Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Kotak Neo Trading MCP benatcmathew/kotak-neo-trading-mcp Enables automated trading on Kotak Neo from AI environments with secure credential vault, TOTP generation, and smart order commands. | |
| shoonya-mcp benatcmathew/shoonya_trading_mcp-server Enables algorithmic trading on the Shoonya platform through natural language commands, with military-grade encryption for credential security. | |
| Map benatfroemming/geo-map Enables visualizing GeoJSON data on an interactive map directly in Claude Desktop, allowing users to request maps of information found or generated. | |
| n8n Builder benattanasio/n8n-builder Enables Claude Code to build, execute, and manage n8n Cloud workflows conversationally, from writing workflow JSON through running, debugging, and exporting it. Access is confined by a name-prefix guard so it can only ever touch the workflo | |
| WeBridge benbaobaoshigemi/webridge Enables MCP clients on Windows to read WeChat sessions, contacts, messages, media, and files through WeFlow, and to send or natively forward messages via the desktop WeChat client. | |
| fortinac-mcp benbelo/fortinac-mcp MCP server for diagnosing rogue hosts on FortiNAC 7.6 by querying the REST API, cross-referencing devices against profiling rules, and running nmap scans to identify classification blockers. | |
| EzRAG MCP Server benbjurstrom/ezrag Provides semantic search and keyword search over Obsidian notes, along with direct note retrieval, allowing external AI agents to query and access the vault. | |
| Agentic AI MCP Server benbobenbo/mcp-server An MCP server with real AI capabilities (OpenAI/Anthropic) for natural language understanding, multi-step planning, and autonomous task execution, enabling intelligent file analysis, weather-based planning, and more. | |
| Jokes MCP Server benbonn/utapimcp An MCP server that allows Copilot Studio and GitHub Copilot to generate different types of jokes (Chuck Norris, Dad jokes, etc.) on user request through Model Context Protocol integration. | |
| Motion MCP Server bencanda/motion-mcp-server Enables LLM clients to manage tasks and projects, search content, handle comments, custom fields, recurring tasks, statuses, schedules, and workspaces through natural conversation. | |
| D2L Brightspace MCP Server bencered/d2l-mcp-server Enables AI assistants to interact with D2L Brightspace LMS, providing access to assignments, grades, course content, calendar events, and announcements through automated SSO authentication. | |
| mcp-fea benchwire/mcp-fea Enables real finite element analysis from natural language: accepts STEP geometry and plain-English questions, validates setups deterministically, meshes and solves with CalculiX on Modal, and returns engineering verdicts (stress, safety fa | |
| postmcp bencibr/postmcp MCP server for API request automation and testing, with multi-project workspaces, environment profiles, OAuth2 support, WebSocket testing, assertions, and history auditing. | |
| TempMail MCP bencibr/tempmailmcp Provides temporary email services for AI agents, enabling closed-loop verification of email-based registration flows with multi-provider support, auto-registration, and verification code extraction. | |
| Tabcorp API MCP Server bencousins22/tab-mcp Enables comprehensive interaction with Tabcorp betting services through 30+ specialized tools covering racing data, sports betting, results, and FootyTAB with OAuth authentication. Supports all Australian jurisdictions and provides access t | |
| openrct2-mcp bendaspur/openrct2-mcp Bridges a running OpenRCT2 game to AI agents, enabling them to read park state, optimize parks, and build roller coasters. | |
| YouTube MCP Server bendelpino/youtube-mcp Enables interaction with YouTube through search and transcript extraction functionality. Allows searching for videos and retrieving full transcripts with timestamps for content analysis. | |
| zKettle benderterminal/zkettle Self-hosted, zero-knowledge encrypted, self-destructing secrets for secure agent-to-agent coordination | |
| dandi-query-server bendichter/dandi-query-mcp Enables complex queries over data on the DANDI Archive and provides a system for managing text notes. It features tools for note creation, resources for note access via custom URIs, and prompts for generating summaries. | |
| Pollinations MCP Server bendusy/pollinations-mcp An MCP server that connects to Pollinations.ai API, enabling AI models to generate and download images and text through natural language commands. | |
| Jobless MCP bendza/jobless-mcp Personalized job search inside Claude. Get ranked job matches based on your actual skills, not keywords. | |
| kimi-api-mcp bene-bosco/kimi-api-mcp MCP server that provides file operations and Moonshot API-powered tools (reasoning, code review, testing, research, web search, agent) for Kimi K2.5, requiring only a Moonshot API key. | |
| PsUtil MCP Server benedatllc/agent-with-mcp-example Provides tools for obtaining system CPU and memory statistics through FastAPI endpoints exposed via MCP. | |
| Kubernetes Tools MCP Server benedatllc/k8stools Provides a set of read-only Kubernetes functions via an MCP server, enabling interaction with Kubernetes clusters through agents or coding assistants like GitHub Copilot. | |
| TidalCycles MCP Server benedict/tidal-cycles-mcp-server Enables conversational live coding with Claude AI and TidalCycles, allowing users to create and manipulate algorithmic music patterns through natural language. | |
| Scientific Paper Harvester MCP Server benedict2310/scientific-papers-mcp Provides real-time access to over 200 million scientific papers and full-text extraction from major academic sources including arXiv, OpenAlex, and PubMed Central. It enables users to search, fetch metadata, and analyze citations across mul | |
