Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MediaWiki MCP Server alexander0269/mediawiki-mcp-server Enables LLM clients to read, search, edit, and manage pages, files, and structured data on any MediaWiki wiki, with multi-wiki configuration, OAuth authentication, and optional extension packs for Semantic MediaWiki, Wikibase, Cargo, Bucket | |
| web3-daily-mcp alexander10011/web3-daily-mcp Provides real-time Web3 research digest with macro news, KOL sentiment, market data, and personalized on-chain wallet analysis through four AI tools. | |
| io.github.cdnsteve/sugar alexander11890/sugar Gives AI coding agents persistent, local-first memory so they can store and recall decisions, preferences, error patterns, and cross-project guidelines, retrieving relevant context by semantic search without external API calls. It also opti | |
| Perforce P4 MCP Server alexander19946/p4mcp-server Enables AI assistants to work with the Perforce P4 version control system through structured tools for changelists, files, shelves, workspaces, jobs, reviews, streams, and server metadata, plus optional P4 DAM asset management and safe read | |
| MCP Outline Server alexander27421/mcp-outline Enables AI assistants to interact with Outline documentation services, supporting document search, reading, creation, editing, archiving, collection management, comments, backlinks, and direct content access. | |
| dsh-laya-mcp alexander390370/dsh-laya-mcp Enables fully offline, token-free screening of text through a local Laya typed-decision model, exposing prompt-injection/jailbreak detection plus structured choice, score, and yes/no judgments in about 55ms per call. It also reports service | |
| Frappe MCP alexander8836/mcp Enables Frappe Framework applications to expose registered Python functions as tools to LLM clients through a Streamable HTTP endpoint, with input schemas generated from type annotations and docstrings. | |
| Blindkey alexanderborysenko/blindkey Lets AI coding agents read project documentation and secret metadata, then use credentials by injecting them into child processes while redacting the values from all output. Agents can deploy, migrate databases, or SSH using real secrets wi | |
| Jarvis MCP Server alexanderbuiko/jarvis-mcp-server MCP server providing time retrieval and echo tools, running as an independent network process over Streamable HTTP. | |
| media-downloader alexanderchen5966/downloadvideopythonproject A multimedia downloading and conversion MCP server supporting YouTube, HLS streams, podcasts, and images, with features like batch downloads, subtitle extraction, format query, and whitelist management. | |
| kyoto-assistant-mcp alexanderchen5966/kyoto-assistant-mcp A Kyoto travel planning assistant that uses Wikivoyage API and LangChain/LangGraph to provide real-time attraction info, operating hours, and dynamic itinerary adjustments through MCP tools. | |
| Remote MCP Server for Cloudflare alexandercohen/postgres-mcp A deployable Model Context Protocol server on Cloudflare Workers that allows LLMs to access custom tools without authentication requirements. | |
| Remote MCP Server Authless alexandercohen/remote-mcp-server-authless A simple way to deploy an authentication-free Model Context Protocol server on Cloudflare Workers that can be connected to AI tools like Claude Desktop or the Cloudflare AI Playground. | |
| GSC-MCP alexanderdross/gsc-mcp A remote MCP server that exposes full Google Search Console data to AI assistants using Google's unrestricted Bulk Data Export instead of the limited API. | |
| FastDomainCheck MCP Server alexanderhupfer/fastdomaincheck-mcp-server Enables bulk domain registration status checking for over 200 TLDs using WHOIS and DNS fallback. | |
| UI5 MCP Server alexandermercier/mcp-server Enables agentic AI tools to scaffold new UI5 applications and UI Integration Cards, lint and validate UI5 projects, fetch UI5 API references and version information, and apply UI5 development best practices. | |
| Spotify MCP Server alexandermolano-spec/spotify-mcp-server Enables AI agents to search Spotify, inspect playback state, manage devices, and control music through the official Spotify Web API using OAuth authentication. | |
| contra alexandernevsky/contra-mcp-starter Enables AI agents to securely manage Contra profiles, flagship services, and portfolio case studies through Model Context Protocol tools. | |
| memory-plugin alexanderop/claude-code-memory Persistent memory management for Claude Code, allowing agents to store and retrieve user preferences, environment notes, and skills across sessions. | |
| plausible-mcp alexanderop/plausible-mcp Enables querying Plausible Analytics data for website statistics, traffic, engagement, and conversions through natural language, with support for filters, dimensions, and time-series. | |
| Turbular alexanderp51/turbular Enables LLM agents to connect to and retrieve data from multiple database types through a unified API, with schema normalization, query transformation, and secure connections. | |
| octagon-mcp-server alexanderperry115/octagon-mcp-server Enables users to ask natural-language questions and receive structured, source-backed answers across public filings, earnings transcripts, company financials, stock and crypto market data, news, and prediction markets research. | |
| Mac Developer Bridge alexanderradahl/mac-developer-bridge Local macOS MCP bridge that gives ChatGPT shell, unrestricted filesystem access, real PTY sessions, background jobs, and read-only stored Codex history. ChatGPT stays the reasoning layer; the bridge makes no model calls. | |
| workflow-studio alexanderradahl/workflow-studio Enables bounded, multi-phase coding workflows inside Codex that plan, implement, independently review, repair, and verify repository changes, with an inline dashboard for inspecting runs. | |
| remote-mcp-linkedin alexanderskorokhodov/remote-mcp-linkedin Enables read-only extraction of LinkedIn profile data via MCP tools, using a local browser bridge for secure, authenticated access without exposing browser credentials. | |
