Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Shoppingate MCP Server ashishprajapati14/mcp-server Enables merchants and customers to interact with the Shoppingate AI Platform, including product searches, inventory management, order tracking, promotions, and personalized recommendations via natural language. | |
| Enterprise Knowledge Mesh ashishsantikari/case-study-mcp-server Enables AI agents to query structured knowledge across enterprise domains (legal, HR, compliance) with metadata-driven filtering and TF-IDF ranking. | |
| sharepoint-mcp-server ashishsurve353/sharepointmcpclient SharePoint MCP Server is an enterprise-ready Model Context Protocol (MCP) server built with C# .NET 9. It enables local AI models (such as Ollama, Qwen, and Llama) to securely connect to Microsoft SharePoint and query document libraries, si | |
| linkedin-mcp ashishtechsavvy/linkedin-mcp Enables LLMs to manage LinkedIn posts and view analytics through a set of MCP tools, including creating, reading, and deleting posts, checking authentication, and retrieving profile info. | |
| TD/OMS MCP ashishthomas2202/tdoms-mcp A standalone MCP server for TD/OMS change management that connects directly to TD/OMS REST APIs and enables workflow planning, execution, and monitoring for IBM i development tools. | |
| Telegraph MCP Server ashishwarkhade/telegraph-mcp Connects MCP-compatible agents to Telegraph's network of AI miners, exposing inference tools with automatic x402 micropayments handled transparently. | |
| OIC Monitoring MCP Server ashisshaw001/oic-mcp-server Enables AI agents to query Oracle Integration Cloud read-only across multiple environments in plain language, covering integrations, runtime instances, errors, schedules, connections and flow design through 36 GET-based tools. | |
| BrewBoard CRM MCP Server ashita2005/crm_mcp Connects Claude.ai to the BrewBoard Supabase database for analytics and post-visit customer messaging, exposing tools like revenue summary, peak hours, orders, and a simulated revisit message. | |
| Recipe MCP ashitamv/mcp-meal-planner Enables recipe research and meal planning for MCP-compatible AI hosts, including dish search, recipe inspection, meal plan creation with repeatable writes, and consolidated shopping list generation. | |
| Realtime Sales Dashboard ashitaprasad/sample-realtime-dashboard-mcp-apps Streams simulated sales data via WebSocket and renders live KPIs, state rankings, sparkline charts, and an activity feed within an MCP App iframe. | |
| Telegram Pager MCP Server ashizam/mcp-server-telegram-pager A specialized MCP server that allows AI coding assistants to send direct messages via your personal Telegram account. | |
| iotforge ashlarforge/iotforge Enables AI assistants to discover and control IoT devices on local networks and via Bluetooth LE. | |
| MCP Browser Agent ashley-ha/mcp-manus A browser automation agent that enables Claude to interact with web browsers through the Model Context Protocol, allowing for actions like navigating websites, manipulating elements, and managing browser state. | |
| recall-memory-mcp ashleyevz89-hue/recall-memory-mcp Enables AI agents to store, retrieve, and self-improve procedural memories (lessons learned) based on relevance to the current task, pruning unused memories to reduce context load and prevent repetition of past mistakes. | |
| notes-mcp ashleykarhoff/notes-mcp Enables AI assistants to search and retrieve content from local Markdown notes using term-frequency scoring. | |
| fare-alert ashleymao523/fare-alert Enables users to search flight and train fares, create and delete low-fare watch alerts, and retrieve monitoring snapshots through natural language. | |
| read-website-fast ashleynikolaidis52/mcp-read-website-fast Fetches webpages and crawls sites locally, stripping noise and converting content into clean, link-preserving Markdown with a minimal token footprint. Supports configurable crawl depth, concurrency, robots.txt compliance, and caching for ef | |
| Zendesk MCP Server ashleysaito524/zendesk-mcp-server Enables LLM clients to retrieve, create, and update Zendesk tickets and comments, and to search Help Center articles as a knowledge base, with per-operator OAuth so each caller acts under their own Zendesk permissions. It also ships prompts | |
| MultiZen ashleysullivan412/multizen-browser Enables AI agents and human operators to drive isolated browser profiles with persistent cookies, fingerprints, and proxies through MCP, including navigation, clicking, typing, extraction, screenshots, JavaScript evaluation, tabs, cookies, | |
| GatorPath ashleytzele/gatorpath Enables SF State students to plan their degree with any AI assistant by answering what remains, generating multi-year paths, selecting and ordering courses, and verifying every plan against the official Bulletin. | |
| knowledge-base-server ashleywatson06/knowledge-base-server Enables AI agents to share a persistent, self-learning memory by ingesting and classifying knowledge from Obsidian, code, transcripts, bookmarks, and terminal sessions, then retrieving token-optimized context through MCP and REST APIs. | |
| Phantom Secrets MCP Server ashlrai/phantom-secrets Enables AI coding tools to securely manage secrets via MCP tools for vault operations, diagnostics, and cloud sync, ensuring real keys never enter the LLM context. | |
| birkin-mnemosyne ashmoonori-afk/birkin-mnemosyne Local Markdown memory for AI agents with multilingual BM25 retrieval (optional semantic fusion). Search, recall, write, archive and curate notes in a vault you choose via the mnemosyne-mcp server. | |
| OmniAgent MCP Mesh ashokmukherjee6/omni-agent-mcp-mesh Enterprise-grade asynchronous multi-agent orchestration and MCP router mesh framework, enabling DAG-based workflows, consensus-driven agent swarms, and REST/telemetry gateway. | |
| locallens.mcp_server ashokwebs/locallens Enables agents to analyze a business's Google Maps visibility, compare it with local competitors, and scan an area for prioritized improvement opportunities through SerpApi-backed tools. | |
