Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| home-credit-mcp ahmedrashed2024/home-credit-mcp MCP server that lets any LLM client query the Home Credit Default Risk SQLite database (307,511 loan applications) through 7 read-only tools, 4 resources, and 1 prompt over stdio, with natural language, SQL, and tool-calling interfaces. | |
| psx-mcp-server ahmedraza-96/psx-mcp-server Provides live Pakistan Stock Exchange data including quotes, intraday and end-of-day history, indices, company fundamentals, dividends, and announcements via the Model Context Protocol, with no API key required. | |
| Azure MCP FastMCP Server ahmedrowaihi/azure-mcp-fastmcp Provides Azure DevOps integration through MCP, enabling management of projects, work items, teams, and policies via natural language. Supports bulk work item creation with hierarchical relationships and iteration assignments. | |
| clickhouse-mcp-server ahmedrowaihi/clickhouse-mcp-server Enables interaction with ClickHouse databases via MCP, providing tools to list databases and tables and execute safe SELECT, SHOW, and DESCRIBE queries. | |
| Teachable MCP Server ahmedrowaihi/teachable-mcp-server Enables AI assistants to seamlessly interact with the Teachable API, managing courses, users, enrollments, progress tracking, and more. | |
| waypoint-airports ahmedsameh123-hub/waypoint-airport-finder Lets compatible AI clients suggest departure and destination airports by city, country, airport name, or code, returning only airports with scheduled passenger service by default. It also supports nearby-airport lookups and trip shortlist c | |
| Alibaba Cloud MCP Server ahmedselimmansor-ctrl/alibaba_cloud_mcp_server Enables AI assistants to manage Alibaba Cloud resources via natural language, with explicit tools for common services and a universal API invoker for full cloud coverage. | |
| Facebook MCP Server ahmedselimmansor-ctrl/facebook_mcp_server Enables AI agents to manage Facebook profiles, pages, posts, and engagement via the Graph API with OAuth authentication. | |
| GCP MCP Server ahmedselimmansor-ctrl/gcp_mcp_server This server exposes over 250 tools across 23 GCP service domains, enabling AI models to manage infrastructure, deployments, data, and security on Google Cloud Platform. | |
| IBM Cloud MCP Server ahmedselimmansor-ctrl/ibm_cloud_mcp_server Comprehensive MCP server for managing all IBM Cloud services, offering 180+ tools across 16 domains to enable AI assistants to fully manage IBM Cloud infrastructure. | |
| Instagram MCP Server ahmedselimmansor-ctrl/instagram_mcp_server Enables AI agents to control Instagram accounts programmatically, supporting profile management, media interaction, direct messaging, and follower management. | |
| LinkedIn MCP Server ahmedselimmansor-ctrl/linekedin_mcp_server Enables LLMs and agents to interact with LinkedIn's REST API for managing profiles, creating posts, viewing connections, and overseeing organizations. | |
| Oracle Cloud Infrastructure (OCI) MCP Server ahmedselimmansor-ctrl/oracle_cloud_mcp_server A Model Context Protocol server for managing Oracle Cloud Infrastructure services, enabling LLMs to interact with compute instances, storage, identity, and databases through natural language. | |
| SecureCode MCP ahmedsleem06/securecode-mcp Standalone MCP server that provides security scanning, project mapping, and vulnerability fix generation to AI coding assistants. | |
| GenuDo Market Intelligence MCP ahmedtawfeeq1/genudo-market-intelligence-mcp Provides market-intelligence tools for researching AI employee opportunities across Egypt, Saudi Arabia, and UAE using Meta ads evidence, with capabilities for competitor analysis, comparison, and evidence retrieval. | |
| Loredex MCP Server ahmedtawfeeq1/loredex-obsidian Enables AI coding agents to search, read, and write notes in an Obsidian vault via MCP tools, and monitor product handoffs and state. | |
| Humanitarian MCP ahmedvnabil/humanitarian-mcp Enables querying and analyzing humanitarian data, such as refugee statistics, through semantic tools like country comparisons, trend analysis, and report generation, using the UNHCR API. | |
