Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Weather Israel MCP avigail4408/weather-mcp-with-playwright MCP server that enables LLMs to retrieve weather forecasts for Israeli cities by automating a browser with Playwright, and also provides US weather alerts and forecasts via NWS API. | |
| powerbi-mcp-proxy avihack/powerbi-mcp-proxy A self-hosted MCP server that proxies MCP clients to Power BI, using your own Entra tenant and Azure subscription. It enables DAX queries, workspace listing, and dataset management while preserving user-specific row-level security. | |
| testCal avijeett007/kno2gether-mcp-servers Enables users to get and set meeting appointments in Google Calendar. | |
| Google Calendar MCP avik-creator/googlecalendarmcp Enables programmatic management of Google Calendar events through natural language interactions, supporting creation, reading, updating, and deletion of events with features for recurring events, attendees, and reminders. | |
| MCP Manim Server avik-creator/manim-mcp A server-based tool that enables the generation of mathematical animations from natural language prompts by leveraging Manim. | |
| Music Search MCP Server avikmittro4-max/music-mcp-server Enables searching and playing music from YouTube, returning top results or playable URLs, designed for XiaoZhi ESP32 robot. | |
| Project Brain MCP avilashsaha035/project-brain-mcp An MCP server that reads any codebase (GitHub repo or local folder) and explains it using AI. Enables users to ask questions about project structure, key files, auth flows, and more in plain language. | |
| coinglass-mcp aviman1109/coinglass_mcp Provides access to CoinGlass cryptocurrency derivatives data, including funding rates, open interest, and liquidation metrics. It enables LLMs to analyze real-time and historical market structure context through a standardized toolset. | |
| Garmin Multi-Account MCP aviman1109/garmin_mcp Enables interaction with multiple pre-configured Garmin accounts to query health and activity data such as steps, training readiness, and activity logs. It supports remote access via HTTP/HTTPS, allowing users to connect their Garmin Connec | |
| imap-mcp aviman1109/imap_mcp An IMAP client MCP server for reading mail from Dovecot or Synology MailPlus mailboxes, with optional webhook triggers for new messages. It provides tools for managing emails and automates workflows by firing webhooks when matching messages | |
| livetrack-mcp aviman1109/livetrack_mcp An autonomous MCP server that polls Garmin LiveTrack data during races, stores time-series metrics in SQLite, and triggers periodic Claude analysis for real-time coaching feedback. | |
| market-data-mcp aviman1109/market_data_mcp Integrates cryptocurrency market data from CoinGecko, the Fear & Greed Index, and CryptoPanic news into a single toolset for AI agents. It enables users to retrieve global market statistics, trending assets, coin-specific details, and real- | |
| Plausible MCP Server avimbu/plausible-mcp-server Allows AI models to query and retrieve analytics data from Plausible Analytics through the Plausible API, enabling natural language interactions with website statistics. | |
| Slack MCP Server avimbu/slack-mcp-server A connector enabling Claude Desktop or any MCP client to interact with Slack workspaces to post messages and query user lists. | |
| Uptime Agent MCP Server avimbu/uptime_agent_mcp Enables AI assistants to interact with Uptime Agent monitoring system to check uptime status, manage incidents, create new monitors, and analyze downtime through natural conversation. | |
| Tennis Warehouse MCP Server avimunk1/tennis-warehouse-mcp Provides secure access to Tennis Warehouse product data, enabling users to search for tennis equipment (racquets, bags, shoes), check product availability, find deals, and browse categories through natural language queries while protecting | |
| Strata avinash-1707/strata Local-first memory layer for AI agents. Compresses context with a local LLM and serves hybrid search over MCP. | |
| MCP-Telecom avinash-amudala/mcp-telecom Bridges AI agents with network infrastructure, enabling secure read-only access to multiple vendor routers via SSH for natural language queries and troubleshooting. | |
| weftgate avinash-amudala/weftgate Verifies environment variable reads, Python/Node imports, and FastAPI/Starlette route handlers against a repository's indexed contracts so coding agents can catch broken references before changes ship. Exposes tools such as check_change, ch | |
| bitbucket-mcp avinash-sharma-0112/bitbucket-mcp MCP server for Bitbucket Cloud that enables listing repositories, managing pull requests, posting comments, and handling tasks via natural language. | |
| KiCAD MCP Server avinash1286/kicad-mcp-server-theavi Enables AI assistants to interact with KiCAD for PCB design automation, including schematic editing, component placement, routing, DRC/ERC, and export. | |
| thedeployer avinash147-1193/thedeployer-plugins Enables AI coding agents to check repository deploy readiness, deploy apps to your own cloud (AWS, Google Cloud, Azure, DigitalOcean), and migrate apps from platforms like Heroku, Railway, Render, or Vercel with rollback. | |
| Minecraft MCP Server avinash893/minecraft-mcp Enables AI agents to manage, configure, and operate game servers hosted on Pterodactyl panels, including power actions, console commands, file operations, plugin installation, and backups. It also supports Cloudflare challenge bypass and au | |
| cloud-audit-mcp avinash9694/cloud-audit-mcp Exposes read-only AWS security-posture checks as MCP tools, letting Claude Desktop, Claude Code and Cursor run 14 severity-ranked checks across S3, EC2, RDS, IAM and CloudTrail, describe resources, and produce a scored summary with prioriti | |
