Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| FastMCP LangGraph Webinar Demo akhilesh-2024/webinar A terminal-based MCP server that provides tools like web search, URL fetching, note management, and calculations, and connects them to a LangGraph ReAct agent for multi-step tasks. | |
| CurateX akhilesh-vangala/curatex-mcp Enables AI assistants to automatically fetch and analyze trending content from Reddit, YouTube, and News, then turn it into finished scripts, cloned-voice audio, and talking-head videos through single composite tool calls. Context is inject | |
| SMC-MCP akhileshselvan/smc-mcp Enables AI agents to analyze price action using Smart Money Concepts (market structure, order blocks, fair value gaps, liquidity sweeps) for stocks, forex, gold, indices, and crypto without an API key. | |
| Research Server akhileshvj/mcpchatbotforpapers Enables searching arXiv papers and retrieving paper metadata through MCP tools. | |
| MCP Tool Server akhiljoshi03/mcp-tool A production-oriented MCP server exposing tools for weather, currency conversion, text statistics, and server introspection, with auto-discovery, rate limiting, and API key auth. | |
| Salestools Club akhilkannur/salestools-mcp Salestools Club is a technical registry and audit of 300+ sales APIs and MCP servers. | |
| Confluence RAG MCP Server akhilthomas236/confluence-scraper-mcp Enables retrieval of relevant context from Confluence pages using RAG and ChromaDB, integrating with code assistants like GitHub Copilot to enhance documentation queries. | |
| GitScribe akhilthomas236/gitscribe GitScribe is an MCP server that enables intelligent web scraping of Git-based documentation with RAG capabilities, helping code assistants efficiently extract and retrieve information from documentation websites and repositories. | |
| Jenkins MCP Server akhilthomas236/jenkins_mcp_server Enables AI assistants to interact with Jenkins CI/CD systems for build management, job monitoring, console log analysis, and debugging through natural language commands. | |
| MCP Jira & Confluence Server akhilthomas236/mcp-jira-confluence-sse A Model Context Protocol server that integrates with Atlassian's Jira and Confluence, enabling AI assistants to interact with these tools directly through features like issue management, page creation, and content search. | |
| SonarQube MCP Server akhilthomas236/sonarqube-mcp-npm A Model Context Protocol (MCP) server that provides AI assistants with access to SonarQube code quality, security, and project analytics data. | |
| Elastic MCP akhilvis/elastic-mcp Connects to Elasticsearch clusters through the Model Context Protocol, enabling natural language querying and management of Elasticsearch data. Provides tools to search indices, list available indices, and retrieve index mappings. | |
| monter-mcp akhows/monter-mcp Enables local analysis of personal finance data from a Monter JSON export, answering questions about spending, subscriptions, debts, and more via MCP-capable assistants without any cloud servers. | |
| PokeAPI MCP Server akhrhysd/mcp-pokeapi-server A Model Context Protocol server that interfaces with PokeAPI to provide Pokémon information to LLM applications through JSON-RPC over stdio. | |
| Catawiki MCP Server akhtarxx/catawiki-mcp-server Enables AI assistants to read-only access Catawiki auction marketplace data, including searching lots, inspecting items, browsing categories, and exploring auctions. | |
| MCP UUID Server aki-kii/mcp-uuid A simple service that generates random UUIDs when requested through Claude Desktop. | |
| Xiaohongshu (XHS) Creator Toolkit aki66938/xhs-toolkit An automation toolkit that enables AI-driven content publishing and creator data analysis for Xiaohongshu via the MCP protocol. It supports automated posting of image and video notes, cookie management, and performance metric tracking throu | |
| Secure Agent MCP Gateway aki83reo/secure-agent-mcp-gateway Enables AI agents to safely call MCP tools through a security gateway that enforces per-role authorization and least-privilege tool scoping. | |
| HXAudio MCP aki894/hxaudio-mcp Enables AI agents to read and adjust Windows HXAudio APO parametric EQ, preamp, virtual bass, and related DSP settings, with live registry-backed updates, backups, and PEQ curve imports. | |
| mcp-ClinicalTrial aki894/mcp-clinicaltrial An MCP server that interacts with the ClinicalTrials.gov API v2 to perform drug safety assessments and adverse event comparisons. It enables users to search for clinical trials, retrieve detailed study information, and analyze safety profil | |
| mcp-openfda aki894/mcp-openfda Enables querying FDA drug label information including adverse reactions, warnings, and indications through natural language. | |
| RxNav MCP Server aki894/mcp-rxnav Enables drug terminology standardization and name normalization via RxNav API, supporting drug name search, generic/brand name conversion, ATC classification, and ingredient lookup. | |
| Epic Patient API MCP Server akiani/mock-epic-mcp Enables access to mock Epic patient data through 15 MCP tools with two-tier access (list summaries, then fetch details) and LLM-powered natural language search across allergies, medications, conditions, clinical notes, labs, vitals, and pro | |
| Akib Dabgar MCP Server akib-dabgar/mcp-portfolio-server A personal knowledge hub MCP server that enables LLMs to query structured information about Akib Dabgar's skills, experience, projects, and goals using Dynamic Context Retrieval for efficient context usage. | |
| DDEV MCP Server akibaat/ddev-mcp Enables AI assistants to interact with DDEV local development environments by querying databases, managing project states, and executing container commands. It provides comprehensive control over local services with a security-first approac | |
