Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| @baanish/synthetic-search-mcp baanish/synthetic-search-mcp A minimal MCP server that exposes web search via Synthetic's API, providing a single search tool for local MCP clients. | |
| MCP-Mem0 baatarvant/mcp Provides AI agents with persistent long-term memory capabilities using semantic search. Enables storing, retrieving, and searching memories through three core tools integrated with Mem0 and vector storage. | |
| mcp-powered-agentic-rag baazilakhlaque/mcp-powered-agentic-rag An agentic Retrieval-Augmented Generation (RAG) system that combines a small curated machine learning knowledge base with real-time web search capabilities, powered by the Model Context Protocol (MCP). | |
| Angle One MCP Server baba786/angleone-mcp-server An MCP server implementation that integrates with Angle One APIs to provide standardized access to financial market data, trading operations, and portfolio management. | |
| arc-market-mcp babaanalytix-commits/arc-market-mcp Enables reading live market state on Arc (chainId 5042) including launchpads, LP APRs, RPC consensus, token screens, honeypot simulations, and an agent directory. | |
| BioQC-MCP babajan-b/bioqc-mcp A professional MCP server for comprehensive bioinformatics quality control, providing automated FastQC/MultiQC analysis, HTML report parsing, and advanced data visualization for sequencing data. | |
| MCP-ADAPTER babak-solhjoo/mcp-adapter-pv Gives AI agents a searchable catalog of over 15,000 documented tools, commands and functions across fourteen engineering and design applications, plus headless automation adapters that run the installed software in batch/script mode and ret | |
| arcium-mcp babakarto/arcium-mcp Connects AI agents to the Arcium encrypted computation network on Solana, offering tools for network exploration, encryption, computation management, and app templates. | |
| weatherinfo-mcp babakjfard/weatherinfo_mcp An MCP server that provides access to environmental weather data for AI agents through the National Weather Service (NWS) API, enabling location management, weather observations, alerts, and HeatRisk guidance. | |
| Team Sync MCP Server babakshofficial/mcp-server A self-hosted synchronization hub for frontend and backend teams using Cursor, enabling publishing and reading of shared project state with a local React dashboard. | |
| UI-MCP-Generative-UI babandeepsingh/ui-mcp-generative-ui Enables AI assistants to render interactive charts as generative UI inline in chat, including bars, lines, areas, donuts, tooltips, table views, and built-in series analysis. | |
| AI MCP Gateway babasida246/ai-mcp-gateway Intelligent multi-model orchestrator with dynamic routing that optimizes AI costs by prioritizing free models and escalating to paid tiers only when needed, with stateless architecture using Redis and PostgreSQL. | |
| contextcore-mcp babavc/contextcore-mcp Provides secure, read-only access to ContextCore project context (vision, audience, scope, tech decisions, etc.) for MCP-aware agents like Cursor and Claude Code, with server-side access enforcement. | |
| red-castle babayaga370/red-castle Enables AI agents to list visible objects, submit deletion requests into human-reviewed quarantine, and check the status of their own requests without granting delete, approve, or restore capabilities. | |
| plane-mcp babazulu/plane-mcp MCP server for Plane, the open-source project management tool, exposing a focused set of task and comment management tools for a single Plane project. Includes a setup wizard to bind a local folder to a Plane project and configure Claude Co | |
| WhichTrim babbagescabbages/whichtrim-mcp Enables natural-language queries over U.S. vehicle records, including recalls, service bulletins, diagnostic trouble codes, VIN decoding, fuel economy, and crash ratings. | |
| Babbar MCP Server babbartech/babbarmcp Integrates with the Babbar.tech SEO API to enable AI assistants to perform advanced SEO analysis, competitor research, backlink auditing, and content gap identification. | |
| Garmin Connect China MCP Server babeejin/garmin-cn-mcp Enables AI assistants and MCP clients to read and write Garmin China health, activity, and training data, including creating, scheduling, and pushing workouts to paired devices. | |
| gbox babelcloud/gbox Gru-sandbox(gbox) is an open source project that provides a self-hostable sandbox for MCP integration or other AI agent usecases. | |
| Playwriter Browser MCP babelcloud/playwriter-browser-mcp An MCP server that enables AI agents to control a real Chrome browser with full login state through 37 structured automation tools, connecting via the Playwriter extension without needing a remote debugging port. | |
| babelwrap-mcp babelwrap/babelwrap-mcp-js An MCP server that gives AI agents web browsing superpowers via the BabelWrap API. It works with Claude Desktop, Cursor, Claude Code, and any MCP-compatible client. | |
| Apollo.io MCP Server babicko/apollo-mcp Enables AI assistants to interact with the Apollo.io API to search global databases and enrich company and person data. It facilitates managing contacts and accounts, retrieving tech stacks, and finding job postings through natural language | |
| JSON Mapping & Context MCP Servers bablu-singh/json-mapping-and-context-mcp-server Enables schema-aware exploration of JSON data by uploading samples, flattening nested structures, and using heuristic search with token overlap and fuzzy matching to find field paths for target names, accelerating ETL and API onboarding wor | |
| ms-fabric-mcp-server bablulawrence/ms-fabric-mcp-server Enables AI agents to interact with Microsoft Fabric by exposing tools for managing workspaces, notebooks, SQL queries, pipelines, and Livy Spark sessions. It provides a comprehensive set of operations for data engineering and analytics task | |
| LibraryMCP babosina/librarymcp A library management MCP server supporting book search, member management, and loan operations through natural language commands. | |