| doc-intel MCP server avinashbadgu/doc-intel-mcp-server Enables AI agents to extract structured data from PDFs with confidence scores and provenance, and to search, review, and correct documents via MCP tools, resources, and prompts. | |
| TradingView MCP Bridge avinashbadgu/tradingview-mcp Enables AI assistants to connect to a locally running TradingView Desktop app through Chrome DevTools Protocol for chart analysis, Pine Script development, chart navigation and drawing, alerts, replay practice, screenshots, multi-pane layou | |
| ab_mcp avinashbhargav/ab_mcp A file system MCP server that confines AI assistant file tools to a single folder, with read-only by default and optional write access. | |
| Quip MCP Server avinashbole/quip-mcp-server A Model Context Protocol server that enables AI assistants like Claude to directly read and edit Quip documents through a set of specialized tools. | |
| Epiverse MCP Server avinashladdha/epiverse-mcp Enables MCP-compatible LLM clients to access the Epiverse R package ecosystem, providing tools to list packages, retrieve package details and functions, search documentation and vignettes, and read source code directly from the local filesy | |
| SafeSight MCP avinashmutum2615-ship-it/mcp-safesight-ai A Model Context Protocol (MCP) server that enables AI assistants to interact with the SafeSight Eye Care Management System. | |
| MedSync AI avinashnaidu2131-gif/medsync-ai Enables emergency medical coordination with tools for triage, medication guidance, blood donor outreach, mass casualty simulation, and emergency plan generation. | |
| MCP Agent Orchestrator avinashreddy6631/mcporchestrator Enables natural-language queries to orchestrate multiple AI agents, connect to MCP tools, and retrieve structured data from PostgreSQL for tasks like salary and company analysis. | |
| anypoint-connect avinava/anypoint-connect CLI + MCP toolkit for Anypoint Platform that enables deploying applications, tailing logs, pulling metrics, and managing API specs with production safety nets. | |
| sf-docs-mcp avinava/sf-documentation-knowledge Enables LLM agents to search, read, and query Salesforce documentation across 129 domains. Uses a pre-compiled knowledge graph with 53,000 nodes and 18,000 code snippets for instant retrieval without RAG. | |
| brushrouter avinaxhroy/brushrouter Enables agents to generate images by routing requests across already-authenticated backends, reusing existing AI subscriptions and keys without exposing credentials. It also provides tested prompt recipes and visual styles for agent-driven | |
| Coding Assistant Server avioflagos/mcp-coding-assistant Server that enhances the capabilities of the Cline coding agent. It provides intelligent code suggestions, reduces hallucinations, and documents the knowledge base by leveraging your project's documentation and detecting the technologies us | |
| CI Monitor MCP Server aviral-mishra-1008/ci_mcpdev Monitors Jenkins CI builds in real-time, fetching build status and logs on failure to provide context for AI-assisted code fixes, enhancing developer workflow. | |
| GitHub MCP Server aviralkaushik412/mcp-server A Model Context Protocol (MCP) server that connects Claude AI directly to the GitHub API, enabling natural language queries for live repository data, issues, PRs, and contributions. | |
| MCP_Basics aviralksingh/mcp_basics A crash course for Python developers on building and integrating Model Context Protocol (MCP) servers into production applications and agent systems. | |
| Saathi aviralsingh2003/saathi Enables an ambient voice companion to converse with isolated older people while exposing MCP tools and app cards for long-term memory, background reflection, reminders, two-way family messages, digests, and emergency escalation over Streama | |
| Zulip MCP Server avisekrath/zulip-mcp-server A Model Context Protocol server that enables AI assistants to interact with Zulip workspaces by exposing REST API capabilities as tools for message operations, channel management, and user interactions. | |
| MCP AI Assistant avishiii/mcp-ai-assistant Enables LLM clients to perform sandboxed file operations, manage persistent notes, fetch live weather and Wikipedia summaries, calculate arithmetic safely, and retrieve current UTC time via a standalone tool server over stdio or HTTP. | |
| mcpforwork avivancos/mcpforwork MCP server for job search, enabling profile creation, job hunting, review, and supervised application preparation without auto-submission. | |
| OLCP avivancos/open-english Enables portable English language instruction through MCP, owning learner identity, curriculum, and learner model while any host LLM delivers conversational teaching, sessions, and assessment. | |
| Admissions MCP Hub avivek-dwivedi/custom-mcp-server Enables governed course, batch, fee, lead, and callback management for two AI chat apps with centralized authentication, RBAC, audit logging, and a prepare→confirm write gate. | |
| Cloud Diagram MCP aviveldan/cloud-diagram-mcp Enables visualization of Terraform plan changes as interactive cloud architecture diagrams with official AWS, Azure, and GCP icons, showing resource dependencies and changes. | |
| Datagov Israel MCP aviveldan/datagov-mcp MCP for Data.gov.il Israeli Government Data | |
| VideoGenerationMCP avivk5498/videogenerationmcp An MCP server for video generation using Kling Omni and Seedance 2 via PiAPI, with ElevenLabs voiceovers and Hebrew BVAC lipsync, featuring local validation before API calls. | |
| abstractapi-mcp-server avivshafir/abstractapi-mcp-server abstractapi-mcp-server | |
| atdata-email-verification-mcp-server avivshafir/atdata-email-verification-mcp-server atdata-email-verification-mcp-server |
31,951–32,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.