Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| metu-course-info-mcp atesahmet0/metu-course-info-mcp Enables querying METU course details, curriculum requirements, prerequisites, equivalents, and student course categories from the METU Student Portal via MCP tools. | |
| metu-sais-mcp atesahmet0/metu-sais-mcp Connects AI assistants to METU's Student Affairs Information System using real SSO authentication, enabling retrieval of student info, schedules, transcripts, and announcements through MCP tools. | |
| metu-webmail-mcp atesahmet0/metu-webmail-mcp Enables AI assistants to securely access METU Webmail via IMAP/SMTP to list, search, read, send, reply, flag, and organize emails. | |
| F-MCP (Figma MCP Bridge) atezer/fmcp Enables AI assistants to read, analyze, and modify Figma designs, manage design tokens, and create prototype connections, all while keeping data local. | |
| PaperMCP atffang/papermcp A lightweight, local, multi-project isolated paper index server that provides dual retrieval (BM25 + dense vector) via MCP, enabling agents to search and manage paper collections across isolated projects. | |
| calendar-mcp atfinke/calendar-mcp Exposes Apple Calendar data through an EventKit helper app. Enables reading, creating, updating, and deleting calendar events on macOS. | |
| contacts-mcp atfinke/contacts-mcp Local MCP server that exposes Apple Contacts data, enabling phone, email, and name lookups via a helper app. | |
| Eight Sleep MCP atfinke/eight-sleep-mcp Unofficial MCP server for Eight Sleep, reverse-engineered from observed mobile app traffic and validated against live device behavior. | |
| Fandango MCP atfinke/fandango-mcp Unofficial, read-only MCP server for Fandango showtimes and seat availability, reverse-engineered from observed web traffic. | |
| Lose It MCP atfinke/loseit-mcp Enables access to Lose It calorie tracking data including daily summaries with budgets and remaining calories, weekly history, and food logs. Integrates with the Lose It web app API to retrieve nutrition information and dietary entries for | |
| Mail MCP atfinke/mail-mcp Local MCP server for macOS Mail reads plus visible unsent compose, reply, and forward drafts, and constrained single-message moves. | |
| opentable-mcp atfinke/opentable-mcp MCP server for anonymous OpenTable restaurant discovery and availability checking, enabling restaurant search, autocomplete, and table availability queries without an account. | |
| pixelle-mcp-Image-generation ath-maas/pixelle-mcp The AIGC solution based on the MCP protocol seamlessly transforms the ComfyUI workflow into an MCP Tool with zero code, enabling LLMS and ComfyUI to join forces and focus on image generation tasks. qwen-image, flux, and FLUx-KREA can be use | |
| fhir-journey-mcp ath404/fhir-journey-mcp Gives AI agents read-only access to patient context on any FHIR R4 server, including journey timelines of encounters and appointments, open booking slots, and discharged patients whose follow-ups were never booked. Search, appointment, and | |
| Argus athapong/argus A Model Context Protocol tool for analyzing code repositories, performing security scans, and assessing code quality across multiple programming languages. | |
| AgentBridge MCP Server atharv51-creater/mcp-server-connecting-to-github-iqoo Enables phone-issued approve/commit/push/pull commands to control an AI coding agent's git actions by bridging GitHub webhooks and MCP tool calls. | |
| PowerPoint MCP Server atharva-bedekar/powerpointmcp Enables conversational, deterministic inspection, editing, rendering, and validation of PowerPoint (.pptx) presentations, allowing agentic creation and modification of slides with style preservation and visual verification. | |
| CDP MCP Server atharva-joshi77/cdp-mcp An MCP server that provides LLMs with access to Acquia's Customer Data Platform API. It offers approximately 300 tools for managing CDP tenants, campaigns, workflows, reports, and other administrative tasks, along with eight playbook resour | |
| Bybit MCP Server atharva-varpe/bybit-mcp Enables LLMs to interact with Bybit V5 API for market data, trading, account management, and position tracking. | |
| seedance-mcp atharva3vedi/seedance-mcp Enables Claude to generate ByteDance Seedance videos and Seedream images through a BytePlus key, pricing every request in dollars before it is sent. It adds budget limits, ask-first approvals and whole-key spend tracking so costly generatio | |
| bharatnet atharvad999/agentknows MCP server for internet access across Western and Indian platforms, enabling reading, searching, and hot content retrieval from stocks, news, hackernews, YouTube, GitHub, and more. | |
| Lemon Squeezy Server atharvagupta2003/mcp-lemonsqueezy Integrates with Lemon Squeezy to manage subscriptions, checkouts, products, orders, customers, license keys, and webhooks programmatically with audit logging capabilities. | |
| MCP Stripe Server atharvagupta2003/mcp-stripe A server that integrates with Stripe for handling payments, customers, and refunds through the Model Context Protocol, providing a secure API to manage financial transactions. | |
| MCP Agent atharvajadhav/mcp-agent A production-ready research agent that enables users to perform web searches via the Model Context Protocol (MCP) and a FastAPI client interface. | |
| MCP Helpdesk Server atharvapatil31/mcp-server-local Enables AI assistants to manage helpdesk tickets by viewing open tickets and resolving them with resolution notes via a MySQL database. | |
| Weather MCP Server atharvawadekar/weatherforecast_mcpserver Provides weather forecasts for US locations using OpenStreetMap geocoding and the National Weather Service API, enabling natural language queries like city names or addresses. | |
