Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| swagger-doc-explorer-mcp anuoua/swagger-doc-explorer-mcp Enables progressive exploration of Swagger/OpenAPI API documentation. Supports loading multiple specs, browsing endpoints and schemas, and searching across documentation. | |
| ms-teams-mcp anupam890/ms-teams-mcp MCP server for Microsoft Teams that exposes 73 tools to manage teams, channels, chats, messages, meetings, planner, calendar, apps, tabs, scheduling, search, and authentication via the Graph API. | |
| asc-mcp anupamchugh/asc-mcp Enables AI agents to manage App Store Connect apps, including registering bundle IDs, uploading metadata and screenshots, setting age ratings, managing TestFlight groups and testers, and submitting apps for review. | |
| Simple MCP Server anupamprataps/simple_mcp_server Provides basic tools for testing MCP functionality: echo, greet, and calculate. | |
| Simple MCP Demo anupamsharnagat/mcpdemo A Python-based demonstration server showcasing multiple Model Context Protocol transport mechanisms, including stdio, SSE, and HTTP. It provides a functional reference for tool discovery and execution using a sample number addition tool. | |
| stock_market_mcp anupamsinha/stock_market_mcp Enables AI clients to analyze stocks and get scored BUY/HOLD/SELL assessments with technical and fundamental data for Indian (NSE/BSE) and US markets. | |
| MCPDischarge anupatil2711/mcp Enables automated cross-department healthcare discharge coordination using MCP, integrating EHR, Pharmacy, and Billing with RBAC and PHI boundary enforcement. | |
| Mock Documentation MCP Server anupmurali05/mcp Exposes a tool to retrieve mocked documentation records from a simulated database, supporting query and document ID lookup. | |
| MCP Help Article Server anupriya-babbar/mcpserver_tenant_qna MCP server that serves help articles to tenants with tenant isolation, enabling AI to search and retrieve tenant-specific content. | |
| GitLab MCP Server anupsahu/gitlab-mcp Enables interaction with GitLab repositories through secure OAuth 2.0 authentication. Supports comprehensive GitLab operations including merge requests, issues, file management, commits, and branch operations through natural language. | |
| Omeka MCP anupta/omeka Enables AI assistants to search and retrieve items from an Omeka S collection through the Omeka REST API, returning readable metadata and public item page links. | |
| news-mcp-server anurag-dhamala/news-mcp-server Fetches up-to-date news articles from newsdata.io, supporting queries by country, language, category, and keyword. | |
| component-builder-mcp-server anurag7376/component-builder-mcp-server Generates custom React components following Shadcn UI standards with TypeScript, Tailwind CSS, and accessibility support. | |
| Atlassian Confluence MCP Server anuragagrawal0430/atlassian-confluence-mcp-server An open-source MCP server that lets AI assistants read, create, search, and manage Confluence wiki pages. Supports Cloud, Server, and Data Center deployments with 28 tools. | |
| MCP-RAG anuragb7/mcp-rag An MCP-compatible system that handles large files (up to 200MB) with intelligent chunking and multi-format document support for advanced retrieval-augmented generation. | |
| Dev Blog MCP Server anuragck/dev-blog-mcp-server Enables AI assistants to publish blog posts directly to Dev.to via the Model Context Protocol. | |
| figma-jev-console anuragfolio/figma-jev-console-mcp Enables a live two-way bridge between a running web app and Figma, letting users push app screens into Figma as auto-layout frames and sync edits in both directions—Figma changes update the source code, and code changes update the Figma fra | |
| Database Updater MCP Server anuragrai017/database-updater-mcp-server A Claude integration that enables updating various database types (PostgreSQL, MySQL, MongoDB, SQLite) from CSV and Excel files through natural language commands. | |
| Python Docs Server anuragrai017/python-docs-server-mcp-server An MCP server that enables users to fetch Python documentation using the Brave Search API through natural language queries. | |
| mcp-websearch-aggregator anuragsindhu/mcp-websearch-aggregator Aggregates search results from DuckDuckGo, Wikidata, and ArXiv into a single markdown response via JSON-RPC endpoint. | |
| AiAgentWalletMCP anuragsinghbhandari/aiagentwalletmcp Enables AI agents to access a marketplace of paid tools by automatically handling Stellar blockchain payments and wallet management. It utilizes the X-402 protocol to facilitate transparent, automated transactions for tool usage through a m | |
| Rosetta anuragt1104/rosetta-mcp Turns a HAR capture of an undocumented web system into an MCP server whose tools automatically handle hidden CSRF tokens, ETags, and rotating nonces, with write actions gated behind confirmation and exercised only against a sandbox. Verifie | |
| WooCommerce Agent Connector anuragverma4895/woocommerce-agent-connector MCP server that gives AI agents secure, read-only access to WooCommerce merchant orders through validated list, get, and search tools. It returns normalized order data with bounded pagination, Zod validation, timeouts, retry/backoff and Ret | |
| Excalidraw MCP Agent anuraj4/excalidraw-mcp-agent Generates hand-drawn Excalidraw diagrams from natural language prompts or structured descriptions, with tools for creating, listing, and opening diagrams directly in the browser. | |
| Dynatrace MCP Server anurak29838/dynatrace-for-ai Provides Model Context Protocol access to the Dynatrace platform API, letting AI agents run live queries against observability, security, and platform data and manage a Dynatrace environment. It is hosted remotely by Dynatrace, so MCP hosts | |
