Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| NodeBook and1truong/nodebook Enables to interact with a issue-native wiki workspace, providing scoped tools to manage issues, search, plan tasks, handle reminders, and attach files, all through the MCP server on /mcp. | |
| doordash-mcp and2049/doordash-mcp Enables AI agents to shop on DoorDash through 16 consumer tools covering account and order history, restaurant and menu browsing, cart edits, checkout previews, and order placement (including charging a saved card). It authenticates via a u | |
| Site Crawler MCP andacguven/site-crawler-mcp An MCP server for crawling websites and extracting comprehensive data including images, SEO metadata, security headers, and business intelligence. It features twelve distinct extraction modes to perform detailed audits for e-commerce sites | |
| Himalaya MCP Server andasv/himalaya-mcp-server Enables AI agents to interact with email accounts via the Himalaya CLI, supporting features like message reading, folder management, and controlled email sending. It prioritizes security with graduated permission modes and the exclusion of | |
| Ultra Wiki MCP andbmarques/wiki-ultra-mcp Remote MCP server enabling ChatGPT Workspace integration with the official Ultra Group Wiki (Wiki.js). Provides read-only search_pages and get_page tools to retrieve Markdown content with metadata. | |
| mcp-server-starter anddali/mcp-starter This MCP server starter template enables developers to quickly build production-ready MCP servers with Streamable HTTP, stateless design, and OAuth 2.1 authorization. It provides a structured, capability-based architecture with Postgres aud | |
| mcp-autonomous-agent-fabric anderdebona/mcp-autonomous-agent-fabric An MCP server that provides a secure, sandboxed tool execution fabric for AI agents, featuring JSON-RPC 2.0 protocol support, read-only constraints, and an observability inspector dashboard. | |
| mcp-bcr andermc66/bcrp-mcp MCP server that provides real-time access to Peruvian economic indicators from the BCRP API, with persistent memory, knowledge graph, document RAG, and statistical analysis tools. | |
| consultdn-mcp andermc66/consultdn-mcp MCP server for querying Peruvian official information (DNI, RUC, exchange rate, SOL user validation) via CLI, API, and AI tools. | |
| peru-gob-mcp andermc66/dataperu-mcp MCP server for Peruvian government data, enabling search and anomaly detection in public procurement (OSCE) and legislative tracking (Congress), plus semantic search over both domains. | |
| enaho-mcp andermc66/enaho-mcp MCP server for ENAHO (Peru's national household survey) microdata. Enables discovery, download, merging, and complex-survey statistical estimation of official poverty and income indicators, with report generation. | |
| sunat-datos-abiertos-mcp andermc66/mcp-sunat MCP server that exposes SUNAT Peruvian tax agency datasets (RUC registry, electronic receipts, IGV agents) via CKAN API with streaming preview and automatic zip decompression. | |
| Quaderno MCP Server anderrahe/quaderno-api-mcp Connects AI assistants to Quaderno's tax compliance engine, enabling tax calculation, tax ID validation, and invoice creation via natural language. | |
| TrainingPeaks MCP Server andersanderson6426/trainingpeaks-mcp Connects an athlete's TrainingPeaks account to AI assistants via secure cookie authentication, with no API approval required. Enables natural-language querying of workouts, fitness trends and personal records, plus building structured inter | |
| OpenClaw MCP Server andersbertrand/openclaw-mcp Enables Claude.ai and Claude Desktop clients to securely connect via OAuth 2.1 to self-hosted OpenClaw gateways, offering chat, health checks, async task management, and multi-instance routing. | |
| vivado-mcp andersfontana/vivado-mcp Enables AI coding agents such as Claude Code, Cursor, and Codex to drive a locally installed Xilinx Vivado through 32 curated tools covering sessions, synthesis, implementation, timing and CDC reports, XDC, IP, waveforms, and device program | |
| AX Local Operations MCP Server andershsueh/ax-localtools-mcp A comprehensive MCP server that enables AI models to perform local file operations, command execution, and task management across multiple platforms. It features advanced capabilities like row-level file editing, directory searching, and sy | |
| tokens-saver-mcp andershsueh/tokens-saver-mcp Routes narrow text-processing tools (classification, extraction, summarization, etc.) to budget models to reduce token consumption on the main model. | |
| useful-outlook-mcp andersia7/mcp-outlook A remote MCP server that enables Microsoft Outlook integration, allowing agents to manage mail, calendar events, contacts, and meeting room availability with OAuth2 and production-ready features. | |
| OpenClaw MCP Server anderslaurent/openclaw-mcp Bridges Claude.ai and Claude Desktop to self-hosted OpenClaw AI assistants through an OAuth 2.1-secured HTTP endpoint. Enables sending chat messages, tracking long-running tasks, checking gateway health, and routing requests across multiple | |
| Basecamp MCP Server andersmendoza528/basecamp-mcp-server Enables MCP-capable clients like Codex, Cursor, and Claude Desktop to browse and manage Basecamp 3 projects through OAuth-authenticated API calls, covering todos, messages, campfires, card tables, documents, uploads, comments, events, webho | |
| cisco-iosxe-mcp anderson-jason573/cisco-iosxe-mcp MCP server that exposes Cisco IOS-XE devices as tools for LLM clients, enabling safe configuration changes with revert timer and connectivity verification. | |
| hpe-edgeconnect-mcp anderson-jason573/hpe-edgeconnect-mcp MCP server that exposes HPE Aruba EdgeConnect Orchestrator SD-WAN infrastructure as LLM-callable tools for listing appliances, reading interface/tunnel/bandwidth state, and changing HPE SSE tunnel state. | |
| juniper-junos-mcp anderson-jason573/juniper-junos-mcp Enables safe interaction with Juniper Junos devices (SRX firewalls) via MCP, providing operational read tools and a configuration change flow with device-side diff preview and automated rollback. | |
