Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Weeek MCP Server alekmel/weeek-mcp-server Full-featured MCP server integrating all 71 endpoints of the Weeek API as MCP tools for AI clients, enabling task, project, and workspace management via natural language. | |
| codecheck aleks-fw/codecheck-mcp Automates testing of finished web projects by opening them in a real browser, checking interactions, layout, fonts, images, and basic security, and producing a report with annotated screenshots. | |
| Yandex Weather MCP aleks-yustas/yandex-weather-mcp Local MCP server that provides current weather, forecast, summary, and weather comparison using Yandex Weather API with caching and validation. | |
| Express MCP Server aleksa-lucca/notes-mcp A basic example of developing and running serverless MCP using Netlify Functions, including a customized URL for accessing the function. | |
| Obsidian MCP Extended aleksakarac/obsidian-mcp A comprehensive MCP server for Obsidian with 45 tools across hybrid filesystem-native and API-based architectures, enabling note management, backlinks, tag management, and analytics. | |
| mcp_server_integration aleksandr-loshkarev/mcp_server_integration Scaffolds a custom MCP server with placeholder resources and tools, enabling developers to practice setting up MCP configuration, environment variables, and server implementation. | |
| JMComic AI aleksandra53/jmcomic-ai Enables AI agents to search, filter, browse rankings, read comments, manage favorites, and download manga albums or chapters, then convert them to ZIP, PDF, or long images. Also supports download task planning, progress tracking, cancellati | |
| FirstData MCP aleksandraaktas05120/firstdata Enables users and AI agents to find authoritative primary data sources from natural-language queries, compare source authority and coverage, and retrieve step-by-step navigation instructions for accessing datasets and documents from officia | |
| Stock SDK MCP Server aleksandraalekseev927/stock-sdk-mcp Enables AI assistants to query real-time and historical market data for A-shares, Hong Kong, US stocks, funds, futures, options, and sectors, calculate technical indicators, and run screening and composite analysis workflows. It also expose | |
| Roundtable AI MCP Server aleksandrab423/roundtable Enables users to delegate tasks from a single prompt in their IDE to multiple specialized AI coding assistants such as Gemini, Claude, Codex, and Cursor, which run in parallel with shared project context. Aggregates and synthesizes their re | |
| ScrapeGraph MCP Server aleksandradeboer976/scrapegraph-mcp Enables language models to scrape and extract web content through an AI-powered scraping API, with tools for single-page scraping, prompt-based extraction, web search, asynchronous multi-page crawling, JSON schema generation, scheduled moni | |
| EasyMCP aleksandrak758/easy-mcp Enables developers to build Model Context Protocol servers in TypeScript by declaring tools, prompts, resources, and resource templates with minimal boilerplate via an Express-like API or experimental decorators. Argument types and input sc | |
| FlowLens MCP Server aleksandrali/flowlens-mcp-server Provides coding agents with full browser context from recorded user flows, including actions, network, console, storage, DOM events, and screen recordings, so they can debug issues and run regression tests without reproducing them. | |
| AWS FinOps MCP Server aleksandran5602/aws-finops-mcp-server Enables AI assistants to query AWS cost and usage data, monitor budgets, and audit for waste across AWS profiles and regions using natural language, while keeping credentials local. | |
| Sales Analytics MCP Server aleksandrgeraskov/mcp-sales-analytics-server Provides Claude Desktop and other MCP-compatible clients with read-only access to a PostgreSQL sales database, enabling SQL queries, schema inspection, and anomaly detection. | |
| provetrade-mcp aleksandrglibcenko-art/provetrade-mcp An MCP server for the ProveTrade trade-audit stack that lets models validate CSVs, run paid audit runs, and check service health/deploy status via typed tools. | |
| Wordware MCP aleksandrkrivolap/wordware-mcp A Model Context Protocol server that bridges AI assistants like Claude with Wordware's specialized agent capabilities, allowing dynamic loading and access to any Wordware flow through a standardized interface. | |
| web-docs-mcp aleksandrr/web-docs-mcp A local-first MCP server for web search and documentation fetching, providing free DuckDuckGo search, URL-to-markdown conversion, and library docs from npm, PyPI, crates.io, Go, and GitHub with caching. | |
| Gitmoji Commit MCP aleksandrsemykin/gitmoji-commit-mcp An MCP server for creating, validating, and formatting Git commits with emojis following the conventional commit standard. | |
| mcp-second-opinion aleksbuss/mcp-second-opinion An MCP server that queries a panel of LLMs from different providers via OpenRouter and returns their answers side by side, optionally synthesizing them to highlight disagreements. | |
| Siri Shortcuts MCP Server alekseev09008/mcp-server-siri-shortcuts Enables LLMs to list, open, and run macOS Shortcuts app shortcuts, including passing optional text or file input and exposing dynamically generated tools for each available shortcut. | |
| Sugar alekseev3387/sugar Enables AI coding agents to store, search, and recall persistent project-specific and cross-project context — decisions, preferences, error patterns, and guidelines — from a local-first SQLite memory store with semantic search, so knowledge | |
| Image Context Runtime for Codex alekseev819/codex-image-context-runtime Enables Codex to submit, poll, and retrieve bounded text handoffs for durable image-generation and image-inspection jobs while keeping provider-returned media bytes outside the MCP boundary. | |
| memex alekseev922/memex Enables AI coding agents to persist and recall knowledge across sessions by storing insights as atomic markdown cards with bidirectional links, shared across clients and synced via git without any vector database. | |
| shop-db aleksei-antipin/sqlite-mcp Enables AI agents to read-only query an online store's SQLite database, listing tables, inspecting schemas, and running SELECT queries over customers, products, orders, and order items. | |
