Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| flompt alee61169/flompt Enables Claude Code to break raw prompts into structured, typed blocks, recompile those blocks into Claude-optimized XML prompts with token estimates, and list all available block types and their canonical ordering. It works statelessly ove | |
| Voice AI Website Analyzer MCP Server aleehamza25/voice-ai-mcp Fetches and analyzes website content to provide business context to AI agents, designed for Voice AI in GoHighLevel. | |
| instagram-mcp aleemhaider/instagram-mcp Enables reading, publishing, commenting, direct messaging, and pulling insights from Instagram Business or Creator accounts via the Graph API. | |
| instagram-personal-mcp aleemhaider/instagram-personal-mcp An MCP server that wraps instagrapi to read, engage, and send DMs from a personal Instagram account, supporting 24 tools for auth, profile, engagement, and messages. | |
| odoo-mcp aleemhaider/odoo-mcp Enables Claude to interact with Odoo through 12 MCP tools covering discovery, CRUD operations, and bulk import/export via XML-RPC. | |
| Fastmail MCP Server alefebvre140/fastmail-mcp Enables AI assistants to read, search, send, and manage Fastmail email, contacts, and calendar events through the JMAP, CalDAV, and WebDAV APIs, including attachments, threading, and bulk operations. | |
| brain-mcp alefiengo/brain-mcp Enables an agent to search, read, create, and update Obsidian notes, navigate backlink and tag graphs, and query daily summaries while keeping the vault as the sole source of truth with local hybrid search indexes. | |
| Chess Engine MCP Server alegerber/stockfish-lc0-mcp Enables AI assistants to perform professional-grade chess analysis using Stockfish and optionally Leela Chess Zero, including position analysis, full game review, opening lookup, and puzzle generation. | |
| MCP SQL Server alegonzjur/mcp-sql-server Read-only MCP server for SQL databases (SQLite/PostgreSQL) that enables listing tables, describing schemas, and executing SELECT queries with safety guardrails. | |
| fs-scoping-mcp alegzandra/financial-scoping-mcp Enables Applied AI Product Managers to scope financial-services and retail-banking AI engagements by searching proven use-case patterns, estimating ROI, flagging regulatory compliance considerations, and turning workshop notes into structur | |
| hephaestus-docker-power alehayeb/hephaestus-docker-power Provides MCP tools for setting up and managing Hephaestus development environment with Docker containers, including starting/stopping services, initializing databases, and troubleshooting. | |
| gmail-mcp aleisdum/gmail-mcp A Gmail MCP server that lets AI assistants search, read, send, and manage email across multiple Google accounts, deployed on Cloudflare Workers. | |
| VISA Dispute Advisor alejamorenovallejo/visa-dispute-advisor Helps merchants resolve credit card disputes by searching VISA guidelines and checking dispute history to generate structured recommendations. | |
| GNews API MCP Server alejandro-ao/demo-gnews-remotemcp-auth Provides access to the GNews API for searching news articles and getting top headlines, with OAuth2 authentication and support for advanced query syntax. | |
| gnews-mcp-server alejandro-ao/gnews-mcp-server MCP server providing access to the GNews API for fetching news articles and headlines. Supports search and top headlines with advanced filtering by language, country, category, and date. | |
| mcp-server-demo alejandro-ao/mcp-server-demo Example MCP server built with FastMCP, demonstrating tools, resources, and prompts for AI integration. | |
| MCP Server Example alejandro-ao/mcp-server-example An educational implementation of a Model Context Protocol server that demonstrates how to build a functional MCP server for integrating with various LLM clients like Claude Desktop. | |
| mcp-streamable-http alejandro-ao/mcp-streamable-http A step-by-step guide and complete working example for building and running an MCP server with streamable HTTP transport using Python, mcp, and FastAPI, enabling AI assistants to access tools over HTTP. | |
| RAG-MCP alejandro-ao/rag-mcp A Retrieval Augmented Generation MCP server that ingests documents into a local vector database and enables semantic search queries. | |
| RAG MCP Server alejandro-ao/simple-mcp-rag Provides tools for ingesting documents into a local vector database and retrieving relevant information via semantic search, enabling retrieval-augmented generation for MCP clients. | |
| ContextForge MCP Server alejandro-cedeno-10/contextforge-cli Enables AI agents to efficiently retrieve relevant code context via PageRank-optimized subgraphs and automate spec generation, implementation planning, and pre-commit validation. | |
| opencode-mcp alejandro-technology/opencode-mcp Enables Claude Code to delegate tasks to OpenCode subagents asynchronously, with tools for starting tasks, polling status, and fetching results. | |
| mcpdoc alejandro-torrero/mcpdoc Enables MCP hosts to retrieve documentation from user-defined llms.txt files via a fetch_docs tool, allowing auditing of tool calls and returned context. | |
| CamoFox MCP alejandrob3970/camofox-mcp Connects MCP-compatible AI agents to an anti-detection browser server so they can navigate, interact with, and extract content from web pages without getting blocked. Provides 47 tools spanning tabs, navigation, interaction, observation, se | |
| Claude Document MCP Server alejandroballesterosc/document-edit-mcp A Model Context Protocol server that allows Claude Desktop to perform document operations on Microsoft Word, Excel, and PDF files including creation, editing, and format conversion. | |
| Bitbucket MCP alejandrobishop83/bitbucket-mcp Enables AI assistants to list and retrieve repositories, inspect and create pull requests, and access Bitbucket Cloud and Server data and operations through the Model Context Protocol. | |
