Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| CheatCraft-MCP arpanjot-coding/cheatcraft Enables an AI client to work with the desktop-selected process’s typed memory searches, refinements, live watches, snapshot comparisons, progress, and cancellation through a local stdio MCP connection. | |
| NexMem MCP arpanroy41/nexmem-mcp A plug-and-play MCP memory server with pluggable database backends that gives AI coding agents a persistent, shared knowledge graph for teams. | |
| CuraStrand arpanthebaap/curastrand Enables ambient multimodal clinical triage by fusing wearable ECG/PPG and acoustic distress signals, applying deterministic Manchester Triage safety governance, and orchestrating emergency actions such as E911 dispatch, smart-lock access, a | |
| PhytoCausal arpanthebaap/phytocausal Enables agents to fuse leaf radiometry, canopy thermal sensing, and multi-depth soil telemetry into causal do-calculus and Farquhar-von Caemmerer-Berry kinetic analyses that separate drought-induced stomatal chlorosis from genuine nitrogen | |
| hal-mcp arpany-tech/hal-mcp An MCP server that lets AI assistants query the HAL open archive, including publication search, statistics, citation export, and researcher tracking via natural language. | |
| Multi-Agent MCP Server arpit-moga/vibechecker Automates codebase review and documentation generation using specialized AI agents, integrating with MCP for AI workflows and Smithery for deployment. | |
| Gmail MCP Server arpit-saxena-2004/gmail_mcp_server Enables AI assistants to send, search, and read emails via Gmail using OAuth2 authentication. | |
| whoop-mcp-server arpitarunkumaar/whoop-mcp-server Connects WHOOP fitness and recovery data to Claude Desktop, enabling users to query workouts, sleep, recovery, and trends through natural language. | |
| digital-brain arpitasethi-12/digital-brain Enables AI assistants to query your local browsing history using keyword search, RAG Q&A, and activity stats. | |
| sql-mcp arpitg-cashify/sql-mcp NestJS-based MCP server for MySQL with session-level database selection and SQL safety controls. Enables executing SQL queries, listing databases, and connecting MySQL users with configurable safe modes. | |
| warrant arpitjain310/warrant A remote MCP server that lets clients authenticate through an external OIDC provider and search, read, and create per-user notes with verified JWTs, per-tool scopes, and 403 step-up challenges. Every tool call is authorized against a scope | |
| EZFacility Training Prep MCP arpitmadan/ezf-training-prep-mcp Automatically gathers Salesforce deal facts and Gong call transcripts for a given account, compiles them into a training prep checklist, and flags any discrepancies between the data sources. | |
| mcp-multisource arpitpaliwal007/mcp-multisource Enables models to query and act across GitHub, Notion, and Linear through a single access-controlled tool surface, with per-source failure isolation so partial outages still yield useful answers. | |
| sre-toolkit-mcp arpothireddy/sre-toolkit-mcp Enables LLM agents to perform SRE reliability calculations like error budgets and burn rates using deterministic tools, integrating with Prometheus and Loki for real data. | |
| Expense Tracker MCP Server arprovat/expense_tracker_mcp Enables users to manage personal expenses through natural conversation with Claude, including adding, updating, deleting expenses, and viewing summaries by category or date range. | |
| local-corporate-kb arptra/kb-rag-mcp Local RAG knowledge base for Qwen Code, enabling document indexing and semantic search via MCP tools. Supports metadata filtering and document retrieval without external dependencies. | |
| Instagram MCP Server arq0017/instagram-mcp-server A backend server that interacts with the Instagram Graph API to fetch post engagement metrics and insights for Business/Creator accounts, enabling analysis and strategy suggestions. | |
| Universal-Web-MCP arq5158-dotcom/universal-web-mcp Enables AI agents to interact with any website at sub-second speeds by replaying cached JSON/GraphQL API routes, auto-discovering endpoints through CDP network sniffing, and falling back to token-efficient Markdown or accessibility-tree ext | |
| code_nav MCP arqawa/code-nav-mcp Deterministic code navigation MCP server for Codex/CodeCLI that provides compact repo context using git-aware deterministic search tools without semantic search or embeddings. | |
| FilDOS MCP Server arqoslabs/fildos-mcp Enables AI agents to autonomously manage files on the Filecoin decentralized network through folder management, file uploads, and AI-powered semantic search. Provides seamless integration with Filecoin storage through simple MCP tool calls. | |
| autobrr-mcp arr-mcps/autobrr-mcp MCP server exposing autobrr's full API as tools, enabling LLMs to read and manage filters, indexers, feeds, clients, actions, releases, and system config. It wraps approximately 104 endpoints into 13 resource-scoped tools for comprehensive | |
| bookshelf-mcp arr-mcps/bookshelf-mcp MCP server that exposes the Bookshelf (Readarr fork) v1 REST API as tools, allowing an LLM to read and manage authors, books, book files, editions, series, download queue, history, indexers, import lists, custom formats, tags, commands, and | |
| cleanuparr-mcp arr-mcps/cleanuparr-mcp MCP server that exposes Cleanuparr's REST API for inspecting status, history, statistics, jobs, and configuration, enabling natural language interaction with Cleanuparr. | |
| dashbrr-mcp arr-mcps/dashbrr-mcp MCP server exposing Dashbrr's REST API as tools, so an LLM can read and manage a dashbrr instance: configured services, per-service health, and summary panels for many apps. Write tools cover settings management, download-queue deletes, Ove | |
