Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Agent Trace ameobius-space/mcp-agent-trace Enables recording and analyzing AI agent execution traces, including event logging, metric computation, loop detection, and JSON export for debugging agent behavior. | |
| MCP CDP Scraper ameobius-space/mcp-cdp-scraper Enables AI agents to scrape web pages, fill forms, take screenshots, and extract structured data via Chrome DevTools Protocol with zero external dependencies. | |
| mcp-context-guard ameobius-space/mcp-context-guard Compresses tool outputs, manages token budgets, deduplicates content, and filters by relevance to optimize context window usage for AI agents. | |
| mcp-crypto-monitor ameobius-space/mcp-crypto-monitor An MCP server that gives AI agents the ability to check crypto wallet balances, track token prices, calculate portfolio value, monitor gas prices, and track the Fear & Greed Index — all with zero external dependencies using free public APIs | |
| mcp-email-sender ameobius-space/mcp-email-sender An MCP server that enables AI agents to validate email addresses and send emails via SMTP with zero external dependencies. | |
| mcp-file-manager ameobius-space/mcp-file-manager An MCP server that gives AI agents file system access: read, write, search, hash, directory trees — 12 tools, zero dependencies, pure Python stdlib. | |
| MCP Git Manager ameobius-space/mcp-git-manager An MCP server that gives AI agents git repository access: status, log, diff, branch, commit, push, pull, tag, stash, remotes — 24 tools, zero dependencies, pure Python stdlib (subprocess). | |
| MCP HTTP Tester ameobius-space/mcp-http-tester Provides HTTP client capabilities to AI agents with 9 tools for REST API testing, including GET, POST, PUT, PATCH, DELETE, batch requests, and URL health checks, using pure Python stdlib. | |
| MCP Permission Guard ameobius-space/mcp-permission-guard A pre-action authorization server for AI agents that classifies tool calls into 14 intent categories, scores risk 0-100, and produces deterministic allow/deny/ask decisions with full audit trail. | |
| mcp-sql-query ameobius-space/mcp-sql-query An MCP server providing SQLite database access for AI agents, enabling SQL execution, schema inspection, CRUD operations, and data export. | |
| MCP Tools Bundle ameobius-space/mcp-tools-bundle A collection of three zero-dependency MCP servers for web scraping via Chrome DevTools Protocol, crypto wallet and price monitoring, and email validation with SMTP sending. | |
| openDAW MCP ameobius-space/opendaw-mcp Provides 547 MCP tools for AI agents to programmatically control the openDAW browser-based digital audio workstation, enabling creation and manipulation of music projects including tracks, instruments, effects, MIDI, automation, and renderi | |
| opendaw-mcp ameobius-team/opendaw-mcp Enables AI agents to control a browser-based digital audio workstation (openDAW) for music production, including track creation, effects, MIDI, automation, and rendering. | |
| Gigalixir & Turso & GitHub MCP Server amer585/gigalixir-mcp1 A multi-service MCP server for Cloudflare Workers that enables managing Gigalixir apps, querying Turso databases, and handling GitHub repositories through natural language. | |
| WorkoutGuide MCP amerhhh/claude-workout-guide Enables workout tracking and coaching within Claude conversations, managing exercise configs, logs, streaks, and health metrics via an MCP server with PostgreSQL. | |
| American Cloud MCP Server american-cloud/americancloud-mcp Manage American Cloud VMs, Kubernetes, storage, networking, DNS and managed databases from Claude, Cursor or any MCP client. Runs on your machine and is read-only until you add --allow-writes. | |
| Steward MCP Server american-journalism-project/steward-mcp-poc Local Streamable HTTP MCP server that replaces the Steward Chrome extension, letting ChatGPT interact with Steward workspace data, manage drafting sessions, and generate documents via MCP tools. | |
| polymarket-mcp amerilain/polymarket-mcp MCP server for Polymarket prediction markets enabling query of markets, events, narratives, arbitrage, and more via MCP or HTTP. | |
| vercel-mcp amerilain/vercel-mcp Enables management of Vercel projects, deployments, domains, environment variables, and teams via the Vercel REST API. | |
| Congressional Trade Signals ameya-deshmukh26/congressional-trade-signals Enables querying of U.S. congressional stock trade data, including price history, recent trades, buy signals, stock activity, and politician activity, through natural language tools. | |
| Adonis - Zerodha Trading MCP Server ameydabhade/adonis-mcp Adonis bridges AI systems with the Indian stock market through Zerodha's Kite Connect API, enabling real-time market data, trading, portfolio management, and risk controls. | |
| GitHub MCP Server ameyg23/githubmcpserver Enables natural language interaction with GitHub through an MCP server. Supports reading repos, issues, and PRs, as well as creating and editing issues with user confirmation. | |
| Cold Email Assistant ameymedewar/cold-mailer-mcp Automates cold email outreach for job applications by parsing job postings, generating personalized emails using AI, and sending them or saving as drafts in Gmail with resume attachments. | |
| Excel-PPT Generator ameymn/test_no_excel_mcp Automates workflow between Excel data entry and PowerPoint report generation, allowing an AI assistant to update cells and generate presentations from templates. | |
| Expense Tracker MCP Server ameympatil/expense-tracker-mcp-server A Model Context Protocol (MCP) server for tracking personal expenses. This server provides tools to add, list, and summarize expenses, utilizing a local SQLite database for storage. | |
| FrameForge amg555/frameforge Enables any MCP-capable IDE agent to research topics, write scripts, synthesize narration, generate scene imagery, and render 1080p landscape masters plus vertical Shorts through FFmpeg with broadcast-grade audio and hard quality gates. Exp | |
