Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Qlik MCP Server arthurfantaci/qlik-mcp-server A comprehensive MCP server that provides complete access to Qlik Sense applications and their detailed information for AI assistants and other MCP clients. | |
| Cloudflare Playwright MCP arthurfdossantos1-stack/playwright-mcp-example Enables AI assistants to control a browser through tools for web automation, including navigation, typing, clicking, and taking screenshots. | |
| meet-memory arthurglv/meet-memory Turns Google Calendar history into a searchable people CRM, enabling queries about meeting patterns, relationships, and contacts through natural language with any MCP client. | |
| MCP Exploration arthurgoupil/mcp-server-boilerplate A simple MCP server that provides a calculator tool for basic arithmetic operations. | |
| opencode-hermes-mcp arthurhtr/opencode-hermes-mcp Enables a supervisor LLM to delegate coding tasks to a persistent OpenCode server, block until the turn completes or needs input, and resume the same turn with answers or permission decisions. | |
| Sonicmatch arthurkaramanlis64/sonic-match-mcp Enables MCP clients to ingest and analyze video footage, then receive license-safe BGM recommendations with hook windows, beat/cut guidance, attribution, and ffmpeg ducking or mix specs. | |
| Google Maps MCP Server arthurkatcher/google-maps-mcp Enables AI assistants to access Google Maps services including places search, details, directions, geocoding, and nearby search through natural language. | |
| meta-mcp-manager arthurkatcher/meta-mcp-manager Federates multiple MCP servers into a single endpoint with search, call, and admin tools, plus inbound/outbound OAuth. | |
| arxiv-latex-mcp arthurkumar00157/arxiv-latex-mcp Enables MCP clients like Claude Desktop, Claude Code, and Cursor to fetch and process arXiv papers' LaTeX sources, so equations and notation are interpreted accurately; it exposes tools for retrieving a paper's full flattened LaTeX, abstrac | |
| slop-guard arthurm38886/slop-guard Enables agents to analyze text or files and receive numeric slop scores, band labels, specific violations with context, and concrete writing advice, using rule-based diagnostics with no LLM judge or API calls. | |
| job-pilot arthurpanhku/job-pilot JobPilot is a next-generation career assistant powered by AI Agents and the Model Context Protocol (MCP). It acts as your personal recruiter, tirelessly searching for jobs on platforms like LinkedIn, optimizing your resume for specific job | |
| vagas-mcp arthurpenedo/vagas-mcp Enables Claude to organize a job search by registering openings, advancing applications through a status funnel, measuring conversion rates between stages, and flagging applications that have gone quiet and need follow-up. Data is kept loca | |
| flask-mcp-server arthurperch/flask-mcp-server MCP server to control a Flask application and optimize AWS costs, providing tools for app management, AWS resource checking, and cost analysis via Claude. | |
| AutoCAD MCP Pro arthurromano/autocad-mcp Enables AI agents to author, inspect, and validate CAD drawings either by driving a live AutoCAD session over COM on Windows or headlessly through ezdxf on any platform. It covers mechanical, architectural, and P&ID work — including ISO-com | |
| GraphRAG MCP Server arthursrz/graphragmcp Enables graph-powered semantic search over the Grand Débat National dataset, providing fast, transparent answers with provenance tracing back to citizen contributions. | |
| Claude Telegram Supercharged arthurtamkoc859/claude-telegram-supercharged Enables running coding-agent sessions 24/7 from Telegram, with two-way voice notes, persistent memory across restarts, live tool-call progress, scheduling, and permission approvals. | |
| io.github.morluto/flameox arthurv87447/flameox Enables agents to turn explicit artifact paths or commands into bounded local runtime evidence by coordinating profilers, benchmark tools, and trace processors across application, native, and GPU workloads. Produces typed provenance-backed | |
| DevSpace arthurwangwsx-code/devspace This self-hosted MCP server connects an MCP client such as ChatGPT to approved local project folders, enabling file reading and editing, code search, shell command execution, and Git worktree workflows without uploading code to a third part | |
| duckdb-analytics-mcp arthurxavier106/duckdb-analytics-mcp A read-only DuckDB MCP server offering context-efficient analytics tools (list_datasets, describe_table, profile_column, explain, query) with a semantic layer for business rules, security guards, and disclosed truncation to help LLMs produc | |
| enfusion-mcp articulated7/enfusion-mcp An MCP server for Arma Reforger and Enfusion engine modding that enables users to create mods, search API classes, and generate scripts through natural language. It provides a comprehensive suite of tools for scaffolding addons, generating | |
| Obsidian Semantic MCP artificemachine/obsidian-semantic-mcp A persistent memory layer for Claude Desktop that enables semantic search across your entire Obsidian vault using local embeddings and PostgreSQL + pgvector. | |
| @antops/mcp artificial-works/antops-developer Enables safe, read-only access to AntOps Change Risk status and history, private documents, workspace overview, and integration configuration via an allow-listed stdio interface. | |
| Motion MCP Server artiinjooo/motion-mcp-server1 Bridges Motion's API with LLMs to manage tasks, search projects, check schedules, and more through natural conversation. | |
| MCP Client Portal artik0din/mcp-client-portal A lightweight MCP server for client relationship management, enabling client tracking, notes, and search via natural language. | |
| Cloudflare DNS MCP Server artik0din/mcp-cloudflare-dns Enables AI assistants to manage Cloudflare DNS zones and records, including listing, creating, updating, and deleting DNS records through natural language. | |