| AWS Cost Explorer MCP Server anurak59725/aws-cost-explorer-mcp-server Enables natural-language analysis of AWS cloud spending and Amazon Bedrock model invocation usage, including breakdowns by service, region, day, user, model, and cross-account data. | |
| PlayCanvas Editor MCP Server anurak9554/editor-mcp-server Enables AI agents to automate the PlayCanvas Editor, including projects, entities, scripts, assets, scenes, builds, runtime launches, screenshots, and version control. It lets agents verify that scenes actually run and interact with live ap | |
| akasha-mcp anuress/akasha Gives coding agents a persistent memory by searching a local, read-only index of existing markdown and letting them write findings back as notes that the next session can retrieve. It serves ranked, context-sized results over MCP, injects s | |
| discourse-mcp anushapundir/discourse-mcp Enables MCP-compatible AI apps to search, fetch, and synthesize tech community discussions from Hacker News, Lobsters, and optionally Reddit, without needing API keys for the primary sources. | |
| retention-agent anushapundir/retention-agent Enables MCP clients to list customer accounts, retrieve event timelines, get next-action recommendations, and push tasks to a CRM. | |
| wingman anushapundir/wingman Enables discovering and ranking complementary businesses that sell different products to the same customers, with evidence-backed recommendations via MCP tools. | |
| meals-mcp-server anushkakhadatkar/meals-mcp-server Connects Claude AI to a live meals database, enabling natural language queries for meal search by name, ingredient, or ID, and random meal suggestions. | |
| ultrastealth anusoft/ultrastealth Enables Claude to perform stealth browser automation with anti-detection, including navigation, clicking, typing, screenshots, and network monitoring via an MCP server. | |
| MCP Server for Odoo anuttoc/mcp_server Enables AI assistants to securely access and interact with Odoo data through natural language, supporting CRUD operations, attachments, and role-based permissions. | |
| CMMS MCP Server anuwatthisuka/cmms-mcp-server Integrates with MES, CMMS, and IoT systems to manage manufacturing operations, maintenance tasks, and asset tracking. It enables users to query production orders, create maintenance records, and monitor real-time sensor data and alerts. | |
| edgemem anuwatthisuka/edgemem Filesystem-native agent memory for Claude Code, enabling persistent team context across sessions through cloud-synced memory files and MCP tools. | |
| anvaiops-mcp anvai-labs/anvaiops-mcp Connects MCP clients such as Claude to AnvaiOps so agents can search past incidents, runbooks, and decisions with full provenance (source, team, resolution time, RCA) and persist attributed memories back into shared organizational memory. R | |
| Cisco RADKit MCP Server anvikasa/mcpradkit Enables interaction with Cisco network devices through the RADKit SDK, allowing users to discover device inventory, fetch device attributes, and execute CLI commands via natural language. | |
| repository-analyzer-mcp anvitsaxena8/repository-analyzer-mcp Provides intelligent codebase analysis, dependency scanning, architecture detection, security vulnerability scanning, and automatic documentation generation for modern development teams. | |
| tessera anvix9/phren Enables AI agents to navigate and operate websites through MCP tools compiled from source-defined routes, with governance controls such as permissions and rate limits. | |
| a2n-easyeda-mcp anwarminarso/a2n-easyeda-mcp Enables MCP clients to control EasyEDA Pro for schematic and PCB design through natural language, bridging the EasyEDA API without external AI or API keys. | |
| strava-mcp anway-kapoor/strava-mcp Enables full integration with Strava API v3 for managing activities, athletes, clubs, segments, and routes through MCP-compatible clients like Claude Desktop. | |
| Apify MCP Server Template anwesh43/ollama-apify-mcp A template for creating and deploying Model Context Protocol servers on the Apify platform using FastMCP, with built-in support for pay-per-event monetization and standby mode hosting. | |
| ai-design-expert anxiangtechnology/ai-design-expert-mcp Provides design capabilities including requirement analysis, visual token extraction, design generation, and visual auditing. | |
| AnyCrawl MCP Server any4ai/anycrawl-mcp-server Enables web scraping and crawling capabilities for LLM clients, supporting single-page scraping, multi-page website crawling, and web search with multiple engines (Playwright, Cheerio, Puppeteer) and flexible output formats including markdo | |
| OpenReview MCP server anyakors/openreview-mcp-server Enables searching for users, fetching papers, and exporting research data from OpenReview conferences like ICML, ICLR, NeurIPS. | |
| Anycast MCP Server anycast-net/mcp-server Enables AI assistants to manage agents, webhooks, and P2P connectivity on the Anycast network, allowing operations like listing agents, creating tokens, and viewing connection stats. | |
| tslink anydoor7/tslink Give each local app its own private HTTPS address on your Tailscale network, and control who can reach it, from your AI agent through MCP. | |
| RecordForge anyforge/recordforge Enables agents to capture real browser interactions over CDP, compile them into deterministic replay scripts with parameterized inputs and stored secrets, and execute those workflows with real input events — no page re-reading or LLM in the | |
| Spec Kit MCP Server anyiba/spec-kit-mcp Enables AI assistants to interact with Spec Kit templates and workflows for managing project specifications, planning, and implementation through guided prompts covering constitution, specification, planning, tasks, and implementation phase |
29,701–29,750 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.