| ReActMCP Web Search alexandert53970/reactmcp Enables AI assistants to perform real-time basic and advanced web searches through the Exa API, with filtering by domains, required text, and date ranges. Returns Markdown-formatted results including titles, URLs, publication dates, and con | |
| Telegram MCP Server alexandertsai/mcp-telegram A simple MCP server that allows Claude to access your Telegram account to read and send messages on your behalf. | |
| blender-ai-mcp alexandervi1/mcpblender Connects MCP-compatible clients to a live Blender scene for AI-assisted 3D workflows, enabling inspection and controlled operations on objects, materials, cameras, lights, render settings, animation, UVs, Geometry Nodes, imports, exports, a | |
| Cursor MCP File Organizer alexandervtr/cursor-mcp-file-organizer Automatically organizes files in your Downloads folder by categorizing them into appropriate directories based on file types. | |
| things-mcp alexanderwillner/things-mcp A CLI MCP server for Things 3, enabling programmatic access to todos and projects with filtering by due date. | |
| AURON MCP alexandevs2309/auron-mcp A read-only MCP gateway that enables AI agents to retrieve business data (sales, appointments, clients, inventory, etc.) from the AURON Suite backend with role-based access control, audit logging, and rate limiting. | |
| TextQL MCP Server alexandme/textql-mcp Translates natural language to SQL/GraphQL queries and executes them, enabling AI agents to interact with databases through the Model Context Protocol. | |
| hearthwork alexandr352/hearthwork Enables working a ticket's next unit from your own Claude Code session, where an operator plans, a fenced executor edits your checkout, and the judge verdicts against real git facts. Every edit is approved by you, and the loop resumes or su | |
| AI Image Generator MCP Server alexandrali0506/ai-image-generator-mcp Generates web images using AI via ModelScope FLUX model, supporting multiple image types and custom prompts. | |
| axiom8-mcp alexandre-axioma/axiom8-mcp AI-powered n8n documentation server that enables intelligent semantic search and retrieval of node configurations, workflows, and templates for AI assistants. | |
| vancouver-city-opendata-mcp alexandre-do/vancouver-city-opendata-mcp Enables querying and exploring the City of Vancouver Open Data Portal, including dataset search, schema inspection, record filtering, facet discovery, and data export. | |
| Obsidian Vault API alexandre1116/obsidian-vault-api-docker Enables AI clients to read, write, search, and manage files in an Obsidian vault via MCP over SSE, running standalone without the Obsidian desktop app. | |
| Investbrain MCP alexandrebellas/investbrain-mcp Enables MCP clients to read and manage a self-hosted Investbrain portfolio tracker through its Sanctum-authenticated API, covering portfolios, transactions, holdings, and market data. The bearer token is supplied per request by the client a | |
| wise-mcp alexandrebellas/wise-mcp Enables read-only retrieval of profiles, balances, statements, activities, transfers, exchange rates, and receiving account details from the Wise Platform API, with responses normalized for import into Firefly III. | |
| Ogury MCP Server alexandrecalvet/ogury-mcp-server-test An MCP server that gives Claude access to Ogury's campaign reporting API, enabling retrieval of campaign performance metrics and reports through natural language queries. | |
| MCP Content Curation Server alexandrekumagae/ai-content-categorization-mcp A Model Context Protocol server that provides AI-driven tools to categorize, tag, and optimize educational content using GPT-4. | |
| Tiendanube MCP Server alexandreproenca/nuvemshop-mcp-server Enables comprehensive management of Tiendanube and Nuvemshop stores, supporting operations for products, orders, customers, and categories. It provides flexible integration through SSE, HTTP, and STDIO transport modes with full Docker suppo | |
| davinci alexandrerl/claude-video-studio Enables natural-language-driven automation of DaVinci Resolve (Free) on Windows, including project and timeline editing, media import, rendering, OpenTimelineIO workflows, and visual UI fallback. | |
| mcp-server-ddd-template alexandresanlim/mcp-server-ddd-template A template MCP server using Domain-Driven Design, providing Bitcoin fee recommendations and a health check tool. | |
| Mempool MCP Server alexandresanlim/mempool-mcp-server A Model Context Protocol server that provides real-time Bitcoin blockchain and mempool data to AI clients, allowing access to comprehensive Bitcoin network information through various data tools. | |
| mcpanonimohealth alexandreumatize/mcpanonimohealth MCP server that locally de-identifies health documents, such as prescriptions, reports, images, and PDFs, before use with Codex or Claude Code. It runs OCR and identifier detection on-device and only returns de-identified text to the agent | |
| tf3c MCP server alexandrevl/tf3-companion Enables an AI agent to query local Transport Fever 3 company snapshots and history read-only, surfacing findings, opportunities, reports, decisions, and methodology-based analysis without changing gameplay. | |
| mcp-guardian alexandriashai/mcp-guardian Scans MCP tool descriptions for prompt injection attacks, including cross-tool instructions, privilege escalation, and data exfiltration patterns. It can be used as a CLI scanner or integrated as an MCP server itself. | |
| AgentSpec alexandrmotologa/agentspec Exposes a local Lambda fulfillment handler as a Model Context Protocol server over standard input/output, letting MCP clients such as Claude Desktop and Cursor call the API operations described by an OpenAPI specification. It compiles those | |
| reddit-mcp-server alexandros-lekkas/reddit-mcp-server ⚙️ A Model Context Protocol (MCP) that provides tools for fetching and creating Reddit content |
26,151–26,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.