Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Yandex Wiki MCP best-doctor/mcp-yandex-wiki Enables reading, creating, updating, and appending content to Yandex Wiki pages via MCP. Supports both read-write and read-only modes. | |
| build-with-ak bestagentkits/build-with-ak-toolkits Allows MCP clients to create, validate, preview, and submit product showcases on Build with AK, with support for local stdio and remote HTTP transports. | |
| Cloud Harness MCP bestagentkits/cloud-harness-mcp Enables AI clients to securely operate isolated coding workspaces with file, command, Git, and deployment tools via authenticated remote MCP. | |
| ai-visibility-mcp bestaiinsider/ai-visibility-mcp Audits AI-bot visibility: robots.txt per-bot for 22 AI user-agents (GPTBot/ClaudeBot/PerplexityBot/etc), Cloudflare flags, JSON-LD, sitemap, llms.txt, SPA shell, plus cross-model brand mentions via Perplexity + OpenRouter. 0-100 score. SSRF | |
| Clara Windows UI MCP bestcodetools/clara-windows-ui-mcp Enables local Windows UI automation and screen capture, targeting windows that are difficult to automate such as games and legacy apps, with tools for window management, mouse and keyboard input, and desktop capture. | |
| Repository Inspector MCP Server bestcreator01/ai-repo-inspector Enables AI clients to inspect Git repository changes, run allowlisted validation commands, and generate Markdown review reports via MCP, with validation disabled by default for security. | |
| pw-browser-mcp bestdeng/pw-browser-mcp Enables browser automation with Playwright, offering 17 tools for navigation, session management, Chrome profile selection, and action recording. | |
| UnrealBlueprintMCP bestdev/unreal_bp_mcp Enables AI agents to create and modify Unreal Engine blueprints using natural language commands. Supports blueprint creation, property modification, and real-time communication with Unreal Editor through WebSocket integration. | |
| Payment-Risk-Exception-AI-Agent-MCP beste-oztunc/payment-risk-exception-ai-agent MCP server that provides tools for retrieving transaction context and recording AI decisions or creating human reviews for payment risk exceptions. Enables LLM agents to handle exception transactions in a hybrid payment-decisioning workflow | |
| matrix-workouts-mcp bestimmaa/matrix-workouts-mcp Enables AI agents to query Matrix / Johnson Fitness ride history, exposing per-10-second power, cadence, resistance and heart-rate samples plus cross-ride views like power curves, training volume, and ride comparisons. Runs over a cached hi | |
| @bestimmaa/posprint-mcp bestimmaa/posprint-mcp MCP server for printing POS receipts via CUPS printers, supporting a two-step confirmation flow with preview. | |
| roon-mcp bestimmaa/roon-mcp MCP server to control the Roon music player, enabling AI agents to search music, manage playback, and adjust volume across zones. | |
| Tiny SSE MCP Server bestk/tiny-ser-mcp-server A remote MCP server implementation for Cloudflare that uses server-sent events (SSE) to enable Model Control Protocol communication. | |
| VSCode Internal Command MCP Server bestk/vscode-internal-command-mcp-server Converts VSCode into an MCP server that enables external clients to remotely execute VSCode internal commands, query workspace information, and interact with the editor through HTTP streaming. Built on the FastMCP framework with security co | |
| reddit-readonly-mcp bestnite/reddit-readonly-mcp Enables AI assistants to browse subreddit feeds, retrieve posts and nested comment threads, search content, and look up public community and user information on Reddit without any API keys or accounts. It runs strictly read-only with resili | |
| mcp-server-rt bestpractical/mcp-server-rt Connects AI assistants to a Request Tracker (RT) instance, enabling natural language ticket search, creation, updates, and queue management via the MCP protocol. | |
| FinanceMCP beta0024/financemcp_v4 An MCP server that provides AI-powered financial intelligence tools, including stock advisory, technical analysis, prediction, portfolio optimization, and market regime detection for Indian markets. | |
| computer-split-screen-mcp beta0415/computer-split-screen-mcp A high-performance, cross-platform MCP server for split-screen window management on Windows and macOS, providing 16 window manipulation tools. | |
| Image Convertor MCP beta0415/image-convertor-mcp An MCP server that provides comprehensive image conversion and processing tools, including format conversion, batch processing, GIF creation, and PDF generation. | |
| amdb betaer-08/amdb Turn your codebase into AI context — entirely on your machine. Single-binary MCP server with AST parsing, call graph, and local embeddings. | |
| corbel betaer-08/corbel Call graph MCP server for Rust, Python, TypeScript, TSX, and JavaScript. Every caller and callee carries a resolution field showing how the reference was matched to a definition, plus multi-hop impact analysis for refactoring. Local-only, s | |
| Keynote-MCP betancur/keynote-mcp A Model Context Protocol server that enables AI assistants to control Keynote presentations through AppleScript automation, supporting slide operations, theme-aware content management, and export functions. | |