| Open Emirates Intelligence ahmedvnabil/open-emirates-intelligence-mcp A comprehensive MCP server that makes official UAE open data queryable through natural language, offering tools for source discovery, dataset search, spatial joins, and intelligence recipes. | |
| Open Emirates Intelligence ahmedvnabil/uaemcp Provides source-cited access to official UAE open data through any MCP client, with PII redaction and SSRF protection built in. | |
| discovery ahmet-hoca-official/ansys_discovery_grpc_mcp Enables AI agents to create parametric geometry, apply loads, run simulations, and read results in Ansys Discovery through natural-language commands over gRPC. | |
| AHK (Agent Harness Kit) ahmet58739/agent-harness-kit Gives AI coding providers a shared, provider-agnostic workflow for turning requests into use cases and specs, then running tracked multi-agent development through explorer, consultant, builder, and reviewer roles. It owns task claims, actio | |
| JMComic AI ahmet61383/jmcomic-ai Enables AI agents to search, browse rankings, view album details and comments, manage favorites, and download manga albums or individual chapters asynchronously with progress tracking, cancellation, and retry. Also supports post-processing | |
| HoPe Chatbot MCP Server ahmetacn/axis-chart-mcp Enables modular MCP capabilities by organizing tools, resources, and prompts into composable sub-servers, exposed either all-in-one or as separate MCP endpoints. | |
| kde-desktop-mcp ahmetadakli/kde-desktop-mcp Enables MCP clients to inspect and operate desktop application UI elements through platform accessibility APIs and simulated input, without relying on screenshots, across KDE Plasma Wayland, Hyprland, and Windows under a per-app allowlist. | |
| Türk Hukuk AI MCP ahmetaliunaall-prog/turk-hukuk-ai-mcp Enables local, privacy-conscious research across Turkish case law and legislation by searching precedent and statutes, retrieving decisions and article trees/content, and assembling sourced research drafts with verified quotations. | |
| MCP2Browser ahmetatar/mcp2browser Provides browser automation capabilities through HTTP, allowing AI assistants to navigate web pages and inspect content using Playwright-powered tools for opening URLs and retrieving page information. | |
| Jira MCP Server ahmetbarut/jira-mcp Enables AI agents to interact with Jira Cloud, including listing boards and issues, adding comments, and searching users. | |
| midas-mcp ahmetdenizyilmaz/midas-mcp Enables AI assistants to read portfolio and place orders on BIST and US markets via Midas brokerage. | |
| PixelForge MCP Server ahmetdenizyilmaz/pixelforge Enables AI agents to run headless pixel-art conversion and stylization, extract or import palettes, detect pixel grids, export sprite sheets and tilesets, convert video, and analyze motion, progress-bar fills, and stroke drawing through JSO | |
| aa-mcp ahmetem/homelab-aa-mcp Enables querying independent LLM metrics (price, speed, benchmarks, providers) from Artificial Analysis through MCP, with caching and tier-aware access. | |
| pbs-mcp ahmetem/homelab-pbs-mcp MCP server for Proxmox Backup Server. Exposes datastore status, snapshot inventory, garbage collection, verify, and prune over the PBS REST API as 13 LLM-callable tools. | |
| Fibrous MCP Server ahmetenesdur/fibrous-mcp Provides tools for multi-chain DeFi operations using the Fibrous SDK, enabling AI agents to find swap routes, build transactions, and execute swaps across Base, Starknet, and Scroll networks. | |
| renef-mcp ahmeth4n/renef-mcp MCP server for Renef, providing dynamic instrumentation and reverse engineering capabilities for Android ARM64, including native hooking, Java interception, and memory manipulation. | |
| piia-engram ahmethoang9726/piia-engram Enables MCP-compatible coding tools to share a local, user-owned identity and knowledge layer with editable preferences, lessons, decisions, playbooks, and project context, so agents can start from consistent context and continue work acros | |