| komga-mcp arr-mcps/komga-mcp MCP server exposing Komga's REST API as tools for browsing and managing comic, manga, BD, magazine, and ebook libraries. | |
| lidarr-mcp arr-mcps/lidarr-mcp MCP server exposing Lidarr's full v1 REST API as tools for reading and managing artists, albums, tracks, queue, history, and more. It enables LLMs to interact with a Lidarr instance via natural language. | |
| mylar3-mcp arr-mcps/mylar3-mcp MCP server that exposes Mylar3's HTTP API as tools, letting an LLM read and manage a comic library including watchlist, wanted issues, upcoming, history, logs, story arcs, and providers. | |
| profilarr-mcp arr-mcps/profilarr-mcp MCP server exposing Profilarr's v1 REST API as tools, enabling an LLM to inspect and manage linked databases, connected Radarr/Sonarr instances, backups, jobs, announcements, and system status. | |
| prowlarr-mcp arr-mcps/prowlarr-mcp MCP server exposing Prowlarr's API v1 as tools for managing indexers, applications, download clients, and more, including cross-indexer searches and system commands. | |
| qbit_manage-mcp arr-mcps/qbit_manage-mcp MCP server exposing qbit_manage's Web API as tools, so an LLM can read and manage a qbit_manage instance: run maintenance commands on qBittorrent torrents, manage config files, scheduler, logs, security settings, and system state. | |
| qbittorrent-mcp arr-mcps/qbittorrent-mcp MCP server exposing qBittorrent's WebUI API v2 as tools, enabling LLMs to manage torrents, categories, tags, RSS feeds, search plugins, and application settings. | |
| qui-mcp arr-mcps/qui-mcp MCP server that exposes qui's JSON REST API as tools for monitoring and managing qBittorrent instances, torrents, automations, cross-seeding, RSS, backups, and related services. | |
| radarr-mcp arr-mcps/radarr-mcp MCP server exposing Radarr's v3 REST API as tools, enabling LLMs to read and manage movies, downloads, history, indexers, and more. | |
| seerr-mcp arr-mcps/seerr-mcp MCP server exposing Seerr's full v1 REST API as tools, enabling LLMs to search and discover media, manage requests and approvals, users, issues, watchlists, and integration settings for Plex/Jellyfin/Emby and Sonarr/Radarr, including reads | |
| sonarr-mcp arr-mcps/sonarr-mcp Exposes the Sonarr v3 REST API as MCP tools, enabling LLMs to read and manage a Sonarr instance including series, episodes, downloads, history, and more. Supports both read and write operations, with destructive tools flagged. | |
| tracearr-mcp arr-mcps/tracearr-mcp MCP server exposing Tracearr's Public API v2 as read-only tools to query Plex, Jellyfin, and Emby monitoring data such as watch history, active streams, media, users, libraries, and recently added items. | |
| open_phone array-ventures/open-phone Enables agents to control a physical iPhone from macOS through local phone tools, including USB capture, Bluetooth HID, and AssistiveTouch interactions. It also exposes relay tools for remote access over Streamable HTTP with optional OAuth. | |
| Notion MCP Server arre-ankit/notion-mcp-server A simple server that integrates with Claude to allow querying and manipulating Notion pages and databases through natural language prompts. | |
| FastAPI MCP Server arrehman3/mcp Wraps a FastAPI application as an MCP server, enabling user and task management operations through Gemini CLI tool calling with full CRUD functionality. | |
| Arkiv MCP Server arrivets/arkiv-mcp Enables AI agents to query entities from Arkiv database chains using a SQL-like filter expression, with pagination and configurable fields. | |
| Google Scholar MCP Server arrogant-r/google_scholar_mcp Enables AI assistants to search and access academic papers from Google Scholar via MCP protocol, with support for keyword, author, and year filtering, CAPTCHA handling, and BibTeX retrieval. | |
| windows2text arronhc/windows2text Enables Windows UI Automation screen-to-text and computer-use via MCP, allowing agents to observe, decide, and act on Windows applications through accessibility data without OCR. | |
| pasm-mcp-server arronjack/pasm-mcp-server Provides a standard MCP interface enabling AI clients to gain long-term memory, emotional continuity, and behavior tendencies through tools for context, recall, observe, feel, act, and feedback. | |
| ruru-swbot-mcp arrow2nd/ruru-swbot-mcp Enables control of SwitchBot devices by name, reducing the risk of AI misidentifying device IDs. | |
| tako-mcp arrow2nd/tako-mcp An MCP server for the Octopus Energy Japan GraphQL API that allows users to retrieve electricity consumption, cost estimates, and contract details. It enables 30-minute interval usage analysis and postal code area searches while ensuring pr | |
| VOICEVOX MCP Server arrow2nd/vv-mcp Enables Claude Desktop and Claude Code to synthesize and play speech using VOICEVOX text-to-speech engine. Supports multiple voice characters, session-based voice assignment, and queue management for audio playback. | |
| DocMesh MCP arrowh3ad/docmesh-mcp Indexes public documentation sites into PostgreSQL and exposes retrieval-only MCP tools for listing sources, searching with citations, and fetching documents. | |
| HEBAT Campus MCP arroyan23/mcp-kampus Provides read-only access to UNAIR HEBAT Moodle e-learning, enabling users to check login status, view dashboard, list courses, and retrieve assignment links. | |
| ADO Instructions MCP Server arroz4/ado-instruction-mcp-server Converts meeting transcripts, text inputs, and images into structured Azure DevOps work items using Azure OpenAI for advanced image analysis. | |
| YouTube Transcript MCP Server arrrggghhh/youtube-transcript-mcp Enables AI assistants to fetch and analyze transcripts from YouTube videos using video IDs or URLs, with support for multiple language preferences. |
30,601–30,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.