Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Excel MCP Server bach-ai-tools/excel-mcp-server Enables AI agents to create, read, and modify Excel workbooks without requiring Microsoft Excel, supporting operations like formulas, charts, pivot tables, formatting, and data validation. | |
| Exercises By Api Ninjas MCP Server bach-ai-tools/exercises_by_api_ninjas Enables users to search and retrieve fitness exercise information from the Api Ninjas database. It supports filtering by exercise name, target muscle, type, and difficulty level. | |
| Facts By API Ninjas MCP Server bach-ai-tools/facts_by_api_ninjas Enables users to retrieve random interesting facts from the Facts By API Ninjas API. It supports fetching multiple facts at once through a simple limit parameter via the Model Context Protocol. | |
| Flightradar24 MCP Server bach-ai-tools/fr24api-mcp Provides access to real-time and historical flight data from Flightradar24 API, enabling users to track live aircraft positions, query flight histories, and retrieve comprehensive aviation information including aircraft, airline, and airpor | |
| Google Search74 MCP Server bach-ai-tools/google_search74 MCP server that provides automated Google search capabilities, allowing query execution, result limiting, and optional related keywords retrieval. | |
| Hyperbrowser MCP Server bach-ai-tools/hyperbrowser Enables web scraping, crawling, structured data extraction, and browser automation through multiple AI agents including OpenAI's CUA, Anthropic's Claude Computer Use, and Browser Use. | |
| Idealista7 MCP Server bach-ai-tools/idealista7 Enables access to Idealista API for searching and retrieving property listings across Spain, Portugal, and Italy. Supports various property types including homes, apartments, garages, commercial properties, offices, and land with detailed f | |
| Inflation By Api Ninjas bach-ai-tools/inflation_by_api_ninjas Enables access to current inflation data including monthly and annual inflation percentages using CPI (Consumer Price Index) or HICP (Harmonized Index of Consumer Prices) indicators through the API Ninjas Inflation API. | |
| ip_geolocation_find_ip_location_and_ip_info bach-ai-tools/ip_geolocation_find_ip_location_and_ip_info Provides IP address geolocation and related info via an API, with MCP server integration for easy use in AI tools. | |
| jieba-mcp bach-ai-tools/jieba-mcp Enables Chinese text segmentation using the jieba library with support for precise, full, and search engine modes. Provides natural language access to professional Chinese word segmentation capabilities through MCP protocol. | |
| jimeng4-mcp bach-ai-tools/jimeng4-mcp An MCP server providing multi-modal generation tools based on Volcengine's Jimeng AI, supporting high-quality 4K image creation, intelligent image editing, and video generation. It enables users to perform complex visual tasks directly with | |
| Jokes By Api Ninjas bach-ai-tools/jokes_by_api_ninjas Enables users to fetch random jokes from the API Ninjas Jokes API. Supports retrieving 1-30 jokes per request through a simple interface. | |
| Judge0 CE MCP Server bach-ai-tools/judge0_ce Enables code execution and compilation through the Judge0 CE API, supporting multiple programming languages with submission management, status checking, and language configuration retrieval. | |
| Lorem Ipsum By Api Ninjas bach-ai-tools/lorem_ipsum_by_api_ninjas Generates Lorem Ipsum placeholder text with customizable parameters including paragraph count, length, and formatting options through the API Ninjas service. | |
| Lunar Calendar MCP Server bach-ai-tools/lunar_mcp_server Provides Chinese traditional calendar functions including BaZi calculation, solar-lunar calendar conversion, Huangli almanac queries, daily fortune readings, 24 solar terms, and Wu Xing (Five Elements) analysis. | |
| MCP Calculator Server bach-ai-tools/mcp-calculator Provides basic and advanced mathematical operations including addition, subtraction, multiplication, division, power, square root, and factorial calculations through an SSE-based MCP interface. | |
| echo bach-ai-tools/mcp-echo A simple MCP server that echoes back any input message. Useful for testing MCP connections and configurations. | |
| MCP Google Maps bach-ai-tools/mcp-google-maps Provides access to Google Maps API functionality including places search, geocoding, directions, distance matrix, elevation data, and static map generation through the MCP interface. | |
| OpenFDA Drug Label MCP Server bach-ai-tools/mcp-openfda Enables querying FDA drug label information including adverse reactions, warnings, and indications via natural language. | |
| Azure DevOps MCP Server bach-ai-tools/mcp-server-azure-devops Enables AI assistants to interact with Azure DevOps APIs for managing projects, work items, repositories, pull requests, pipelines, and more through natural language. | |
| NASA MCP Server bach-ai-tools/nasa-mcp-server Provides standardized access to 20+ NASA data sources including astronomy pictures, Mars rover photos, near-Earth objects, satellite imagery, space weather, and planetary data through a unified interface optimized for AI consumption. | |
| Open Weather13 MCP Server bach-ai-tools/open_weather13 An MCP server that provides access to current weather data and 5-day forecasts via the Open Weather13 API. It enables users to retrieve weather information using city names or geographic coordinates across various languages. | |
| password_generator20 bach-ai-tools/password_generator20 Generates passwords with customizable length, special characters, numbers, and umlauts via the Password Generator20 API. | |
| PDF Reader MCP bach-ai-tools/pdf-reader-mcp A high-performance Model Context Protocol server that enables AI agents to extract text, images, and metadata from PDF documents using parallel processing. It features intelligent Y-coordinate content ordering to preserve natural reading fl | |
