Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ClinicalTrials.gov MCP Server — OncoHub baris-varis/initial-ct-msp-mcp-server A production-quality MCP server that wraps the ClinicalTrials.gov v2 API, providing structured, TTL-cached access to trial data worldwide and Turkey via 4 MCP tools. | |
| izlek barisgultekin/izlek Read-only MCP server for izlek, a terminal-first local frontend observability tool. Enables agents to query live session status, logs, errors, and HTTP request/response records from a running development session. | |
| weblens-mcp bariskau/weblens-mcp Enables AI agents to fetch and render web pages (including JavaScript-heavy SPAs) with headless Chromium, extract readable content with Mozilla Readability, capture navigation links, download images, and return a clean markdown file path. | |
| IzmirDamMcp bariskisir/izmirdammcp FastMCP server that provides daily water status and occupancy rates for dams in Izmir, Turkey by fetching data from the official IZSU API. | |
| BSC MCP Server with four.meme barkdevelopment/mcp-fourmeme Enables interaction with Binance Smart Chain, including wallet management, token transfers, contract execution, PancakeSwap swaps, and four.meme token creation. | |
| kroki_mcp barkiayoub/kroki_mcp Provides AI agents with tools to generate, validate, and inspect diagrams from natural-language prompts, using the Kroki rendering engine to produce SVG files. | |
| OpenStride MCP Server barkleesanders/openstride-worker Enables AI clients to create and manage multi-week running training plans, track workouts and activities, and pull calendar or CSV exports through the app's API. Supports plan generation with configurable goals, mileage, schedule, and inten | |
| tg-id-mcp barkoszloy/tg-id-mcp MCP server for Telegram user/chat lookup with datacenter detection and account age estimation. | |
| pg-inspect-mcp barkya28/pg-inspect-mcp Enables read-only PostgreSQL schema exploration through natural language, including tables, indexes, sizes, sample rows, and query plans, with structural safeguards against writes. | |
| test1 barlanyado/mcp-server-test this is a test | |
| Shopify MCP Server barlasarda91/shopify-mcp MCP server for managing Shopify stores via the Admin GraphQL API, providing tools to read/update products, orders, customers, inventory, and create discount codes. | |
| vector-db-mcp barlowa124/vector-db-mcp Enables local vector database operations with a Pinecone-compatible API, supporting exact and approximate search, metadata filtering, and semantic text queries over MCP. | |
| mcp-server-for-addition-tool barmanakash/mcp-server-for-addition-tool Enables LLMs to perform addition calculations through a stdio-based MCP server with an add_numbers tool and type-safe validation. | |
| chance-electro-pricing barmanoff/chance-electro-capstone Provides electrical pricing, cable sizing, and profitability analysis tools for construction estimating, integrating with Claude to answer pricing queries based on a US-market-calibrated price list and NEC standards. | |
| locklens barmplus/locklens Audits package lockfiles for vulnerabilities, supporting npm, yarn, and pnpm. Runs via CLI or as an MCP server over stdio. | |
| HealthBridge MCP barnababobbili/healthbridgemcp Enables cross-hospital patient safety intelligence by detecting drug interactions, allergy conflicts, duplicate procedures, and medicine stock routing across multiple healthcare facilities. | |
| Plugin Hub barnburner121/claude-plugin-marketplace Single MCP server providing over 500 developer tools for Claude Code, covering security, testing, documentation, and more. | |
| AKIMCP barnes26/aki-mcp-sv Enables web AI clients and local IDEs to securely operate a local machine through an OAuth-gated MCP endpoint, with governed tools for files, shell, search, Git, SQLite, browser automation, DevTools, background tasks, localhost services, cl | |
| claude-soul barnes86/claude-soul Enables Claude Code to retain persistent identity, cross-session memory with semantic search, and behavioral pattern tracking across sessions. It lets the agent save and recall facts, decisions, and lessons locally, record interaction signa | |
| Stock SDK MCP Server barnes98/stock-sdk-mcp Enables AI assistants to access real-time and historical market data for A-shares, Hong Kong, US stocks, funds, futures, and options, calculate technical indicators, analyze sectors, screen stocks, and monitor portfolios through MCP tools, | |
| sdap barneslardo/super-duper-admin-portal MCP server for the Super Duper Admin Portal that enables AI agents to chat with LLMs, trigger admin actions, and make Okta API requests. | |
| Translation MCP Server barnettxxf/translation_mcp An AI-driven text translation service supporting 20+ languages, based on the Model Context Protocol (MCP) for integration with Claude Desktop and other MCP-compatible applications. | |
| MCP Calculator Server barneybarney143/mcp_poc A simple MCP server that provides an add_numbers tool for addition operations, with setup instructions for VSCode extensions like Roo Code or Cline. | |
| schematic-architect barniebarnie/schematic-architect Enables an AI agent to turn natural-language prompts into Minecraft builds, refine them with shape, edit, preview, and material tools, and export them as .litematic schematics. | |
| TokenEnrich MCP Server barnsbytarquin/tokenenrich-mcp Enables enrichment of company domains with verified firmographic signals including tech stack, hiring activity, email infrastructure, and SOC 2 compliance, returning compact typed JSON for AI agents. | |
| Hermes Squad barnsl/hermes-squad Multi-agent AI orchestrator that runs parallel coding agents in isolated sessions with self-improving intelligence, exposed via an MCP server for task execution and management. | |
