Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Edgee MCP Server ampcome-mcps/edgee-mcp MCP Server for the Edgee API, enabling organization management, project operations, component management, and user administration through the Model Context Protocol. | |
| Elasticsearch MCP Server ampcome-mcps/elasticsearch-mcp Connects agents to Elasticsearch data using the Model Context Protocol, allowing natural language interaction with Elasticsearch indices through tools for listing indices, getting field mappings, performing searches, and viewing shard infor | |
| Firecrawl MCP Server ampcome-mcps/firecrawl-mcp A Model Context Protocol server that enables web scraping, crawling, and content extraction capabilities through integration with Firecrawl. | |
| GitHub MCP Server ampcome-mcps/github-mcp MCP server for the GitHub API, enabling file operations, repository management, search functionality, issues, pull requests, and more. | |
| Gmail MCP Server ampcome-mcps/gmail-mcp Enables AI assistants to interact with Gmail accounts for searching, reading, sending, and managing emails through secure OAuth2 authentication. It provides comprehensive tools for message operations, conversation threads, and account stati | |
| Google Calendar MCP Server ampcome-mcps/google-calendar-mcp Enables Claude to manage Google Calendar events, schedules, and meetings through natural conversation. It supports viewing calendars, creating Google Meet events, and searching for upcoming activities using Nango for authentication. | |
| gotoHuman MCP Server ampcome-mcps/gotohuman-mcp Enables AI agents to request human approvals with customizable forms, webhooks, and team features. | |
| Hugeicons MCP Server ampcome-mcps/hugeicons-mcp Provides tools for discovering, searching, and integrating Hugeicons icons across multiple platforms (React, Vue, Angular, etc.) with usage instructions and documentation. | |
| MCP Linear ampcome-mcps/linear-mcp A Model Context Protocol server that enables AI assistants to interact with Linear project management systems, allowing users to create, update, and manage issues, projects, teams, and comments through natural language. | |
| Momento MCP Server ampcome-mcps/momento-mcp A simple MCP server for Momento Cache enabling get, set, list, create, and delete cache operations with optional TTL and cache name configuration. | |
| motherduck-mcp ampcome-mcps/motherduck-mcp MCP server for SQL analytics on DuckDB and MotherDuck databases, enabling AI assistants and IDEs to query data via natural language. | |
| Notion MCP Server ampcome-mcps/notion-mcp Connects AI assistants to Notion workspaces, allowing users to search, create, and manage pages or databases through natural language conversations. It supports complex database querying, content updates, and workspace organization via the | |
| Outlook MCP Server ampcome-mcps/outlook-mcp Provides comprehensive integration with Microsoft Outlook for managing emails, contacts, calendars, and folders through the Microsoft Graph API. It offers 26 specialized tools to perform actions like sending emails, scheduling meetings, and | |
| Pagos Data MCP Server ampcome-mcps/pagos-mcp Enables Claude to retrieve BIN (Bank Identification Number) data for payment cards, with options for basic or enhanced insights through the Pagos API. | |
| PostgreSQL MCP Server ampcome-mcps/postgres-mcp A Model Context Protocol server providing read-only access to PostgreSQL databases, enabling LLMs to inspect database schemas and execute read-only SQL queries. | |
| pure.md MCP Server ampcome-mcps/puremd-mcp Enables AI assistants to reliably fetch web content as markdown and search the web by bypassing bot detection and rendering JavaScript. Provides tools to unblock URLs and search the web with results converted to markdown format. | |
| Riza MCP Server ampcome-mcps/riza-mcp Enables LLMs to securely execute code and manage reusable tools using Riza's isolated code interpreter API. | |
| MCP Salesforce Connector ampcome-mcps/salesforce-mcp A server implementation that enables LLMs to interact with Salesforce data through SOQL queries, SOSL searches, and API operations including retrieving, creating, updating, and deleting records. | |
| Shortcut MCP Server ampcome-mcps/shortcut-mcp A Model Context Protocol server that integrates Shortcut project management functionality with AI assistants like Cursor, Windsurf, Claude Code, and Zed. | |
| Slack MCP Server ampcome-mcps/slack-mcp Enables AI assistants to interact with Slack workspaces through natural language, supporting channel management, message operations, user profiles, reactions, and threaded conversations. | |
| Square Model Context Protocol Server ampcome-mcps/square-mcp Allows AI assistants to interact with Square's connect API, providing access to Square's complete API ecosystem for managing payments, orders, customers, inventory, and more. | |
| Stripe MCP ampcome-mcps/stripe-mcp Enables integration with Stripe APIs through function calling, supporting operations on customers, products, invoices, subscriptions, and more. | |
| Supabase MCP Server ampcome-mcps/supabase-mcp Connect your Supabase projects to Cursor, Claude, Windsurf, and other AI assistants. | |
| Time MCP Server ampcome-mcps/time-mcp Gives large language models time awareness capabilities through various time-related functions including current time retrieval, timezone conversion, and relative time calculations. | |
| Todoist MCP Server ampcome-mcps/todoist-mcp Enables task and project management in Todoist through natural language, supporting creating, listing, and completing tasks, as well as managing projects and labels with Nango OAuth authentication. | |