| MCP Server for ETL Orchestration atharvpatwardhan/mcp-server-for-etl-orchestration Enables natural language-powered ETL workflows using Airflow, AWS Glue, Athena, and S3, allowing LLM agents to control and monitor data infrastructure. | |
| llm-migrate athenaxlee/llm-migrate Enables coding agents to inspect Python applications, research source and target models, and produce reviewable migration plans with evidence gates and evaluation before production code changes. | |
| Statline MCP athithyai/statline_mcp Enables language models to search and query Statistics Netherlands open data, turning natural-language questions into traceable statistics by discovering tables, resolving codes, and retrieving filtered observations. | |
| MCP Azure DevOps Server athosschrapett/mcp-azure-devops Enables interaction with Azure DevOps for managing work items, pull requests, and pipelines through natural language. | |
| prospector-mcp athoune/prospector-mcp Enables running Prospector static analysis on Python files or directories via MCP, returning structured results with severity, location, and rule codes. | |
| docs-mcp athroniaeth/piighost-docs Serves the prerendered technical guide and business wiki pages over the Model Context Protocol, letting assistants look up documentation content and the stable identifier URLs meant to be cited from code, issues and the chatbot. A companion | |
| Cadence atifali-pm/cadence Exposes CRM tools from HubSpot to Claude and other agents, enabling pipeline analysis, deal risk detection, and automated follow-up drafting. | |
| Enterprise MCP Gateway atifksiddiqui/mcp-baldr Aggregates multiple downstream stdio MCP servers behind a single endpoint, namespacing their tools so AI clients can discover and call filesystem, GitHub, SQLite, and other tools through one connection. Provides crash detection, auto-restar | |
| project-hub-mcp atikahjapry/project-hub-mcp MCP server that enables AI assistants to run multi-step agent pipelines (e.g., Issue Analyst → Code Writer → Test Runner → PR Opener) from conversations, with support for Devin, shell, Python, and HTTP agents. | |
| MCP Strava Server atikant-sql/mcp-strava Enables Claude to access and analyze your Strava activities through OAuth authentication. Supports retrieving activity lists and detailed workout data for fitness tracking and analysis. | |
| notion-mcp-server atikk-co-jp/notion-mcp-server An MCP server for Notion API with optimized token efficiency and full database property filtering, enabling AI assistants to manage pages, databases, and blocks. | |
| Interactive Brokers MCP Server atilcan/ib-mcp Enables real-time stock and options market data retrieval from Interactive Brokers through IB Gateway. Provides stock quotes with price and volume information, plus options quotes with bid, ask, and last price data. | |
| Tesouro Direto MCP Server atilioa/tesouro-direto-mcp Enables natural language access to Brazilian treasury bond data through the Tesouro Direto API. Query market data, bond details, and search bonds by type, maturity, and other criteria. | |
| embedded-mcp atillab1/embedded-mcp Lets AI assistants read, command, and debug microcontrollers over a serial connection via MCP. Provides tools for serial port discovery, reading serial output, sending commands, and decoding register values. | |
| Dreamhack MCP Server atimevil/dreamhack_mcp Enables interaction with the Dreamhack wargame platform to fetch problem lists, download challenge files, and deploy them locally using Docker or Python for cybersecurity practice. | |
| AIKEA atimics/aikea Enables users to design flat-pack furniture such as bookcases, cabinets, cubes and desks through natural-language conversation, then generates CNC-ready DXFs, cut and hardware lists, printable assembly instructions and a quote request for a | |
| figma-diff atinseau/figma-diff Enables agents to compare a live web page against a Figma frame and receive a bounded JSON verdict of design deviations, without sending screenshots or mockups through the model context. | |
| Nuxt MCP Server on Vercel atinux/mcp-with-nuxt A simple Nuxt application that serves as a Model Context Protocol server deployable on Vercel, allowing developers to implement AI tools, prompts, and resources through the MCP TypeScript SDK. | |
| iwork-mcp atipicguy/iwork-mcp An MCP server that drives Pages, Numbers and Keynote from Claude Code (or any MCP client): it generates documents, spreadsheets and presentations, and exports them to PDF or Word. | |
| squoosh-mcp atiquefiroz/squoosh-mcp Enables AI agents to batch-optimise whole image folders, picking the format, size and quality for each image individually. Each output is the smallest file that still meets an SSIMULACRA 2 visual-quality target, with responsive srcset marku | |
| Forex Factory Calendar MCP atirek-pro/forexfactory-mcp Enables AI agents to access and analyze Forex Factory economic calendar data, including enriched event details and summary statistics, through MCP tools and resources. | |
| Codebase Intelligence MCP Server atishay2411/codebase-analyzer-mcp-server A production-grade MCP server for local git repositories that provides tools for code search, git history analysis, complexity metrics, test discovery, and dependency management. | |
| Yahoo Finance MCP Server atishayjn/yfinance-mcp Provides comprehensive financial data from Yahoo Finance, enabling retrieval of stock prices, company information, financial statements, options data, analyst recommendations, and market news through natural language queries. | |
| NinjaOne MCP Server atiwan/ninjaone-mcp Enables AI assistants to interact with NinjaOne through a decision-tree interface for managing devices, organizations, alerts, and tickets via natural language. |
31,501–31,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.