Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| bubble-agent-mcp alijancb/subio-mcp MCP server that brings live Bubble Agent intelligence into Claude, Codex, Cursor, and other clients, enabling users to discover emerging conversation clusters, analyze momentum, compare opportunities, and generate evidence-based content dra | |
| FastMCP Production Server alikatlabi/mcp Provides secure filesystem operations, HTTP fetching with SSRF protection, JSON validation, artifact logging, and optional Redis key-value storage through both stdio and HTTP transports. Features production-ready security controls including | |
| 2DPIXELMCP alikayalll43-sudo/2dpixelmcp An MCP server that bridges Antigravity AI with LibreSprite, enabling real-time pixel art drawing, animation, and manipulation through natural language commands. | |
| kayamcp alikayalll43-sudo/kayamcp Enables AI agents to visually interact with LibreSprite for real-time pixel art creation and automated drawing with self-healing capabilities. | |
| codemagic-mcp alikayhan/codemagic-mcp Lets any MCP-capable client connect to the public Codemagic REST API to list apps and teams, inspect build history, and optionally trigger or cancel builds and manage team settings. Runs locally over stdio with the user's own API token and | |
| gpt-github-max-mcp alikhande70/gpt-github-max-mcp MCP server providing maximum practical control over GitHub via REST and GraphQL APIs, exposing 22 tools for repository management, file operations, issues, PRs, Actions, and more. | |
| metatrader5-mcp alikhande70/metatrader5-mcp Connects Claude to a MetaTrader 5 terminal for read-only market data, account info, performance analysis, and order planning (no live trading). | |
| mt5-mcp alikhande70/mt5_mcp A local-first MCP server that bridges AI coding agents with MetaTrader 5 for inspection, market data, MQL5 development, compiling, Strategy Tester review, workspace sync, logs, audit trails, demo trading, and carefully gated live trading. | |
| Windows Computer Use MCP Server alikhanovdev-commits/windows-computer-use-mcp Enables AI models to control a local Windows desktop by moving the cursor, clicking, scrolling, typing Unicode text, sending key chords, and capturing screenshots. Runs natively on Windows with minimal latency and no heavy dependencies such | |
| android-phone-control-mcp alikhanpkfhg/android-phone-control-mcp Enables an AI assistant to control a real Android phone through Termux, adb, and a Cloudflare Quick Tunnel, exposing tools for status checks, screenshots, tap and swipe gestures, key presses, app launching, and text entry. | |
| neko-browser aliksir/neko-browser Headed Playwright browser MCP server with persistent profile, providing 23 tools for full browser automation while masking PII data. | |
| crypto-deep-research alikula37/crypto-deep-research Enables AI tools to access local crypto market data, run analyses, perform 66-item deep research, search RAG context, and retrieve generated reports and prompts via MCP. | |
| otgate alikup-ai/otgate An OT-aware authorization MCP server for OPC UA that applies process-aware policies (value ranges, rate limits, interlocks) to every agent call, enabling safe industrial control with optional human approval workflows. | |
| Axon alilfrances/axon Axon is an MCP server that provides root-cause debugging and vulnerability detection for AI coding agents. It enables agents to localize bugs, verify fixes, and find security vulnerabilities with high precision, requiring zero configuration | |
| Hegelion alim08154/hegelion Enables LLMs and MCP-enabled editors to reason dialectically by forcing separate thesis, antithesis, and synthesis passes over questions, plus a player–coach autocoding loop that independently verifies each requirement and iterates until ap | |
| Termux MCP Server alim4385/termux-mcp-android Zero-dependency Model Context Protocol server for Termux (Android) that gives shell access to your device. | |
| Workflow alimahmoodyar/productstudio Enables creating, editing, running, and visualizing HTTP and SQL sequences, with templated requests, return mapping, and mandatory approval for every SQL statement. | |
| mcp-search-failover alimbkb/mcp-search-failover An MCP server for web search that does not die when an API key runs out. | |
| Read-Only SQLite Shop Database MCP Server alimbux/mcp Enables AI agents to safely inspect and query an SQLite e-commerce database with tools for listing tables, describing schemas, and running read-only SQL queries while blocking destructive operations. | |
| hn-jobs alimdemir/job-opportunity-mcp-agent Enables searching and retrieving standardized Hacker News 'Who is hiring?' job postings, and checking candidate fit against them via MCP tools. | |
| Google Scholar MCP Server alimov-andrey/google-scholar-mcp Enables academic research via Claude Code, allowing search of Google Scholar and access to Open Access full-text articles. | |
| godspeed-mcp alinagy/godspeed-mcp Server that allows interaction with Godspeed task application using API. | |
| LinkedIn Browser MCP Server alinaqi/mcp-linkedin-server A FastMCP-based server that enables programmatic LinkedIn automation and data extraction through browser automation, offering secure authentication and tools for profile operations and post interactions while respecting LinkedIn's rate limi | |
| edgar-mcp alinarashid/edgar-mcp Enables searching SEC EDGAR filings by full-text search and listing company filings, with accurate company name resolution to CIKs in code, avoiding hallucinated identifiers. | |
| Awels PDF Processing Server alinavlase/mcp Enables conversion of PDF files to Markdown format with optional image extraction using docling. Supports batch processing of multiple PDFs with structured output including metadata and processing statistics. | |