| Trello MCP Server ampcome-mcps/trello-mcp Enables Claude to interact with Trello boards, lists, cards, comments, and attachments through natural language commands. Uses Nango OAuth authentication to provide complete Trello API coverage including creation, updates, search, and proje | |
| Webflow MCP Server ampcome-mcps/webflow-mcp Enables AI agents to interact with Webflow APIs for managing sites, pages, components, CMS collections, and custom code. | |
| WhatsApp MCP Server ampcome-mcps/whatsapp-mcp Enables sending WhatsApp Business messages including text, media, interactive lists/buttons, and template management through the WhatsApp Business API via Nango integration. | |
| Zoho Mail MCP Server ampcome-mcps/zoho-mail-mcp Enables AI assistants to manage Zoho Mail accounts, including sending/receiving emails, folder and label management, organization administration, and productivity tools like tasks and notes. | |
| anova-oven-mcp ampdot-io/anova-oven-mcp Enables controlling an Anova Precision Oven through MCP, including reading temperatures, starting and managing cooks, and capturing camera frames. | |
| Public API MCP Server ampeco/public-api-mcp Transforms OpenAPI specs into an MCP server, enabling dynamic API interaction through natural language with automatic authentication and endpoint discovery. | |
| mcp.cashu.exchange amperstrand/mcp-cashu-exchange Enables AI agents to discover payable real-world services — such as EV charging and food — through a unified registry and downstream gateway, then complete payments via swappable rails. Exposes tools for listing services and federated downs | |
| prowlarr-mcp amphineko/prowlarr-mcp Enables searching and retrieving release metadata from Prowlarr indexers, with configurable query types, indexer and category filters, result limits, and offsets for use in automated workflows. | |
| Weather MCP Server amplifyautomation/weather-mcp-server Provides weather forecasts and active alerts from the US National Weather Service API for US locations. | |
| KommoMCP ampulex-23/kommomcp AI-powered CRM assistant for Kommo/amoCRM that provides natural language management via Telegram bot and MCP protocol, enabling analytics, entity operations, and CRM setup. | |
| elv2mcp ampvip/elv2mcp Enables AI agents to query and interact with Extra Low Voltage security hardware such as Hikvision and Dahua cameras and NVRs through typed, read-only-by-default MCP tools for device info, channel enumeration, and JPEG snapshot capture. Tra | |
| GHL Workflow MCP ampware-io/ghl-workflow-mcp-oss Enables Claude or any MCP client to read, create, and edit GoHighLevel workflows through a logged-in Chrome session, with no API key or marketplace app install. Provides 30 tools for workflow CRUD and publishing, step-level patches, folder | |
| ampworth-cli ampworth/cli UK solar PV and heat pump calculators following the MCS standards, plus home energy guides, as a CLI and local MCP server. | |
| personal-context amr05008/personal-context Enables LLMs to access a user's personal writing context—voice, style, opinions, expertise, projects, and communication patterns—via curated markdown files, helping the LLM match the user's voice when generating written content. | |
| Amadeus Flight Availabilities MCP App amrahman90/amadeus-flights-mcp-app An MCP server that integrates with the Amadeus Flight Availabilities Search API to allow users to search for available flights and view seat availability in real-time. | |
| Weather MCP App amrahman90/weather-mcp-app An MCP server that provides current weather, hourly and 7-day forecasts, and air quality data for any city or zip code, with an interactive React UI and support for both stdio and HTTP transports. | |
| DigitalOcean MCP Server amranu/digitalocean-mcp Provides access to all 471+ DigitalOcean API endpoints through an MCP server that dynamically extracts them from the OpenAPI specification, enabling search, filtering, and direct API calls with proper authentication. | |
| mcp-da-vinci amreetkumarkhuntia/mcp-da-vinci Exposes the DaVinci Resolve scripting API to LLMs, enabling inspection, media import, timeline editing, markers, and render queue management through natural language. | |
| Playwright MCP Server amrendra05/mcp-playwright Enables browser automation and web interaction through structured accessibility snapshots using Playwright. Supports clicking, typing, navigation, form filling, and other web actions without requiring screenshots or vision models. | |
| MCP SSH Session amritabot/mcp-ssh-reloaded An MCP server that enables AI agents to establish and manage persistent SSH sessions with smart command execution, async support, and file operations. | |
| Zerodha Trading Bot MCP amritanshuprashar/zerodha-mcp An automated trading bot that interfaces with Zerodha to execute stock trades, manage positions, and access market information through natural language commands. | |
| Power BI Unified MCP amritauji/powerbi-unified-mcp One MCP interface for AI-driven Power BI semantic-model engineering and PBIR/PBIP report authoring. | |
| scalpel amritessh/scalpel Enables symbol-level codebase retrieval by returning a definition's source span and usage sites, avoiding whole-file reads to reduce token context. | |
| scalpel amritessh/scalpel-fse2027-artifact Enables symbol-level codebase retrieval, providing definitions and usages of symbols to agents without reading whole files. | |
| scalpel amritessh/scalpel-mcp Enables AI agents to retrieve precise symbol definitions and usages from codebases, eliminating the need to fetch entire files. |
28,301–28,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.