Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| SafetyOps MCP Server anassijassi/safetyops-mcp-server Enables AI assistants to query workplace incident data using RAG, providing search, analysis, and corrective action plans. | |
| nano-banana-mcp-app anasskartit/nano-banana-mcp-app Enables Claude to generate and edit images using Google Gemini AI. | |
| Monzo MCP Server anastasiakrause/monzo-mcp Give Claude AI read-only access to your Monzo bank account through the Model Context Protocol, enabling insights into spending, balances, and transactions via natural conversation. | |
| Weekly Planning Assistant MCP anastasiakrause/weekly-planner-mcp Provides intelligent weekly schedule analysis from Google Calendar, including day-by-day breakdowns, workout suggestions, office day detection, and scheduling problem identification through natural language queries. | |
| skyportal-mcp anastasiakwei/skyportal-mcp A local MCP server for SkyPortal and Fritz that exposes astronomical transient data (photometry, spectra, classifications, observability) as tools for AI coding assistants. | |
| Hegelion anastewart/hegelion Enables MCP-enabled editors to run thesis–antithesis–synthesis reasoning workflows and player-coach code verification loops, including session persistence and independent coach review. | |
| Open Data MCP anatoliibalakiriev/open-data-mcp Enables answering questions about Ukrainian open data from the data.gov.ua CKAN portal by searching datasets, inspecting resource schemas, and running read-only SQL aggregates over a single tabular resource. Every data-backed answer is comp | |
| claude-usage-mcp anatoly-lab/claude-usage-mcp Enables retrieving real Claude subscription usage statistics, including the 5-hour session window, weekly limit, and per-model limits, from the same endpoint Claude Code uses. | |
| gtr-mcp anatolykoptev/gtr-mcp An MCP server that wraps git-worktree-runner to enable AI agents to manage git worktrees safely. | |
| n8n MCP Agent anatolykoptev/n8n-mcp-agent Autonomous AI agent for n8n workflow automation with credential factories, execution helpers, and 4343+ workflow templates. Provides 38 MCP tools for full n8n API coverage. | |
| Cinema4D MCP Server anatorres61362/cinema4d-mcp Enables prompt-driven creation, inspection, and manipulation of 3D scenes via Claude, including objects, cameras, materials, MoGraph, dynamics, Redshift inspection, and rendering. It bridges MCP tools to a 3D application plugin for natural- | |
| Splunk MCP Server anatsheh84/splunk-mcp-server A Model Context Protocol server providing 25 tools for search, alerting, KV Store management, and index administration in Splunk Enterprise and Cloud, enabling LLM-powered interaction. | |
| vmware-fusion-mcp-server anatsheh84/vmware-fusion-mcp-server Enables AI assistants to manage VMware Fusion virtual machines on macOS using the vmrun CLI, including starting, stopping, and snapshot operations. | |
| git-triage-mcp anauronplaye1/git-triage-mcp Enables coding agents to perform semantic Python AST diffing across git boundaries, detect breaking changes, and generate concise PR triage summaries for reviewers via the Model Context Protocol. | |
| Anava MCP Server anavaacap/anava-mcp-server A bridge between AI assistants like Claude and Anava-enabled Axis cameras, enabling real-time image analysis, event monitoring, and camera management through natural language commands. | |
| Titan AI Business Analytics Copilot anavmidha/titan-ai-copilot_poc MCP server that routes natural language queries to backend analytics tools (Sales, Finance, Customer, Service) using Google Gemini's function calling. | |
| Bridgecontext anavvathi/bridgecontext BridgeContext is a productivity tool designed to capture and transfer conversational context between different AI platforms (like ChatGPT, Claude, and Gemini) to improve workflow continuity. | |
| PlayCanvas Editor MCP Server anawhite30/editor-mcp-server Enables AI agents to automate the PlayCanvas Editor directly through its built-in MCP client, manipulating projects, entities, scripts, assets, scenes, builds and version control, then launching the app and inspecting runtime state and scre | |
| tapiest-colosseum-mcp anax/tapiest-colosseum-mcp Enables AI agents to participate in tactical combat, matchmaking, and token trading within a Solana-based competitive arena, with Elo rankings, energy management, and benchmark testing against other agents. | |
| @anaxer/mcp anaxer-v2/anaxer-mcp Enables assistants to query Solana DEX and Pump.fun data through typed tools, including token prices, metadata, trades, creations, graduations, and bounded live stream tails. | |
| lichess-mcp anay704/lichess-mcp MCP server that exposes the Lichess public API through tools for querying player profiles, games, analysis, openings, puzzles, and tournaments, allowing natural-language chess questions without an API key. | |
| openvidstudio anaydhawan/openvidstudio Enables AI coding agents to generate cinematic demo and launch videos by driving a Remotion and Playwright pipeline through MCP tools, capturing real product screens and optionally incorporating AI b-roll. | |
| Haven anaykushwaha/haven Enables Alexa+ to turn natural-language household goals into context-aware, confirmation-gated plans, execute them, and verify that devices actually reached the intended state. | |
| MCP Test Ario anazaim77/mcp-test-ario Enables scraping Tokopedia products and performing calculations via an MCP server, with self-hosted or public hosted configuration. | |
| Reach Gateway anazeez/reach-gateway Read-only MCP service for normalized public evidence from Web, X, YouTube, Reddit, and RSS. Owner-authenticated via Cloudflare Access, it exposes health, read, and transcript actions to ChatGPT and Codex. | |