| MCP Machine Learning Agent babuakash789/mcp-example-assignment Enables users to train and evaluate Logistic Regression and KNN models for breast cancer diagnosis, generate predictions and SHAP explanations, select the best-performing model, and export Parquet audit logs through MCP tools. | |
| elasticsearch-mcp baburajr/elasticsearch_mcp Enables any MCP-compatible agent to query, diagnose, map, and operate Elasticsearch or OpenSearch clusters via REST, with read-only defaults and layered safety controls. | |
| Wealth Management MCP babuvenky76/nitrostack-wealth-management-mcp Provides specialized tools for portfolio health analysis, rebalance simulations, and trade execution via a single interface powered by MongoDB. It enables AI agents to manage investment portfolios while adhering to organizational governing | |
| claim-verifier baby-zack-agent/claim-verifier Enables agents to verify real-world assertions like content being posted or PRs merged by fetching live evidence from URLs and GitHub, returning a verified boolean plus raw evidence. | |
| SheetShift baby-zack-agent/sheetshift Enables converting PDFs and CSV/spreadsheet files into spreadsheets, extracting bank statement or receipt data into clean CSV, cleaning messy CSV, and generating client-ready reports through an open MCP endpoint. | |
| Oura MCP Server babyblackeyes2023/oura-mcp Enables Claude and other MCP clients to access Oura Ring data, including daily activity, sleep, readiness, stress, and more, via a remote Streamable HTTP server. | |
| babybuddy-mcp babybuddy/babybuddy-mcp Connect AI assistants to your Baby Buddy instance to log and query feedings, sleep, diaper changes, and more. | |
| MCP Document Analysis Server babychrist666/mcp-document-server A Model Context Protocol server that provides document analysis capabilities to LLM applications, including extraction, chunking, summarization, and semantic search for PDF, DOCX, and plaintext documents. | |
| sagaz-mcp babykuramadev/sagaz Enables transparent MCP proxying with a hash-chained effect ledger, classifying agent actions by reversibility, enforcing approval gates, and dry-run previews of sessions. | |
| mdnlookup babymanisha/mdn-lookup Enables searching and summarizing MDN Web Docs documentation directly from MCP-compatible clients. Allows developers to quickly retrieve concise documentation summaries for web technologies without leaving their workflow. | |
| triage-desk-mcp babyquad/triage-desk Provides policy-grounded triage of Trust & Safety reports via MCP, with tools for triage, policy search, and operational telemetry. | |
| mcp-memory babyshishi/mcp-memory Enables persistent memory management with semantic vector recall, BM25 keyword search, and 3-way fused retrieval combining lexical, semantic, and tag-based signals. | |
| youtrack-mcp bacali95/youtrack-mcp An MCP server that enables interacting with YouTrack through natural language, covering issues, comments, projects, time tracking, agile boards, and more via the YouTrack REST API. | |
| Postgres MCP Pro bach-ai-tools/bach--postgres-mcp Enables comprehensive PostgreSQL database management including index tuning, query plan analysis, health monitoring, schema-aware SQL generation, and safe SQL execution with configurable access control for both development and production en | |
| Active Jobs Db MCP Server bach-ai-tools/bach-active_jobs_db Enables searching and retrieving job listings from the Active Jobs Db API with support for multiple filters like title, location, organization, and AI-based fields. | |
| Ai Doctor Api Ai Medical Chatbot Healthcare Ai Assistant MCP Server bach-ai-tools/bach-ai_doctor_api_ai_medical_chatbot_healthcare_ai_assistant Provides access to an AI medical chatbot API for healthcare assistance, enabling natural language interactions such as neurosurgery queries. | |
| ArXiv Paper MCP bach-ai-tools/bach-arxiv-paper-mcp Enables searching, retrieving, and parsing academic papers from arXiv, including keyword search, PDF downloads, content extraction from HTML/PDF formats, and accessing the latest AI research papers. | |
| Binance Cryptocurrency MCP bach-ai-tools/bach-binance-mcp Enables AI agents to access real-time Binance cryptocurrency market data including prices, order books, candlestick charts, trading history, and 24-hour statistics through natural language queries. | |
| Finmap MCP Server bach-ai-tools/bach-finmap-mcp Provides access to historical stock market data from US, UK, Russian, Turkish, and Hong Kong exchanges, including company profiles, market metrics, sector performance, rankings, and visualization data for financial analysis. | |
| Fresh Linkedin Profile Data MCP Server bach-ai-tools/bach-fresh_linkedin_profile_data Enables access to the Fresh Linkedin Profile Data API for scraping LinkedIn profiles, companies, posts, jobs, and other data through a variety of tools. | |
| Hyperbrowser MCP Server bach-ai-tools/bach-hyperbrowser-mcp Provides tools to scrape, extract structured data, and crawl webpages, with access to browser automation agents like OpenAI's CUA, Anthropic's Claude Computer Use, and Browser Use for complex web tasks. | |
| Indian Stock Exchange API2 MCP Server bach-ai-tools/bach-indian_stock_exchange_api2 Enables access to comprehensive Indian stock market data from the NSE and BSE, including historical statistics, corporate actions, and IPO information. It also provides tools for mutual fund searches, analyst recommendations, and tracking m | |
| 21st.dev Magic AI Agent bach-ai-tools/bach-magic-mcp Enables developers to generate beautiful, modern UI components through natural language descriptions. Integrates with popular IDEs to instantly create and customize React components inspired by 21st.dev's component library. | |
| Real Time Amazon Data MCP Server bach-ai-tools/bach-real_time_amazon_data Provides tools to access real-time Amazon data, including product details, reviews, offers, influencer profiles, and deals, through a FastMCP-based server. | |
| Twitter241 MCP Server bach-ai-tools/bach-twitter241 Provides tools to access Twitter data including tweets, user profiles, communities, lists, trends, and more via the Twitter241 API. |
32,451–32,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.