| Gandi MCP Server artik0din/mcp-gandi Enables AI assistants to manage Gandi domains and LiveDNS records directly via the Gandi API v5. It supports comprehensive domain management operations and full CRUD functionality for various DNS record types. | |
| Google Cloud DNS MCP Server artik0din/mcp-gcloud-dns Enables AI assistants to manage Google Cloud DNS zones and records, supporting full CRUD operations for various record types and DNSSEC management. It provides secure service account authentication to interact directly with Google Cloud's g | |
| mcp-git artik0din/mcp-git A complete Git CLI wrapper for the Model Context Protocol (MCP), enabling AI assistants to perform all git operations through MCP tools. | |
| MCP GitHub Dashboard artik0din/mcp-github-dashboard A comprehensive GitHub project dashboard for MCP that monitors multiple repositories, pull requests, issues, deployments, and health status through AI assistants. | |
| MCP Google Calendar Server artik0din/mcp-google-calendar Enables calendar management through Google Calendar API with OAuth2 authentication, multi-account support, and features like event creation, availability checking, and attendee management. | |
| MCP Heroku Server artik0din/mcp-heroku Provides comprehensive Heroku application management through the Heroku Platform API for AI assistants using the Model Context Protocol. It enables users to scale dynos, view deployment history, access logs, and manage environment variables | |
| MCP LinkedIn Sales Navigator artik0din/mcp-linkedin-sales-navigator Enables AI assistants to search leads, view profiles, manage lists, send InMails, and export data from LinkedIn Sales Navigator through browser automation. | |
| globodai-mcp-phantombuster artik0din/mcp-phantombuster A Model Context Protocol (MCP) server that provides tools to interact with the PhantomBuster automation platform, enabling agent management, execution monitoring, and result retrieval through MCP-compatible AI assistants. | |
| Waalaxy MCP Server artik0din/mcp-server-waalaxy Enables users to manage Waalaxy LinkedIn automation campaigns through MCP tools using browser automation (Playwright) to interact with the Waalaxy web interface. | |
| IFMIB KFU MCP artikstur/mcp-start Enables users to search for information about the Institute of Fundamental Medicine and Biology at KFU and retrieve academic group schedules. It uses OpenRouter to understand natural-language questions and automatically invoke MCP tools. | |
| MTG Deck Manager MCP Servers artillect/mtg-mcp-servers Enables Magic: The Gathering players to manage decks and access card information through Claude, supporting gameplay actions like drawing cards and mulligans while providing Scryfall API integration for card lookups. | |
| Workflow MCP Server artin0123/memory-mcp Enables AI assistants to evaluate task complexity, verify package installation safety, and log complex reasoning processes. Provides structured assessment of multi-step tasks and environment validation for safer code execution workflows. | |
| MyWhoosh MCP Server artinlenz/mywhoosh-mcp-server Enables AI assistants to interact with the MyWhoosh API using natural language, allowing users to create workouts, manage training sessions, schedule tasks, and adjust settings. | |
| mcp-ebook-read artipyheart/mcp-ebook-read A local MCP server that lets LLM agents read EPUB books and PDF documents with outline-first navigation, precise node reads, and local SQLite persistence. | |
| mcp-jumpserver-gui-sucks artipyheart/mcp-jumpserver-gui-sucks A JumpServer 443-only MCP bridge for coding agents that exposes a CLI-first, MFA-compatible, audit-preserving path into JumpServer assets without GUI or port 2222 dependencies. | |
| nodemaven-mcp artirain/nodemaven-mcp MCP server that lets AI agents route web requests through NodeMaven residential and mobile proxies, with tools for geo-targeted fetching, proxy checking, and location/usage queries. | |
| euinvoice-mcp artisan-at-work/euinvoice-mcp An MCP server for European invoicing rules. Query VAT rates, e-invoicing requirements, format specifications, and compliance rules for EU-27 + EEA countries. | |
| es-mcp artisan-soohao/es-mcp Enables querying Elasticsearch logs from AI assistants using natural language, with optional SSH tunnel support. | |
| DuckDuckGo MCP Server artivus-labs/ddg-mcp A server that provides DuckDuckGo search capabilities (text, image, news, video search and AI chat) through the Model Context Protocol. | |
| Playwright MCP artivus-labs/playwrite-mcp Playwright wrapper for MCP that enables LLM-powered clients to control a browser for automation tasks. | |
| MCP Google Maps artixz/mcp-google-maps Provides access to Google Maps functionality including places search, geocoding, directions, distance calculations, elevation data, and static map generation through the Model Context Protocol interface. | |
| Tea Rags MCP artk0de/tearags-mcp A high-performance MCP server for semantic search and codebase indexing using the Qdrant vector database. It features optimized embedding pipelines, AST-aware chunking, and git metadata enrichment for fast, privacy-focused local or remote s | |
| @artemsemkin/envato-market-mcp artkrsk/envato-market-mcp MCP server for the Envato Market API that provides AI agents with purchase verification, item lookup, comment search, sales data, and account info. | |
| ticksy-mcp artkrsk/ticksy-mcp MCP server for the Ticksy support ticket API, enabling AI agents to read and write support tickets. | |
| lanka artkruglov/lanka Enables AI agents to create, edit, and review presentation slides within a self-hosted collaborative editor, with access to shared libraries and discussion tools. |
30,751–30,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.