| Dropbox MCP Server amgadabdelhafez/dbx-mcp-server Enables interaction with Dropbox through the Model Context Protocol, providing tools for file management, uploads, downloads, deletion, and token updates with secure runtime authentication. | |
| AEP MCP Server amghanekar-deloitte/aep-mcp_server Two MCP servers that give Claude and any MCP-compatible client natural-language access to Adobe Experience Platform, Adobe Journey Optimizer, and Real-Time CDP. | |
| x402-insider-mcp amgiiine/x402-insider-mcp Enables MCP clients to search insider trades, rank top insiders, and view owner histories from SEC Form 4 data, with free three-row previews and pay-per-call access to full results. | |
| suresh-hr-assist amgoth-suresh/hr-assist-agentic-ai-system Automates HR workflows such as employee onboarding, leave management, meeting scheduling, and ticket handling through natural language, with email notifications and demo data. | |
| Math MCP Server amichae2/math_mcp Exposes a broad mathematics toolkit including symbolic algebra, calculus, numerical methods, linear algebra, statistics, discrete math, graph theory, rendering, and optional GPU acceleration via MCP tools for use with Claude Desktop and oth | |
| Modal Sandbox MCP amichae2/modal-sandbox-mcp Enables AI agents to run arbitrary Python scripts on Modal's serverless infrastructure with on-demand CPU, memory, and GPU resources, providing scalable compute without maintaining always-on servers. | |
| Orbination AI Desktop Vision & Control amichail-1/orbination-ai-desktop-vision-control Native Windows MCP server that gives AI agents full desktop control. 45+ tools using UIAutomation + OCR with automatic dark theme enhancement instead of
screenshots. Features batch action sequencing (run_sequence), window occlusion detectio | |
| kaiten-mcp amico1285/kaiten-mcp MCP server for Kaiten project management, providing 63 tools for managing cards, comments, checklists, time tracking, and more. Enables AI assistants to interact with Kaiten workspaces through natural language. | |
| unichat-ts-mcp-server amidabuddha/unichat-ts-mcp-server Send requests to OpenAI, MistralAI, Anthropic, xAI, or Google AI using MCP protocol via tool or predefined prompts. Vendor API key required.
Both STDIO and SSE transport mechanisms are supported via arguments. | |
| obsidian-sync-mcp amidnikmal/obsidian-sync-mcp MCP server for managing an Obsidian vault with CAS-based write, note listing, reading, writing, patching, and searching via ripgrep. | |
| Anki MCP Server amidvidy/anki-mcp Provides tools for managing Anki decks, notes, and note types via the Model Context Protocol. It features AI-powered audio generation using Google Cloud TTS and supports efficient bulk note creation and media management. | |
| crawl4ai-mcp-server amienbou121/crawl4ai-mcp-server Self-hosted MCP server that provides web scraping and crawling tools, integrating seamlessly with AI frameworks like OpenAI Agents SDK, Cursor, and Claude Code. | |
| racksmith amiirhosseini/racksmith MCP server for bare-metal lab operations, enabling inventory, commissioning, deployment, fabric audit, and job scheduling via Hermes agent skills and a tool server. | |
| Nexus Dashboard MCP Server amikum0504/nd-external-mcp A local Model Context Protocol (MCP) server that allows an MCP client such as Codex to discover and call Cisco Nexus Dashboard APIs for inventory, health checks, troubleshooting, and controlled configuration changes. | |
| Remote MCP Server on Cloudflare amila-deshan/remote-mcp-server Enables deploying MCP servers on Cloudflare Workers with OAuth authentication and SSE transport. Allows connecting Claude Desktop and other MCP clients to remotely hosted tools via HTTP. | |
| Sales Insights MCP amilasilva7/ai-assistant-with-mcp-apps-support Enables natural-language queries about sales metrics, returning interactive charts inline in chat via MCP Apps with a markdown fallback for unsupported hosts. | |
| SaytLupa amilbexercin-tech/saytlupa Enables website analysis, RAG-based conversation with site content, and side-by-side comparison of two sites via MCP tools. | |
| Astro Blog MCP Server amilcar-laniakea/mcp-auto-post-astro Enables automated blog post creation and management for Astro blogs deployed on Vercel through GitHub integration. Supports secure API-based operations with automatic deployment triggers and integration with automation tools like n8n. | |
| Strapi MCP Suite amilcarex/strapi-plugin-mcp-suite MCP server that exposes Strapi v5 content management, visual layout configuration, schema authoring, media uploads, and GraphQL testing to LLM clients via native Strapi API tokens with security hardening. | |
| HubSpot CRM MCP Server amin-ale/hubspot-mcp-server Enables AI agents to safely operate HubSpot CRM contacts, deals, and pipelines via MCP, with caching, idempotency, audit trails, and robust error handling. | |
| MCP Audit Gateway amin-ale/mcp-audit-gateway MCP gateway adding per-tool RBAC, tenant isolation, audit export, and PII redaction to any server. | |
| Universal MCP Server amin2179/mcp Provides comprehensive MCP functionality with GGUF model integration, enabling resource management, dynamic tool execution, web data fetching, file operations, and system information retrieval. Supports automatic model detection from LM Stu | |
| jobscan-mcp aminafara123/jobscan-mcp Enables AI clients to read and query a daily job-scan dataset via four read-only tools, including searching job postings, viewing the latest report, and checking market statistics. | |
| m365-evidence-mcp aminafara123/m365-evidence-mcp Enables MCP-capable AI clients to fetch read-only Microsoft Graph audit evidence for security posture, MFA coverage, stale accounts, and privileged access. |
28,051–28,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.