| Materials Project Platform MCP Server benedictdebrah/materials-project-mcp The Materials Project MCP Server is server that provides programmatic access to the Materials Project database. It enables LLMs, to search, analyze, and retrieve up to date materials science data. | |
| OctoQuery benedya/octoquery OctoQuery is an MCP server that converts databases into AI-accessible tools by exposing each configured database as a tool that accepts SQL queries and returns JSON results, enabling AI agents to query your data directly. | |
| agent-team-lab benemox/agent-team-lab Enables orchestrating a reusable team of expert agents (PM, architecture, development, QA, security) to analyze a project's files and produce consolidated recommendations. It exposes tools to list experts, ask a single expert, or run the fu | |
| Godbolt Compiler Explorer MCP benestar/godbolt-mcp Enables compiling source code and exploring assembly outputs via the Godbolt Compiler Explorer API. Supports multiple languages, compilers, and optimization levels. | |
| ares-mcp benetche/ares-mcp Provides local academic literature search and writing support by querying OpenAlex, arXiv, and Crossref, downloading open-access PDFs, extracting IMRaD sections, and appending BibTeX references. | |
| tresor benewe1337/tresor Enables Claude to use locally stored API tokens from the macOS Keychain without exposing their values, including through environment variables, HTTPS headers, commands with redacted output, and protected .env files. | |
| fadlie benewende-dev/fadlie MCP server for DataHub that detects duplicate datasets across platforms and governance gaps, enabling users to apply governance from one twin to another with dry-run by default. | |
| MCP Enterprise Demo - Gestion Commerciale bengaly/mcp-gestion-commerciale-demo Enables AI assistants to interact with a commercial management system through controlled capabilities for querying orders, analyzing invoices, summarizing customer activity, and creating orders, with role-based access control and audit trai | |
| DigiKey MCP Server bengineer19/digikey_mcp A Model Context Protocol server that provides search and product information tools for DigiKey's electronic component catalog, allowing users to search products by keyword, get detailed product information, and access pricing data. | |
| Things 3 MCP Server benhancock/things3-mcp Enables LLMs to interact with Things 3 task manager on macOS via AppleScript, allowing users to list and create todos across different lists through natural language. | |
| Mathematica Documentation MCP server benhaotang/mcp-mma-docs A server that provides access to Mathematica documentation through FastMCP, enabling users to retrieve function documentation and list package symbols from Wolfram Mathematica. | |
| semantic-scholar-mcp benhaotang/mcp-semantic-scholar-server Enables searching and retrieving academic paper metadata from Semantic Scholar, including paper details, citations, and author information. | |
| mcp-serverman benhaotang/mcp-serverman Enables LLMs to manage MCP server configurations, including listing, enabling, disabling, and version control. | |
| PRD Builder MCP benhedrington/prd-builder-mcp Enables product managers to create, edit, and export product requirements documents interactively within Claude's chat, with real-time completeness scoring and suggestions. | |
| fireboard-mcp benhodgson87/fireboard-mcp MCP server for interacting with Fireboard BBQ temperature monitoring. Enables querying devices, live probe temperatures, Drive fan controller status, and historical cook sessions. | |
| deploytest MCP server benhuckvale/deploytest Enables AI agents to run reusable Playwright test fixtures against live deployments, providing structured test results, screenshots, and assertions. | |
| whoop-mcp-server benhursenabathi/whoop-mcp-server MCP server that enables AI assistants to access Whoop health data including recovery, sleep, workouts, and daily strain for personalized health recommendations. | |
| ReleaseGuard AI benighter/releaseguard-ai Enables evidence-first release readiness assessment by running or accepting build, API, browser, visual, performance, and security evidence, then returning SHIP, REVIEW, or HOLD recommendations with clustered regressions. | |
| autoit-mcp benina/autoit-mcp Windows GUI automation MCP server for Claude Code, enabling deterministic desktop app control via 32 tools including window management, input, pixel search, and file verification, leveraging the AutoIt backend. | |
| AgentLedger benita2001/agentledger MCP server that stores AI agent reasoning traces permanently on 0G Storage, enabling immutable and verifiable decision logging. | |
| Cursor Cloud MCP benitbuhner/cursor-cloud-mcp Enables any MCP client to triage cloud agents, projects, conversations, transcripts, pull requests, and files, including listing agents, reading transcripts, following runs, and sending follow-ups, using an API key or browser sign-in. | |
| JobNimbus MCP Remote Server benitocabrerar/jobnimbus-mcp-remote Enables remote access to JobNimbus CRM through Claude Desktop with 48+ tools for managing jobs, contacts, estimates, and advanced analytics. Features zero-storage security architecture where API keys are never stored on the server. | |
| Gmail Telegram MCP Server benitomartin/gmail-telegram-mcp-server Connects Gmail and Telegram via an MCP server, enabling users to interact with their emails through a Telegram bot with commands for summaries and audio. | |
| mcp-deezer benitoow/mcp-deezer Deezer MCP server for AI agents to search, manage playlists, favorites, and discover music using a free Deezer account. |
33,551–33,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.