Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Cursor10x MCP aiurda/cursor10x-mcp The Cursor10x Memory System creates a persistent memory layer for AI assistants (specifically Claude), enabling them to retain and recall short-term, long-term and episodic memory on autonomously. | |
| DevContext aiurda/devcontext An autonomous MCP server providing project-centric context awareness through keyword analysis, relationship graphs, and structured metadata retrieval. It enables intelligent codebase understanding and task management workflows by continuous | |
| a11y-mcp-server aiuxmasters/a11y-mcp-server Exposes axe-core accessibility auditing as MCP tools so any MCP-compatible agent can audit HTML for structural and semantic issues. | |
| vetsorcery-mcp aiva-vet/vetsorcery-mcp MCP server for VetSorcery — query problem lists, SOAP notes, and patient summaries from Claude Desktop, Cursor, Windsurf, or any MCP-compatible agent. | |
| runtime-proxy-mcp aiven-labs/fastmcp-caddy-proxy Enables running a FastMCP server behind a Caddy reverse proxy that enforces bearer-token authentication, so MCP clients can access tools over HTTP only with a valid token. | |
| speaklna mcp aivmelna/speaklna-cli A stdio MCP server that lets AI coding tools on a Mac speak text aloud through the local Speaklna text-to-speech app. It exposes four tools (speak, stop, status, voices) so agents can voice replies, halt playback, check state, and list avai | |
| Weline MCP aiweline/weline-codex-mcp A local project intelligence, batch coding, and self-learning engine for Codex that enables task-level batch coding, reduces token usage, and automatically learns skills. | |
| MCP Catalog aiwerk/mcp-catalog A searchable directory of MCP server recipes that enables AI agents to discover, inspect, and download server configurations natively through tool calls. It features weighted search and provides detailed configuration data for a variety of | |
| @aiwerk/mcp-server-bexio aiwerk/mcp-server-bexio MCP server for the bexio API, the Swiss business software for invoicing, accounting, CRM, projects and payroll. It provides 310 tools covering the complete public API surface across all three API versions. | |
| @aiwerk/mcp-server-elevenlabs aiwerk/mcp-server-elevenlabs Enables full coverage of the ElevenLabs API through 390 auto-generated tools, handling file uploads for speech-to-text and voice cloning plus raw audio downloads. Supports domain filtering, dry-run guarding of credit-spending calls, and con | |
| @aiwerk/mcp-server-ghl aiwerk/mcp-server-ghl Enables AI agents to interact with the GoHighLevel (GHL) CRM and marketing automation platform through 576 tools covering contacts, opportunities, conversations, calendars, invoices, payments, campaigns, and other business operations. | |
| Google Maps MCP Server aiwerk/mcp-server-google-maps Provides access to Google Maps Platform APIs for places search, geocoding, turn-by-turn directions, route matrices, elevation, and time zones. Enables natural language queries for location-based information and routing. | |
| mcp-server-smallinvoice aiwerk/mcp-server-smallinvoice MCP server for smallinvoice.ch — Swiss SME invoicing and accounting with 146 tools and OAuth2 BYOC authentication. | |
| @aiwerk/mcp-server-swiss-company aiwerk/mcp-server-swiss-company Enables querying Swiss company data from official public sources: commercial register, UID register, and Swiss Official Gazette of Commerce, with per-company lookups and request budgets. | |
| MCP Memory aiwithbenefits/mcp-memory An MCP server that gives AI assistants the ability to remember user information (preferences, behaviors) across conversations using vector search technology. | |
| attendance-mcp aiwithdiego/attendance-mcp Enables AI assistants to analyze staff attendance data, answering questions about late arrivals, repeat lateness, no-shows, and per-site trends through read-only tools. | |
| shiftguard aiwithdiego/taste-to-evals Enables MCP clients such as Claude Desktop and Claude Code to read café rules, rota, and staff data, check proposed rota changes against the owner's rules, and evaluate customer chat replies before sending. Every tool is read-only, with cod | |
| Scoped Support Tools Server aiwithhassan/agentic-ai-security Protects AI support tools with Descope JWT authentication and scope-based authorization, enabling secure customer support operations like refunds with granular access control. | |
| Documentation Retrieval & Web Scraping aiwithhassan/mcp-server-python Enables retrieval and cleaning of official documentation content for popular AI/Python libraries (uv, langchain, openai, llama-index) through web scraping and LLM-powered content extraction. Uses Serper API for search and Groq API to clean | |
| mcp-meituan-ip aixi134/mcp-meituan-ip A simple note storage system that allows creating, storing, and summarizing notes with customizable detail levels. | |
| @aix/kanbn-mcp aixlabtech/kanbn-mcp An MCP server that enables AI assistants to interact with Kan boards through the Kanban API, allowing tasks like viewing and managing boards via natural language. | |
| Microsoft Planner MCP Server aixolotl/microsoft-planner-mcp An unofficial MCP server that connects AI assistants to Microsoft Planner, enabling natural language task management such as creating tasks, organizing plans, and managing buckets. | |
| Figma MCP Server aiya861202/figma-mcp Enables AI assistants like Cursor to interact with Figma designs programmatically. Supports reading design information, modifying elements, creating components, managing text content, and automating design workflows through natural language | |
| PWN-MCP aiyakami/pwn-mcp A CTF Pwn AI-assisted debugging platform based on MCP, enabling AI to directly interact with remote GDB and CTF services for automated heap exploitation. | |
| Salesforce MCP Server aiyanbo/mcp-salesforce Enables AI assistants to interact with Salesforce data by listing objects, describing fields, and executing SOQL queries. | |
