Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| deepseek-vision-mcp arieslee/deepseek-vision-mcp MCP server that exposes an analyze_image tool using Gemini vision models to describe or analyze images from local paths, URLs, or base64 data URIs. | |
| CarFeeCalc MCP arifaidev/carfeecalc-mcp Enables calculation of vehicle registration, title, and out-the-door fees, state-specific fee lookups, and VIN validation. | |
| LearnOneTech MCP arifaidev/learnonetech-mcp Enables MCP-compatible clients like Cursor to search, browse, retrieve, and explore LearnOneTech's public technology, Android, mobile, FRP, apps, and troubleshooting articles via the WordPress REST API without an API key. | |
| MCP Document Processor arifazim/mcp_document_classifer An intelligent document processing system that automatically classifies, extracts information from, and routes business documents using the Model Context Protocol (MCP). | |
| semantic-index arifbazli/semantic-review-cli-local-mcp An MCP server over stdio that lets agents find code by meaning using local Ollama embeddings and trace callers or callees through real tree-sitter AST parsing rather than regex or keyword matching. It shares the same search and trace engine | |
| x402-Gated MCP Server arifsakib01/x402-mcp-server Enables AI agents to pay per tool call in USDC via the x402 micropayment protocol, with no API keys or subscriptions required. | |
| reminder-mcp arifszn/reminder-mcp Enables scheduling and triggering reminders delivered via Slack or Telegram through natural language, using an external cron service to ensure delivery even when the server is offline. | |
| wordly arifszn/wordly-mcp-app An MCP App that provides an interactive UI for visualizing multiple rewritten variations of text, enabling grammar checking, style adjustments, and text improvements with real-time comparison. | |
| gpu-broker-mcp arifuzzamanjoy/gpu-broker-mcp Enables AI agents to discover, reserve, and dispatch inference to GPU nodes via MCP tools, using signed handles for stateless reservation management. | |
| Fast Mode MCP Server arihgoldstein/fastmode-mcp Enables AI assistants to convert, validate, and deploy websites to the Fast Mode CMS platform while managing content collections and schemas. It provides tools for template validation, CMS item management, and automated site deployment dire | |
| pmcontrols-mcp arikanatakan/pmcontrols-mcp Validated project scheduling and earned value computations for AI agents, exposing CPM, PERT, schedule compression, and EVM tools. | |
| CDRP-for-Claude arikazei/cdrp-for-claude Shows your current Claude Desktop activity as Discord Rich Presence, including model, status, usage, and subscription info. | |
| Spotify MCP arikhi14/spotify-mcp Enables secure interaction with and analysis of a user's Spotify data through the Model Context Protocol, with planned Spotify OAuth 2.0 authorization and Web API integrations. Roadmap includes read-only tools for profiles, playlists, saved | |
| Pumpkin API MCP Server aril-kompresor/pumpkin-mcp Enables LLMs to explore and search Pumpkin plugin API and WIT files, extract documentation and code blocks, and scaffold new WebAssembly plugin projects for the Pumpkin Minecraft server. | |
| dnb-crate arildgrimstveit/dnb-crate Enables an MCP host to scan and catalog a local drum and bass library, search and analyze tracks, plan and validate ordered set lists, and render gapless DJ-style WAV mixes with beat-aligned crossfades and bass swaps. | |
| clinic-mcp-server ariless/clinic-mcp-server Enables agents to interact with a clinic booking API, including listing specialties, doctors, and a patient's appointments, and booking or cancelling appointments when the active profile permits, while preserving the caller's authority and | |
| arimair-mcp arim-science/arimair-mcp This MCP server provides read-only access to Arimair monitoring data, enabling users to query measurements, statistics, corrections, reports, and site information directly through Claude. | |
| Evaluar MCP Server arimon03/mcp-evaluar-ari Enables authentication and management of eTalent processes within Evaluar platform, allowing users to search positions, create and launch processes directly from their IDE. | |
| Documentation Manager arimxyer/doc-manager-mcp Comprehensive documentation lifecycle management powered by an MCP server. Automates documentation creation, maintenance, quality assessment, and synchronization for software projects. | |
| context-lattice arin016/context-lattice Enables MCP-capable clients to query coding-agent conversation exports and retrieve token-bounded evidence bundles with source provenance and hash verification, so LLMs can ground responses in verifiable history without replaying full trans | |
| Dev.to MCP Server arindam200/devto-mcp An MCP server implementation that allows AI assistants to access, search, and interact with Dev.to content, including fetching articles, retrieving user information, and publishing new content. | |
| Reddit MCP Server arindam200/reddit-mcp An MCP server that enables AI assistants to access and interact with Reddit content through features like user analysis, post retrieval, subreddit statistics, and authenticated posting capabilities. | |
| graph-attention-engine arindambanerji/graph-attention-engine RGI (Recursive Graph Improvement) MCP server — decision scoring with compounding intelligence via cross-graph attention. Supports stdio and HTTP transports. Apache 2.0. | |
| VoiceLedger arindewangan/voiceledger Enables users to log expenses and income by voice, auto-categorize transactions, set and check budgets, summarize spending, undo or search entries, and generate AI spending insights with an offline fallback. | |
| UIWeaver MCP arindhimar/uiweaver-mcp An AI-powered MCP server that generates production-ready React + Tailwind UI, 3D components, and full-stack integrations from natural language prompts inside Claude Desktop. | |
