Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AAP MCP Server anshulbehl/aap-mcp-pilot Enables comprehensive management of Ansible Automation Platform Controller and Gateway through 17 specialized tools covering job execution, inventory management, workflows, credentials, user administration, and system monitoring. | |
| Redshift MCP Server anshulpatre/my-redshift-mcp A production-ready server that connects LLMs and AI agents (Claude, ChatGPT) to Amazon Redshift databases with configurable access controls and zero code changes. | |
| Crawl4AI RAG MCP Server anshumaan031/web-knowledge-crawler An MCP server that integrates Crawl4AI with Supabase to enable AI agents to crawl websites, store content in a vector database, and perform RAG queries. | |
| MCP Employee Identity Server anshuman-gaur-ai-builder/mcp-employee-identity This MCP server enables AI-assisted professional profile generation by connecting to verified employee work data (skills, career history, certifications, projects) from employer HCM systems. | |
| Database Explorer MCP Server anshumanroy/mcp-server Enables MCP-compatible clients to inspect schemas, sample rows, run safe read-only SELECT queries, plan joins, and analyze columns across SQLite and PostgreSQL with row limits, access controls, and sensitive-column masking. | |
| World Bank MCP Server anshumax/world_bank_mcp_server Enables AI assistants to interact with the World Bank open data API, allowing for listing and analysis of indicators across available countries. | |
| Istedlal MCP Server anshuml/mcp Provides AI agents with access to file metadata, vector search, and workflow metrics. It enables operations such as file metadata retrieval and semantic search over file embeddings using pgvector. | |
| Shopping MCP Server anshux1/amazon-mcp Enables eBay-backed product search, authenticated shopping carts, checkout quotes, and order management through MCP tools and resources. | |
| NitroStack Calculator MCP Server anshux1/vitalis-mcp A minimal MCP server template for learning NitroStack, providing calculator-focused tools, resources, and prompts with TypeScript and Zod validation. | |
| AgentGate anshv784/agentgate Enables AI agents to call external endpoints under per-endpoint policy enforcement, with credentials and personal data kept inside a hardware enclave and every allowed or denied attempt recorded to an immutable audit ledger. | |
| TallyPrime MCP Server anshveerturna/tally-mcp Gives AI models native-level control over TallyPrime ERP, covering 169+ tools across all functional modules including masters, vouchers, reports, GST, payroll, and more. | |
| Customer Support Email MCP anslemdavid/customer_support_email_mcp Enables reading, searching, drafting, and sending customer support emails via Gmail directly through Claude, eliminating manual copy-pasting. | |
| Weather API MCP anslemdavid/weather_api_mcp A zero-config MCP server that provides real-time weather data and 5-day forecasts for any location without requiring API keys, enabling natural language weather queries through Claude. | |
| MyFitnessPal MCP Server ansonyuu/myfitnesspal-mcp Enables AI assistants to read and log MyFitnessPal nutrition data, including tracking calories, macros, searching foods, and adding meals through natural conversation. | |
| AIHUB-MCP ansua79/aihub-mcp Enables searching and querying AI Hub datasets, including listing datasets, getting details, searching by keyword, and retrieving download information. | |
| KISTI-MCP ansua79/kisti-mcp Integrates with KISTI's ScienceON, NTIS, and DataON APIs to search and retrieve scientific papers, patents, reports, national R\&D projects, and research data. | |
| ScienceON-MCP ansua79/scienceon-mcp MCP server for searching Korean scientific literature, patents, reports, and more via the KISTI ScienceON API. | |
| Belgian Law MCP Server ansvar-systems/belgian-law-mcp Enables querying Belgian statutes and provisions from the Belgian Official Gazette directly via AI assistants, providing search, citation validation, and EU law integration. | |
| british-cybersecurity-mcp ansvar-systems/british-cybersecurity-mcp Enables querying British cybersecurity data, including regulations, decisions, and requirements from the NCSC, directly from any MCP-compatible client. | |
| Switzerland Environmental Compliance MCP ansvar-systems/ch-environmental-compliance-mcp Provides comprehensive Swiss agricultural environmental compliance data covering water protection zones, ammonia emission limits, biodiversity requirements, and nutrient regulations from BAFU, BLW, and Agroscope. Enables AI assistants to se | |
| Switzerland Farm Safety MCP ansvar-systems/ch-farm-safety-mcp Enables querying of Swiss farm workplace safety regulations including BUL/SPAA rules, Suva occupational requirements, EKAS standards, and Agriss accident statistics. Provides tools for risk assessments, machinery safety compliance, chemical | |
| Switzerland Land & Woodland MCP ansvar-systems/ch-land-woodland-mcp Enables querying Swiss land and woodland regulations including land acquisition rules (BGBB), forest protection laws (WaG), spatial planning zones (RPG), and agricultural leases (LPG). Provides AI assistants with searchable access to federa | |
| Switzerland Livestock MCP ansvar-systems/ch-livestock-mcp Provides access to Swiss livestock regulations and compliance data covering animal welfare standards (TSchV), RAUS/BTS direct payment programs, and TVD movement rules. Enables querying of housing specifications, stocking densities, feed req | |
| Comprehensive EU Law MCP Server ansvar-systems/comprehensive-eu-law-mcp Provides structured access to EU treaties, regulations, directives, and CJEU case law via 14 tools for searching, retrieving, and analyzing legislation and court decisions. | |
| croatian-competition-mcp ansvar-systems/croatian-competition-mcp Enables querying Croatian competition data including regulations, decisions, and requirements from the Croatian Competition Agency (AZTN) directly from MCP-compatible clients. | |
