Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| SparkMango aryabhuptani/sparkmango A Model Context Protocol server that converts Solidity bytecode into functional server implementations, allowing interaction with blockchain contracts through a RESTful API. | |
| Slack MCP Server aryahadii/slack-mcp-server A Model Context Protocol server that provides read-only access to Slack data including messages, channels, and users through secure API endpoints. | |
| screener-mcp aryamanw/mcp-screener MCP server that provides access to screener.in financial data for Indian stocks, enabling queries for company info, financials, ratios, quarterly results, shareholding, and stock screening. | |
| H1B Job Search MCP Server aryaminus/h1b-job-search-mcp Enables searching and analyzing H-1B visa sponsoring companies using U.S. Department of Labor data. Supports filtering by job role, location, and salary with natural language queries to find direct employers and export results. | |
| @aryaminus/socials-mcp aryaminus/socials-assistant Enables social media creators to pull TikTok, Instagram, Facebook, and YouTube analytics into a persistent vault, receive weekly digests, review scripts, build media kits, and draft brand outreach using official APIs only. | |
| Tilt MCP Server aryan-agrawal-glean/tilt-mcp Enables LLMs and AI assistants to interact with Tilt development environments, providing tools to list resources, fetch logs, and monitor status. | |
| Canada's Food Guide MCP Server aryan-jhaveri/mcp-foodguidecanada Provides 42+ specialized tools for nutrition analysis integrating Canada's Food Guide recipes with Health Canada's official databases (CNF, DRI, EER) for recipe discovery, macro calculations, energy requirements, and dietary adequacy assess | |
| Maker Lab aryan-sk6/maker-lab Enables students to generate interactive MCP App widgets inside ChatGPT and Claude: turnable 3D models and working mechanisms (gears, pulleys, rack and pinion) with editable tooth counts and STL export, physics and maths simulations such as | |
| storykit-mcp aryan0078/storykit-mcp MCP server for the StoryKit asset library — search and embed free, generated design blocks (charts, widgets, illustrations, themes) straight from your editor. | |
| GridWatch aryan13102006/bob-ai-hackathon-gridwatch Enables utility operators to forecast transformer oil temperature, assess synthetic outage risk, rank impacted assets, and generate maintenance plans through IBM Bob MCP tools. | |
| mcpgram-mcp-server aryan418-dev/mcpgram-mcp-server Model Context Protocol server for MCPGRAM that enables MCP clients to interact with connectors like GitHub, Slack, and Notion through stdio or Streamable HTTP transports. | |
| observer-launch-mcp aryanbansal-launch/observe-launch-mcp-draft Gives Claude live access to your Observe tenant, enabling natural language queries about errors, logs, and metrics without writing OPAL pipelines. | |
| pdf-edit-mcp aryanbv/pdf-edit-mcp Enables editing text in existing PDFs by modifying content stream operators, preserving original fonts and positions. Provides fidelity reports on every edit, indicating font preservation, substitution, overflow, and other degradations. | |
| Sheet aryanjsingh/sheet Enables AI agents to build and edit real HTML/CSS designs on a live canvas through 35 MCP tools, letting them inspect screenshots, computed styles and layout, then export production-ready React or Tailwind code. Humans can refine the same l | |
| bibtex-mcp aryankeluskar/bibtex-mcp CLI and MCP server for fetching multiple BibTeX options from Google Scholar's visible citation export flow. | |
| Canvas MCP - College and High School Courses aryankeluskar/canvas-mcp A set of tools enabling AI agents to interact with Canvas LMS, allowing users to find relevant resources, get course information, and navigate modules through natural language queries. | |
| mcp-worker aryankeluskar/mcp-worker A lightweight template for deploying stateless Model Context Protocol (MCP) servers on Cloudflare Workers using the Agents SDK. It provides a simple way to wrap MCP tools into Worker-compatible fetch handlers for serverless tool-calling cap | |
| Plausible Analytics MCP Server aryanko/plausible-mcp A read-only stdio-based MCP server that provides tools to query Plausible Analytics data, including listing sites, fetching statistics with metrics/dimensions/filters, and getting realtime visitor counts. | |
| imessage-mcp aryanma/imessage-mcp Enables reading and sending iMessages on macOS through MCP, with tools for managing chats, messages, and attachments via AI agents. | |
| Turbopuffer MCP Server aryanma/turbopuffer-mcp Enables interaction with the Turbopuffer vector database to manage namespaces and perform operations like data writing, querying, and schema updates. It supports DAuth-style authentication for secure, runtime credential management. | |
| embodied-mcp aryanmangal769/embodied-nav-mcp Enables a language model to perceive a robot's surroundings, navigate to referenced objects, count instances, and stop when finished, via tools for viewing, grounding, driving, and counting. | |
| MCP-Based Weather Information System aryanmanral27/mcp-based-weather-information-system Provides current weather information for any location and generates AI-powered responses using Google Gemini through FastMCP. | |
| GitLab MCP Server aryannverse/custom-gitlab-mcp Enables AI coding assistants, agents, and pair programmers to read, write, and orchestrate GitLab SaaS or self-hosted instances through 218 tools spanning merge requests, issues, pipelines, runners, repositories, and more, with configurable | |
