Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| recraft-mcp-server bartwaardenburg/recraft-mcp-server MCP server for AI image generation, transformation, and style management via the Recraft API. Provides tools for text-to-image, image-to-image, inpainting, background operations, vectorization, upscaling, and custom style creation. | |
| paperless-mcp baruchiro/paperless-mcp An MCP (Model Context Protocol) server for interacting with a Paperless-NGX API server. This server provides tools for managing documents, tags, correspondents, and document types in your Paperless-NGX instance. | |
| Qiskit MCP Server barvhaim/qiskit-mcp-server Unofficial Model Context Protocol (MCP) server that enables LLMs to build and execute quantum circuits using Qiskit. | |
| Israeli Land Authority MCP Server barvhaim/remy-mcp Provides programmatic access to Israeli Land Authority (רמ״י) public tender data, allowing comprehensive search and filtering of land tenders by type, location, status, and dates. | |
| virustotal-mcp-server barvhaim/virustotal-mcp-server MCP server for security analysis using VirusTotal API, enabling AI assistants to analyze URLs, files, IP addresses, and domains with automatic relationship fetching. | |
| YFinance MCP Server barvhaim/yfinance-mcp-server Provides financial data from Yahoo Finance via MCP, enabling AI agents to access real-time stock info, historical prices, financial statements, and market analysis. | |
| MCPServerTransportDemo barwalgayatri02/mcpservertransportdemo A demonstration project for building and testing Model Context Protocol (MCP) servers using the MCP inspector and client tools. It provides a practical implementation for exploring MCP transport mechanisms and server-client interactions. | |
| legal_mcp barwojcik/legal_mcp Enables semantic search over Polish court judgments and legislative acts via MCP. Allows LLMs to retrieve legal documents using natural language queries. | |
| MCP Headless Gmail Server baryhuang/mcp-headless-gmail A headless server that enables reading and sending Gmail emails through API calls without requiring local credentials or browser access, designed to run remotely in containerized environments. | |
| HubSpot MCP Server baryhuang/mcp-hubspot Enables AI models to interact with HubSpot CRM data and operations through a standardized interface, supporting contact and company management. | |
| mcp-openmemory baryhuang/mcp-openmemory Enables Claude to remember conversations and learn over time by storing and recalling messages, memory abstracts, and recent history using a local SQLite database. | |
| mcp-remote-macos-use baryhuang/mcp-remote-macos-use The first open-source MCP server that enables AI to fully control remote macOS systems. | |
| MCP Server: Scalable OpenAPI Endpoint Discovery and API Request Tool baryhuang/mcp-server-any-openapi This server facilitates scalable discovery and execution of OpenAPI endpoints using semantic search and high-performance processing, overcoming limitations of large spec handling for streamlined API interactions. | |
| AWS Resources MCP Server baryhuang/mcp-server-aws-resources-python A Model Context Protocol server that enables Claude to execute Python code using boto3 to query and manage AWS resources directly from conversations. | |
| MCP Server - Twitter NoAuth baryhuang/mcp-twitter-noauth A headless MCP server that provides Twitter API access without requiring local credential setup, enabling core Twitter operations like searching tweets, getting user tweets, posting tweets, and replying to tweets. | |
| BarzKit — Self-custody AI Agent Wallets barzkit/plugins Self-custody AI agent wallets with passkeys, gasless transactions & programmable permissions (ERC-4337) | |
| UniFi MCP Server basalto/unifi-mcp-server Enables AI agents and applications to interact with UniFi network infrastructure through the UniFi Network Controller API, supporting device, client, network, firewall, QoS, backup, multi-site, and topology management. | |
| Weather MCP Server basaranbaran/mcp-weather-server Enables real-time weather queries via Claude Desktop using OpenWeatherMap API, providing current conditions and 24-hour forecasts for any city. | |
| Looker Health MCP Tool basavarajangadi55/looker-health-mcp-tool Provides MCP tools to perform Looker health checks (health_pulse, health_analyze, health_vacuum) via the MCP Toolbox connector. | |
| PayStage MCP Server base-buzz/paystage Evaluates proposed x402 payments against a local policy and returns pay, review, or do_not_pay, while also listing and evaluating outstanding authorizations to flag double-pay or limbo risk. | |
| docs-mcp base-kit/docs-mcp Provides a local MCP server for searching and retrieving documentation from 22+ open-source projects, enabling AI coding assistants to access up-to-date docs without network dependency. | |
| Base MCP Server base/base-mcp-legacy Provides onchain tools for Claude AI to interact with the Base blockchain and Coinbase API, enabling wallet management, fund transfers, and smart contract deployment. | |
| Basecrawl MCP basecrawl/mcp Provides tools to scrape, crawl, and map web pages via the Basecrawl SaaS API. | |
| rootstock-mcp basednut/agent-tools Enables read-only access to ROOTSTOCK DEX and Orchard data on Base and Base Sepolia through 34 stdio tools for querying networks, registries, pools, token balances, and transaction status. | |
| MCP Server with Clerk & Express baseergroot/express-mcp-example A minimal example MCP server using Express and Clerk for authentication, exposing a streamable HTTP endpoint for MCP clients. | |
| BaseGrid MCP Server basegridio/mcp-server Gives Claude Desktop, Cursor, Cline, and other MCP-compatible AI tools persistent memory, enabling them to store and recall information seamlessly across sessions. | |
