Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| zombie-killer baneado98/zombie-killer Scans bank statements for zombie subscriptions and drafts cancellation, renegotiation, or data deletion letters. | |
| stillport baney75/stillport Enables AI agents to search, list, preview, and export photos from Apple Photos, Google Photos Picker sessions, and local Google Takeout archives using native search and metadata inspection. | |
| waypost baney75/waypost Enables agents to read and draft Proton Mail messages, browse and download Proton Drive files, and read calendar agendas or prepare import files through local connections. Mail sends and Drive uploads stay disabled until explicitly enabled | |
| Mermaid Diagrams bang404/openagent-mermaid Enables users to preview and edit diagram source in a sandboxed, offline MCP App UI that renders and validates within the browser, keeps edits on theme or locale changes, and returns a prepared payload with linked editor UI. Hosts without M | |
| Okta MCP Server bangarrajuv2/okta-mcpserver Exposes Okta incident-support and administrative workflows to MCP-compatible clients, enabling user investigation, group management, and system log queries. | |
| Weather Bot MCP Server bangaru-vignesh/agentic-ai-assistant-with-rag Enables users to query weather, perform web research, and manage a graph database through natural language. | |
| mcp-calculator bangbang93/mcp-calculator An MCP server that integrates the MathJS library to provide AI models with advanced calculation capabilities, including support for complex numbers, matrices, and unit conversions. It supports both stdio and HTTP transports for seamless int | |
| WeCom MCP bangbangda/wecommcp Enables AI assistants to interact with Enterprise WeChat (WeCom) using natural language to manage meetings, book rooms, and search contacts. It supports multiple AI models and provides intelligent contact matching via Pinyin. | |
| cardloom-mcp bangca85/cardloom-mcp Provides long-lived, cross-project technical memory for AI agents via markdown cards stored in git and indexed by SQLite, enabling search, retrieval, and human-reviewed knowledge management. | |
| xiaozhi-music-mcp bangjiong925-commits/xiaozhi-music-mcp Provides music search, playback control, volume adjustment, and playlist management for Xiaozhi AI speakers via MCP. | |
| Jina MCP Server bangrobe/jina-mcp Provides web content extraction, search, embedding, and reranking tools via Jina AI APIs, enabling URL-to-markdown, web search, image search, and document relevance sorting. | |
| bangtu-open-api bangtu-ai/bangtu-open-mcp Enables recognition and extraction of architectural CAD drawings (DWG) by creating tasks and retrieving structured results for frames, title blocks, and 23 building component types, including rooms, doors, windows, stairs, and text. | |
| spektrafilm-mcp bangyizhang/spektrafilm-mcp Enables AI agents to develop photos using spectral film simulation, including selecting film stocks and papers, adjusting exposure and enlarger filtration, composing and cropping, comparing variations, inspecting grain, and exporting full-r | |
| Xmind Generator MCP Server bangyizhang/xmind-generator-mcp An MCP server that allows LLMs to create structured Xmind mind maps with hierarchical topic structures, supporting features like notes, labels, and markers. | |
| va-pentest-mcp banhongit7/va-pentest-mcp A Model Context Protocol server for automated security vulnerability assessment, combining OWASP Dependency-Check dependency scanning with custom code vulnerability detection, and generating detailed HTML and JSON reports. | |
| edt-bridge banibaushev/edt-bridge Ports Unica-style functionality to 1C:EDT projects via an MCP server over EDT-MCP, enabling batch mutations, form compilation and removal, MXL handling, and BSP scaffolding. It provides 18 tools with validation, atomic application, rollback | |
| Simple MCP Server banique15/mcp-server A minimalist MCP server that provides a single tool to retrieve a developer name, demonstrating the basic structure for Claude's Model Completion Protocol integration. | |
| renpy_mcp_server banjtheman/renpy_mcp_server Enables AI assistants to create complete Ren'Py visual novel games with AI-generated images, dialogue, branching stories, and web deployment. | |
| VibeTide MCP Server banjtheman/vibe_tide_mcp Enables AI-assisted creation, editing, and visualization of VibeTide 2D platformer levels with tools for tile manipulation, level metadata management, and web-based gameplay. | |
| Garmin Nutrition Coach bank3005-jpg/leanloop-for-garmin Enables Claude to act as a personal health coach by connecting to Garmin wearable data and Notion workspace for automated calorie tracking, photo food logging, and coaching insights. | |
| mcp-google-sheets bankableco/mcp-google-sheets Enables AI assistants to interact with Google Sheets for reading, writing, and managing spreadsheets through a set of MCP tools. | |
| Document Systems bankszach/document-systems A stateless MCP server for composing, validating, auditing, and rendering consequential documents from a small semantic model. | |
| FastAPI MCP Server bankszach/fastapi-mcp A minimal MCP server that provides current time functionality with optional formatting. Designed for production deployment on Google Cloud Run with proper JSON-RPC 2.0 implementation. | |
| Hello World MCP FastAPI Endpoint bankszach/mcp-date-and-time A minimal Model Context Protocol server built with FastAPI that provides a basic "Hello World" resource and tool. Serves as a starting point for building and validating MCP client integrations with richer resources and tools. | |
| Godot MCP Documentation Server banned104/godot-docs-mcp Provides AI assistants with direct access to the complete Godot Engine documentation, including classes, tutorials, and features. It enables developers to retrieve and analyze official documentation through natural language interfaces using | |