| DropshippingLeads MCP anbani-tech/dropshippingleads-mcp Enables users to search and retrieve a free public snapshot of overseas small online retailer records by category, keyword, and sales-market tag, inspect merchant websites and public sources, and check dataset coverage and methodology throu | |
| mrc-data anbani-tech/mrc-data The only MCP server providing structured Chinese fashion supply chain intelligence for AI platforms. No equivalent data source exists in the MCP ecosystem. Search 3,000+ verified manufacturers, 350+ lab-tested fabrics (AATCC/ISO/GB), and 17 | |
| Remote MCP Server Authless anbeime/remote-mcp-server-authless A tool that deploys an authentication-free Model Context Protocol server on Cloudflare Workers, allowing you to create and access custom AI tools from the Cloudflare AI Playground or Claude Desktop. | |
| dart-risk-mcp anboyu-alt/dart-risk-mcp Analyzes Korean DART (Financial Supervisory Service) public disclosures to detect unfair trading risk signals, enabling users to query and evaluate corporate risk through natural language. | |
| ibex35-mcp anbrme/ibex35-mcp-server Analyze relationships in the Spanish stock exchange | |
| Kickd MCP Server anbturki/kickd Enables Claude Code to manage automations, tasks, skills, workflows, credentials, variables, webhooks, events, and notifications within the kickd background automation daemon. | |
| pc-control-agent anbu-20012005/an-mcp-based-ai-agent-for-pc-control This MCP server enables an AI agent to control a Windows PC through human-like interactions such as screen capture, OCR, mouse, keyboard, and navigation, without using shortcut APIs. | |
| DigiKey MCP Server anbus2011/digikey-mcp Enables searching and retrieving product information from DigiKey's API, including part lookup, keyword search, product details, and pricing. | |
| Google Calendar MCP anbyounghyun/google_calendar_mcp A server that enables Cursor users to view, create, and manage Google Calendar events through natural language commands using the MCP protocol with Google OAuth2 authentication. | |
| MineCode MCP ancarsenat/minecode-mcp MineCode is a local MCP server that provides AI assistants with real-time access to Minecraft data, documentation, datapack generators, and logs, featuring 19 tools for datapack development. | |
| anchain-data-mcp anchainai/anchain-data-mcp Enables AI assistants to access AnChain.AI blockchain intelligence APIs for risk assessment, sanctions screening, and transaction analysis on blockchain addresses and transactions. | |
| StudyPilot MCP Server anchal-verma04/studypilot-ai Provides tools to extract key facts from study notes, generate quizzes, and grade answers via JSON-RPC. | |
| AI Impact MCP anchetadev/mata Estimates the environmental footprint of your AI use — energy (kWh), miles driven, water used for cooling, and CO₂ — plus a prompt-efficiency score, working with any AI client by measuring token usage. | |
| Grype MCP Server anchore/grype-mcp Enables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model Context Protocol. | |
| japan-transit-mcp anchovy-s3/japan-transit-mcp Enables route planning and transit information retrieval for Japan using the public Transit API. Supports searching stations, planning routes, and checking departures. | |
| feishu-reader ancienthu/feishu-reader-mcp Enables AI tools to extract Feishu documents (Docx/Wiki) via Feishu Open API and convert them to Markdown format with local image downloading and authentication. | |
| AEMET-MCP ancode666/aemet-mcp An MCP server that allows retrieving meteorological and climate data from Spain's State Meteorological Agency (AEMET) API directly from Claude AI and other MCP-compatible clients. | |
| boe-mcp ancode666/boe-mcp Enables querying Spanish BOE consolidated legislation, daily summaries, and legal reference data through natural language using the Model Context Protocol. | |
| Datos.gob.es-MCP ancode666/datos.gob.es-mcp Enables querying and analyzing over 90,000 public datasets from the Spanish Government Open Data Portal (datos.gob.es) using natural language, with tools for search, filtering, metadata access, and SPARQL queries. | |
| multiCAD-mcp ancode666/multicad-mcp Controls CAD applications (AutoCAD, ZWCAD, etc.) via AI assistants through the Model Context Protocol, enabling drawing, layer management, and automation through natural language or direct tool calls. | |
| NASA-MCP ancode666/nasa-mcp An MCP server that enables LLMs to query data from various NASA APIs, allowing access to astronomical data, space weather information, Earth imagery, and exoplanet information directly from compatible AI clients. | |
| Qdrant RAG MCP Server ancoleman/qdrant-rag-mcp Enables context-aware semantic search across codebases using Qdrant vector database with intelligent GitHub issue resolution, Projects V2 management, and progressive context retrieval for 95%+ token reduction in AI-assisted development. | |
| yfinance-mcp-ts anconina/yfinance-mcp-ts An MCP server that provides 20 tools for accessing Yahoo Finance stock data, financials, options, screeners, and market summaries. | |
| Penpot MCP Server ancrz/penpot-mcp-server Enables AI agents to programmatically access self-hosted Penpot instances to read, create, modify, and export design elements through natural language. It provides 66 tools for managing projects, shapes, design tokens, and comments using a | |
| codemode-workers ancs21/codemode-workers Expose any API to an LLM agent as two sandboxed MCP tools (search + execute) on Cloudflare Workers. |
28,501–28,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.