| Delmain GA4 MCP aline-delmain/delmain-ga4-mcp Enables querying Google Analytics 4 properties using natural language through MCP clients. Supports customizable reports with any dimensions and metrics, listing properties, and real-time data. | |
| Agent Action Gateway alinejad-dev/agent-action-gateway Enables AI agents to query WooCommerce orders through schema-validated MCP tools over stdio or Streamable HTTP, with authentication, host/origin guards, and data minimisation applied before store access. It currently provides read-only orde | |
| fitness-agent-mcp alinjfz/fitness-agent-mcp A universal fitness intelligence layer for AI assistants like Claude, ChatGPT, and Copilot, enabling user profiles, workout/diet plans, calendar scheduling, and gamification via MCP and REST APIs. | |
| Google Workspace CRM MCP Server aliomranih/modern_crm_mcp A Python MCP server that provides a lightweight CRM by integrating Google Sheets, Gmail, and Google Docs for contact management, email communication, and document creation. It features 30 specialized tools, OAuth2 endpoint protection, and a | |
| Memory Bank MCP Server alioshr/memory-bank-mcp Provides a centralized MCP-based system for managing and accessing multi-project memory banks remotely, with features like project isolation, file structure validation, and type-safe operations. | |
| Yargıtay Emsal Karar MCP Sunucusu aliozkanozdurmus/veniai-hukuk-emsalkarar-mcpserver Enables searching Turkish Court of Cassation (Yargıtay) precedent decisions via a three-tier caching system and Browserless scraping, providing high-quality results through stdio-based MCP protocol. | |
| AlipayPlus MCP Server alipay/global-alipayplus-mcp Integrates Ant International's AlipayPlus payment APIs, enabling AI assistants to handle payment and refund operations seamlessly. | |
| Semantic Scholar MCP Server alipellegrini/semantic-scholar-fastmcp-mcp-server Enables searching academic papers, retrieving paper and author details, exploring citation networks, and receiving recommendations via the Semantic Scholar API. | |
| Webflow MCP Server alipersson/mcp-server Enables AI agents to interact with the Webflow Data API and Designer, allowing content management, SEO analysis, internal linking, and responsive design updates through natural language. | |
| touchdesigner-mcp aliphi/touchdesigner-mcp An MCP server for TouchDesigner that lets you control TouchDesigner with Claude | |
| Agentic Vault aliprogrammin/agentic-vault MCP server that lets AI agents call APIs without ever seeing the credentials, using a local encrypted vault and per-secret allowlist policies for HTTP requests and subprocess environment variables. | |
| Unified MCP Server aliqambari/unified-mcp-server A server that exposes AI tools and resources through REST API, MCP, and WebSocket protocols using simple decorators. | |
| tb-query alir3z4/tb-query MCP server for querying and analyzing TensorBoard event files, enabling AI agents to extract scalar data, statistics, and correlations without a running TensorBoard server. | |
| Rabta aliraza2025/serviceops-mcp Enables AI integrations to access typed service-catalog, quote, and job-status tools using synthetic records and a fictional price catalog. | |
| sketchfab-mcp-server alirezabeigy/sketchfab-mcp-server Enables AI clients to search, browse, inspect, and download 3D models from Sketchfab via the Model Context Protocol. | |
| AnNuMa Study Companion alirezafakari/annuma-study-companion MCP server that exposes a read-only knowledge base of verified math lecture material, enabling AI agents to quiz students using active recall via list_topics and query_annuma tools. | |
| Confluence MCP Server alirezarezvani/confluence-mcp-server A server that integrates Confluence with Claude Desktop and other AI assistants, enabling natural language interactions with your Confluence documentation. | |
| iranketab-mcp alirezas/iranketab-mcp Provides read-only access to iranketab.ir, enabling book searches, comparison of translations and editions, and retrieval of prices in Toman, stock, ratings, and reader comments. | |
| CoastWise MCP alirezashamsaei/coastwise-mcp Enables users to check whether a beach suits a beach day or a surf session today or up to six days ahead, using Open-Meteo weather and marine forecasts scored by deterministic, documented rules. It exposes tools for raw hourly forecast data | |
| lpagent alirezashooshtari/load-profile-agent Enables generating yearly active and reactive power load time series for pandapower grids from German BDEW standard load profiles, with assignment of load categories, stochastic noise, scenarios, run manifests, plotting and time-series powe | |
| Remote MCP Server Authless aliriocastro/remote-mcp-server-authless Enables deploying a remote MCP server on Cloudflare Workers without authentication, allowing connection to AI Playground or Claude Desktop for tool usage. | |
| EcoGO Flights alisajil/ecogotravel Indian Flight Booking MCP | |
| Local MCP Toolkit alisaqulain/local-mcp-toolkit Enables AI assistants to discover and invoke filesystem, notes, SQLite, and utility operations over MCP, with a local-first sandbox and dashboard for testing and management. | |
| WhatsHot alisen39/whatshot WhatsHot MCP server aggregates trending hotlists, real-time news flashes, gold prices, and RSS feeds from 330+ sources, offering read-only tools to list sources, fetch current data, and query historical search and trend data via DuckDB. | |
| whatshot-mcp alisen39/whatshot-mcp MCP server that connects to a WhatsHot Backend over HTTP to provide hot topic discovery, trend analysis, and historical data tools such as current hotlists, trend series, and event analysis. |
26,601–26,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.