| Grimmory MCP Server bannert1337/grimmory-mcp Enables AI assistants to manage a Grimmory book library through 53 specialized tools for books, authors, shelves, reading progress, metadata, and more. | |
| linkedin-mcp bansalsahab/linkdin-mcp Enables users to drive their own logged-in LinkedIn session through browser automation, with a mandatory preview-and-confirm step before any action is sent. | |
| Candlekeep bansheeemperor/candlekeep A RAG knowledge base server that enables AI agents to search, retrieve, and manage technical documentation through the Model Context Protocol. | |
| kube-observer-mcp bansikah22/kube-observer-mcp Enables AI agents to safely inspect Kubernetes cluster inventory through read-only tools for listing nodes and pods, without exposing secrets or mutation operations. | |
| Apartment Sheets MCP banstack/apartments-sheet-mcp Light-weight MCP server to save and manage apartment listings to a shared Google Sheet. | |
| chengkit-taobao banxia79009/chengkit-taobao Enables Windows-based Taobao interaction through OpenCLI, including product search, dynamic filtering, detail and review reading, SKU price and page stock lookup, read-only cart access, authorized add-to-cart, merchant chat, and login/verif | |
| ReciMCP banyango/recimcp A lightweight Python-based MCP server for managing recipes and favorite collections. It provides a structured service-style layout to handle recipe business logic, persistence, and external client interactions. | |
| job-resume-agent bao-and-banh-mi/job-resume-agent Enables evidence-grounded resume tailoring by generating ATS-readable LaTeX/PDF resumes from a user-curated experience bank, with every bullet traceable to evidence and inferred wording flagged for user approval. | |
| Calgary Open Data MCP Server baobab-tech/calgary-open-data-mcp Enables AI assistants to search, explore, and query Calgary's open data portal using SoQL, with tools for dataset discovery, metadata inspection, and data querying. | |
| Text Classification MCP Server (Model2Vec) baobab-tech/mcp-text-classifier Enables fast text classification using Model2Vec static embeddings with 10 default categories (technology, business, health, etc.), supports custom category management, batch processing, and provides both local and remote deployment options | |
| dart-mcp baobabtr33/dart-mcp Enables AI agents and foreign investors to search Korean corporate disclosures, retrieve filings and XBRL financials, and access English-translated governance and accounting terms with original Korean text preserved for citation. | |
| OXII Smart Home MCP Server baobao112233/mockup-mcp Enables control of OXII smart home devices through the Model Context Protocol, supporting device switching, air conditioner control, cronjobs, and room scenarios. Integrates with chatbots and MCP-compatible clients for natural language home | |
| mcp-hayabusa baobao26/mcp-hayabusa An MCP server that wraps the Hayabusa CLI, enabling analysis of Windows EVTX event log files and browsing of its detection rule set. | |
| gpt-dsh-bridge baochaofan0404/gpt-dsh-bridge MCP server bridging ChatGPT to DeepSeek Harness, exposing 13 tools for task submission, status tracking, result retrieval, project/session management, and human-in-the-loop approvals. | |
| ado-mcp-gateway baodq97/ado-mcp-gateway A self-hosted remote MCP server for Azure DevOps that bridges OAuth 2.1 between MCP clients and Microsoft Entra ID, enabling any OAuth-capable client (e.g., Claude Code, Claude Desktop) to access Azure DevOps resources. | |
| drunk-mcp-proxy baoduy/drunk-mcp-proxy A dynamic proxy server that enables users to manage and access multiple MCP backend servers through a single, unified interface. It supports both static and runtime server configuration with persistent storage and works with HTTP and SSE tr | |
| EntraID MCP Server baoduy/entraid-mcp-server A FastMCP server for interacting with Microsoft Entra ID via the Microsoft Graph API, enabling management of users, groups, sign-in logs, MFA, applications, devices, conditional access, and more. | |
| HYSYS MCP Server baojunjiang1711-lang/aspenhysys-mcp-server-backup MCP server that enables natural language control of Aspen HYSYS simulations via COM, offering 51 tools for reading, editing, and building flowsheets with a safe-mode gating by default. | |
| fluencydrift-mcp baokhang83/fluencydrift-mcp MCP server that diffs a project's code structure against fluencyloop architectural records and flags where reality has drifted. | |
| MCP SNS Server baolongt/sns-mcp-server A Model Context Protocol server that enables interaction with Service Nervous System (SNS) DAOs on the Internet Computer, allowing users to list proposals, view neurons, get system parameters, manage wallets, and vote on proposals. | |
| AI Assistant MCP Server baominh5xx2/seminar_se-ie-mcp MCP server providing tools to chat with an AI agent, fetch weather data, and monitor agent status via the Model Context Protocol. | |
| MCP Guide Schema Query baongothien18/mcp-guide-schema-query Enables AI tools to understand a database, inspect schema, and run safe SELECT queries with SQL guardrails, plus optional codebase reading. | |
| AI_SYNC MCP Server baonpnexle/mcp_ai_sync Connects GPT-4 to a merchant store API, allowing users to query and manage store data for the Tnc_Store merchant through natural language interactions. | |
| qqmusic-mcp baoozak/qqmusic-mcp A local MCP server for managing and organizing a personal QQ Music library, enabling playlist operations, music analysis, and intelligent classification workflows with safe write-back and rollback. | |
| Thaddeus baothach10/thaddeus A local, JARVIS-style personal assistant that orchestrates custom MCP servers for memory, calendar, weather, Notion, Claude Code, web search, and Strava, running primarily offline with Ollama. |
32,901–32,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.