Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| img-gen badribn0612/mcp_servers Provides tools for generating optimized images via Google's Gemini model and fetching weather forecasts and alerts from the National Weather Service. It enables users to create visual content and retrieve environmental data seamlessly withi | |
| MCP AI Chat LangChain badrinathvm/mcp-ai-chat-langchain A basic Model Context Protocol server implementation that demonstrates core functionality including tools and resources for AI chat applications. | |
| E-Learning ITG MCP Server badroel07/elearningitg-mcp-server Enables AI coding assistants to authenticate with a token, view class schedules and assignments, read course materials, and submit files or links to the academic portal. | |
| BlackLotus MCP Server badroobot/blacklotus_mcp Provides AI tools for generating project planning documents including technical design plans, phase-based task checklists, and detailed role definitions as plain text files. | |
| binusmaya-mcp badryansahbangsawan/binus-mcp Enables authenticated MCP clients to access the operator's own BINUSMAYA account through twelve read-only tools over Streamable HTTP, with session-backed remote deployment. | |
| GNews API MCP Server bads1de/gnews-mcp Provides access to global news articles from over 60,000 sources through the GNews API. Supports keyword search, category browsing, and language customization. | |
| beatport-mcp badwasabeee/beatport-mcp An MCP server that lets Claude search the Beatport catalog and manage your Beatport playlists, including adding tracks to playlists by name. | |
| flow-team-mcp baekbeombyeon/flow-team-mcp Enables interaction with the Flow Team API through MCP clients, allowing endpoint discovery, API calls, and project management operations like listing projects and participants. | |
| QNAP Container Station MCP baekhoej/qnap-containerstation-mcp Enables managing Docker containers and Compose apps on a QNAP NAS via the Container Station API, including starting, stopping, restarting, and inspecting containers and applications. | |
| 알림장 비서 baekjoohoon/class-notice-assistant-mcp Helps school, academy, kindergarten, and club operators quickly generate notices, replies, and checklists for guardians. | |
| Python Crawling MCP baektothefuture98/crawl_mcp An MCP server for safe web crawling and scraping of public and authenticated sites using Playwright and Crawlee. It provides tools for scraping single pages, crawling entire sites, validating sessions, and listing supported sites, with buil | |
| Search Evidence baeseokjae/search-evidence Enables read-only collection and comparison of Google Search Console and Bing Webmaster data, conservative URL protection, content auditing, reviewed-build verification, and private report generation through ten typed tools over stdio. | |
| focal-mcp baesi/focal-mcp Centralizes AI behavior rules and applies them across tools like Codex, Claude Code, and Cursor, enabling agents to fetch up-to-date rules before responding. | |
| openclaim-mcp baesic/openclaim Provides AI clients with public breach-response guidance, scenario choices, official links, and blank inquiry, compensation, or mediation templates, while avoiding reading or returning personal data documents. | |
| infrontofx-fivem baespy/infrontofx-fivem Enables writing, debugging and reviewing FiveM resources through read-only tools for installed-skill search and retrieval, task context composition, canonical template previews, source triage, manifest validation, resource inspection, offic | |
| Google Search Console MCP Server bafrey/gsc-mcp-server Connects AI assistants to Google Search Console so users can query search analytics, compare performance periods, inspect URL indexing status, and manage sitemaps and properties through natural language. | |
| vault-engine bagas10k/vault-engine Enables AI agents and developers to inspect Obsidian vault knowledge graphs, navigate backlinks, detect broken wikilinks, lint note compliance, search indexed notes, and scaffold standards-compliant Markdown notes via MCP. | |
| FastMCP Server bagasta/mcp-server A production-ready MCP server with demo tools (calculator, web search, web fetch) and a Playground UI for interactive testing. | |
| Docx MCP Server bagushd1/docx-mcp Enables reading, creating, and editing Microsoft Word .docx documents through natural language, including text and table manipulation, cell merging, shading, borders, and table layout controls, plus font, paragraph, and list formatting. Sup | |
| Labamu MCP Server baguskto/labamu-mcp Enables AI assistants like Claude to securely interact with Labamu's Material Resource Planning (MRP) and business APIs for inventory, vendor, batch, product, and invoice management through the Model Context Protocol. | |
| Baguskto Saham baguskto/saham-mcp Enables access to Indonesian Stock Exchange (IDX) data with comprehensive historical data from 2019-2025 for 958 stocks, including real-time market overview, technical analysis, sector performance, and stock comparison capabilities. | |
| Enterprise Threads MCP Server baguskto/threads-mcp Enables professional Threads management with enterprise-grade analytics, AI-powered content optimization, and automation features, including posting, scheduling, audience insights, and bulk operations. | |
| Marketo MCP Server bagwanpankaj/marketo-mcp Python MCP server for the Marketo REST API, enabling leads management, campaigns, activities, and asset operations through natural language. | |
| Layer.ai MCP Server bahadirbklg/layer-ai-mcp-server Enables users to generate and manage 2D game assets like sprites, characters, and backgrounds directly from their development environment using the Layer.ai platform. It supports asset creation with transparency, prompt optimization, and au | |
