Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Centrex MCP Server alliancegs-development/centrex-mcp-server Enables Claude to interact with the Centrex CRM & LOS API, providing direct access to contacts, advances, documents, alerts, users, teams, and lender submissions. | |
| garden-planner alliebrenner13/garden-planner-mcp Enables Claude to set up and manage a local garden journal by searching places, saving garden setup, logging and updating plantings, retrieving forecasts, checking frost risk, and finding planting windows. | |
| Hudu MCP Server allied-business-solutions/hudu-mcp Enables Claude to interact with Hudu IT documentation, including searching, reading, creating, and updating articles, assets, passwords, companies, and more. | |
| NinjaOne MCP Server allied-business-solutions/ninjaone-mcp MCP server providing 75 tools for querying devices, managing alerts, running scripts, creating tickets, and more via the NinjaOne RMM platform. | |
| fitbot-mcp alliso/fitbot-mcp Enables reserving, canceling, and listing fitness classes on AimHarder through natural language, with support for multiple boxes and waitlists. | |
| TradingView MCP Bridge allisonbit/tradingview-mcp Enables AI agents to read and control TradingView Desktop charts in real time, supporting chart analysis, Pine Script development, alerts, replay practice, and multi-pane automation. | |
| Asana MCP Server allisonwhilden/asana Multi-Agent Conversation Protocol server that enables interaction with Asana's task management API, allowing users to manage projects, tasks, and team collaboration through natural language. | |
| Custom Search MCP Server allisonwhilden/custom-search-api An MCP (Multi-Agent Conversation Protocol) Server that enables interaction with Google's Custom Search API, allowing agents to perform customized web searches through natural language requests. | |
| Notion MCP Server allisonwhilden/notion-api Auto-generated server that enables interaction with Notion's API through the Multi-Agent Conversation Protocol (MCP), allowing users to programmatically manage Notion workspace content through natural language. | |
| Zoom API MCP Server allisonwhilden/zoom-api An MCP Server that enables interaction with Zoom's API through the Multi-Agent Conversation Protocol, allowing users to access and control Zoom's functionality via natural language commands. | |
| Homey MCP Server allistera/homey-mcp-server Enables interaction with Homey smart home devices through natural language, allowing users to control devices, manage zones, and trigger automation flows. | |
| Railway MCP Server allkindsxyz/railway-mcp-server Enables AI systems like Claude and Cursor to directly manage Railway projects, deployments, services, environment variables, and monitor logs through natural language commands. | |
| itmo-mcp alllexey-dev/itmo-mcp Enables Claude, Codex, Cursor, and other MCP clients to query ITMO University student services in natural language, including schedules, grades, study plans, sports, scholarships, dormitory, bookings, queues, requests, and people search. It | |
| midi allllll703/midi Enables audio transcription to multi-instrument MIDI files using MuScriptor, supporting local files and HTTPS URLs with safety controls. | |
| my-heb-proxy allmarvelous/my-heb-proxy Provides tools for LLMs to search H-E-B stores, coupons, products, and weekly ads using reversed-engineered APIs. | |
| Oura MCP allmight97/oura-mcp Enables self-hosted, read-only access to your own Oura account from an agent, exposing catalog and query tools that return native Oura API v2 JSON with pagination and provenance. Runs one isolated container per person with no hosted service | |
| oh-my-sage-mcp allocnode/oh-my-sage An MCP server that enables natural language creation and management of Xiaomi Mi Home automation rules, integrating with AI coding assistants to query devices and manipulate automation graphs. | |
| Allora MCP Server allora-network/allora-mcp-server Enables AI systems to fetch machine learning inferences and prediction market data from the Allora Network through the Model Context Protocol. | |
| Grips Intelligence MCP Server alloufj/grips-mcp-server Provides access to Grips Intelligence e-commerce analytics data through Model Context Protocol. Enables querying domain performance metrics, channel breakdowns, ad spend data, and device analytics for e-commerce businesses. | |
| agentee-mcp alloverart/agentee-mcp Remote MCP server for the allover.art print-on-demand store: search 30,000+ all-over-print 100% cotton tees, build and edit a cart, apply promo codes and prepare checkout. | |
| CodedByKay.ArtShow.Mcp allramest83/codedbykay.artshow.mcp Exposes a SQLite artwork catalog to MCP clients, enabling search, filtering, stats, and publish-state checks alongside full create, update, and delete operations on artworks and their Category/Medium/Tag/Group classifiers. Results include r | |
| Realtime Exchange Rate MCP Server allrates-today/realtime-exchange-rate-mcp Provides real-time foreign-exchange rates, historical data, and multi-currency lookups to MCP-compatible AI coding assistants like Claude Code and Cursor. | |
| MantraChain MCP Server allthatjazzleo/mantrachain-mcp A server that provides tools for interacting with MantraChain blockchain through the Model Context Protocol, allowing users to manage tokens, stake assets, query balances, and execute various blockchain operations. | |
| mcpmail alltomatos/mcpmail Enables read-only access to multiple email accounts, including Gmail via App Password and generic IMAP providers, so an agent can list accounts and folders, search messages, and fetch messages or attachments. All operations are strictly rea | |
| Affinity MCP Server alludium/affinity-mcp-server Enables LLMs to read and manage Affinity CRM data including companies, persons, lists, opportunities, pipeline stages, notes, custom field details, change history, and network intelligence for warm introductions. | |
