Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| APIAny MCP ailingqu/apiany-mcp Enables discovery of public AI models with pricing, documentation context, and OpenAI-compatible integration examples. Supports both read-only queries and paid async media generation tasks. | |
| MCP Python Code Navigation Server aillescas76/mcp_python Provides tools for Python code navigation, analysis, and refactoring, including finding definitions, references, and symbol lists. It enables automated tasks such as renaming symbols and organizing imports to enhance AI-driven development. | |
| Amazon SP-API MCP ailumia/amazon-sp-api-mcp A production-grade MCP server for the Amazon Selling Partner API that provides a complete registry of 353 operations across 49 API domains, enabling discovery, description, and invocation of SP-API operations with version awareness and safe | |
| Yargı & UYAP Mevzuat MCP Sunucusu ailurophile99/yargi-mcp Enables AI assistants to search Turkish judicial decisions, legislation, and regulatory rulings from sources including Yargıtay, Danıştay, UYAP Emsal, Anayasa Mahkemesi, Sayıştay, AİHM, Resmî Gazete, and various regulatory authorities, and | |
| Aim aim-company/aim-mcp Market knowledge layer for AI agents. Aim monitors millions of sources — news, podcasts, social, competitor moves and regulatory filings — and surfaces the signal shaping your market. Hosted remote MCP server (streamable HTTP, OAuth). | |
| VoiceStudio MCP aim-it4/voicestudio-mcp Enables access to a backend's native MCP tools and broader HTTP API for speech generation, voice cloning/design, transcription, dubbing, translation, subtitles, audiobooks, and related batch/long-form workflows over Streamable HTTP or local | |
| NVD-MCP aim-sec/nvd-mcp MCP server for searching NIST's National Vulnerability Database, enabling retrieval of recent CVEs, keyword/CPE/CWE searches, and detailed CVE information. | |
| Portfolio MCP aim-t/portfolio-mcp Enables AI assistants to query a person's CV and portfolio content via MCP tools and resources, returning grounded answers from local markdown data instead of relying on resume parsing. | |
| PETE MCP Gateway aim67tq7/pete-mcp Provides a single remote MCP endpoint that gives AI clients policy-checked business tools, shared cross-client memory, durable jobs, and consolidated reporting across connected projects and operations. | |
| YouTube MCP Server aima4703/youtube-mcp-remote Enables bringing YouTube into Claude Code for video transcripts, search, metadata, channel info, playlists, comments, trending videos, engagement analytics, chapters, SponsorBlock clean transcripts, and most-replayed heatmaps. | |
| TinyDB Remote MCP aimadesimple/tinydb-mcp-v2 A minimal MCP server that stores JSON documents in TinyDB, exposing tools to insert, retrieve, and delete all data. | |
| Marvel Rivals MCP aimaginationlab/marvel-rivals-mcp Provides access to Marvel Rivals game data including hero information, abilities, skins, achievements, items, maps, and player profiles through a standardized interface. | |
| WHOOP MCP Server aimanelkhalifa/whoop-mcp-template Enables Claude to securely read your own WHOOP account data — recovery, HRV, resting heart rate, sleep, strain, workouts and body profile — through the official WHOOP developer API on a self-hosted server. Supports natural-language question | |
| mcp-database aimanfadillah/mcp-database Read-only MySQL/MariaDB MCP server for running SELECT queries safely, with automatic read-only enforcement and query limits. | |
| finance-mcp aimanhk2023-chencc/finance-mcp A remote MCP server for market data that provides stock quotes, price history, option chains, finance news, and market snapshots, deployable as a Cloudflare Worker. | |
| Arduino MCP Server aimanmadan/arduino_mcp_server Enables AI assistants like Claude to control Arduino boards in real-time, allowing users to turn LEDs on and off through natural language commands using the Model Context Protocol and Firmata. | |
| tree-sitter-analyzer aimasteracc/tree-sitter-analyzer An MCP code-intelligence server for AI agents with pre-indexed AST cache, 62 MCP tools, and TOON-compressed output, enabling token-efficient code analysis and project health grading entirely locally. | |
| aimdb-mcp aimdb-dev/aimdb aimdb-mcp provides an MCP server implementation that enables Large Language Models to interact with running AimDB instances for introspection, debugging, and monitoring. | |
| Risha.ai MCP Server aimedialab/risha-mcp-server MCP server for the Risha.ai API enabling authentication, capability discovery, credit balance checks, and generation requests with automatic polling. | |
| apple-health-shortcuts-mcp aimee1129/apple-health-shortcuts-mcp MCP server that provides read-only access to Apple Health data via three tools (health_now, health_detail, health_trends), letting AI assistants query recent activity, sleep, and trends securely through a Cloudflare-deployed API. | |
| apple-health-shortcuts-mcp aimee1129/apple-health-shortcuts-mcp123 Exposes Apple Health data as three read-only MCP tools (current status, details, trends) via a Cloudflare Worker, enabling AI assistants to view health metrics without modification. | |
| wetv-mcp aimeeluwang/wetv-mcp MCP server for searching, discovering, and exploring Chinese long-form video content from WeTV and Tencent Video, enabling AI assistants to recommend dramas, variety shows, anime, and movies with play links, ratings, and episode info. | |
| Ink Answer Paper aimengwang11-collab/answer-paper-mcp Enables a chat host to open a blank, dialog-embedded handwriting sheet where users draw answers with a finger, stylus, or mouse, then submit strokes as a replayed PNG plus JSON for optional external grading. | |
| MongoDB MCP Server aiminnovations/mongodb-mcp-juniper Enables interaction with MongoDB databases and MongoDB Atlas for querying data and managing clusters via the Model Context Protocol. It supports both local and cloud-based deployments using connection strings or Atlas API credentials. | |