| Quotes By Api Ninjas MCP Server bach-ai-tools/quotes_by_api_ninjas Enables retrieval of random inspirational quotes from various categories including age, art, business, courage, education, friendship, happiness, leadership, and many more through the API Ninjas Quotes API. | |
| Random Word By Api Ninjas bach-ai-tools/random_word_by_api_ninjas Provides access to API Ninjas Random Word API to generate random words by type (noun, verb, adjective, adverb) for creative writing, games, and language learning applications. | |
| Sms Verify3 MCP Server bach-ai-tools/sms_verify3 MCP server for accessing Sms Verify3 API to send numeric verification codes and estimate costs. | |
| Snow Day Probability Api MCP Server bach-ai-tools/snow_day_probability_api Predicts the likelihood of school closures due to snowfall and severe winter weather using real-time weather data and machine learning algorithms. | |
| taiwan-holiday-mcp bach-ai-tools/taiwan-holiday-mcp A Taiwan holiday query server based on the Model Context Protocol, providing accurate Taiwan public holiday and compensatory work day information. | |
| tavily-mcp bach-ai-tools/tavily-mcp MCP server providing search, extract, map, and crawl tools powered by Tavily for real-time web data access. | |
| Thesaurus By Api Ninjas bach-ai-tools/thesaurus_by_api_ninjas Provides access to synonyms and antonyms for words through the API Ninjas Thesaurus API, enabling vocabulary enhancement and word exploration. | |
| Virtual Number MCP Server bach-ai-tools/virtual_number MCP server for accessing Virtual Number API to manage virtual numbers, view SMS history, and retrieve available countries and numbers. | |
| bach-walmart_scraper4 bach-ai-tools/walmart_scraper4 Enables scraping Walmart product data, including product details, top products by category, and monitoring scraping tasks. | |
| Weather API167 MCP Server bach-ai-tools/weather_api167 Provides access to comprehensive weather data including current conditions, forecasts, air pollution levels, US weather alerts, earthquake information, and country details using coordinates, place names, or zip codes. | |
| Weather By Api Ninjas bach-ai-tools/weather_by_api_ninjas Provides access to weather information by location using the API Ninjas Weather API, supporting queries by coordinates, zip code, city, state, and country. | |
| Weatherapi Com MCP Server bach-ai-tools/weatherapi_com Provides access to comprehensive weather data including real-time conditions, forecasts, historical weather, marine data, astronomy information, and weather alerts through the Weatherapi.com API. | |
| Whatsapp Number Validator3 MCP Server bach-ai-tools/whatsapp_number_validator3 Validates whether phone numbers are registered on WhatsApp, supporting single and bulk (up to 10) number checks. | |
| bach-yelp_business_api bach-ai-tools/yelp_business_api Enables accessing Yelp Business API to search businesses, get reviews, menus, and business details. | |
| YouTube Video Summarizer MCP Server bach-ai-tools/youtube-video-summarizer-mcp Extracts captions, metadata, and descriptions from YouTube videos to enable AI assistants to summarize their content. | |
| Zillow56 MCP Server bach-ai-tools/zillow56 Enables access to the Zillow56 API to search for real estate listings and rental market trends using locations, coordinates, or specific property filters. It also provides comprehensive housing market snapshots and historical data based on | |
| Mnemonic bacharyehya/claude-memory-architecture Persistent memory management for AI assistants like Claude, enabling creation, search, and retrieval of memories with tagging and triggers. | |
| imap-mcp-server bachdaniels/imap-mcp-server Enables AI assistants to manage multiple email accounts, including searching, reading, sending, organizing, and deleting messages, with secure encrypted credential storage and connection pooling. | |
| bruno-headless bachden/bruno-headless A headless MCP server for Bruno workspaces, enabling CRUD operations on collections, folders, requests, environments, and dotenv files, plus request execution with scripting, tests, and assertions over HTTP, GraphQL, gRPC, and WebSocket. | |
| Obsidian MCP Server bachmann1234/obsidianmcp Provides AI assistants with full-text search access to your Obsidian vault, allowing them to query, retrieve, and analyze notes through the Model Context Protocol. | |
| uisight bachmarchetti/uisight Enables AI agents and humans to share live mobile and desktop web sessions, measure contrast, touch targets, overflow, and theme issues, and receive precise selector-level findings as text. It also lets users pin notes and screenshots for t | |
| Hegelion bachmatsumoto05208/hegelion Enables LLMs to reason dialectically through Thesis → Antithesis → Synthesis phases, and to run player–coach autocoding loops where a coach independently verifies code against requirements. Exposes MCP tools for dialectical reasoning, autoc | |
| Smart Coding MCP bachruiz206/smart-coding-mcp Enables AI assistants to search codebases by meaning using local AI embeddings, manage indexing and caching, switch workspaces, check server status, and look up latest package versions across multiple ecosystems. | |
| Excel-Power-Pivot-MCP back1ply/excel-power-pivot-mcp A Model Context Protocol (MCP) server that enables AI assistants to interact with Excel Power Pivot data models. Create and manage DAX measures, relationships, and more through natural language. | |
| Tones back2base/tones-oss Enables Claude to learn a user's writing style from personal samples and retrieve style context, exemplars, and profiles for rewriting and code-comment guidance through MCP. | |
| Jerrycan MCP backant-io/jerrycan The AI-native Rust backend framework + generation platform. Help agents design, generate, verify and package complete backends. |
32,601–32,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.