Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mermaid-ai-links MCP async23/mermaid-ai-links Enables AI hosts to generate and open Mermaid diagram links in Markdown files, providing tools for syncing, listing, and injecting diagrams via the Mermaid.ai editor. | |
| Read My ChatGPT async23/read-my-chatgpt Provides a read-only MCP server to access ChatGPT conversation history via a local browser process. Allows AI clients to list, get, and search conversations from the authenticated user's ChatGPT account. | |
| RustChain MCP Server async777/rustchain-mcp-server Enables MCP-compatible clients to query the RustChain blockchain, check balances, list miners, view epoch info, check network health, transfer RTC, and browse recent transactions and bounties. | |
| Calculator MCP Server asyncbot31/mcp A calculator-focused MCP server for learning NitroStack fundamentals, providing tools, resources, and prompts. | |
| simple-index-mcp asyncdefi/simple-index-mcp A Python MCP server for indexing projects using embeddings, providing semantic search to help AI agents navigate codebases. | |
| asyncdv-docs asyncdv-solutions/obsidian-docs-mcp Enables AI clients to document a code repository inside an Obsidian vault, capturing tasks, incidents, feature guides, architecture decisions, and release notes with per-claim evidence and cited sources. It reads the repo read-only through | |
| Reddit Research MCP asynchronous-0x4c/reddit-research-mcp Read-only MCP server for Reddit. Searches and analyzes Reddit content without writing, ensuring all posts are done manually via the Reddit UI. | |
| log-probe-mcp asynchroza/log-probe-mcp Enables MCP-compatible coding agents to debug applications using runtime log data, by providing tools to start a local log-ingestion server, track debugging sessions and hypotheses, and correlate logs to specific executions. | |
| asynkor asynkor/asynkor Coordination layer for AI coding agents working on the same codebase. Adds file locks, shared project memory, and cross-machine file sync so Claude Code, Cursor, Windsurf, and other MCP agents stop overwriting each other. | |
| tokenzip asynx6/tokenzip Enables estimating and optimizing image token usage for vision models by resizing images to provider-specific dimensions, reducing upload bytes without changing token cost, and supports batch directory processing. | |
| garmin-claude-mcp aszental/garmin-claude-mcp Enables Claude to read recent Garmin training and wellness data and to create, update, or delete structured workouts through intervals.icu so they sync to Garmin Connect and a user's watch. | |
| CloakBrowser MCP aszymanski29698/cloakbrowser-mcp Enables AI agents to drive real browser automation through an unchanged Playwright MCP tool surface backed by CloakBrowser Chromium, with persistent profiles, proxy matching, humanized input, and npm, Docker, or Streamable HTTP deployment. | |
| Trackor at0mxploit/trackor Enables users to track and manage personal expenses through natural language, including adding entries, filtering by date/category, viewing statistics, and exporting data in JSON or CSV format. | |
| ERP MCP Server atabic/project-logs-mcp MCP server for Arbisoft's ERP system, enabling AI assistants to read and write project time logs via OAuth-authenticated tool calls. | |
| simple-parallels atahan99/simple-parallels MCP server for managing Parallels Desktop VMs, including lifecycle operations and snapshots. | |
| Task Scheduler MCP Server ataidecarlos/agentic-task-scheduler Enables AI agents to create, update, delete, list, and inspect OS-native scheduled tasks and their logs across Windows, Linux, and macOS through a unified interface. | |
| mochi-quest ataiishere/mochi-quest Enables AI agents to act as personal growth coaches, allowing users to set goals, receive personalized daily tasks, and track progress with dynamic replanning and reward systems. | |
| gemini-research-tools-mcp atakamizawa/gemini-research-tools-mcp Integrates Gemini API research capabilities (Deep Research, Quick Search, URL Analysis) into a unified MCP server, enabling comprehensive research, web search, and URL analysis through natural language. | |
| QA-MCP: Test Standardization & Orchestration Server atakan-emre/mcptestgenerator Enables LLM clients to generate standardized test cases, perform quality control with lint scoring, convert to Xray/Jira format, and compose test suites (Smoke/Regression/E2E) with coverage analysis. | |
| Nutanix MCP Server atalhens/ntnx-mcp A Model Context Protocol server for Nutanix Virtual Machine Management APIs, enabling users to manage VMs, images, alerts, and logs via natural language through a CLI chatbot or any MCP client. | |
| monday-graphql-mcp ataliarf/monday-graphql-mcp Enables AI assistants to help developers build on the monday.com GraphQL API by validating queries, explaining errors, providing column value formats, introspecting the live schema, executing queries, and scaffolding boilerplate code. | |
| mcp-server atamayop2018/mcp-server Enables scraping and comparing LLM inference pricing from multiple providers using Firecrawl, storing results in SQLite for analysis. | |
| Weather MCP Server atan2016/weather_mcp Enables retrieving US weather alerts and forecasts from the National Weather Service API via natural language. | |
| alisveris atanur/alisveris Enables AI assistants to clarify clothing needs with simple questions, search across 11 clothing stores, verify product pages, and generate swipeable card-based reports with PDF export. | |
| trendyol-mcp atanur/trendyol-mcp Enables AI assistants to drive a visible Chrome session to search products, apply filters and sorting, and extract listings, product details, variants, stock, reviews, and AI-generated summaries. It also supports price tracking, cart previe | |
