Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Reddit MCP Server ashc2004/mcp-reddit Access Reddit content (posts, comments, subreddit info) directly in Claude without API keys. | |
| Master MCP Orchestrator ashcastelinocs124/master-mcp Centralized MCP server that intelligently routes user queries to appropriate MCP tools, aggregates responses from multiple servers, and supports both rule-based and AI-powered routing. | |
| MCP Router ashcastelinocs124/mcp-router Automatically selects the optimal LLM model for each task in Cursor IDE by analyzing query complexity, task type, and applying customizable routing strategies across 17 different AI models. | |
| QuickBooks Online MCP ashcir/quickbooks-online-mcp Enables reading and creating invoices, and looking up customers and items in QuickBooks Online via natural language. | |
| deltacontext ashcodei/deltacontext Provides coding agents with read-only MCP tools to search Python repositories, retrieve size-bounded cited source context, analyze dependency impact, and check index status—all via local incremental AST indexing and BM25 retrieval. | |
| Discourse MCP Server ashdevfr/discourse-mcp-server Node.js server that allows searching Discourse forum posts through the Model Context Protocol (MCP), enabling AI assistants to retrieve content from Discourse forums. | |
| studyflow-mcp asheikhofficial3-jpg/studyflow Enables Alexa+ and any MCP host to run complete study-planning sessions — creating plans, adding, updating and completing tasks, and pulling study history, context, and next-step recommendations — all executed against a persistent server-si | |
| Huntaway: SailPoint ISC MCP ashela/huntaway-isc-mcp Enables an MCP client inside VS Code to browse, diagnose and test a connected SailPoint Identity Security Cloud tenant: searching identities, reading and replaying workflows, tracing launcher visibility, inspecting form instances and source | |
| unifiles-mcp asheng008/unifiles-mcp Provides AI assistants with unified file operations via MCP, supporting Excel, PDF, Word, and SQLite file reading, writing, and querying. | |
| MCP Chat ashenoy95/mcp A command-line interface application that enables interactive chat with AI models through the Anthropic API, supporting document retrieval, command-based prompts, and extensible tool integrations. | |
| MySQL MCP Server ashenud/mcp-mysql-server Enables connecting to and querying MySQL databases directly from Cursor IDE, with support for executing SQL queries, listing databases and tables, inspecting schemas, and managing connections with SSL and connection pooling. | |
| jadx-rpc asherdll/jadx-rpc MCP server for analyzing Android APK, DEX, or JAR files via a headless jadx engine, enabling LLM agents to query decompiled code, symbols, call graphs, and more. | |
| pendo-mcp asherjn/pendo-mcp A comprehensive MCP server that provides AI assistants with powerful access to Pendo analytics through 15 specialized tools, transforming natural language questions into deep product insights. | |
| llm-reviewer asheshv/llm-reviewer MCP server for reviewing code changes using LLMs, supporting Copilot, Ollama, and OpenAI-compatible endpoints. | |
| atproto-mcp ashex/atproto-mcp MCP server providing a searchable knowledge base for the AT Protocol ecosystem, including protocol docs, lexicons, Bluesky API docs, and cookbook examples. | |
| unripe ashfall-sh/unripe Checks how long ago a package version was published and returns the newest version older than a minimum age (3 days by default), so an agent avoids brand new releases when adding dependencies. Also checks lockfiles across 15 ecosystems; rea | |
| apache-flink-mcp-server ashfaqbs/apache-flink-mcp-server MCP server that lets AI assistants and LLMs interact with Apache Flink clusters through natural language: cluster/job monitoring, metrics, exception tracking, TaskManager resources, and multi-cluster support via the Flink REST API. | |
| ContainMind ashfaqbs/containmind Enables AI assistants to manage and analyze containers across Docker and Podman through natural language, providing unified inspection, monitoring, and diagnostics. | |
| grasp-mcp-server ashfordeou/grasp 36 tools for codebase dependency analysis, architecture mapping, circular deps, security scanning, dead code, git timeline, and CI tracking. Works with GitHub repos and local directories. | |
| kshana-mcp ashfordeou/kshana Validated PNT-resilience simulator over MCP — SGP4/SDP4 orbit propagation, IAU reference frames, GNSS availability/DOP, GNSS/INS fusion, ARAIM integrity, and Allan deviations, with results validated against AIAA/IGS/SOFA/NIST reference data | |
| mcp-code-todo ashhitch/mcp-code-todo Scans codebases for TODO comments and exposes them as structured data to LLMs, enabling AI assistants to inspect, prioritize, and propose fixes. | |
| MS 365-21V MCP Server ashikaga00372/ms-365-21v-mcp-server Enables MCP-capable AI clients to read and act on a user's 21Vianet-operated Microsoft 365 mail, calendar, OneDrive, SharePoint, Teams, contacts, and search data as that signed-in user through Microsoft Graph China. Access is bounded by del | |
| mcp-server-bigquery ashikaga35/mcp-server-bigquery Enables LLMs to inspect database schemas, list tables, and execute SQL queries against Google's BigQuery analytics platform. | |
| Charlotte ashikaga47109/charlotte Enables AI agents to browse and interact with web pages through compact, structured page representations instead of full accessibility-tree dumps, returning a lightweight orientation on arrival and targeted element queries on demand. Agents | |
| MCP Proxy Server ashikaga4979/mcp-proxy-server Enables aggregating and routing across multiple backend MCP servers, exposing their combined tools and resources through unified SSE, Streamable HTTP, or Stdio interfaces with optional authentication and web-based administration. | |
