images, and parse RSS feeds to JSON. | |
| x-mcp-server afikrim/x-mcp-server Enables reading public X (Twitter) content like profiles, tweets, and search results via a stealth browser, without official API costs. | |
| ARTie Retirement Guide MCP Demo afin83/artie-retirement-services-mcp Synthetic MCP server that demonstrates retirement guidance capabilities including member profile, super balance, projections, insurance, and adviser booking for a ChatGPT connector demo. | |
| Logisim-evolution MCP Server afishyke/logisim-evolution-mcp-server A local MCP server for working with Logisim-evolution .circ projects, providing structured project inspection, guarded edits, validation, circuit analysis, test execution, format conversion, and GUI launch. | |
| jev-mcp afloat16/jev-mcp Exposes a Jev decision model as four read-only MCP tools so agents can make bounded probabilistic decisions: choosing among explicit alternatives, routing among known tools or subsystems, scoring change risk, and evaluating yes/no gates aga | |
| aviasales-mcp afoninsergey1997-lang/aviasales-mcp Enables flight price searching via Aviasales/Travelpayouts Data API, including fares by route and date, cheapest-day and flexible-date lookups, budget and inspiration searches, and airport/city/airline reference resolution. | |
| mcp-personal afoone/mcp-personal MCP server that provides tools to manage Gmail and Outlook emails, and search Mercadona products, for use with Cursor and LangChain. | |
| LinkedIn MCP Server aforsalesforce/linkedin-mcp-server Enables fetching detailed LinkedIn profile data by automating a browser session with your LinkedIn cookie to access full profiles. | |
| mcp_photo afr13nd77/mcp_photo MCP server for generating and editing images using OpenRouter API, with support for multiple models and dynamic model discovery. Runs in Docker and integrates with Claude Desktop via stdio transport. | |
| qutebrowser-mcp afreakk/qutebrowser-mcp MCP server for automating qutebrowser browser via CDP and IPC. Enables tab management, navigation, screenshots, JavaScript execution, and authenticated HTTP requests through the browser's session. | |
| Filesystem MCP Server afreed1607/mcp_integration Enables MCP clients to list, read, search, parse, batch-process, and poll for resume files within a configured root directory over stdio JSON-RPC. | |
| Understand This Video For Me AI Plugin africaappstudio-max/understand-this-video-mcp Enables AI clients to watch and hear videos from local files or YouTube, Vimeo, and Loom links by returning timestamped key frames, a transcript, a contact sheet, and a combined timeline, with all processing done locally. | |
| technocore-mcp africanproofs/technocore-mcp Enables MCP-capable agents to participate in technocore.chat as full peers, reading rooms, writing signed messages as a did:key identity, and managing notes. | |
| actionwall afridamehanaz/actionwall Gives AI agents policy-checked tools for shell commands, file reads and writes, HTTP fetches and tool calls, deciding each action against a policy before it runs while tracking secret taint and recording every decision in a tamper-evident a | |
| memanchor afridamehanaz/memanchor A local MCP server that lets coding agents persist decisions, conventions and gotchas across sessions and recall them with ranked search. Each memory is anchored to the files it describes, so recall flags it as stale when that code changes, | |
| lsp-mcp afriemann/lsp-mcp An MCP server that exposes LSP-backed code navigation and editing tools to LLM agents using a single global config file to route file extensions to language servers. | |
| md-mcp afriemann/md-mcp An MCP server that provides surgical read/write access to individual sections of Markdown files, allowing agents to fetch, edit, or delete specific slices without touching the entire file. | |
| skills-mcp afriemann/skills-mcp An MCP server that lets AI agents browse and fetch skills from remote registries — GitHub repositories or direct HTTP URLs — without installing them locally first. |
24,151–24,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.