| Slack MCP Server bahakizil/slack_mcp Enables AI-powered Slack workspace management with 18+ tools for messaging, channel management, conversation analysis, and real-time bot responses. Features an autonomous AI agent that can plan and execute complex multi-step tasks combining | |
| Rust Minidump MCP bahamoth/rust-minidump-mcp Analyzes application crash dumps and extracts debug symbols, transforming Windows minidump files into readable stack traces and providing AI-powered crash analysis to help identify root causes and fix critical issues. | |
| Basic Math MCP Server bahfahh/mcptest A simple server that provides basic mathematical operations (sum and subtraction) through the Model Context Protocol. | |
| capture-and-slack-mcp baho0/capture-and-slack-mcp Relays a result screenshot to Slack so you can review a coding agent's output without opening the app. | |
| mcp-server-matrix baho73/mcp-server-matrix Enables AI assistants to interact with Matrix, the open decentralized communication protocol, allowing them to send and read messages, manage rooms, and perform other Matrix operations through natural language. | |
| mcp-server-max baho73/mcp-server-max A Model Context Protocol server for Max messenger that lets AI assistants send and read messages, manage chats, and interact with the Max platform API. | |
| project-map-mcp bahooo22/project-map-mcp Enables a small local LLM to build and maintain a project map by offloading event ID/date generation, batching, synchronization, recovery, and finalization to the server, so the model only decides what to read and how to classify. | |
| mcpify bahri-hirfanoglu/mcpify Converts any OpenAPI specification into an MCP server, allowing AI assistants to interact with REST APIs through natural language. | |
| imap-mcp bahricanli/imap-mcp Enables AI clients to securely access and manage IMAP mailboxes through OAuth-protected tools for searching, reading, organizing, flagging, moving, and deleting emails or folders, with optional write permissions. | |
| ServiceNow MCP bai-iii/servicenow-mcp Enables AI clients to interact with ServiceNow records by exposing ServiceNow API interactions, tools, and context over stdio or HTTP for learning and experimentation. | |
| dragon-trading-agent bai2007-dev/dragon-trading-agent Enables LLM clients to access A-share market data, run the trading rule engine, and retrieve daily decision reports through 32 MCP tools. | |
| android-agent-mcp baiamansama/android-agent-mcp Enables LLM agents to drive real Android devices or emulators by reading the live accessibility tree, acting on UI nodes instead of coordinates, verifying every action, and typing Unicode text. | |
| nano-banana baiano/mcp-nano-banana Enables users to generate images from natural-language prompts via Gemini and save them with optional aspect ratios and filenames through Claude Code. | |
| OneNote MCP Server baibo3180/onenote-mcp-server Enables AI assistants to read, search, write, and edit Microsoft OneNote notebooks over Microsoft Graph through 25 tools, with persistent silent authentication and stale-lock recovery. | |
| media-hunter-mcp baichenxw/media-hunter-mcp Enables searching and downloading images, videos, and multi-image galleries from e621, rule34, E-Hentai/ExHentai, and Pixiv, with support for batch downloads, URL-based retrieval, and optional animation conversion to GIF/MP4. | |
| aseprite-mcp baichuan4167-lang/aseprite-mcp Enables an AI agent to create and edit pixel art directly in Aseprite — building sprites, layers, frames, animation tags and palettes, painting pixels and primitives, inspecting the rendered result, and exporting GIFs or sprite sheets. All | |
| Lovely Composer MCP baichuan4167-lang/lovely-composer-mcp Enables an AI agent to compose chiptune music by directly reading and writing Lovely Composer's .jsonl project files, including melodies, bass, drums, chords, tempo, and loop points. | |
| BaiduMap baidu-maps/mcp 百度地图 | |
| Baidu Digital Human MCP Server baidu-xiling/mcp Provides programmatic access to Baidu's Xiling Digital Human platform, enabling AI assistants to generate digital human videos, clone voices, and create synthesized speech through 13 standardized MCP protocol interfaces. | |
| Baidu Vector Database MCP Server baidu/mochow-mcp-server-python A server that provides access to Baidu Cloud Vector Database functionality through the Model Context Protocol, enabling LLM applications to perform vector searches and database operations via natural language. | |
| baidu-ai-search baidubce/app-builder Search web using baidu with AI. | |
| SERVICE baiehclaca/service A persistent 24/7 background daemon that aggregates all downstream MCP servers into one unified connection and layers on a real-time notification gateway so AI agents can receive events from X/Twitter, Slack, Email, and webhooks. | |
| mcp-image baig71126/mcp-image Enables AI assistants to generate and edit images via Gemini, OpenAI, or BytePlus Seedream, with automatic prompt optimization and quality presets, saving outputs to disk and returning them as MCP resources. | |
| Kingdee MCP Server baig77920/kingdeemcp Enables Claude, Cursor and other AI assistants to query and operate Kingdee Cloud Star ERP (purchasing, sales, inventory, finance, etc.) through natural language, exposing 87 tools for read and write operations on bills, master data, and re | |
| ContainerLab MCP Server baijuw/clab-mcp-server Enables network configuration, connectivity testing, and routing management for ContainerLab Linux containers through an MCP interface. | |
| docx-comparison-mcp bailangcheng818/docx-mcp Generates Word documents for comparison tables and specifications from structured JSON data. Supports both stdio mode for Claude Desktop/Code and HTTP mode for AI frameworks like Dify and LangFlow. |
32,701–32,750 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.