| SYNTARO MCP aimino-tech/syntaro-mcp Enables AI agents to label GitHub issues and automatically generate fix pull requests with regression tests, while also providing tools for tracking runs, searching codebases, and integrating with Slack and Linear. | |
| PubMed MCP aimiora/pubmed-mcp Enables searching and retrieving academic article metadata from PubMed through a simple HTTP interface. Provides curated article summaries including titles, authors, publication dates, and DOIs for research and academic content discovery. | |
| deepseek-search-mcp aimmetal-tech/deepseek-search-mcp It enables AI agents to perform real-time web searches and fetch webpages as Markdown through stdio-exposed tools. | |
| Ken aimonk2025/ken Enables Claude to interact with local document vaults as searchable knowledge graphs, providing MCP tools for ingestion, search, and memory consolidation without cloud dependencies. | |
| DSN Lifeline aimpang-me/dsn-lifeline Enables an AI assistant to poll a queue of alerts about watched spacecraft contacting Earth via NASA's Deep Space Network and acknowledge them once reported. It also lets users manage a watchlist, mute craft, and inspect feed freshness, all | |
| hue-mcp aimpang-me/hue-mcp-grok-bot Enables MCP clients to sign in with a user's own Philips Hue account and control their lights, rooms, scenes, brightness and colour through Hue's cloud Remote API. It exposes tools for listing and setting lights and rooms, activating scenes | |
| infra-mcp-template aimuzov/infra-mcp-template Enables developers to scaffold a stdio MCP server with an example echo tool and a hosted OAuth connector, including checks, npm release, and deployment. | |
| kaiten-mcp aimuzov/kaiten-mcp MCP-сервер для полного управления Kaiten из любого MCP-клиента. Предоставляет 36 инструментов для работы с пространствами, досками, карточками, комментариями, чек-листами, учётом времени, тегами, участниками, гибкими выборками и планировани | |
| veo-mcp aimuzov/veo-mcp Enables MCP clients to generate videos from text prompts or source images through Google's Gemini API, poll render jobs, and save MP4 files to disk. It also lists available video models. | |
| ZenMoney MCP Server aimuzov/zen-money-mcp Enables auditing spending history to find transactions with missing or questionable categories and getting ranked, history-based category candidates for confirmation. Also supports writing approved category fixes back and importing missing | |
| Naxas MCP Server aimzworld007/naxas-mcp-server Enables MCP clients to query and inspect multiple self-hosted PostgreSQL projects through a single gateway using read-only credentials by default, with writes permitted only via a separately privileged role and explicit client confirmation. | |
| search-context ain3sh/search-context Enables semantic search across documentation stored in Gemini FileSearchStores, returning AI-generated answers with source citations. | |
| linkedin-ads-library-mcp ainamj99/linkedin-ads-library-mcp An MCP server that connects AI assistants to LinkedIn's Ad Library API for searching advertisers' sponsored content, job postings, and influencer partnerships. | |
| Date MCP Server ainarsklavins/date-mcp Provides AI assistants with real-time date, time, and timezone information, enabling them to access current temporal data, format dates, calculate day of week, and work with different timezones. | |
| AINative ZeroDB MCP Server ainative-studio/ainative-zerodb-mcp-server Provides AI assistants with vector search and persistent memory capabilities using ZeroDB. Enables storing and retrieving context across sessions, semantic document search, and analytics through natural language interactions. | |
| MCP Bridge ainativeera/mcp-bridge Converts existing HTTP operations and cURL commands into structured, local-first MCP tools that AI agents can call safely. | |
| sc-bwapi-mcp ainaxiya/sc-bwapi-mcp Enables AI assistants such as Trae or Claude to control StarCraft 1.16.1 matches through BWAPI, providing tools to read game state, train units, build, move, attack, gather, and chat. | |
| @ainize/mcp ainblockchain/ainize-mcp Enables AI agents to search, verify, purchase, and teach knowledge through a decentralized knowledge marketplace, with strict spending limits and secret management. | |
| AI Network MCP Server ainblockchain/mcp Enables AI agents to interact with the AI Network blockchain by managing accounts, submitting transactions, and reading database values. It supports registering Hyper Agents and accessing a Layer 2 DAG-based shared agent memory system based | |
| mcp-codex-keeper aindreyway/mcp-codex-keeper Serves as a guardian of development knowledge, providing AI assistants with curated access to latest documentation and best practices. | |
| mcp-neurolora aindreyway/mcp-neurolora Provides tools for collecting and documenting code from directories. | |
| MCP Server Neurolorap aindreyway/mcp-server-neurolora-p MCP server for collecting code from files and directories into a single markdown document. | |
| Google Sheets MCP Server ainetwork-ai/google-sheet-mcp Enables AI agents to seamlessly interact with Google Sheets through secure OAuth 2.0 authentication. Supports reading, searching, updating spreadsheet data, and managing sheets with smart text replacement and batch operations. | |
| Google Trends MCP Server ainightshift/google_trends_mcp Enables retrieval and analysis of Google Trends data for any search term over the last 12 months. Provides structured timeline data with relative interest scores that can be filtered by geography and category. | |
| ticktick-mcp ainishanov/ticktick-mcp An MCP server that connects AI assistants to TickTick, enabling project and task management through natural language, including reading projects, finding tasks, creating tasks, and completing work. | |
| Remote MCP Server on Cloudflare ainoob/awx-mcp-server Enables deployment of MCP servers on Cloudflare Workers with OAuth authentication and SSE transport. Provides a template for hosting remote MCP servers that can be accessed by Claude Desktop and other MCP clients over HTTP. |
25,151–25,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.