| Akib Dabgar MCP Server akibdabgar07/self-mcp-server A personal knowledge hub MCP server that allows LLMs to query Akib Dabgar's skills, experience, projects, and education using Dynamic Context Retrieval. | |
| MCP Postgres Analyst akibullah/mcp-postgres-analyst Enables AI assistants to explore and query PostgreSQL or SQLite databases read-only, with SQL allow-listing, automatic row limits, statement timeouts, column masking, per-tool rate limits and JSONL audit logging. | |
| Aki akicoders/aki Aki is a local stdio MCP server that gives AI coding assistants durable project memory, allowing them to remember decisions, search prior notes, and save context across sessions. | |
| localScreenControl akicou/localscreencontrol Enables an AI assistant to see and control your local desktop on Windows and Linux by capturing screenshots, clicking, scrolling, pressing hotkeys, typing text, and reading or writing the clipboard. Actions can be batched into a single call | |
| art-director-mcp akifsen/art-director-mcp Provides coding agents with local tools to inspect project UI inventories, propose and compare visual direction boards, compile versioned design contracts and DTCG tokens, retrieve section-specific blueprints, and audit running interfaces w | |
| loop-verify akihidem/loop-verify An MCP server that performs independent verification of artifacts against criteria using a different AI model lineage (codex, OpenAI, or Gemini) to catch defects that same-family checks might miss. | |
| @fraziym/mcp akik-forazi/mcp Provides an agent toolbelt exposing 74 tools spanning files, shell, web, code graph, git, memory, computer, and axodex behind a single process, plus optional gateway endpoints for model routing, verification, and context packing. Ships dual | |
| akyla-mcp akilaanalytics/akyla-mcp Provides as-reported US equity fundamentals, live quotes, financial statements, valuation comps, and a screener from SEC filings, with per-cell filing provenance for citations. | |
| RadarLED akilmaxx/radarled MCP server for RadarLED, providing read-only competitive intelligence from Instagram and TikTok public data, including audience comparison, creative detection, and strategy classification. | |
| obsidian-mcp akimiojr/obsidian-cli-mcp Enables AI clients to control a running Obsidian vault through the Obsidian CLI, covering notes, properties, links, tags, tasks, workspace, templates, commands, and plugins. | |
| agentqit-mcp akimovware/agentqit Enables AI agents to drive interactive browser sessions and reviewed backend operations (HTTP, PostgreSQL, Kafka, S3, Kubernetes) with typed inputs, execution limits, and shared evidence journals for assessing application behavior. | |
| Bug Bounty MCP Server akinabudu/bug-bounty-mcp A comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and | |
| ctrader-mcp-server akinabudu/ctrader-mcp-server A standalone Model Context Protocol (MCP) server that enables AI assistants to interact with the cTrader trading platform. | |
| LinkedIn MCP Server akinabudu/linkedin-mcpserver Enables AI-powered LinkedIn post creation, content generation, and screenshot capture through a unified Model Context Protocol interface. | |
| akin-portfolio-mcp akincskn/akin-portfolio-mcp MCP server that provides AI assistants with access to Akın Coşkun's portfolio data including projects, skills, and contact information. | |
| rpc akintola4/rpc-agent Enables AI coding agents to screenshot URLs at real device viewports, optionally framed in device bezels, with full-page stitched captures and inline review slices. It also lists supported devices so agents can check their own UI work. | |
| Model Hub MCP akiojin/model-hub-mcp An MCP server that retrieves and provides AI model information from OpenAI, Anthropic, and Google through a unified interface. | |
| PlayFab MCP Server akiojin/playfab-mcp-server A server that enables LLMs (like Claude and VSCode Copilot) to interact with Azure Cosmos DB data through natural language queries, acting as a translator between AI assistants and your database. | |
| unity-mcp-server akiojin/unity-mcp-server Unity MCP Server enables LLM-based clients to automate the Unity Editor, including scene manipulation, UI testing, input simulation, and code editing. | |
| Browser MCP Server akioo77/browser-mcp-server A browser automation tool using Playwright and MCP protocol, enabling agents like OpenClaw or Claude Desktop to control a browser for navigation, content extraction, and interaction. | |
| MCP OpenAI Server akira-aa83/mcp-openai Enables Claude to access OpenAI's chat models such as GPT-4o and o1 through natural language prompts. | |
| ChannelTerm akira-init1/channelterm ChannelTerm is an open-source MCP server that enables humans and AI agents to share live serial and SSH terminal sessions for embedded systems development and debugging. It allows AI agents to read device output, execute commands, assist wi | |
| macOS GUI Control MCP akira-papa/macos-gui-control-mcp Enables comprehensive control over macOS GUI elements including mouse, keyboard, window management, and screen capture. It allows for automated system interactions and script execution while maintaining safety by blocking potentially destru | |
| osascript MCP Server akira-papa/osascript-mcp-1 Enables the execution of AppleScript and JavaScript for Automation (JXA) on macOS to control applications, system events, and shell commands. It provides native automation capabilities with a security layer that permits most operations whil | |
| AutoCAD MCP Pro akira26955/autocad-mcp Enables AI agents to author, read, dimension, and validate production CAD drawings through one typed contract, driving either a live AutoCAD session over COM on Windows or a headless ezdxf engine on any platform. It covers mechanical parts |
25,551–25,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.