Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| polka artkruglov/polka Enables AI agents to store artifacts with versioning, share them via revocable links, and manage team templates. | |
| mcp-session-insight artljn/mcp-session-insight Enables AI assistants to query and analyze past Claude Code sessions, providing structured insights like file changes, decisions, errors, and git history across projects. | |
| ios-sim-mcp artmamedov/ios-sim-mcp A Model Context Protocol (MCP) server for iOS Simulator automation. Enables AI assistants to visually interact with iOS apps running in the simulator. | |
| Web Developer MCP Server artmann/web-developer-mcp Enables AI assistants to inspect web pages, monitor network requests, extract HTML, analyze console output, and examine DOM elements in real-time through a Playwright-powered browser. | |
| yii2-mcp-server artmin96/yii2-mcp-server Enables database schema inspection, Yii2 console command execution, and project management tools for Yii2 framework via Claude Code. | |
| Inficy artnames/inficy-plugin Captures AI agent runs and turns them into tamper-evident execution records showing tool use, timing, failures, recoveries, and human interventions. Records can be inspected, exported, and verified offline. | |
| AWS Well-Architected Framework MCP Server artofthepossible/mcp-well-architected This server provides guidance and recommendations based on AWS's Well-Architected Framework for cloud architectures, enabling analysis and review focused on operational excellence, security, reliability, performance efficiency, cost optimiz | |
| MCP Google Tools Server artoxem/yet-another-google-mcp A full-featured Model Context Protocol server that gives AI assistants real-time access to Google Workspace services including Drive, Gmail, Calendar, Sheets, Docs, and Apps Script. | |
| remote-mcp-server-authless artproadvertising/remote-mcp-server-authless Enables deploying a stateless remote MCP server on Cloudflare Workers without authentication, allowing custom tools to be called from remote MCP clients like Cloudflare AI Playground and Claude Desktop. | |
| google-search-mcp artryazanov/google-search-mcp Enables LLMs to perform real-time Google searches and retrieve web results via the MCP protocol. | |
| url-content-mcp artryazanov/url-content-mcp MCP server that fetches raw HTML content from a given URL to provide web context to LLMs. | |
| Guild Wars 1 MCP artsabintsev/guildwars-reforged-mcp Read-only MCP server for public Guild Wars 1 sources (wiki, builds, YouTube, Reddit) and optional local install inventory. | |
| kernel-build-mcp arttttt/kernel-build-mcp An MCP server designed for remote Linux kernel cross-compilation over Tailscale SSH. It enables users to manage configurations, execute kernel builds, and retrieve build artifacts directly through an MCP-compatible interface. | |
| mnemo arttttt/mnemo A persistent, local memory layer for AI coding agents that remembers decisions, bugs, and rules across sessions with three core MCP verbs (recall, remember, search). | |
| umami-mcp-server arttus/umami-mcp-server Enables natural-language analytics against Umami, including traffic stats, time series, sessions, custom events, and filtered breakdowns, plus self-hosted admin CRUD for websites, users, and teams, and client onboarding. | |
| Celo MCP artugrande/celo-mcp Enables read and write access to the Celo blockchain including balance checks, token transfers, swaps, agent identity (ERC-8004), and x402 micropayments, returning unsigned transactions for user signing. | |
| djangorestframework-mcp-server artui/django-spec-mcp Enables Django apps to expose ServiceSpec-defined services and selectors to agents as MCP tools, resources, and prompts over a single Streamable HTTP endpoint. Specs are registered directly, with no router, viewset, or API framework involve | |
| SkillHub MCP artuntan/skillhub-mcp Enables AI assistants to search, discover, and get recommendations from 20,000+ skills, tools, agents, rules, and MCP servers. | |
| nb-mcp artur-ershov/nb-mcp A remote MCP server that gives Claude the ability to generate and edit images with Google's nano banana (Gemini 2.5 Flash Image) model. | |
| pipe-opencode artur-matkowski/mcp-opencode Enables inspection and control of a running OpenCode TUI session, including live pane capture, prompt injection, interrupting turns, and blocking waits for session state changes. | |
| wikijs-mcp artur-matkowski/wikijs-mcp Enables Claude to search, read, create, update, move, and version Wiki.js markdown pages while keeping comments and blocked-tag pages inaccessible. | |
| uefn-agent-mcp artur-piatkevich/fortnite-map-copilot Enables any MCP client to drive the Fortnite map editor through typed, safety-validated tools — placing and tagging props, renaming assets with Verse-reference pre-flight, authoring prefabs, exporting textures for visual identification, and | |
| Brain MCP artur0927/brain-mcp Enables hybrid dense and BM25 search over a markdown vault, with tools for reading, writing, grepping, and managing notes through any MCP-compatible client. | |
| Skills Search MCP artur282/skills-mcp A powerful MCP server that brings the skills.sh ecosystem directly to your AI agents, enabling effortless discovery, installation, and management of skills. | |
| siril-mcp artur73737/siril-mcp Enables LLM clients to control a live Siril GUI session through an in-app Python bridge, exposing tools to inspect image state and selection, run commands or scripts, get previews and statistics, and undo operations. | |
| Lextiva Compliance MCP Server arturayupov/lextiva-mcp Provides AI agents with access to a structured compliance dataset covering privacy and AI regulations across jurisdictions, enabling verifiable answers to regulatory questions via tools and resources. | |