| Danish Law MCP Server ansvar-systems/danish-law-mcp Enables querying and analyzing Danish legislation, including search, citation validation, currency checks, and EU law integration, directly from AI assistants. | |
| Estonian Cybersecurity MCP ansvar-systems/estonian-cybersecurity-mcp Query Estonian cybersecurity data -- regulations, decisions, and requirements from RIA/CERT-EE -- directly from any MCP-compatible client. | |
| estonian-data-protection-mcp ansvar-systems/estonian-data-protection-mcp Enables querying Estonian data protection regulations, decisions, and guidelines from the AKI (Estonian Data Protection Inspectorate) via MCP-compatible clients. | |
| Finnish Energy Regulation MCP ansvar-systems/finnish-energy-regulation-mcp Enables full-text search and retrieval of Finnish energy regulations from four regulators: Energiavirasto, Fingrid, TEM, and Tukes. | |
| greek-competition-mcp ansvar-systems/greek-competition-mcp Enables querying Greek competition data—regulations, decisions, and requirements from the Hellenic Competition Commission—directly from MCP-compatible clients like Claude or Cursor. | |
| Greek Financial Regulation MCP ansvar-systems/greek-financial-regulation-mcp Query Greek financial regulation data — regulations, decisions, and requirements from HCMC and Bank of Greece — directly from MCP-compatible clients like Claude or Cursor. | |
| Hungarian Financial Regulation MCP ansvar-systems/hungarian-financial-regulation-mcp Enables querying Hungarian financial regulation data, including regulations, decisions, and requirements from MNB, directly from MCP-compatible clients like Claude or Cursor. | |
| irish-competition-mcp ansvar-systems/irish-competition-mcp Query Irish competition data from CCPC (Competition and Consumer Protection Commission) — regulations, decisions, and merger control — directly from AI assistants via MCP. | |
| Italian Data Protection MCP ansvar-systems/italian-data-protection-mcp Provides tools to search and retrieve Italian data protection regulations, decisions, and guidelines from the Garante, for use with AI compliance tools. | |
| latvian-cybersecurity-mcp ansvar-systems/latvian-cybersecurity-mcp Enables querying Latvian cybersecurity data, including regulations, guidelines, and advisories from CERT.lv, directly from any MCP-compatible client. | |
| Latvian Data Protection MCP ansvar-systems/latvian-data-protection-mcp Enables querying Latvian data protection regulations, decisions, and guidelines from the DVI directly from MCP-compatible clients. | |
| Lithuanian Cybersecurity MCP ansvar-systems/lithuanian-cybersecurity-mcp Query Lithuanian cybersecurity data — regulations, decisions, and requirements from NKSC — directly from AI assistants. | |
| Lithuanian Data Protection MCP ansvar-systems/lithuanian-data-protection-mcp Query Lithuanian data protection regulations, decisions, and requirements from VDAI directly from MCP-compatible clients like Claude or Cursor. | |
| Lithuanian Financial Regulation MCP ansvar-systems/lithuanian-financial-regulation-mcp Enables querying Lithuanian financial regulation data, including regulations, enforcement actions, and requirements from the Bank of Lithuania, via MCP-compatible clients. | |
| Luxembourgish Competition MCP ansvar-systems/luxembourgish-competition-mcp Enables querying Luxembourgish competition data, including regulations, decisions, and requirements from the Conseil de la concurrence, directly from MCP-compatible clients. | |
| Luxembourgish Cybersecurity MCP ansvar-systems/luxembourgish-cybersecurity-mcp Query Luxembourgish cybersecurity data -- regulations, decisions, and requirements from CIRCL -- directly from MCP-compatible clients. | |
| Luxembourgish Data Protection MCP ansvar-systems/luxembourgish-data-protection-mcp Query Luxembourgish data protection data — regulations, decisions, and requirements from CNPD directly from Claude, Cursor, or any MCP-compatible client. | |
| maltese-cybersecurity-mcp ansvar-systems/maltese-cybersecurity-mcp Enables querying Maltese cybersecurity regulations, decisions, and requirements from CSIRTMalta via MCP-compatible clients like Claude and Cursor. | |
| Polish Cybersecurity MCP ansvar-systems/polish-cybersecurity-mcp Enables querying Polish cybersecurity regulations, advisories, and frameworks from NASK/CERT Polska via Claude or any MCP-compatible client. | |
| polish-data-protection-mcp ansvar-systems/polish-data-protection-mcp Enables querying Polish data protection regulations, decisions, and guidelines from the UODO directly from AI assistants. | |
| Portuguese Competition MCP ansvar-systems/portuguese-competition-mcp Enables querying Portuguese competition data from AdC (Autoridade da Concorrência), including enforcement decisions and merger control decisions, directly from MCP-compatible clients. | |
| Portuguese Cybersecurity MCP ansvar-systems/portuguese-cybersecurity-mcp Enables querying Portuguese cybersecurity regulations, guidance, advisories, and frameworks from CNCS via MCP-compatible clients. | |
| Romanian Data Protection MCP ansvar-systems/romanian-data-protection-mcp Query Romanian data protection data — regulations, decisions, and requirements from ANSPDCP — directly from Claude, Cursor, or any MCP-compatible client. | |
| romanian-financial-regulation-mcp ansvar-systems/romanian-financial-regulation-mcp Enables querying Romanian financial regulation data, including regulations, enforcement actions, and currency checks, directly from AI assistants. | |
| Security Controls MCP Server ansvar-systems/security-controls-mcp Enables searching and bidirectional mapping of 1,451 security controls across 262 SCF-mapped frameworks, including ISO 27001, NIST CSF, DORA, and many others, through natural language queries. |
29,451–29,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.