Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Volumen avcruz2000/volumen Enables querying near-real-time capital flows across asset classes, countries, sectors, crypto, and macro instruments, alongside Federal Reserve and crypto liquidity, risk-on/risk-off regime detection, and side-by-side flow comparisons. It | |
| weave-design-system-mcp avcs06/weave-design-system-mcp Enables coding agents to query a workspace's design system before writing UI and validate generated code against the same system afterward, using configurable token and component sources. | |
| sapphire-user-mcp avd-fde-labs/sapphire-user-mcp Exposes user profile data from the Sapphire Wellness App to AI assistants via MCP, providing tools for fetching health alerts, personalized recommendations, and partner service subscriptions. | |
| Sapphire Wellness MCP Server avd-fde-labs/sapphire-wellness-mcp A Python MCP server that exposes health metrics from the Sapphire Wellness App to AI assistants, providing tools for activity, blood pressure, glucose, heart rate, sleep, and SpO2 data. | |
| MCP Agent Hub avdiam/mcp-agent-hub A local message broker for AI CLI agents, enabling multiple agent sessions to communicate, send tasks, and share results through a single HTTP endpoint. | |
| opencode-vision-mcp avdivo/opencode-vision-mcp MCP server for image recognition via OpenRouter AI. It sends an image to a primary model (fast) and falls back to a secondary model if needed, returning a textual description. | |
| space-invaders-tui avee4k/space-invaders-tui MCP server that lets LLMs play a terminal Space Invaders game with the SUPERHOT rule: time only moves when the agent moves. Exposes tools to start a game, inspect the board state, and act by holding left/right/fire for N frames. | |
| Sainpost aveldistarna/sainpost Enables agents and users to keep a shared, append-only SQLite lab notebook across every project on a machine, recording pre-registered hypotheses with falsifiers, measurements, verdicts, and superseding questions. It exposes tools for check | |
| rustchain-mcp avellane-snit922/rustchain-mcp MCP server for the RustChain blockchain and BoTTube video platform, enabling AI-agent-based token earning through model context protocol and proof-of-antiquity. | |
| Apache Hive MCP Server avelloal/hive-mcp-server Enables LLM agents to query Apache Hive/HiveServer2 by listing tables and running read-only SQL, with results returned as JSON. | |
| mcp-service avengermojo/mcp-service A reusable MCP HTTP server with OAuth 2.1 that turns any JSON-RPC handler into a production-ready endpoint with dynamic client registration, PKCE, refresh tokens, and OpenAPI docs. | |
| Surfmeter MCP Server aveq-research/surfmeter-mcp A Model Context Protocol server for the AVEQ Surfmeter management API. It exposes typed tools for clients, measurements, anomalies, groups, ISPs, users, keys, capabilities, settings, license usage, and the built-in AI assistant. | |
| Opti-MCP average-joe25/opti-mcp Enables AI assistants to solve linear, integer, mixed-integer, and knapsack optimization problems using Google OR-Tools via a simple JSON interface. | |
| Bitrix24 MCP Server averagedigital/mcpforbitrix An integration server that enables AI agents to securely interact with Bitrix24 CRM data like contacts and deals via the Model Context Protocol. It provides standardized tools and resources for searching, retrieving, and updating CRM entiti | |
| PDF Reader MCP Server averagejoeslab/pdf-reader-mcp An MCP server that provides comprehensive PDF processing capabilities including text extraction, image extraction, table detection, annotation extraction, metadata retrieval, page rendering, and document structure analysis. | |
| evals-mcp-server averi-org/evals-mcp-server Enables AI agents to search indexed primary-source documents—papers, project websites, and official repositories—for AI benchmarks, with metadata filters such as benchmark, document type, and source URL. | |
| Codex Vault avery320/codex-vault MCP server for browsing Obsidian-compatible Markdown vaults, searching notes, viewing backlinks and knowledge graphs, and adding selected content to chat context. | |
| ITIS Navigator MCP Server averyanovkirill/itis-navigator-rag Enables MCP clients to search locally indexed university documents and retrieve up to three relevant fragments with source references for retrieval-augmented answers. | |
| Ubuntu Fleet Manager averyfreeman/ubuntu-fleet-manager Enables administering Ubuntu hosts through MCP over stdio, currently exposing a read-only get_system_info tool that reports OS release, hostname, kernel, architecture, memory, and root filesystem capacity. | |
| dsh-media averyjohnkucan-arch/dsh-media-tools Enables MCP clients to run audio analysis, editing, conversion, transcription, and listening plus video probing, conversion, and native temporal video analysis, returning plot images, saved files, and report JSON. It supports workspace-scop | |
| codex-dobby-mcp averyy/codex-dobby-mcp A local MCP server that lets Claude delegate scoped work to Codex with structured results and guardrails, supporting planning, code review, build, reverse engineering, and long-running background tasks. | |
| fetchaller averyy/fetchaller-mcp Enables fetching any website without permission prompts, including automatic bot challenge bypass, with built-in web search, Reddit, marketplace, realtor, AliExpress, and Alibaba tools. | |
| PCB Parts MCP Server averyy/pcbparts-mcp Enables searching and filtering over 1.5 million electronic components across JLCPCB, Mouser, and DigiKey using parametric queries and smart parsing. It supports finding alternative parts, accessing pinout data, and downloading KiCad footpr | |