| Azure Functions MCP Server alejandrobtez/mcp An educational MCP server deployed as an Azure Function, exposing tools like addition, weather simulation, and temperature conversion for AI agents to invoke. | |
| IAM MCP Server alejandrogarcia-hub/iam-mcp-server Processes and manages applicant resumes, facilitates job searches, generates job-specific resumes, and creates tailored cover letters. | |
| colombia-finance-mcp alejandroguerra1823/colombia-finance-mcp Enables querying Colombia's official TRM (USD/COP) exchange rate for any date, retrieving historical ranges with statistics, and converting between USD and COP at official rates. | |
| jev-browser-mcp alejandroharrison5336/jev-browser Enables MCP clients to automate a real browser by stating one outcome at a time, with a typesafe decision model picking the element, action, and value while Playwright executes it. It also exposes tools for direct actions, yes/no and multip | |
| clinicaltrialsgov-mcp-server alejandrojaved65/clinicaltrialsgov-mcp-server Enables searching the ClinicalTrials.gov registry, retrieving full study records and posted results, discovering valid API fields, and matching patient demographics and conditions to candidate recruiting trials. Runs locally over STDIO or S | |
| Zettelkasten MCP Server alejandrojaved65/zettelkasten-mcp Enables AI clients to build and traverse a Zettelkasten knowledge base of atomic Markdown notes with timestamp-based IDs, bidirectional semantic links, tags, and content/link search, plus tools for finding similar, central, or orphaned note | |
| apk-docforge alejandrojlamas/apk-docforge Enables local-first static and optional controlled dynamic analysis of Android APK artifacts, with provenance-aware downloads, Markdown reports, and structured security findings via MCP stdio tools. | |
| MCP Server for Odoo alejandrolarapolanco/mcp-odoo Enables AI assistants to interact with Odoo ERP systems through natural language to search records, create entries, update data, and manage business operations. Supports secure authentication and configurable access controls for production | |
| mcp-pionex alejandrorodm/mcp-pionex Enables AI assistants to interact with the Pionex exchange through MCP, providing market data, account info, spot trading, grid bots, and Dual Investment tools with strict anti-hallucination guardrails including two-phase order confirmation | |
| cutgent alejandrotrevinom96-max/cutgent Enables Claude to control a full-stack video editor by issuing commands to add clips, text, animations, and render MP4 videos, with changes reflected in real-time in the browser UI. | |
| zephyr-squad-server-mcp alejandroviera/zephyr-squad-server-mcp An MCP server that enables AI agents to drive Zephyr for Jira (Server/Data Center) test management via ZAPI. It exposes operations for test cycles, folders, executions, test steps, step results, and ZQL search over stdio for use with any MC | |
| c3-gateway alejo2075/c3 Exposes selected AWS resources — Lambda functions, S3, DynamoDB, SQS, EventBridge, OpenAPI endpoints and remote MCP servers — as narrowly scoped MCP tools that Claude Code agents running on Amazon Bedrock AgentCore can call, with IAM-enforc | |
| ai-personal-assistant-mcp alejo3119/ai-personal-assistant MCP server providing weather lookup, semantic search over personal notes (RAG), and image generation tools for any MCP client like Claude Desktop. | |
| Google Docs Preview MCP alejoacelas/07-30-docs-mcp Enables creating anchored comments, replies, and real suggested edits in Google Docs from Claude. | |
| amazing-marvin-mcp alejoacelas/amazing-marvin-mcp Enables Claude Desktop and ChatGPT to interact with Amazing Marvin, supporting task and project creation, reading tasks, goals, categories, labels, and more, with optional experimental features. | |
| antientropy-mcp alejoacelas/antientropy-mcp Provides access to over 140 articles from the AntiEntropy Resource Portal covering nonprofit governance, compliance, and HR policies. It enables users to search, browse categories, and read full article content through an MCP-compatible cli | |
| gdoc MCP alejoacelas/gdoc-mcp Enables interaction with Google Docs through typed MCP tools, supporting reading, writing, searching, and managing documents via OAuth integration. | |
| MCP Code Editor alejoair/mcp-code-editor A FastMCP server providing powerful code editing tools including precise file modifications with diff-based operations, file creation and reading with line numbers, and more tools for code editing workflows. | |
| MCP Terminal Server alejoair/mcp-terminal Provides cross-platform terminal access through MCP, enabling AI assistants to create and manage interactive terminal sessions, execute commands, and capture visual snapshots on Windows, Linux, and macOS. | |
| Berghain Events MCP Server alejofig/mcp-berghain A server that allows AI agents to query and retrieve information about upcoming events at Berghain nightclub through a DynamoDB-backed FastAPI service. | |
| docs-index alejoseed/mintlify-demo Enables natural-language retrieval from a self-hosted documentation index, returning cited answers with deep links, and supports private corpora inaccessible on the public internet. | |
| weekly-pulse MCP server alekhya2395/milestone-3---ai-agent-mcp Enables automated ingestion of App Store/Play Store reviews, synthesis of themes and actions, and publishing to Google Docs and Gmail drafts via Google Workspace MCP. | |
| R1 Dash Master alekm/r1_dash_master Builds importable RUCKUS One Data Studio dashboards from a declarative spec, enabling users to create valid dashboards without learning Superset internals or guessing field names. | |
| REG.RU MCP Server alekmel/regru-mcp-server Enables managing REG.RU domain names, DNS zones and records, services, billing, DNSSEC, and account folders through REG.API 2.0 over the Model Context Protocol. Provides tools, resources, and prompts for domain availability checks, DNS reco |
25,951–26,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.