| Baseball Stats MCP Server aringadre76/baseball-stats-mcp Provides comprehensive baseball analytics through 32 tools covering pitching, batting, defensive metrics, and visualizations via the Model Context Protocol, enabling natural language queries for advanced Statcast and MLB statistics. | |
| Scholarly Research MCP Server aringadre76/mcp-for-research Enables comprehensive academic research by searching and analyzing papers from PubMed, Google Scholar, ArXiv, and JSTOR. Provides full-text access, citation management, and research organization through five powerful consolidated tools. | |
| Claude Talk to Figma MCP arinspunk/claude-talk-to-figma-mcp Enables Claude Desktop and other AI tools to interact directly with Figma, allowing for powerful AI-assisted design capabilities through natural language commands. | |
| Compass MCP ariobarin/compass-mcp Provides read-only, revision-pinned access to the current Compass profile and selected skills, enabling ChatGPT to retrieve AGENTS.md, skill catalogs, and documents through standard MCP tools. | |
| discord-mcp ariobarin/discord-mcp Grants read-only access to your own Discord DMs, group chats, and server channels, letting a model search messages, pull recent or full conversation history, and view attachments like images and PDFs. Messages are kept in a local SQLite cac | |
| waterloo-mcp ariobarin/waterloo-mcp Enables read-only access to University of Waterloo accounts across LEARN, WaterlooWorks, Odyssey, Crowdmark, Outline, Piazza, and UW Flow, exposing courses, grades, assignments, announcements, jobs, exam schedules, assessments, outlines, po | |
| claude-intercom arioliv/claude-intercom Enables Claude Code sessions to communicate with each other, allowing discovery, messaging, and synchronous queries across sessions. | |
| linkedin-mcp arioliv/linkedin-mcp An unofficial Model Context Protocol server enabling AI assistants to access LinkedIn profile data, network connections, search people and jobs, and send messages via OAuth 2.1. | |
| media-gen-mcp arioliv/media-gen-mcp Enables AI image and video generation using Google Nano Banana and Veo 3.1 via a LiteLLM gateway, providing tools for synchronous image generation and asynchronous video generation with polling, returning public URLs. | |
| lexibridge arion-a/lexibridge Enables LLM clients to search a firm's precedent vault and draft grounded contract clauses, legal memos, and document summaries. | |
| Dooray MCP Server ariri48/dooray-mcp Enables Claude Code to query, create, and modify Dooray tasks via natural language. | |
| aris-md/mcp A minimal, well-structured MCP server implementation for learning and experimentation that exposes three tools: web search, API search, and client ID processing. It demonstrates clean separation between tool, transport, and LLM layers while | |
| mihomo-mcp aris-qin/mihomo-mcp Bridges the mihomo (Clash Meta) RESTful API to the Model Context Protocol, enabling AI clients to switch proxies, test latency, refresh subscriptions, set operating modes, and monitor connections. | |
| ARIS4U MCP Server aris4u-dev/aris4u An MCP server providing per-client memory, governance, and five tools (ingest, search, dialectic, health, recall) for Claude Code, running locally with zero external token cost. | |
| documentize-mcp arise-project/documentize-mcp The Documentize MCP server exposes all document processing capabilities as tools for AI agents and LLM clients — convert, merge, extract, sign, and more, directly from Claude Desktop, VS Code Copilot, Cursor, or any MCP-compatible host. | |
| Agent Sandbox MCP Server arisliwind/cursor-claude-agent-sandbox-mcp Enables AI coding agents to execute safe read-only shell commands immediately and to request one-time human approval before potentially destructive shell or file operations run. It integrates with clients such as Cursor, Claude Code, Copilo | |
| Data Puller MCP Server arisloth/datapuller-mcp-server Enables fetching live crypto market data from Binance, Bybit, and Hyperliquid via MCP tools, including klines, orderbook, funding rates, technical indicators, and market breadth for real-time analysis by LLMs. | |
| vibecheck arisrhiannon/vibecheck Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, co | |
| EMY Weather MCP Server aristath/emy-mcp Provides live Greek weather data from EMY, including forecasts, alerts, marine bulletins, warnings, and climate records. Supports location-based queries by name, ID, or coordinates without requiring an API key. | |
| resto-mcp aristochatti/restaurant-mcp Searches restaurants via Google Places API and returns an interactive carousel, ready for Mistral Le Chat / Alpic. | |
| MCP-Powered Lead Gen & Outreach System aristotile-dev/mcp-powered-lead-gen-enrichment-outreach-system Enables users to run an autonomous sales pipeline through MCP tools for lead generation, enrichment, personalized message drafting, and simulated or live outreach. It supports n8n orchestration and Streamlit dashboard monitoring with SQLite | |
| concert-mcp arisweedler/concert-mcp Enables a small local model to turn ticket screenshots into Google Calendar events, Spotify teaser playlists, setlist.fm lookups, weekly setlist checks, and Telegram topic updates through a few coarse tools. | |
| Bring! MCP Server arithmetic-zz/bring-mcp-server MCP server for the Bring! shopping list API, enabling management of shopping lists via natural language. | |
| setsu aritraghosh01/setsu Provides AI coding agents with token-budgeted, context-aware code retrieval from a persistent code graph, enabling efficient question answering without loading the entire repository. | |
| shugo aritraghosh01/shugo A minimal guardrails framework for AI agents, acting as an MCP proxy to enforce policies, approvals, and audit logging on tool calls. |
30,351–30,400 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.