| Job Search MCP Server avfrancev/careers-mcp Enables searching and retrieving job listings from a Supabase database (h.careers) with filters like location, level, salary, and work format. | |
| github-ops-mcp avg-ape/github-ops-mcp An MCP server that provides operational tooling over the GitHub API — issue triage, PR review monitoring, repo health audits, and team access reviews. | |
| zendesk-ops-mcp avg-ape/zendesk-ops-mcp An MCP server that provides operational tooling over the Zendesk Support API — ticket triage, SLA monitoring, agent workload analysis, and system health audits. | |
| Message Control Protocol (MCP) Server avhrst/mcp A REST API server implementation for message handling with Oracle Database integration via ODBC, offering endpoints for creating and retrieving messages with comprehensive error handling. | |
| Weft avi-141/weft Enables AI assistants to access and search your local browsing knowledge graph via MCP resources and tools. | |
| github-mcp avi112005/github-mcp-check Enables GitHub repository analysis including health score, comparison, commit heatmap, and trending MCP servers, with interactive widgets. | |
| Security Testing MCP Server avi686/security-mcp-server Provides penetration testing tools including nmap, nikto, sqlmap, wpscan, and exploit database searches for educational and authorized security testing purposes using Kali Linux tools. | |
| bfxr2-music-generator avi892nash/bfxr2-mcp Generates music and sound effects using Bfxr2, with preset or custom parameter control. | |
| PureScript MCP Server avi892nash/purescript-mcp-tools A Model Context Protocol server that provides PureScript development tools for AI assistants, enabling code analysis, type lookups, and IDE server management without requiring heavy IDE setup. | |
| selenium-recorder-mcp aviadp/selenium-recorder-mcp Records browser interactions (clicks, DOM mutations, console logs, JS errors) via Chrome DevTools Protocol while you manually navigate, and provides tools to retrieve and analyze recordings for test generation. | |
| ZUUZ Pipeline MCP Server avianshgujjeai/zuuz-pipeline-mcp Provides product overview, proof points, case studies, pricing, and comment style tools for brand visibility, no account required. | |
| ai-delivery aviaratech/ai-delivery Enables deterministic GitHub issue and pull request delivery workflows, including issue creation, development, verification, PR publication, review, and merge, with strict configuration and admission controls. | |
| ai-subagent aviaratech/ai-subagent Enables MCP hosts to spawn, send input to, wait for, resume, and close provider-backed child agent sessions across Codex, Claude, and Grok adapters with configurable role presets, though it is experimental and not production-ready. | |
| YellowMCP avib99/yellowmcp Reliability intelligence for remote MCP servers. Agent-native discovery for 1,700+ servers with uptime monitoring and latency benchmarks. | |
| porkbun-mcp-server avicennasis/porkbun-mcp-server MCP server for managing Porkbun domains, DNS, and related services via Porkbun's API. Every mutation requires a reason and is audited for traceability. | |
| redmine-mcp-workflows avicennasis/redmine-mcp-workflows A schema-aware MCP server for Redmine that validates issue writes against workflow graphs and custom field schemas to prevent errors, with tools for issue lifecycle, time tracking, wiki pages, and more. | |
| MCP Template aviciot/mcp-template A minimal, production-ready FastMCP server template with auto-discovery, YAML configuration, authentication, and a knowledgebase, enabling quick scaffolding of new MCP servers. | |
| Screen Vision MCP Server avicuna/screen-vision Enables Claude to capture screenshots, watch your screen in real-time, read text via OCR, and analyze video files, all running locally as an MCP server. | |
| better-jira-mcp aviddiviner/better-jira-mcp Enables querying and managing Jira issues and Confluence pages through their Cloud REST APIs, preserving markdown formatting via direct ADF conversion. | |
| skillsmcp aviddiviner/skillsmcp Exposes Agent Skills to AI agents as MCP tools, enabling discovery and activation of skill instructions for coding agents. | |
| @avidian/mcp-jira avidianity/mcp-jira MCP server for Jira Cloud — gives AI agents full context and control over Jira issues, projects, sprints, and workflows. | |
| mcp-openapi avidianity/mcp-openapi Enables AI agents to discover, search, and call any REST API described by an OpenAPI or Swagger document. Supports multiple API endpoints with authentication and parameter handling. | |
| Avius Visual MCP avidni/avius-visual-mcp Enables coding agents to connect to and interact with Avius Visual workspaces in WordPress, providing a bridge for visual design and content editing tasks. | |
| Storage Intelligence MCP avidunixuser/storage-intelligence-mcp Read-only Azure storage intelligence MCP server enabling scoped investigations, risk analytics, cost savings simulation, data health checks, and admin tenant-wide discovery across a synthetic storage estate. | |
| Octopus Deploy Official MCP Server avieira21139/mcp-server Enables AI assistants to inspect, query, and diagnose projects, deployments, releases, runbooks, tasks, tenants, Kubernetes resources, machines, certificates, accounts, and interruptions, with optional write operations and read-only safegua | |
| fal-mcp-server avieirox/fal-mcp-server Personal MCP server that gives AI assistants full access to fal.ai's 1,000+ models via local API key, with tools for searching, running, and managing AI jobs. | |
| Israel Weather MCP avigail120/weather-israel-mcp Enables LLMs to fetch Israeli weather forecasts by automating a browser to navigate Weather2Day, providing tools for city search and content extraction. |
31,901–31,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.