Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AI Note MCP Server ainote-dev/ainote-mcp A Model Context Protocol server that connects Claude Desktop to AI Note task management, enabling task creation, updates and management through natural language conversations. | |
| Amplify MCP Proxy ainsleyg5/amplify-mcp-proxy-live Exposes tools to query Salesforce for candidates by name and send them to a BHA screening API. Designed for deployment on AWS Lambda with API Gateway. | |
| aint-mcp aintdevlab/aint-mcp Modular MCP server integrating Redmine, SQL Server, and GitLab for investigating incidents, enabling issue tracking, database queries, and merge request review via natural language. | |
| fusion-svg-mcp aintoniodev/fusion-svg-mcp MCP server that generates Disler-style fusion-harness README diagrams with dark GitHub chrome, monospace type, role colors, and CSS flow animations. | |
| MCP-Audio Plugin aio-2030/mcp-audio A voice-to-text transcription service that converts audio files to transcripts using SiliconFlow, supporting both multipart/form-data and base64 formats. | |
| @aiorouter/mcp aiocana/aiorouter-mcp MCP server that provides access to 15+ non-Claude AI models through a single API key, with PII Shield protection and 10 tools for chat, model management, pricing, and usage tracking. | |
| MCP Salesforce Server aiondadotcom/mcp-salesforce Enables AI assistants to interact with Salesforce through a secure interface for performing CRUD operations, executing SOQL queries, and managing schema discovery. It features a smart learning system that analyzes custom objects and fields | |
| MCP SSH Agent aiondadotcom/mcp-ssh A server that enables secure interaction with remote SSH hosts through standardized MCP interface, providing functions like listing hosts, executing commands, and transferring files using native SSH tools. | |
| AionRealm Alexa+ MCP Integration aionrealm/aionrealm-alexa-mcp Enables MCP-compatible clients such as Alexa+ to anonymously ask AionRealm's Living Aion guide a question through the ask_aion tool and receive the answer back via a thin relay to AionRealm's authenticated backend. | |
| Birdeye MCP Server aiopinions/birdeye-mcp-server Provides blockchain data context from Birdeye APIs for AI models via Model Context Protocol, enabling token, market, wallet, NFT, and DEX pool queries on Solana. | |
| TON Access MCP Server aiopinions/ton-access-mcp A production-ready Model Context Protocol server implementation that connects AI assistants to the TON blockchain, allowing them to query wallet balances, transaction details, smart contracts, and other blockchain data. | |
| MCP Nautobot Server aiopnet/mcp-nautobot A Model Context Protocol server that integrates with Nautobot to provide network automation and infrastructure data to AI assistants like Claude, allowing them to query and interact with network Source of Truth systems. | |
| ib-gateway-mcp aiordanescu/ib-gateway-mcp Enables MCP clients to access the full Interactive Brokers TWS API—contracts, market data, history, scanners, news, fundamentals, account/P&L, and orders protected by safety rails—through an IB Gateway. | |
| dodo-mcp aipapa-md/dodopizza-mcp Enables AI agents to browse local Dodo Pizza menus, compose and estimate orders from natural-language requests, and place or manage real orders with human confirmation. Supports mock and live modes, multiple countries and cities, secure loc | |
| texlive-mcp aipc-org/texlive-mcp Enables local LaTeX project compilation with latexmk across pdflatex, xelatex, and lualatex, including bibliography processing and diagnostics, plus workspace file inspection and constrained PDF text extraction. | |
| apcore-mcp aiperceivable/apcore-mcp-python Automatically converts any apcore-based project into an MCP server and OpenAI tool provider with zero code changes. | |
| apcore-mcp aiperceivable/apcore-mcp-typescript Automatic MCP Server & OpenAI Tools Bridge for apcore. Converts apcore module registries into MCP tool definitions and OpenAI-compatible function calling formats with zero boilerplate. | |
| FastAPI Apcore MCP Server aiperceivable/fastapi-apcore Exposes FastAPI routes as MCP tools with auto-discovery, Pydantic schema extraction, and built-in observability. | |
| flask-apcore aiperceivable/flask-apcore Flask Extension for apcore (AI-Perceivable Core) integration. Expose your Flask routes as MCP tools with auto-discovery, Pydantic schema inference, and built-in observability. | |
| hono-apcore aiperceivable/hono-apcore Enables turning a Hono app into MCP tools and OpenAI-compatible function definitions, either by declaring tools explicitly or by scanning existing routes. | |
| capcut-mcp-server aipersonacademy/capcut-mcp Enables AI agents to programmatically edit CapCut Desktop and JianYing Pro projects by directly manipulating native draft files, supporting multi-track timelines, keyframing, transitions, subtitles, and headless previews. | |
| grok-mcp aipieksel/grok-mcp Enables Grok to securely access and manage your local data and workflows through modular capabilities for content, ledger, and profile-scoped workspaces. | |
| ssh-chat-mcp aiplatforms-ru/ssh-chat-mcp Zero-config SSH/SFTP MCP server that lets an LLM client open temporary SSH/SFTP sessions to remote hosts, run commands, and upload/download files without holding any pre-baked credentials. | |
| Codex × Grok Bot MCP Task Bridge aipmer/codex-grok-task-bridge Lets Codex enqueue asynchronous research and browser tasks that Grok Bot can claim, renew, progress, and complete over MCP, returning structured results, evidence, and attachments. It supplies the queueing layer with leases, retries, idempo | |
| ru-mcp-gateway aiport-cptr/ru-mcp-gateway Provides a single secured MCP endpoint that lets AI assistants and MCP clients access corporate systems such as Yandex Tracker, Bitrix24, and 1C. It supports Yandex ID login, OAuth for clients, role-based tool permissions, and audit logging | |