| MCP Directorio Acámbaro atapia9/mcp-directorio-acambaro Enables AI assistants to search local businesses in Acámbaro, Guanajuato, and generate digital presence diagnostics linked to SDDA services. | |
| atlassian-mcp atatter/atlassian-mcp Enables coding agents to search and read Jira Cloud issues with read-only, per-project access controls while keeping the API token in the OS keychain. | |
| aso-audit-mcp ataygamesmode-ops/aso-audit-mcp Model Context Protocol (MCP) server for App Store Optimization. Score your App Store / Google Play listing metadata, check character limits, and clean up the iOS keyword field — right inside Claude, Cursor, or any MCP client. | |
| Houdini MCP Server atayilgun/houdini-claudecode-mcp Enables AI-assisted 3D content creation by allowing Claude Code to control SideFX Houdini directly, including creating nodes, setting parameters, executing HScript commands, and building complex procedural networks. | |
| atbridge atbridge-ai/atbridge Local MCP server for Thunderbird: read, search, and send emails and manage calendars, contacts, notes, and tasks across every mailbox (Gmail, Outlook, IMAP). Runs on your machine and talks to your Thunderbird locally — reads are open, write | |
| tomsk-transport atbuba/transport-mcp MCP server providing real-time public transport data for Tomsk, including routes, schedules, stops with lazy OSM enrichment, nearby stop search, and a routing prompt for LLMs. | |
| Lore atcuality2021/lore-slack-agent An MCP server that captures and retrieves team decisions and facts from Slack with provenance, supporting search, remember, and forget operations, while integrating with external tools via MCP client. | |
| UEMCP atdev-inc/uemcp Enables Claude to control Unreal Engine 5 editor, spawn actors, build materials, author Blueprints, and more, with zero plugin installation. | |
| vlp-mcp-agent ate-labs/vlp-mcp-agent MCP server for automating VLP lab VM operations, exposing VM management tools to AI agents like Cursor and Claude Code. | |
| SentinelMCP ateeqdesktop-dot/sentinel-mcp Enforces deterministic security policies as an inline firewall for MCP server tool calls, with AST-based validation, cryptographic audit logging, and CLI-based evaluation and verification. | |
| @atef_andrus/mcp-ripgrep atefandrus/mcp-ripgrep An MCP server that wraps ripgrep to provide powerful text search, search-and-replace, file listing, and file type listing capabilities within a defined scope. | |
| atelier-busco-github-mcp atelier-busco/atelier-busco-github-mcp Connects LLMs and AI agents directly to GitHub repositories, enabling repository inspection, file and tree exploration, code search, commit history, issues, pull requests, and releases for both public and private repos. | |
| multimail-mcp ateliersavant/multimail-mcp Enables Claude, ChatGPT, and Codex to search, read, draft, and send email across several Google Workspace mailboxes owned by separate companies from a single connector, with hard tenant boundaries and human-approved draft-then-send workflow | |
| Jupyter MCP Server atemmeta/jupyter-mcp-server-new An MCP server that enables AI to connect and manage Jupyter Notebooks in real-time, with support for cell operations, execution, and multimodal outputs. | |
| MCP Atende Direito One atende-direito/mcp-atende-direito-one Deploys a remote MCP server on Cloudflare Workers without authentication, supporting custom tools and connections to AI Playground and Claude Desktop. | |
| mcp-server-kafka atengk/mcp-server-kafka Enables large language models and AI agents to securely and efficiently interact with Apache Kafka clusters through the Model Context Protocol. | |
| mcp-server-nacos atengk/mcp-server-nacos Enables LLM and AI-agent clients to operate a Nacos 3.0 control plane through MCP tools, resources, and prompts—covering configuration publishing, rollback, history and drift checks, namespace management, service discovery, instance registr | |
| mcp-server-rabbitmq atengk/mcp-server-rabbitmq Enables LLMs to declare and manage RabbitMQ AMQP topologies, publish and consume messages, diagnose backlogs, and monitor cluster and connection health through MCP. | |
| mcp-server-rdbms atengk/mcp-server-rdbms Enables LLMs to safely explore, query, diagnose, and modify relational databases through a unified set of schema introspection, SQL execution, and administration tools. Supports multiple database backends with AST-level read-only guards, au | |
| mcp-server-redis atengk/mcp-server-redis Enables LLMs to safely explore and operate Redis instances, with read-only keyspace inspection, multi-structure data access, memory and big-key analysis, slow query diagnostics, and optional opt-in write operations. | |
| @atengk/mcp-server-s3 atengk/mcp-server-s3 Enables LLM and AI agent clients to manage S3-compatible object storage such as MinIO, AWS S3, Aliyun OSS, Cloudflare R2, and Tencent COS through the Model Context Protocol. It provides 19 production-grade tools covering bucket lifecycle, o | |
| mcp-server-ssh atengk/mcp-server-ssh Enables LLMs and automation agents to securely connect to and operate Linux/Unix hosts over standard OpenSSH, including command execution, interactive PTY sessions, SFTP file management, and dynamic multi-host connection handling. It also i | |
| GMS2 MCP Server atennebris/gms2-mcp-server An MCP server that parses GameMaker Studio 2 projects, providing developers and AI agents with quick access to project structure, GML code, and asset metadata. | |
| Bitbucket MCP Server atercates/bitbucket-mcp MCP server for integrating with Bitbucket Cloud and Server APIs, enabling AI assistants to interact with repositories, pull requests, pipelines, and more. | |
| effective-potato aterx-hobby/effective-potato Provides a sandboxed Ubuntu 24.04 container for secure command execution, with tools for git operations, background tasks, and GUI automation (screenshots and screen recording). |
31,451–31,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.