| estv-tax aiyatullah/swiss-tax-calculator-mcp Enables AI assistants to calculate Swiss income, wealth, inheritance, capital payment, and corporate taxes for any municipality, compare tax burdens, and find cheapest locations without an API key. | |
| Xee-mcp aiyo28/xee-mcp Enables AI assistants to search X posts and read user timelines without API costs, using cookie authentication. | |
| tinypng-mcp-server aiyogg/tinypng-mcp-server Use TinyPNG via MCP | |
| comparebasket aizen2006/comparebasket MCP server that compares grocery basket prices across Blinkit, Zepto, BigBasket, and Amazon Now in real time, identifying the cheapest platform for the entire basket. | |
| ihyee-mcp aizukanne/ihyee-mcp An MCP server that provides AI assistants with web search and intelligence capabilities via the ihyee API. It allows users to search the web, fetch extracted content from URLs, and perform full browser rendering for JavaScript-heavy website | |
| SpyNet aj-bartocci/spynet Enables AI assistants to configure and manage session-based REST and WebSocket mock servers for application development and testing. It allows for dynamic endpoint setup, request history inspection, and real-time WebSocket communication thr | |
| Agent HQ aj-dev-smith/claude-channel-agenthq A local MCP server that enables direct, persistent communication between multiple Claude Code agent sessions through a secure messaging channel. It includes built-in guardrails to manage message exchanges and supports optional human monitor | |
| duck-mcp aj-dev-smith/microduck-mcp Enables AI agents to control a simulated Pollen Robotics Microduck through MCP tools for movement, tricks, pushing, camera views, and state inspection. | |
| Discord Agent MCP aj-geddes/discord-agent-mcp Provides comprehensive Discord bot automation with 71 tools for messaging, channel management, moderation, roles, members, emojis, stickers, scheduled events, auto-moderation, and application commands through AI assistants. | |
| FastFS-MCP aj-geddes/fastfs-mcp A high-speed MCP server that enables AI assistants like Claude to interact with local filesystems, manage Git repositories, and provide interactive experiences through a standardized JSON-based protocol. | |
| Terry-Form MCP aj-geddes/terry-form-mcp A secure, containerized MCP server that enables AI assistants to manage Terraform infrastructure using integrated Language Server Protocol (LSP) tools. It facilitates safe operations like initialization, validation, and planning while provi | |
| Black Orchid aj-gonzalez/black-orchid A hot-reloadable MCP proxy server that enables users to create and manage custom Python tools through dynamic module loading. Users can build their own utilities, wrap APIs, and extend functionality by simply adding Python files to designat | |
| @kirbah/mcp-youtube aj-niplex/mcp-youtube Provides AI agents with token-optimized access to YouTube data, including video details, transcripts, channel statistics, trending videos, and search. | |
| NiPlex MCP Server aj-niplex/niplex-mcp Provides AI agents with production-ready integrations for GitHub repository management, sandboxed code execution, SFTP file operations, web search and scraping, YouTube, Google Workspace, Notion, and more. | |
| auggie-context-mcp aj47/auggie-context-mcp Enables AI agents like Claude and Cursor to query codebases using Augment's context engine via the Auggie CLI. | |
| Electron Native MCP Server aj47/electron-native-mcp Enables debugging and automation of native Electron applications on macOS through DOM inspection, UI automation, global hotkeys, and Chrome DevTools Protocol integration. | |
| reddit_mcp ajaaysrinivaas/reddit_mcp A Model Context Protocol server for reading public Reddit data and posting authenticated replies, enabling AI agents to interact with Reddit content. | |
| uisight ajain8273/uisight Enables AI agents to measure live web and responsive UIs in side-by-side mobile and desktop sessions, returning precise findings as text — contrast ratios, undersized touch targets, clipped or covered controls, overflow and theme drift — ea | |
| Python Sandbox MCP Server ajaja/mcp_python_sandbox Enables LLMs to execute Python code in a restricted sandbox for calculations and data analysis, without giving them a real shell. | |
| wcprediction-mcp ajaleelp/wcprediction-mcp MCP server for a World Cup 2026 prediction game assistant, providing tools for live game data via PostgreSQL and semantic search over football articles via RAG. | |
| pocketsmith-mcp ajanderson1/mcp_pocketsmith Enables interaction with the PocketSmith personal finance API through 43 MCP tools for managing accounts, transactions, budgets, categories, and more. | |
| Enterprise Knowledge Validation MCP ajaneei/enterprise-knowledge-validation-mcp Enables users to check whether procedures are current and whether actions have the stored evidence needed for human review, returning status, citations, and blockers through read-only MCP tools while always requiring human review. | |
| autocad-mcp ajaquin8/autocad-mcp Lets Claude draw in and inspect the AutoCAD session already running on a Windows PC by attaching over COM, so no add-in or restart is needed. Provides 32 tools for drawings, layers, geometry, dimensions, blocks, queries, view capture and PD | |
| IDA Pro MCP Server ajaved8270/mcp-server-idapro Enables AI assistants to remotely control a reverse engineering disassembler and debugger, including executing Python scripts, searching immediate values, text, and byte sequences, retrieving functions, strings, imports, exports, and disass | |
| OpenClaw MCP Server ajaworski16590/openclaw-mcp Enables Claude.ai and Claude Desktop to connect securely via OAuth 2.1 to self-hosted OpenClaw assistant gateways, sending messages, checking gateway health, and queuing, polling, or cancelling long-running tasks. Supports orchestrating mul |
25,301–25,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.