| Multi-Tenant PostgreSQL MCP Server ahmetkca/mcp-server-postgres Enables read-only access to PostgreSQL databases with multi-tenant support, allowing users to query data, explore schemas, inspect table structures, and view function definitions across different tenant schemas safely. | |
| MCP Jenkins Server ahmetmonti/mcp-jenkins Enables AI models to securely inspect and operate Jenkins through tools for jobs, builds, queue items, nodes, views, plugins, artifacts, pipeline inputs, and Groovy script execution. Supports stdio, SSE, and streamable-HTTP transports with | |
| Stock MCP ahmetmonti/stock-mcp Enables AI agents and backend services to retrieve and analyze A-share, US equity, ETF, index, and crypto data, including technical indicators, fundamentals, money flow, filings, and news through MCP tools and HTTP APIs. | |
| Filesystem MCP Server ahmetshbz1/filesystem-mcp Enables comprehensive filesystem operations including reading/writing files, directory management, file searching, editing with diff preview, compression, hashing, and merging with dynamic directory access control. | |
| apple-docs-mcp ahmetshbzz/apple-docs-mcp Enables offline, real-time search of Apple Developer Documentation from Xcode's local index, returning full text, code examples, availability, and framework listings without network calls. | |
| mcp-appstore-connect ahmetsina/mcp-appstore-connect Enables AI assistants to manage Apple App Store Connect operations including app management, TestFlight, analytics, reviews, subscriptions, and more through 54 tools. | |
| GitHub Insights MCP Server ahmetsogut/github-insights-mcp Enables Claude to analyze any public GitHub repository through typed, focused tools that surface metadata, README content, file structure, detected tech stack, and Mermaid architecture diagrams. It lets users explore repo purpose, structure | |
| app-store-connect-mcp ahmetutluau/app-store-connect-mcp MCP server for App Store Connect that enables reading app/version data, analytics reports, sales/finance reports, and safely preparing metadata updates via natural language. | |
| turkiye-veri-mcp ahmthamza/turkiye-veri-mcp Provides unified access to Turkish official data from TÜİK (statistics via SDMX) and TCMB EVDS (financial series), enabling search, query, and tidy CSV export with full frequency, aggregation, and formula support. | |
| Time Series Quant Finance MCP Server ahnemer/stock-analysis-mcp-server An MCP server that calculates technical analysis indicators for stock tickers using yfinance and pandas-ta, providing real-time financial data and quantitative analysis tools for LLMs. | |
| MySQL MCP Server ahngbeom/mysql-mcp-server A read-only MCP server that enables Claude Code to access MySQL databases, allowing safe querying with SELECT, SHOW, DESCRIBE, and EXPLAIN. | |
| zotero-mcp ahnhyunjun417/zotero-mcp Lets MCP clients search and read a local Zotero library—metadata, PDF full text, highlights, notes, collections and tags—and add new papers by DOI or arXiv ID or bulk-import BibTeX/RIS citations, all without writing to the original database | |
| GitLab Forum MCP ahnmichael/gitlab-forum-mcp Enables searching, reading, and analyzing discussions on GitLab's community forum for troubleshooting CI/CD issues and GitLab features. Pre-configured with GitLab-specific search filters and optimized workflows for support scenarios. | |
| Canvas LMS MCP Server ahnopologetic/canvas-lms-mcp Enables AI systems to interact with Canvas Learning Management System data, allowing users to access courses, assignments, quizzes, planner items, files, and syllabi through natural language queries. | |
| MCP Iceberg Catalog ahodroj/mcp-iceberg-service A Model Context Protocol server that provides a SQL interface for querying and managing Apache Iceberg tables through Claude desktop, allowing natural language interaction with Iceberg data lakes. | |
| Google Search Console MCP Server ahonn/mcp-server-gsc A server that provides access to Google Search Console data through the Model Context Protocol, allowing users to retrieve and analyze search analytics data with customizable dimensions and reporting periods. |
24,801–24,850 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.