Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| my-mcpserver bekumar12/my-mcpserver A production-ready template for developing Model Context Protocol (MCP) servers using Python and FastMCP, with example tools like a multiply calculator, code review prompt generator, and Red Hat logo tool. | |
| @belal-elsabbagh-apex/copilot-mcp belal-elsabbagh-apex/copilot-mcp Enables EHR Copilot operations such as order cloning, queue building, and execution trace analysis over stdio. | |
| business-tools belanas/mcp-business-tools-server Enables AI assistants to look up customers, orders, products, and stock; take role-restricted actions such as creating orders and handling refunds; enforce business rules; and maintain a tamper-evident audit log. | |
| computer-use-mcp belaszalontai/computer-use-mcp Enables coding agents to drive any Windows desktop app through window-relative, token-efficient tools, with optional DeepSeek-powered vision. | |
| MCP Integration Proxy belaymit/mcp Routes requests to multiple downstream Model Context Protocol servers and provides a LangGraph.js-based agent with RAG capabilities for development assistance. | |
| Tripo AI MCP Server beldangi-fax-machine/tripo-mcp-claude-godot Enables generating, rigging, animating, and converting 3D models via Tripo AI API, with direct integration for Godot game engine through natural language. | |
| mcp-local-memory beledarian/mcp-local-memory A lightweight, powerful local memory server for AI agents supporting text, entities, and relations. Enables persistent codebase understanding and user preference management. | |
| komoot-mcp belenos-toutatis/komoot-mcp Enables users to interact with Komoot for managing tours, planning routes, exporting GPX/FIT, and accessing highlights and user profile. | |
| sec-edgar-mcp belermirzaa7-ops/edgar-audit-mcp MCP server that lets an LLM read official SEC financial data, tracing every number back to a specific SEC filing, US-GAAP tag, and filing date. | |
| Renfe MCP Server belgrano9/renfe_mcp_server Enables querying Renfe train schedules, checking prices, and finding stations across Spain using official GTFS data. | |
| SNCF MCP Server belgrano9/sncf_mcp_server Enables querying SNCF train schedules and stations in France using the official Navitia API, with support for flexible date parsing and real-time journey planning. | |
| Maasy MCP believe-it-group/mcp-server MCP server for Maasy AI Marketing Copilot | |
| DataDog MCP Server believe-sa/datadog-mcp Enables AI assistants to interact with DataDog's observability platform through a standardized interface. Supports monitoring infrastructure, managing events, analyzing logs and metrics, and automating operations like alerts and downtimes. | |
| multimodal-mcp believe3344/multimodal-mcp Gives any MCP client (OpenCode, Claude Code, Claude Desktop, Cursor, etc.) the ability to process images by automatically converting them to text descriptions using a vision model, so that text-only LLMs can handle image-based queries. | |
| Procurement MCP belikh/procurement Enables natural-language federated product searches across Chinese and Australian marketplaces, normalizing offers by landed cost, shipping ETA, and seller trust, with support for image search, grocery unit pricing, and deal-vetting signals | |
| KG Memory belindamo/kg_mem An MCP server that implements a heavily typed knowledge graph memory system with AI-powered entity and relation extraction, enabling structured knowledge storage and retrieval from unstructured text using predefined or custom ontologies. | |
| beliq-mcp beliq-eu/beliq-mcp Validates electronic invoices (XRechnung, ZUGFeRD, Factur-X, Peppol BIS, etc.) against authority-pinned rules and explains failures. | |
| YaTracker Connector belkin-digital/yatracker-connector Enables interaction with Yandex Tracker through its API for managing tasks, comments, and attachments. It supports issue searching, status transitions, and metadata retrieval for automated project management. | |
| DSH Crew bell51864/dsh-crew Dispatch tasks from Claude Code, Codex, Antigravity or Grok to real DeepSeek Harness agent sessions that surface as native subagents with live progress, tier/effort presets, escalation on failure and workspace-holding guardrails. It also le | |
| Cinema4D MCP Server bell67441/cinema4d-mcp Enables users to connect Cinema 4D to Claude for prompt-driven 3D modeling, scene creation, object/material/light/camera manipulation, MoGraph and dynamics workflows, and rendering through tool commands. | |
| canada-law bellaaaaxu/canada-law Enables AI assistants to answer British Columbia employment law questions — overtime, breaks, statutory holidays, pay, leaves and termination — from the current official text on BC Laws, in English or Chinese, with the act, section number, | |
| airplanes-live-mcp bellaposa/airplanes-live-mcp Enables real-time aircraft tracking from Claude Desktop using the airplanes.live API, supporting searches by callsign, registration, hex ID, and position. | |
| Quote Collection MCP-Server bellasabaja/mcp-server Enables managing a personal quote collection with add, search, random, delete, and import functions via the Model Context Protocol. | |
| hybrid-memory-mcp bellfireg/hybrid-memory-mcp Universal FastMCP bridge into a hybrid memory stack, enabling MCP-capable agents to save, search, read, and recall memories using OpenViking and Honcho backends. | |
| Spotify Model Context Protocol belljustin/spotify-mcp Enables creating Spotify playlists based on text descriptions by connecting Cursor editor to Spotify's API through OAuth authentication. | |