| SINTA MCP Server baroenese/sinta-mcp-server-node Enables AI assistants to search and retrieve Indonesian academic data, including lecturer scores, researcher profiles, journal accreditation, publications, and institutional metrics from the Science and Technology Index. | |
| Flow2API MCP Server barometer-2002/flow2api-mcp Wraps Flow2API / OpenAI-compatible image generation upstream into an MCP service, providing image generation, history, and caching tools. | |
| GenFilesMCP baronco/genfilesmcp Generates PowerPoint, Excel, Word, and Markdown files from natural language requests and reviews Word documents with AI comments. | |
| Local Documents MCP Server baronco/local-docs-mcp-tool A Model Context Protocol server that allows AI assistants to discover, load, and process local documents on Windows systems, with support for multiple file formats and OCR capabilities for scanned PDFs. | |
| SQL-Transpiler MCP Tool baronco/sql-transpiler-mcp-tool Converts SQL queries between different database dialects using the sqlglot library to ensure cross-system compatibility. It allows users to list supported dialects and transpile SQL code from one syntax to another through the Model Context | |
| Visual Generator MCP baronedog1/visualgeneratormcp An MCP server for generating images and videos via external multimodal models, providing unified tools like imageGenerate, videoGenerate, and materialWrite with support for normal and smart generation modes. | |
| symbols-mcp-server baronsilver/symbols-mcp-server An MCP server that exposes the Symbols/DOMQL v3 AI assistant capabilities to any MCP-compatible platform. Enables generating components, pages, projects, and more from natural language, as well as searching documentation and reviewing code. | |
| Jisr barood-labs/jisr-alexa Enables Arabic- and English-speaking newcomers to a US city to find halal and Middle Eastern food, mosques, groceries and clinics, get daily prayer times, learn the exact English for everyday situations, and generate a seven-day settling-in | |
| classby-blog-mcp barosky7834-cpu/class-blog-mcp Provides tools for creating and editing blog post drafts, attaching images, and automating Naver blog editor filling via Chrome. | |
| time-messenger-mcp-server barredewe/time-messenger-mcp-server MCP server for T-Bank's Time Messenger (Mattermost-based) that enables AI assistants to read and send messages, manage threads, search channels and users, and track unread messages. | |
| Crypto MCP Server barrerasaezgonzalo/mcp-crypto Enables querying cryptocurrency prices and performing basic financial calculations like USD to CLP conversion and loss percentage. | |
| Copilot Plugin MCP Server barrersoftware/copilot-plugin-mcp-server Extends GitHub Copilot CLI with community plugins via MCP proxy, enabling plugin installation, custom tools, and 67% token reduction without CLI modifications. | |
| mcp-apple-calendar barrettclark/mcp-apple-calendar A lightweight MCP server for Apple Calendar on macOS that uses a Swift helper to access EventKit directly, enabling event queries without AppleScript or Calendar.app dependency. | |
| BarrHawk barrhawk/barrhawk_premium_e2e_mcp Enables automated end-to-end testing and verification of web applications through natural language, with self-healing selectors and dual-mode execution. | |
| look-charme-mcp barrosshakur-code/look-charme-mcp Enables MCP-compatible AI agents to operate a retail store’s administrative backend and API, managing catalog, inventory, orders, and related store data through shared business logic. | |
| authentik-mcp-server barrow1990/authentik-mcp-server Enables MCP clients to connect to Authentik and securely query users, groups, applications, events, and system status, with an optional gated tool to enable or disable user accounts. | |
| bazarr-mcp-server barrow1990/bazarr-mcp-server Enables MCP clients to interact with Bazarr for managing subtitles, listing tracked movies and series, monitoring missing subtitles, and triggering subtitle searches and downloads. | |
| prowlarr-mcp-server barrow1990/prowlarr-mcp-server Connects MCP clients to Prowlarr over HTTP, enabling management of indexers, release searches, and system status checks through natural language tools. | |
| radarr-mcp-server barrow1990/radarr-mcp-server Enables MCP clients to connect to a Radarr instance over HTTP to manage and query movies, including listing, searching, triggering downloads, and checking system status. | |
| reclaimerr-mcp-server barrow1990/reclaimerr-mcp-server Enables MCP clients to interact with a Reclaimerr media-library cleanup instance, including listing candidates, managing protections and deletions, triggering tasks, and checking system status over HTTP. | |
| sonarr-mcp-server barrow1990/sonarr-mcp-server Enables MCP clients to interact with Sonarr for listing series, checking missing episodes, searching for new series, triggering episode searches, and retrieving system status. | |
| streamystats-mcp-server barrow1990/streamystats-mcp-server Enables MCP clients to interact with a self-hosted Streamystats Jellyfin dashboard, providing tools to list servers, search library items, manage watchlists, and check system status. | |
| tracearr-mcp-server barrow1990/tracearr-mcp-server Connects MCP clients to Tracearr's read-only Public API v2, enabling queries for live streams, watch history, media stats, users, and library information without modifying anything. | |
| Wiki.js MCP Server barry-anil/wiki-mcp Manages hierarchical documentation in Wiki.js with tools for creating, updating, searching, and organizing pages, supporting multi-repository workflows and Docker deployment. |
33,001–33,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.