| Garmin Health MCP Server aryanp45/garmin-mcp Exposes Garmin Connect health data (steps, sleep, HR, HRV, stress, activities, etc.) as tools for MCP-compatible clients like Claude. | |
| Connexia MCP Server aryanpatel1403/connexia Converts existing Express, Fastify, NestJS, Hono, or Koa backends into an MCP-compatible server accessible to AI clients like Claude Desktop and Cursor. | |
| agentic-ops-builder aryanpatel27/sentinel-agent Enables natural-language Q&A, human-approved actions, and dashboard generation over a data ontology via MCP. | |
| Sales Analytics MCP Server aryanpatial/mcp-server Provides read-only access to a sales database, letting LLMs answer analytics questions like revenue by region or top customers via MCP tools. | |
| career-ops-mcp aryanpawar67/career-ops-mcp Enables tracking of job applications and freelance leads through an MCP interface, with tools to add and update items, list and summarize the pipeline, flag stale entries, and draft follow-up messages grounded in each item's logged notes us | |
| industry4-mcp aryanprooo/industry4-mcp MCP server that bridges industrial IoT data with conversational AI, enabling natural language queries to machine health telemetry through ChatGPT. | |
| linkedin-mcp aryanrajmaurya/linkedin-mcp Enables MCP-capable agents to read and update a LinkedIn profile, check and publish posts through the official LinkedIn API. Includes a built-in quality gate that blocks drafts reading as machine-generated before anything reaches the public | |
| WHOOP MCP aryanranderiya/whoop-mcp Gives LLM agents read-only access to your WHOOP data — recovery, sleep, strain, workouts, and profile. | |
| Guardian Ops aryanrangapur/vulnerability-scanner-mcp-server Enables network vulnerability scanning and CVE detection through an AI assistant, with optional remote port blocking via Discord bot. | |
| Custom Google Workspace Server aryansaxena04/ira-multi-agent-mcp-orchestrator-system Enables AI agents to create and append to Google Docs and Sheets through MCP, including matrix-based row writes and dynamic text injection into document bodies. | |
| MechaMate MCP Server aryanshrisha06/mechamate Enables clients to read and diagnose Arduino telemetry, retrieve Uno R3 component specifications and wiring guidance, persist bounded project notes, run synthetic lab simulations, propose confirmation-gated virtual actions, and compile bund | |
| CAP V2 Case MCP aryansiddhantsap-ctrl/sap-17-cap-scv2-case-mcp Enables AI agents to manage SAP Sales Cloud V2 cases through MCP tools, supporting listing, retrieving, creating, and updating case records. | |
| MCP Server Basic Example aryansingh-ai/mcp_server A basic MCP server that provides arithmetic tools (add, subtract) and a greeting resource, demonstrating core MCP concepts. | |
| ContextBridge aryansingh4161-cmd/contextbridge Enables AI assistants to read and write local-first, provider-independent project memory and context handoffs over MCP, preserving accumulated knowledge and development progress across conversations. | |
| ExpenseTracker aryansingho07/mcp-server Enables users to manage personal expenses by adding entries, listing them by date range, and summarizing spending by category through MCP tools, while exposing category data as a resource. | |
| agentic-travel-recs aryanyeole/agentic-travel-recs Exposes tools for retrieving member profiles and personalized travel recommendations with multi-tenant partner rule enforcement, enabling AI agents to respect business constraints like caps and exclusions. | |
| Google Workspace MCP Server aryaprashant23/mcp_server Enables AI agents to create Gmail drafts and append content to Google Docs, supporting automated review analysis and notification workflows. | |
| Zepp Cloud MCP aryarfani/zepp-cloud-mcp Enables read-only access to Amazfit/Zepp fitness data via the unofficial Zepp cloud API, exposing normalized health and workout metrics to MCP clients. | |
| fal-mcp aryasaatvik/fal-mcp A Model Context Protocol server for discovering and documenting Fal.ai models, enabling listing, schema retrieval, and documentation generation for coding agents. | |
| Roamio MCP Server aryashahprog/roamio-mcp Event discovery based on your actual schedule, location, and who's free -- delivered inside iMessage via Poke. | |
| Atoms MCP Server aryasmol/atoms-mcp-server Manage agents, debug calls, and view analytics for the Atoms voice AI platform directly from your IDE. | |
| Yandex Delivery MCP aryazansev/-yandex-delivery-mcp MCP server for Yandex Delivery API, allowing AI assistants to manage deliveries, track couriers, and handle orders. | |
| RetailCRM MCP Server aryazansev/retailcrm-mcp Integrates RetailCRM API with AI assistants, enabling access to orders, customers, and products from your CRM through natural language commands. | |
| BlenderMCP aryeon0228/blendermcp Enables Claude Desktop to control Blender 5.0.1 on Windows for tasks such as creating 3D objects, executing Python scripts, and rendering scenes. It allows users to manage Blender's environment and perform 3D modeling operations using natur | |
| SolidworksMCP aryesil/solidworksmcp Enables control of a live SOLIDWORKS session through the Windows COM API, providing native sketch, feature, body, reference-geometry, view, probe, and export operations, along with transactional CAD plans, parametric sketches, multibody too | |
| Aryn Local MCP Server aryn-ai/mcp-server Enables processing PDFs via Aryn's API, typically used with a filesystem MCP server for file management. | |
| token-diet aryxnsdfs/token-diet An MCP server that reduces token usage by injecting graph-ranked repo maps, decision logs, and diff-only output into AI coding tool requests. |
30,901–30,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.