| proxmox-ve-mcp anderson-jason573/proxmox-ve-mcp Exposes Proxmox VE hosts as MCP tools for inventory, status, and VM/container management, running as a standalone Streamable HTTP service. | |
| pubmed-mcp-server anderson37616/pubmed-mcp-server Enables searching PubMed and Europe PMC, fetching article metadata and full text via PMC, Europe PMC, or Unpaywall, and resolving citations, identifiers, related works, and MeSH vocabulary. Runs over STDIO or Streamable HTTP as a local or h | |
| interceptpilot-mcp andersonalpin/interceptpilot-mcp Enables AI agents to read sanitized test context, captured requests, rules, and logs from the InterceptPilot Chrome extension, and to propose or run actions such as enabling mocks, importing collections, or capturing tabs, all locally over | |
| cst-mcp andersonlin4/cst-mcp Turns CST Studio Suite into an AI-controllable electromagnetic design lab, enabling conversational THz metamaterial absorber design, unit-cell automation, Floquet port control, batch solve with checkpoint-resume, and surrogate-model predict | |
| danfe-downloader andersonnascimentoafsn/danfe-mcp-server Automates downloading XML of DANFE from meudanfe.com.br using Playwright with xvfb to bypass Cloudflare protection, enabling AI agents to retrieve DANFE XML via MCP tools. | |
| deck-contract andersonscat/deck-contract MCP server for AI-native editable presentations: surgically edit slide components by stable ID, with local rendering and self-checking overflow. | |
| MemoryOS VPS Guardian andersonvitaease/memoryos-vps-guardian Enables AI agents to monitor server health and capacity, diagnose outages, inspect Docker and deployment status, and perform safe, bounded recovery actions via MCP without granting unrestricted shell or SSH access. | |
| substack-mcp andersschaffner/substack-mcp Enables searching, filtering, and exporting Substack blog posts via MCP tools, with full-text search, caching, and citation generation. | |
| dbt-doctor andersson2843/dbt-doctor It enables AI assistants to audit dbt project health, profile data, detect schema drift, suggest tests, and auto-generate documentation through natural language. | |
| scrcpy-mcp andersson50245/scrcpy-mcp Enables AI agents to see and control Android devices via ADB and scrcpy, supporting screenshots, taps, swipes, typing, app management, UI inspection, file transfer, shell commands, and audio/video streaming. | |
| mem0-mcp-selfhosted andersv5332/mem0-mcp-selfhosted Enables Claude Code to maintain persistent cross-session memory backed by self-hosted Qdrant, Neo4j, and Ollama, including semantic search, memory CRUD, and knowledge-graph entity exploration. It supports both Anthropic/Claude and fully loc | |
| Safari Web Inspector Bridge andesco/safari-web-inspector-bridge An MCP server that gives AI agents the ability to inspect, observe, and automate WKWebViews on connected iOS devices via Safari Web Inspector. | |
| howitalk andey0saikiran/howitalk Provides a local MCP server that distills your chat history into a personal communication profile and decodes messy messages into explicit prompts for any MCP client. | |
| tableau-lineage-mcp andey0saikiran/tableau-lineage Enables AI assistants to read and audit Tableau .twbx workbooks locally, providing tools for dependency tracing, field listing, SQL queries, filters, and semantic diffs. | |
| Relay andeya/ide-relay-mcp Adds a human-in-the-loop checkpoint to MCP-capable AI coding agents, enabling them to pause and request user feedback before executing actions. | |
| Warteg Online MCP Server andhikapraa/wartegonline-mcp Enables AI assistants to manage Warteg Online meal delivery subscriptions through natural language, including viewing schedules, skipping deliveries, rescheduling meals, updating addresses, and managing dietary restrictions. | |
| n8n MCP Server andhit-r/n8n-mcp Enables management of n8n workflows, executions, credentials, tags, and variables via MCP tools. Supports stdio, Claude Code, and Claude Web with optional Authentik OAuth. | |
| wikijs-mcp andhit-r/wikijs-mcp MCP server for accessing Wiki.js through its GraphQL API, enabling page management, search, tags, and system info operations. | |
| intervals-icu-mcp andiarenaleandro-ux/intervals-icu-mcp An MCP server that connects Claude to intervals.icu training data, enabling advanced physiological analysis, activity and wellness management, and conversational insights using proprietary metrics like CCI and HRV correction. | |
| MariaDB MCP Server andiatom/mariadb-mcp-strhttp A read-only MCP Server that acts as an interface between a MariaDB database and Open-WebUI. It allows only read-only queries and blocks all write operations. | |
| Reputation Intelligence MCP Server andichen0420/reputation-mcp-server Analyzes and compares product reputation using data from Reddit, Hacker News, and YouTube, providing sentiment and dimensional scores. | |
| The Artifact andidev30/the-artifact Enables coding agents to publish HTML pages and small sites over MCP, returning a stable link and keeping every version, with access limited to specific people, an organization, or anyone with the link. | |
| pddikti andikadevs/pddikti Enables AI agents to query structured Indonesia higher-education data, including universities, study programs, lecturers, students, and aggregate statistics. | |
| Andiora Developer MCP andioratech/andiora-dev-mcp Enables developers to read project context, create documentation drafts, update reports, and retrieve tenant-scoped metrics through the Andiora platform APIs. | |
| mcp-cad andiveli/mcp-cad MCP server for Autodesk Inventor that provides 32 tools for parametric control of CAD models via COM automation. | |
| Markdown RAG Documentation andnp/ragdocs-mcp Enables semantic search over local Markdown documentation using hybrid retrieval combining embeddings, keyword search, and graph traversal with automatic file watching and zero-configuration setup. |
28,551–28,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.