| garmonia-crm-mcp alekseikastsiuk/garmonia-crm-mcp Enables testing and interacting with the Garmonia hotel CRM through its internal API, including orders, clients, brands, calendar, and general CRUD operations via an authenticated session. | |
| Agent Memory Control Plane alekseiul/agent-memory-control-plane Enables governance of AI-agent memory through deterministic routing, explicit ownership, review before promotion, scope-aware retrieval, conflict handling, and auditable receipts via seven MCP tools. | |
| web-search-for-agents aleksejalekseev/web-search-for-agents MCP server that gives AI agents access to current web information through web_search and fetch_url tools, using Tavily, Brave, and DuckDuckGo providers with automatic fallback. | |
| crosspost-mcp aleksey-panf/crosspost-mcp MCP server that lets AI agents cross-post content to Telegram, Discord, Mastodon, Bluesky, and Reddit — using free APIs only. | |
| orgwarrior-mcp aleksozolins/orgwarrior-mcp Enables Claude and any MCP client to read and act on your Org agenda through your running Emacs, querying views, adding and editing tasks and events, clocking time, refiling, archiving, and searching what you've finished. All Org work is do | |
| MCP Documentation Service alekspetrov/mcp-docs-service A Model Context Protocol implementation that enables AI assistants to interact with markdown documentation files, providing capabilities for document management, metadata handling, search, and documentation health analysis. | |
| Docmost MCP Server aleksvin8888/local-docmost-mcp Provides AI assistants with direct access to self-hosted Docmost documentation through tools for listing spaces, searching content, and retrieving pages in Markdown format. It facilitates seamless documentation lookup and content retrieval | |
| whatsapp-mcp-skill alelopesjr-ai/whatsapp-mcp-skill Enables Claude Code to interact with WhatsApp, allowing reading messages, sending messages, and daily summaries using a local WhatsApp Web session. | |
| Vault MCP Server alemaiorano/mcp-research-vault Enables AI assistants to look up credentials such as API keys, database URLs, and service tokens by account name, and to read inbox messages like notifications, alerts, and task assignments routed to the agent, all from self-hosted infrastr | |
| Joplin MCP Server alemoine567/joplin-mcp Enables AI assistants to interact with Joplin notes, notebooks, and tags via the Model Context Protocol, supporting search, creation, editing, deletion, tagging, imports, and notebook allowlisting through standardized tools. | |
| UI Canvas MCP alemusica/jsom Enables AI agents to read and manipulate visual UI designs drawn on a canvas, translating them into precise JSON specs for production code generation. | |
| vaglio-mcp alemusica/vaglio-mcp MCP server for academic research with shared token bucket governance, evidence-based read depth, and archival inscription. Uses multiple sources with failover to avoid rate limits. | |
| context-ledger alenngevorgyan-ux/context-ledger-mcp Enables coding agents to preserve and recover structured task state across context loss, recording objectives, constraints, decisions, and plan, and reconstructing a bounded deterministic context block on session resume. | |
| ServiceNow FastMCP Server alenthomas2468/servicenow-mcp-fast MCP server that enables LLMs to interact with ServiceNow instances for managing incidents, users, stories, workflows, knowledge base articles, and script includes via the FastMCP framework. | |
| aleostudio MCP Server aleostudio/mcp-server A lightweight MCP server providing utility tools for math, text processing, data conversion, and URL fetching. It supports both STDIO and SSE communication modes for seamless integration with Claude Desktop and remote AI agents. | |
| MCP AbuseIPDB Server alephnan/abuseipdb-mcp Provides threat intelligence lookups against the AbuseIPDB database, enabling IP reputation checks, CIDR block analysis, and log enrichment. It features intelligent caching and rate limiting to efficiently manage API usage for security anal | |
| novelist alephscriptorium-eng/n_sdk MCP server for the Novelist runtime, enabling narrative creation with storyboard, cast, and 3D materialization from the Zeus corpus. | |
| slskd-mcp alephtheagent/slskd-mcp Enables AI agents to search the Soulseek network, filter music results by format and bitrate, queue downloads, monitor transfers, and browse peer libraries through a running slskd daemon. | |
| Monobank MCP Server aler1x/monobank-mcp Enables interaction with Monobank personal accounts through MCP tools to fetch client information, account details, and transaction statements for specified time periods. | |
| Buzonero Campillero alerl25/buzonero-campillero Enables AI agents to access and manage multiple Gmail and Google Workspace accounts simultaneously, including unified search, reading, drafting, sending, labeling, unsubscribing, package tracking, and follow-up reminders. | |
| VPf08-MCP-Forex alersandroy-art/vpf08-mcp-forex MCP server providing tools to list, search, and manage Forex currency pairs, along with a calculator and exchange rate lookup. | |
| Salesforce MCP Server alerundev/salesforce-mcp-youtube A natural language interface for Salesforce data that allows users to query accounts, opportunities, contacts, leads, and activities through conversational prompts. It supports SOQL queries and provides tools for data retrieval and analysis | |
| Weather MCP Server alesanabriav7/mcpweather Enables users to retrieve current weather information for any city location. Provides a simple interface to fetch weather data through natural language queries. | |
| GitLab MCP Server alesdrobysh/gitlab-mcp A Model Context Protocol (MCP) server for GitLab integration, written in TypeScript. This server allows you to interact with GitLab merge requests, commits, pipelines, and jobs through MCP tools. | |
| readability-claude alesdrobysh/readability-agents Enables Claude to analyze and improve readability of text using local deterministic metrics like Flesch Reading Ease and lexical diversity, without sending data to external services. |
26,001–26,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.