| sightvane-mcp basehoss/sightvane-mcp Enables AI assistants to perform comprehensive SEO and GEO measurements, including site audits, keyword research, ranking tracking, and brand visibility analysis across search engines and generative AI platforms. | |
| XMCP Application basehub-ai/mcp A server that leverages the XMCP framework to discover and execute tools from the src/tools directory, supporting both SSE and STDIO transport methods for interaction. | |
| mcp-devops-server basel5001/mcp-devops-server Enables AI agents to execute read-only DevOps operations including kubectl, terraform, helm, docker, and AWS cost analysis through natural language. | |
| @baselab-me/signals-mcp baselab-me/signals-mcp Enables AI agents to create and post signal coins on the Base blockchain through tools for media uploads, transaction generation, and on-chain submission. It supports both fully headless automated execution and manual signing modes using th | |
| Wire baseline-architect/wire Enables local MCP clients to expose and execute typed tools through a bounded native runtime with Ed25519 admission, per-session budgets, rate limits, schemas, and cached outputs. | |
| claude-voice-input baseline-quebec/claude-voice-input Local MCP server that enables voice input to Claude by transcribing microphone audio locally using faster-whisper, avoiding cloud services. | |
| MCP DOS - Classic DOS Gaming Server basementstudio/mcp-dos Provides access to classic DOS games like DOOM, Super Mario, Tetris, and Duke Nukem 3D through js-dos emulation, allowing users to play these legendary games directly from their AI assistant. | |
| MCP Three basementstudio/mcp-three Enables working with 3D models by converting GLTF/GLB files into React Three Fiber JSX components and analyzing model structures, hierarchies, and properties for debugging and optimization. | |
| Professional Python MCP Server bash20cu/mcp-server-python A comprehensive MCP implementation designed for fullstack development that enables code manipulation, terminal command execution, and system notifications. It provides an intelligent agent interface powered by Gemini to automate Python and | |
| flask-mcp-server bashar94/flask-mcp-server Flask-based Model Context Protocol (MCP) server for Python. Drop it into any Flask app or run it standalone. | |
| Cortex MCP basharamso/cortex-mcp Delivers on-demand knowledge from a built-in library of 728 agents, skills, patterns, and examples across 26 domains to any MCP-compatible AI tool. | |
| Zammad MCP Server basher83/zammad-mcp An MCP server that connects AI assistants to Zammad, providing tools for managing tickets, users, organizations, and attachments. | |
| Docs MCP bashguru/cisco-esa-mcp Enables hybrid search over product PDFs with version-aware, figure-returning answers for any MCP client, locally or via secure remote access. | |
| bob-in-browser bashkid/bob-in-browser Enables MCP clients to open websites, capture screenshots at multiple breakpoints, and run automated design audits for issues like overflow, small tap targets, low contrast, missing alt text, tiny text, and clipped content. | |
| Pterodactyl MCP basic-bit/pterodactyl-mcp Enables self-hosted, per-panel access to Pterodactyl Application and Client APIs for managing servers, users, nodes, files, backups, schedules, and console output, with writes gated behind operator enablement. | |
| Soundiiz MCP basic-bit/soundiiz-mcp An MCP server for Soundiiz that lets AI assistants inspect sync jobs and SmartLinks across streaming services, trigger syncs, and clean up stale links. | |
| Aviation Weather MCP Server basicbill/aviation-weather-mcp Provides real-time access to official aviation weather data including METARs, TAFs, and PIREPs directly from aviationweather.gov. It enables users to query airport observations, forecasts, and pilot reports through natural language within C | |
| soundings-mcp basicbill/soundings-mcp Enables users to fetch, analyze, and visualize RAOB upper-air sounding data, including station search, thermodynamic calculations, and Skew-T diagram generation with S3 upload support. | |
| GoHighLevel MCP Server basicmachines-co/open-ghl-mcp Enables AI assistants to manage GoHighLevel CRM data including contacts, conversations, opportunities, calendars, and forms through MCP tools and resources. | |
| ccc-mcp basil155/ccc-mcp Enables an external AI agent to delegate tasks to a local Claude Code installation and receive structured reports, with code modifications governed by a plan-approval-execution workflow and direct file and git operations available outside t | |
| Raptee Ops Agent basilahamed/raptee-ops-agent Enables EV two-wheeler OEMs and dealerships to handle sales, service, and leadership-reporting conversations through a voice/chat agent with 22 tools for lead capture, test-ride booking, service requests, warranty checks, roadside assistanc | |
| Basile MCP basile-data/basile-mcp Connects MCP clients such as Claude, ChatGPT, Cursor, and VS Code to a hosted French B2B database for finding companies, executives, and contacts, counting results for free, and exporting prospects through OAuth without an API key. | |
| named-exclusion-license-mcp basilisk-bat/named-exclusion-license-mcp Generates deterministic, reviewable drafts of source-available named-exclusion licenses with SPDX identifiers and digests, without modifying files or performing external actions. | |
| edge-ai-MCP basilrari/edge-ai-mcp Enables ArduPilot drone control through MAVSDK plugins, supporting mission upload, telemetry, and flight commands via MCP tools. |
33,101–33,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.