| transit-mcp bello0498/mobility-assistant-mcp MCP server for Korean public transit that enables route planning with real-time bus and subway arrivals, including fallback options. It combines ODsay route search with real-time data from Gyeonggi Bus and Seoul Metro systems. | |
| MCP Dungeon Game bellsanct/mcp-dungeon-game An idle dungeon crawler game playable through conversation, featuring equipment collection, time-based dungeon exploration, auto-battles, random events, and encrypted local save data. | |
| Repsona MCP Server bellx2/repsona-mcp-server Enables integration with Repsona project management platform, allowing users to manage tasks, projects, notes, files, and inbox through natural language interactions with the Repsona API. | |
| upnote-mcp bellx2/upnote-mcp A read-only MCP server that enables searching, retrieving, and managing local UpNote notes, notebooks, and tags via SQLite and UpNote's official URL scheme. | |
| YooKassa MCP Server belolipetsky/yookassa-mcp MCP server for the YooKassa payment API, enabling AI assistants to manage payments, refunds, receipts, webhooks, and saved payment methods through natural language. | |
| kiwi-tcms-mcp belovdm/kiwi-tcms-mcp MCP server providing full access to Kiwi TCMS via JSON-RPC, with 68 tools for test plans, cases, runs, executions, and reference data. It supports named arguments, default project, and easy integration with MCP clients. | |
| joplin-mcp belsar-ai/joplin-mcp Model Context Protocol (MCP) server for Joplin note-taking app, enabling AI to read, search, and modify notes via sandboxed scripts. | |
| crewmeister-api belstark/crewmeister-api-python Enables MCP clients to interact with the Crewmeister API over local stdio, covering operations for members, teams, time tracking, salary exports, and related platform resources. | |
| wecom-docs-mcp-server beltran12138/wecom-docs-mcp-server WeCom (Enterprise WeChat) document operations via MCP — create, read, and edit Docs and Smartsheets. 9 tools. Fills the doc-CRUD gap: existing WeCom MCP servers only support webhook messaging | |
| Perplexity Search MCP Server belugatempo-dot/perplexity-skill Enables real-time web search with source citations by leveraging Perplexity AI's Sonar models through SAP AI Core. It integrates with Claude Code to provide deep analysis, reasoning, and up-to-date information from the web. | |
| Zotero Connector MCP belvme/zotero-connector-mcp Enables AI agents to invoke the real browser Zotero Connector to connect to the current article page, trigger saves, and verify that PDF attachments actually landed, with status, download, and local-write authorization tools. | |
| cleanfetch belzorash/mcp-cleanfetch Enables AI agents to read web pages reliably, returning clean markdown content, hyperlinks, and metadata without navigation or ad noise. | |
| marketcal belzorash/mcp-marketcal Provides correct trading day and settlement date calculations for multiple exchanges, with no external API calls. | |
| odoo-mcp bemade/odoo-mcp Connects AI assistants to Odoo 19.0, enabling full CRUD operations and method calls on any Odoo model via API key or username/password authentication. | |
| odoo-model-mcp bemade/odoo-model-mcp Enables querying Odoo's model registry (fields, inheritance, methods) without a database connection by loading the registry in-memory. | |
| Interview Prep MCP Server bemnetbeshah/interview-and-learning-data-mcp Enables Claude and ChatGPT to share a single study-progress database for interview prep, coursework, and spaced repetition, with per-user data isolation and server-side SM-2 scheduling for due reviews and study plans. | |
| octave-mcp bemoregt/octave_mcp_claudecode Enables Claude Code to run GNU Octave code for numerical computation, plotting, and deep learning inference via system calls. | |
| grok-game-mcp ben-mad-jlp/grok-game-mcp Enables generating game assets from natural language prompts, including sprite sheets, animations, voiceover, sound effects, chiptune music, tilesets, backgrounds, VFX, and cohesive asset packs with shared style and audio DSP presets. | |
| Obsidian Vectorize MCP ben-vargas/obsidian-vectorize-mcp Enables indexing and searching Obsidian notes via MCP, using Cloudflare's serverless platform for cost-effective vector embeddings and AI-powered search. | |
| OpenConstruction MCP ben11304/oc-mcp Local-first MCP server enabling catalog discovery, dataset context, and safe downloads of construction datasets. | |
| Odoo MCP Server benagricola/odoo-mcp Provides read-only access to Odoo databases via OdooRPC, allowing AI assistants to query and analyze Odoo data through the MCP protocol. | |
| mcp-sql benamaraissam/mcp-sql An extensible read-only MCP server for SQL databases, enabling schema exploration and safe SELECT queries via tools like list_schemas, list_tables, describe_table, and execute_query. | |
| OneNote MCP Server benamaraissam/onenote-mcp Connects to OneNote via Microsoft Graph and exposes tools to list notebooks, sections, pages, and read page content. | |
| androir-mcp benasbarciauskas/androir-mcp An MCP server that allows AI agents to drive real Android devices via adb, capturing screenshots, reading the live UI tree, and performing actions like tap, swipe, and type. | |
| opnsense-sdk benashby/opnsense-sdk Provides complete programmatic access to OPNsense core APIs, enabling firewall automation, VPN management, and system administration through a comprehensive MCP server. |
33,501–33,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.