| TypeScript MCP Server Boilerplate ashotchumore/my-mcp-server A boilerplate project for quickly developing Model Context Protocol (MCP) servers using TypeScript, with example tools (calculator, greet) and resources (server info) pre-implemented. | |
| cortexmem ashprakash/cortexmem Persistent memory for AI coding agents. Builds semantic memory from git history and codebase, searchable via MCP tools. | |
| Meshy MCP Server ashraf2hub/meshy-mcp-server-main Enables AI agents to create, manage, and download 3D models, textures, images, rigged characters, and animations through natural conversation using the Meshy AI platform. | |
| AI Agents Talk to Figma MCP ashrafulorangetoolz/claude-talk-to-figma-mcp-main Enables AI agents to read, analyze, and modify Figma designs, including bulk style updates, accessibility audits, comment triage, and code generation from designs. | |
| drive-file-browser-mcp ashrafur02-sys/drive-file-browser-mcp MCP server that lets AI assistants browse, search, and read files from a Google Drive folder, supporting local stdio and remote HTTP deployments with tools like list_files, search_files, get_file_info, and read_file. | |
| Synthetic Audience MCP ashray/hud-rsi-synthetic-audience-mcp An MCP server for testing whether a draft asset is likely to resonate with a target audience. | |
| XRPL Data MCP ashraychowdhry/xrpl-data-mcp Integrates multiple XRPL data sources including LOS, Validator History Service, XRPL JSON-RPC, and XRPLMeta to provide comprehensive querying of XRPL network data, accounts, transactions, tokens, validators, and more via MCP tools. | |
| project-notes ashrftvm/ccs-yt-repo A personal MCP server for managing a folder of markdown notes. It provides tools to search and list notes, resources to access individual notes, and a prompt for weekly summaries. | |
| TraceFlow Compress ashritkvs/distil Serverless MCP connector for compressing prompts with TraceFlow metrics (tokens, cost, latency, compute, energy, carbon). Provides compression, analysis, routing, and caching tools. | |
| cPanel MCP Server ashrobertsdragon/cpanel-mcp Provides AI assistants with the ability to manage email accounts through cPanel's UAPI, enabling automated email account creation, deletion, configuration, and forwarding management. | |
| Markdown RAG ashrobertsdragon/rag-mcp A Retrieval Augmented Generation system that enables AI assistants to perform semantic searches and manage document indices for markdown files. It supports PostgreSQL with pgvector and integrates both Google Gemini and Ollama for intelligen | |
| Script Runner MCP Server ashrobertsdragon/script-runner-mcp Enables execution, listing, reading, and help retrieval of local Bash, PowerShell, and Python scripts from a specified directory. | |
| Monday MCP ashrocket/monday-mcp A local Model Context Protocol server for monday.com that translates plain column values into the exact API shapes monday.com stores, with column-title-aware tools for reading and writing boards, items, updates, and users plus safety rails | |
| telemcp ashtokalo/telemcp An MCP server that gives AI assistants read-only access to your personal Telegram account via MTProto, enforcing a whitelist of allowed chats and never marking messages as read. | |
| global-news-intelligence-mcp ashtondebug/global-news-intelligence-mcp MCP server that fetches, ranks, and summarizes global news from 28 RSS sources across 12 categories, exposing 16 tools for LLMs to query technology, AI, finance, politics, and more. | |
| AgentBrowser ashtonvaughan/agentbrowser A semantic browser runtime for AI agents that replaces raw HTML with structured data and dynamic, page-specific tools. It features built-in site memory and automated bot detection bypass to enable efficient, self-healing web automation. | |
| Jira MCP Server ashu-arora/jira-mcp-server Enables VS Code Copilot to interact with your Jira instance—Cloud, Server, or Data Center—through natural language for issue search, creation, updates, comments, transitions, assignments, project listing, and user profile lookup. | |
| jioaicloud-mcp-server ashu-codeai/jioaicloud-mcp-server Local MCP server for managing JioAICloud backups from Cursor, enabling browsing, duplicate detection, safe trashing, album management, and inventory exports using your own account. | |
| screener-mcp ashu017/screener-mcp Exposes Screener.in data for Indian stocks (NSE/BSE) — fundamentals, financial statements, peers, and price/EPS time-series — as tools any MCP client can call. | |
| browser-mcp-lab ashu0729will/browser-mcp-lab Enables browser automation through MCP, providing tools for navigation, interaction, page inspection, and form handling via a pinned Playwright MCP server. | |
| Oracle ADB AI Agent MCP Server ashuashu20691/lighting-mcp Enables AI-powered database operations on Oracle Autonomous Database via natural language, including SQL translation, schema exploration, and API orchestration. | |
| mcp-for-redash ashuqwe/mcp-for-redash MCP server that connects AI assistants to Redash, enabling listing of assets, read-only query execution, dashboard inspection, and alert management through the Redash API. | |
| SolAegis ashusatyarthi-wq/solaegis-defai Equips AI agents with institutional risk management and execution tools for Solana and Hyperliquid, enabling Kelly-criterion position sizing, VaR/CVaR analysis, Monte Carlo simulations, circuit breaker checks, and wallet/funding data querie | |
| Whatify MCP Server ashusingh1/whatify-mcp Exposes Whatify's WhatsApp API as tools for MCP-compatible AI clients, enabling sending messages, templates, and flows, and reading contacts, conversations, campaigns, and wallet balance. | |
| DunderMifflin MCP Server ashutosh-nagaria/enterprise-policy-mcp An MCP server providing role-based access control for HR policies, exposing tools to list, retrieve, and check access to policy sections while filtering sensitive data by role. |
31,151–31,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.