Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MySQL MCP Server ashutosh-rajput/mysql-mcp Enables AI agents to interact with a MySQL database using natural language, automating SQL tasks like querying, inserting, updating, and deleting data. | |
| ToolCraft MCP ashutosh-svea/toolcraft C#/.NET patterns and helpers for MCP tools that unreliable agents cannot misuse: result envelopes, corrective errors, safe defaults, truncation transparency, audit hooks. Builds on the official C# SDK and ships a runnable sample server. | |
| portfolio-mcp ashutosh6393/portfolio-mcp A remote MCP server for publishing to ashutoshverma.dev from any Claude client, enabling content management through six tools that read content, serve skills, save drafts, and open pull requests without merging. | |
| github-repo-scout-mcp ashutosh6500/github-repo-scout-mcp Enables AI assistants to search, inspect, compare, and evaluate GitHub repositories using read-only tools, including topic discovery, repository health scoring, security advisories, dependency audits, and supply-chain risk checks. It return | |
| Aindreyway MCP Codex Keeper ashutoshbuilds/mcp-codex-keeper An intelligent MCP server that serves as a guardian of development knowledge, providing AI assistants with curated access to latest documentation and best practices. | |
| Gmail Storage & Cleanup MCP ashutoshchaubeypm/gmail-mcp-tool Enables monitoring shared Google storage quota and recovering Gmail space by scanning cleanup candidates, scoring them deterministically, and requiring review before moving non-protected messages to Trash. | |
| AI Assistant ashutoshsamantaray7127/mcp-integrated-ai-assistance MCP server that provides AI-powered tools including YouTube search, trip planning, notes management, web search, product price comparison, and clock/alarm/reminder features with email notifications. | |
| metacall-mcp ashutoshsharma-pixel/metacall-mcp This MCP server wraps MetaCall FaaS API endpoints as tools, enabling LLMs to list deployments, call functions, and deploy repositories directly via natural language. | |
| ProofYield MCP ashutoshvatsg/proofyield-mcp Enables AI agents to discover verifiable DeFi yield opportunities, generate algorithmic portfolio plans, and track cryptographic proof receipts, bridging LLMs with blockchain yield protocols. | |
| MCP Customer Support AI ashwani-yadav83602/first-customer-mcp-project Enables an AI to perform customer support workflows by looking up customers, retrieving orders, and creating support tickets through MCP tools. | |
| diff-explainer ashwani983/diff-explainer AI-powered git diff analysis with human-readable explanations, risk flags, and review checklists. Enables to explain any diff text or currently staged git changes through an MCP server. | |
| infra-diagnostics-mcp ashwani983/infra-diagnostics-mcp An MCP server providing infrastructure diagnostic tools including port checks, DNS lookups, log parsing, system health, and SSL certificate inspection. | |
| grok-web-sdk MCP ashwaniarya/grok-web-sdk Enables AI agents to generate text, images, and videos via Grok's web UI using MCP tools (grok_chat, grok_generate_image, grok_generate_video) without an API key. | |
| Extremis Memory Connector for all AI agents ashwanijha04/extremis Give long term memory to your agents without building the RAG pipelines. | |
| Spotify MCP ashwanth1109/mcp-spotify A FastMCP tool that enables control of Spotify through natural language commands in Cursor Composer, allowing users to manage playback, search for content, and interact with playlists. | |
| pathpilot-mcp-server ashwanth1709/pathpilot-mcp-server A starter template for building calculator-focused MCP servers using NitroStack, including tools, resources, and prompts. | |
| sqlserver ashwathdazur/mcp-localdata-ai-bridge Enables AI assistants to query, analyze, and manage SQL Server databases through natural language via the Model Context Protocol. | |
| Saleor MCP Server ashwin2912/saleor-dashboard-mcp A Model Context Protocol server that enables AI assistants to interact with Saleor e-commerce data including products, orders, customers, and more. | |
| idrac-design-mcp ashwini97paradkar/idrac-design-mcp Exposes iDRAC design-system knowledge via a single get_component tool, currently returning placeholder data for known components. | |
| Jenkins MCP Server ashwinighuge3012/jenkins-mcp-server An MCP server for interacting with a Jenkins CI/CD server. Allows you to trigger jobs, check build statuses, and manage your Jenkins instance through MCP. | |
| Lessons Learned MCP Server ashwinmram/laravel-mcp-server Central MCP server for storing and querying lessons learned and project-specific implementation details, compatible with MCP-capable AI clients like Cursor, Claude Code, and Google Antigravity. | |
| mcp-repo-health ashwinmridul/mcp-repo-health Scores local git repositories for README substance, license, package description, TypeScript config, tests, and GitHub Actions, providing a numbered hygiene report. | |
| okta-mcp-em-python ashwinramn/okta-mcp-em-python Talk to Okta IGA like you talk to a coworker. Import access data, discover patterns, and create entitlement bundles—all through natural conversation. | |
| Congress[.]gov MCP Server ashwinsundar/congress_gov_mcp Ever wonder what our (US) Congress is up to? Fed up with the news? Ask Congress.gov yourself what's going on. | |
| edge-soc-mcp ashwnn/edge-soc-mcp A Cloudflare Workers MCP server that puts a SOC analyst's enrichment, investigation, and detection-context workflow behind a single endpoint. It aggregates over 20 threat-intel sources into 18 MCP tools for IP, domain, URL, hash, and CVE lo | |