| AIPOLabs MCP Server aipotheosis-labs/aci-mcp A Model Context Protocol server that provides access to ACI.dev functions (tools) through either direct app-specific tools or a unified interface with dynamic tool discovery and execution based on user intent. | |
| zentao-mcp-server aipper/zentao-mcp A Model Context Protocol (MCP) server that integrates with Zentao's RESTful API to manage bugs, including listing, resolving, closing, and commenting, with support for product and project set contexts. | |
| qadam-flow aiqadam/qadam-flow Self-hosted workflow automation platform with a built-in MCP server. Lets AI agents build, validate, publish and run automations, and call any of its 238 integrations (Slack, Telegram, Google Sheets, Notion, ...) as tools. | |
| xtium-sharepoint-mcp aiqbal-dincloud/xtium-sharepoint-mcp Enables MCP desktop clients to sign in as the user and search, browse, and read SharePoint/OneDrive files via Microsoft Graph, running locally so tokens and content stay off XTIUM services. | |
| Selenium Self-Healing MCP Server aiqualitylab/selenium-selfhealing-mcp Automatically fixes broken Selenium test locators when UI changes occur, reducing test maintenance overhead. | |
| python-patterns-mcp air237/python-patterns-mcp Exposes the 23 Gang of Four design patterns to AI coding agents for generation, canonical examples, AST-based detection, validation, and anti-pattern refactoring in Python codebases. | |
| project-brain-mcp airaalfredsf/project-brain-mcp An MCP server that provides CLI coding agents with persistent decision memory, codebase dependency-graph awareness, plan validation against architectural constraints, and a self-bootstrapping constraints.md file. | |
| jira-mcp airakoze/jira-mcp Self-hosted MCP server for Jira Cloud that mirrors the Atlassian Rovo MCP Server, enabling Jira issue management, JQL search, and workflow transitions via natural language. | |
| MCP Hub airano-ir/mcphub An AI-native management hub that enables users to control WordPress, WooCommerce, and various self-hosted services like Gitea and Supabase through AI assistants. It provides a comprehensive suite of nearly 600 tools for managing content, ec | |
| Auckland Transport MCP Server airatech/mcp-auckland-transport Enables searching for Auckland public transport stops and retrieving real-time transit schedules and timetables using the Auckland Transport API with GTFS standardized data. | |
| health-mcp airbloomer/health-mcp Enables AI chatbots to read self-hosted Apple Health and Android Health Connect data—such as steps, calories, weight, body fat, workouts, nutrition, and optionally sleep—through read-only MCP tools. It provides daily summaries, metric queri | |
| Grasp aircodelabs/grasp An open-source self-hosted browser agent that provides a dockerized browser environment for AI automation, allowing other AI apps and agents to perform human-like web browsing tasks through natural language instructions. | |
| omron-connect-mcp aircon-chen/omron-connect-mcp Enables MCP clients to list a user's registered devices and fetch blood pressure, weight, and body composition measurements — historical or latest — from their OMRON account. Authenticates with email/password and caches a refresh token for | |
| Logic Pro MCP Server aircrack-ng-debug/logic-pro-mcp AI-powered control for Apple Logic Pro via MCP, enabling transport, tracks, plugins, MIDI, project, and mixer control through natural language. | |
| jhipsterSampleApplication aircwou/jhipster-mcp-demo Enables MCPHub to delegate user login and session validation to this tenant via HMAC-signed API calls, with role-based MCP tool scopes. | |
| Xcode MCP Server airdrop-alpha/xcode-mcp Enables AI assistants to manage Xcode projects by listing targets, reading configurations, and triggering builds via the Model Context Protocol. It facilitates natural language interaction with macOS developer tools to streamline iOS app de | |
| gdb_mcp airfloats/gdb_mcp An MCP server that enables AI assistants to control GDB debugging sessions, including breakpoint management, thread analysis, and variable inspection, using the GDB/MI protocol. | |
| Airframe MCP Client airframeai/mcp-client Connects AI agents to Airframe's product intelligence and expert network, enabling product search, comparison, expert discovery, and market research queries. | |
| db-bridge airgap-fleet/db-bridge Local-first PostgreSQL MCP bridge with parameterized queries (SQLi prevention), read-only mode, tamper-evident audit logs | |
| file-bridge airgap-fleet/file-bridge Local-first filesystem MCP bridge with ripgrep search, atomic writes, multiple transports | |
| Obsidian MCP Server airgap-fleet/vault-bridge Enables reading, writing, searching, and managing Obsidian vault notes via Model Context Protocol, including frontmatter queries, daily notes, and configurable vault access. | |
| AirLabs MCP Server airlabs-co/airlabs-mcp Provides AI assistants with access to real-time flight data, airport schedules, delays, and aviation reference databases through natural language queries. | |
| Airmail MCP airmail/airmail-mcp MCP server for Airmail — manage emails, calendars, contacts, and more from AI assistants. | |
| HWPX Document Server airmang/mcp-hwpx Enables reading, editing, and creating Korean HWPX documents through python-hwpx library. Supports document creation, paragraph/table/image insertion, metadata management, and workspace-restricted file operations with automatic backup funct | |
| hwpx-mcp-server airmang/python-hwpx-automation Enables AI agents to read, search, and modify HWPX documents directly via MCP, without requiring Hancom Word Processor. Supports pure Python, cross-platform operation. |
25,201–25,250 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.