| livostyle-catalog-mcp arturayupov/livostyle-catalog-mcp Live access to 2,766+ women's fashion products from Livostyle.com via 6 tools — search products, get product details, list 158 collections, generate outfit recommendations by occasion/budget/season, and view catalog stats. Weekly-synced fro | |
| Teradata MCP Server arturborycki/mcp-teradata Enables secure interaction with Teradata databases through SQL queries, schema exploration, and business intelligence analysis with enterprise-grade OAuth 2.1 authentication and workload management capabilities. | |
| clinic-engine arturio-amorim/clinic-engine Provides MCP tools to list valid appointment slots, schedule, reschedule, and cancel appointments under a clinic's business policy (hours, buffers, minimum notice, practitioner availability). | |
| finance-agent arturio-amorim/finance-agent-mcp Enables AI agents to call deterministic finance tools (compound interest, loan payment, currency conversion, etc.) through MCP, with a shared tool registry used by both the agent loop and MCP clients. | |
| lex-rag arturlascala/lex-rag Serves legal retrieval-augmented generation over Brazilian federal legislation, returning exact statutory text with URN-LEX and Planalto URLs to prevent hallucination, running locally with optional GPU acceleration. | |
| Synorive arturoaeriform174/synorive Enables private, offline semantic search across local files (documents, images, videos) using OCR and vector search, and optionally performs web research with cited sources. | |
| YouTube MCP Server arturochent/youtube-mcp Enables Claude to search YouTube for artists and manage playlists on your YouTube account. | |
| flashpass-mcp arturodz/flashpass-mcp Enables an AI assistant to work with a FlashPass account's eAPIS data: reading and editing the address book of persons, updating aircraft, and creating or changing manifest drafts while leaving CBP submission as a manual step. It maps PRADO | |
| mcp-common-crawl arturseo-geo/mcp-common-crawl MCP server for Common Crawl CDX that enables backlink discovery, expired domain finding, and competitor gap analysis without requiring API keys. | |
| Crawl Parity MCP arturseo-geo/mcp-crawl-parity An MCP server for analyzing Googlebot vs AI crawler parity from Nginx access logs and Google Search Console data. | |
| mcp-gsc-advanced arturseo-geo/mcp-gsc-advanced MCP server for advanced Google Search Console analysis — keyword cannibalization detection, page-level query deep dive, and rank change tracking. | |
| mcp-seo-auditor arturseo-geo/mcp-seo-auditor MCP server for on-page SEO auditing and JSON-LD schema validation, providing tools for full SEO audit, schema validation, heading hierarchy, and image audit without requiring API keys. | |
| Jokes MCP Server arturvillas/mcp Provides tools to retrieve humor-focused content, such as Chuck Norris jokes, from specific categories. It serves as a demonstration for deploying and integrating Model Context Protocol servers with Microsoft Copilot Studio and Azure. | |
| AI Agent Generator arturwyroslak/ai-agent-generator-mcp Enables creation and deployment of AI agents through natural language by providing tools for agent specification, smart component integration from 500+ ready-to-use components, and one-click deployment with intelligent auto-configuration. | |
| ARTPARK Public Data MCP Server artvandelay/artpark-datasets-mcp Enables AI assistants to access and query ARTPARK's public health datasets including dengue epidemiology, livestock census, and FMD vaccination data through a structured 4-step workflow for data discovery and retrieval. | |
| GovWait artwisdom/govwait Source-backed government processing times with current values, history, comparisons, and provenance. | |
| Boards & Pins MCP Server artyomredko-collab/sapyx-mcpclone An MCP server that lets Claude interact with Pinterest — browsing, creating, and managing boards, pins, sections, and user profiles via the Pinterest API v5. | |
| dsh-linear-mcp arucil/dsh-linear-mcp Enables MCP clients to read and manage Linear issues, sub-issues, relations, comments, projects, cycles, teams, users, labels, and workflow states using a personal API key. | |
| dsh-slack-mcp arucil/dsh-slack-mcp Enables interacting with Slack through MCP using a keyring-backed launcher, providing messaging, search, reactions, files, conversation management, and workflow tools while keeping credentials out of configuration. | |
| ai-engineering-brain arui-git/ai-engineering-brain A unified MCP Gateway for enterprise knowledge, code, and memory tools, featuring admin management for documents, accounts, and MCP keys, with local network deployment support. | |
| ERPNext MCP Tools arui-world/erpnext_mcp_tools MCP server for ERPNext that provides read-only access to business data and controlled creation/update of draft documents, with strict security, RBAC, field whitelisting, audit, idempotency, and optimistic locking. | |
| stencil-mcp arul1998/stencil-mcp Provides AI coding agents with version-aware StencilJS API references, decorator signatures, lifecycle hooks, and best practices to help them write idiomatic Stencil code. | |
| SpecuLab-MCP arulmuruganmcse2024-tech/speculab-mcp Enables agents to perform autonomous multi-angle specular glare healing and planar foil defect metrology by ranking candidate views, fusing glare-free views, and finalizing inspection or escalating unresolved cases through MCP tools. | |
| MCP Calculator arulrajnet/mcp-calculator A Model Context Protocol (MCP) server example with calculator tools, built using FastMCP. |
30,801–30,850 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.