| Skills Registry ashwnn/skills Enables AI clients to discover, search, retrieve, and read supporting files from a centrally published, versioned skill registry through four read-only MCP tools. | |
| Automation MCP ashwwwin/automation-mcp Enables AI assistants to automate macOS desktop tasks including mouse control, keyboard input, screenshots, window management, and UI interaction. | |
| Furikake ashwwwin/furi A local CLI & API for MCP management that allows users to download, install, manage, and interact with MCPs from GitHub, featuring process state management, port allocation, and HTTP API routes. | |
| yt-feed-mcp ashybulakstroy/youtube-unsubscribe-all-mcp Enables AI assistants to list YouTube subscriptions and unsubscribe from all or specific channels via browser automation and InnerTube API. | |
| obsidian-rag asiansumer/obsidian-rag Provides semantic search over Obsidian markdown notes using BAAI/bge-m3 embeddings and ChromaDB, accessible via the Model Context Protocol. | |
| @alog-world/mcp asicojp/alog-mcp MCP server for Alog, an AI × Human blog platform. Enables AI agents to post logs, create and publish articles, search content, and interact socially on alog.world. | |
| sparksheets asicojp/sparksheets-mcp Enables AI-powered document platform integration for Claude Code, Cursor, and Cline, providing session management, knowledge base, usage tracking, sheet operations, and Spark AI features. | |
| Network Incident MCP asif-c/network-incident-mcp Enables LLM agents to triage network incidents by fetching device telemetry, inspecting syslogs, and executing traffic reroutes through MCP tools. | |
| MCP Fullstack Application asif-reh/mcp A complete fullstack application that demonstrates Model Context Protocol integration for AI assistants to securely connect to external data sources and tools, providing task management functionality with a Convex backend and Remix frontend | |
| judge-audit-mcp asif786ka/judge-audit-mcp An MCP server that audits LLM-as-judge evaluations, detecting judge drift across runs, measuring bias through controlled probes, and comparing judge agreement with human raters. | |
| mobile-docs-mcp asif786ka/mobile-docs-mcp A version-aware documentation MCP server for mobile development that verifies API availability against target platform versions. | |
| store-preflight-mcp asif786ka/store-preflight-mcp An MCP server that scans code repositories for app store rejection risks by mapping API usage to required declarations and policy deadlines, enabling agents to catch issues before submission. | |
| Figsor asifkabirantu/figsor Bridges Cursor AI to Figma for chat-driven design creation and editing directly on the Figma canvas. It provides over 45 tools to manage layers, layouts, components, and variables through natural language commands. | |
| Claude Code Toolkit asifkibria/claude-code-toolkit Maintenance, recovery, and observability for Claude Code. CLI + MCP server + dashboard. | |
| Gmail MCP Server asifmarwat/gmail-mcp Provides Gmail tools for sending emails, creating drafts, and reading labels through the MCP framework, enabling AI clients like Claude Desktop to manage Gmail directly. | |
| weather-mcp-pro asifmarwat/weather-mcp-pro MCP server that exposes real-time weather, forecasts, air quality, and multi-city comparison tools via the OpenWeather API for LLM agents. | |
| github-repo-assistant asifumar/github-repo-assistant MCP server for interacting with GitHub pull requests and issues via natural language. Provides tools to list PRs, inspect diffs, check CI status, and post review comments with write-safety guards. | |
| Remote MCP Server asigdel29/remote-mcp-server A template for deploying MCP servers on Cloudflare Workers with OAuth authentication and Server-Sent Events transport. Enables remote access to MCP tools from Claude Desktop and other clients over HTTP. | |
| garmin-raw-mcp asilenin/garmin-tn-mcp Provides raw Garmin Connect data access for training analysis, enabling retrieval of activity summaries, lap data, time-series streams, comments with lactate, wellness metrics, and personal records through an MCP interface. | |
| pulsar-mcp asiloisad-pulsar/pulsar-mcp Enables AI assistants to control the Pulsar editor, including reading and writing files, managing selections, and interacting with project paths. | |
| trello-mcp asim-altayb/trello-mcp A Model Context Protocol server for Trello that connects AI agents to Trello boards with per-project configuration and local credentials. | |
| Local Library MCP asimmetria/uvz-local-library-mcp Local MCP server that provides verified answers about Jimmer and internal libraries using a SQLite FTS5 knowledge base. | |
| Jev MCP asimons81/jev-mcp Enables structured yes/no, multiple-choice, and ordered-score judgments from supplied text and criteria, returning typed probabilities, selected labels, scores, and confidence. It exposes bounded decision tools without search, chat generati | |
| dev-workflow-mcp asimuaf41/dev-workflow-mcp Enables Claude Code to read and search project files, inspect git status and history, generate commit messages, and produce tailored code review checklists through MCP tools. | |
| PaddleOCR MCP Server asin007/pdf-extractor-mcp-tool Enables OCR text extraction from images and PDFs via MCP tools, allowing multiple devices on a local network to use PaddleOCR without installing it locally. |
31,201–31,250 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.