| Harmonic MCP Server alludium/harmonic-mcp-server Provides tools to interact with the Harmonic AI API for company and person enrichment, specifically focusing on venture capital deal flow. It enables users to search for companies using natural language, find similar businesses, and retriev | |
| RoBridge allusia1/robridge RoBridge is a free, open-source local MCP server that lets AI agents drive Roblox Studio—DataModel, scripts, terrain, lighting, UI, and playtests—with 24 free tools and a local dashboard. | |
| All Voice Lab MCP Server allvoicelab/allvoicelab-mcp Official AllVoiceLab Model Context Protocol (MCP) server, supporting interaction with powerful text-to-speech and video translation APIs. | |
| telegram-mcp allwin14112004/telegram-mcp Enables MCP-compatible clients like Claude and Cursor to interact with Telegram accounts, supporting messaging, chat management, contacts, media, and admin operations via Telethon. | |
| Bestax allxsmith/bestax Gives agents props, examples and CSS variables for the Bestax React component library (Bulma v1). Runs offline. | |
| voice-mcp ally596/not-mcp-video Enables AI assistants to generate speech with custom cloned voices via DashScope or ElevenLabs, with an inline audio player and visualizer panel. | |
| voice-mcp ally596/zero-voice-mcp An MCP server for AI voice synthesis with an inline audio player, allowing users to give their AI assistant a custom cloned voice using DashScope or ElevenLabs. | |
| a11y-building-harness allyhere/a11y-building-harness Enables retrieval of compact APG pattern cards, such as button, modal, and dialog, through an MCP tool so clients can consult accessibility guidance. | |
| SpeakToMe MCP alma3lol/speaktomemcp A local MCP server for Linux that records microphone audio and returns transcripts using local faster-whisper transcription. | |
| PTY MCP Server almahdi/mcp-terminal A TypeScript-based server that enables programmatic management of pseudo-terminal sessions. It allows users to spawn, control, and interact with terminal processes in real-time through the Model Context Protocol. | |
| albs-mcp almalinux/albs-mcp MCP server and CLI for AlmaLinux Build System (ALBS) that enables AI coding assistants to investigate build failures, create builds, sign packages, and manage release plans through natural language. | |
| Almega MCP almega-ai/almega-mcp A wallet and guardrail for AI agents, enabling spending limits, payment approvals, and real-time ledger tracking via memory or Stripe backends. | |
| DocRelay almeida96/docrelay Enables agents to search and read locally indexed runbooks, project notes, and technical documentation through MCP, returning passages with file paths, line numbers, and document hashes so answers can cite sources. | |
| TestLedger almeida96/testledger Enables AI agents to inspect local JUnit test-run history and failure evidence via read-only MCP tools, including run comparisons, grouped failures, test histories, and exact cited observations. | |
| outlook-lite-mcp almeidatmatheus/outlook-lite-mcp Enables users to interact with Microsoft Outlook email through Microsoft Graph, including listing, searching, reading, replying to, forwarding, sending, deleting, and organizing messages, managing attachments, drafts, categories, folders, a | |
| mikser-io-mcp-app almero-digital-marketing/mikser-io-mcp-app Enables hosting interactive MCP apps on a dedicated /app route, rendering entity-specific layouts in iframes and relaying user actions through the MCP Apps extension. | |
| BrowserForge MCP almiaghassenn/browserforge-mcp Enables AI agents to drive a real local Firefox or Chrome session through a browser extension, capturing network traffic to reverse-engineer APIs into OpenAPI specs and generated clients, with human approval for consequential actions. Also | |
| Almide MCP Server almide/mcp-server Enables AI agents to compile, execute, and check Almide code for syntax or compilation errors. It provides tools for generating ASTs and accessing language grammar resources. | |
| Simple Code Review Assistant almighty535/mcpassignment Enables AI models to fetch GitHub repository information, read file contents, and search local documentation. | |
| Amadeus MCP Server almogqwinz/mcp-amadeus-api Enables flight search capabilities through the Amadeus Flight Offers Search API, allowing users to search for flights between locations with specified dates using natural language queries. | |
| Agentrim MCP almohtadyg1/agentrim-mcp A least-privilege enforcement proxy for MCP servers. It sits between MCP clients and upstream servers, enforcing tool policies, hiding denied tools, requiring human approval for risky actions, and providing a structured audit trail. | |
| presskit-mcp almoore/presskit-mcp An MCP server for publishing markdown articles to Medium and Substack via unofficial APIs, with tools to list, create, and manage posts and drafts. | |
| bilibili-skill almost-fu/bilibili-skill Exposes 37 MCP tools that let agents search and browse Bilibili videos, read comments and danmaku, and grab frames, subtitles, and trending content without logging in. Once authenticated via QR-code login, it also enables replying to commen | |
| matrix-mcpl almostmachines/matrix_mcpl Standalone Matrix MCPL server that connects Matrix rooms and DMs to an MCPL host as a first-class channel surface, enabling real-time messaging, threads, typing indicators, attachments, and rollback via MCPL tools. | |
| Fatture in Cloud MCP almostnine/fattureincloud-mcp Enables Claude to access, analyze, and optionally modify invoices, installments, receipts, clients, and financial reports via the Fatture in Cloud API v2, with read-only default and multi-layer safety. |
26,751–26,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.