| Pushover MCP ashiknesin/pushover-mcp A Model Context Protocol implementation that enables AI agents to send notifications through Pushover.net, supporting message customization with various parameters like priority, sound, and URL. | |
| MCP Frontend Tools Server ashios15/mcp-frontend-tools Provides AI assistants with frontend development tools including component scaffolding, bundle analysis, accessibility checks, and responsive design guidance. Enables automated generation of React components with tests and stories, bundle o | |
| HRMS-Snaplogic-MCP ashish-d-d/hrms-snaplogic-mcp Enables integration between HRMS systems and Snaplogic through the Model Context Protocol, allowing AI assistants to interact with HR data pipelines. | |
| Tangle ashish-patnaik/tangle Enables coding agents to query a codebase's git-history coupling graph to find blast radius, missing coupled files, explain why files change together via PRs/issues, and report how much of the graph was inspected. | |
| firm-memory-mcp ashish-ty/firm-memory Provides AI agents with MCP tools to search, retrieve, propose, and correct firm-wide engineering memories, enforcing taxonomy, scope, provenance, and human approval. | |
| cua-mac ashish200729/personal-ai-computer-mcp macOS MCP server that enables AI agents to directly control the host OS, including mouse, keyboard, windows, files, and accessibility automation for computer-use workflows. | |
| MCP Knowledge Server ashish5jha/mcp-knowledge-server A remote MCP server that indexes Markdown knowledge from GitHub into Cloudflare KV, enabling AI assistants to perform fast keyword searches and retrieve documents with low latency. | |
| AP Invoice Intelligence MCP Server ashish605/mcp-server Enables accounts payable teams to extract invoice data from PDFs and images, detect duplicates, normalize vendor names, calculate payment terms, and validate invoice completeness. Supports local extraction for text PDFs and optional vision | |
| Apple Notes MCP ashishakkumar/apple-notes-mcp Enables AI assistants to search and edit Apple Notes on macOS using semantic search, with safe write operations and full local indexing. | |
| Jev Checkpoint ashishakkumar/jev-checkpoint Enables an AI agent to turn an uncertain routing decision into a confidence-scored choice among explicit routes, with a thresholded recommendation to proceed, review deeper, or ask for human input, while remaining advisory-only. | |
| Google-MCP-Server ashishbhardwaj97/google-mcp-server Enables appending text to Google Docs and creating Gmail drafts via OAuth 2.0. | |
| AI-PR-Review-MCP ashishchandpa/ai-pr-review-mcp An MCP server that automates pull request reviews using multiple LLM providers (OpenAI, Claude, Gemini, Groq, Perplexity) and supports GitHub and Bitbucket with real-time webhook integration and interactive AI assistant commands. | |
| pulse-mcp ashishcloud/agentpulse-pulse Enforces build discipline for coding agents via a phase state machine, contract validation, and deterministic gate checks through MCP tools like pulse_next, pulse_submit, pulse_gate, and pulse_verify. | |
| Firecrawl MCP Server ashishdevthakur3-max/firecrawl-mcp Enables web scraping, crawling, and content extraction by integrating with the Firecrawl API. It supports deep research, batch scraping, and automatic rate limiting for both cloud and self-hosted environments. | |
| bunkervm ashishgituser/bunkervm Enables time-travel debugging for AI agent sandboxes using Firecracker microVMs, with tools for code execution, file operations, and VM snapshot/restore via MCP. | |
| ashish-portfolio-mcp ashishk9670/ashish-portfolio-mcp Enables MCP-compatible AI clients to query structured portfolio data such as experience, projects, skills, contact info, and blog posts without scraping HTML. | |
| python-adtech-mcp-server ashishkanchan98/python-adtech-mcp-server Exposes 23 AdTech tools as REST endpoints for AI agents to discover and call via HTTP. | |
| Expense Tracker MCP Server ashishkathane599/test-remote-mcp-server An MCP server that lets AI assistants add, list, and summarize personal expenses using natural language, backed by SQLite. | |
| jobs-mcp ashishkosana/jobs-mcp MCP server for live US software-engineering job search from public ATS boards, with tools to search jobs and list sources. | |
| express-to-mcp ashishlohia70/express-to-mcp Enables existing Express routers to be exposed as MCP tools, dispatching tool calls through the Express middleware stack in-process without a network hop. | |
| Yodlee MCP Server ashishmerani/yodlee-mcp-server Connects Claude Desktop to Yodlee financial data, enabling account management, transaction queries, spending summaries, and audio narrations. | |
| Fable Amazon MCP ashishnotfound/amazon-sp-api-to-mcp Enables authenticated access to Amazon India SP-API commerce intelligence and controlled operations, including orders, finances, listings, pricing, reports, sales/traffic metrics, and profit analysis. It also supports gated Amazon mutations | |
| LinkedIn OpenID MCP ashishodu2023/linkedin-mcp Multi-user Model Context Protocol server that connects ChatGPT / Claude / Cursor to LinkedIn using only LinkedIn’s official Sign In with OpenID Connect API. | |
| Model Context Protocol Server ashishpatel26/agentic-rag-with-mcp-server A server exposing intelligent tools for enhancing RAG applications with entity extraction, query refinement, and relevance checking capabilities. | |
| tell-ai-ui-critic ashishpatill/designproof An MCP server that captures rendered UI, diagnoses design tells and consistency drift, and generates redesign diffs from natural language art direction, all within Cursor. |
31,101–31,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.