| nyc-311-mcp betanyc/nyc-311-mcp An MCP server for the NYC 311 Public API that allows AI assistants to check city services status, weather alerts, and lookup service requests. | |
| Xiaohongshu MCP Python betars/xiaohongshu-mcp-python A Python implementation of an MCP server for Xiaohongshu that enables AI models to browse feeds, search content, and manage interactions like liking or commenting. It leverages Playwright for browser automation to support account management | |
| Reachy Mini MCP betasolutions-ai/reachy-mini-mcp- Enables AI systems to control the Reachy Mini robot—speak, listen, see, and express emotions through physical movement. Compatible with Claude, GPT, Grok, and other MCP-compatible AIs. | |
| BB-DC-MCP betasystems/bb-dc-mcp Enables users to securely access and manage Bitbucket Data Center projects, repositories, pull requests, branches, commits, and build statuses through natural language, using per-user OAuth 2.0 authentication and granular read/write permiss | |
| MCP Cheat Engine Server bethington/cheat-engine-server-python Provides safe, read-only access to memory analysis and debugging functionality through the Model Context Protocol, allowing users to examine computer memory for software development, security research, and educational purposes. | |
| Ghidra MCP Server bethington/ghidra-mcp Model Context Protocol server for Ghidra reverse engineering. 179 tools for decompilation, symbol management, cross-references, and binary analysis. | |
| FastApply MCP Server betmoar/fastapply-mcp Enterprise-grade code intelligence platform providing AI-powered code analysis, semantic search, security scanning, and automated refactoring capabilities. Integrates with local AI models for zero-cost operations while delivering comprehens | |
| windows-computer-use-mcp betrayzl/windows-computer-use-mcp An MCP server that gives AI agents human-like control over Windows via visual perception and simulated mouse and keyboard input, enabling automation of any application without APIs. | |
| BeTrusty MCP Server betrusty/mcp-server Enables to calculate property prices and check availability via BeTrusty API, supporting MCP-compatible clients like Claude Desktop and Cursor. | |
| browser-inspector-mcp betson-g/browser-inspector-mcp Gives AI coding tools access to the CSS cascade the way DevTools does — which rules matched, which won, where each came from. | |
| Better Icons better-auth/better-icons Provides access to over 200,000 icons from 150+ collections with features for searching, recommendations, and direct file synchronization. It supports multiple frameworks and optimizes AI performance by writing icon code directly to project | |
| pragmatic bettersandeep/pragmatic Enables Claude and other MCP clients to create, read, edit, search, share, and export boards, diagrams, tasks, wireframes, mind maps, tables, and Markdown docs through an OAuth-secured endpoint. | |
| Calva Backseat Driver betterthantomorrow/calva-backseat-driver Enables AI assistants to interact with Clojure REPLs for evaluating code, performing structural edits with bracket balancing, and looking up symbol documentation. Transforms AI coding assistants into interactive programming partners with ac | |
| ANSYS MCP Server bettertoo2/ansys-mcp-server Enables natural language-driven ANSYS simulations (Fluent, Mechanical, Geometry) with automatic TUI script generation for reproducibility. | |
| Express REST API and MCP Server Framework bettychavez/express-rest-api-and-mcp-server-framework Enables LLM clients such as Claude, ChatGPT, and Cursor to discover and act on generated CRUD services over HTTP through tools like create, update, list, and delete, plus read-only resources for listing and fetching records by ID, with no e | |
| obsidian-mcp bettyguo/obsidian_mcp An MCP server that enables AI agents to read, search, write, and link notes in Obsidian vaults while respecting wikilinks, frontmatter, tags, and daily notes conventions, bundled with seven workflow-centric Claude Skills. | |
| IB MCP Server bettypeterson/ib_mcp Connects Interactive Brokers' official Web API to MCP clients, enabling account access and brokerage operations over HTTPS without needing TWS or IB Gateway. | |
| Levelang MCP Server beverage/levelang-mcp Integrates the levelang.app translation API with AI assistants to provide translations constrained to specific learner proficiency levels. It supports multiple languages and allows users to control translation styles and moods while dynamic | |
| Blender Open MCP beverly0328/blender-open-mcp Enables AI agents to control a live Blender session and use configurable LLM backends through MCP tools for scene/object editing, rendering, asset search/download, and runtime provider switching. | |
| Financial Modeling Prep MCP Server beverlykaminski/financial-modeling-prep-mcp-server Enables AI assistants to access and analyze financial data, stock information, company fundamentals, market insights, and more through 250+ tools across stocks, ETFs, crypto, forex, commodities, and economics. It supports dynamic toolset lo | |
| Chain of Thought MCP Server beverm2391/chain-of-thought-mcp-server An MCP server that uses Groq's API to expose raw chain-of-thought tokens from Qwen's qwq model, enabling LLMs to think step-by-step before responding. | |
| gib-fatura-mcp bevren/gib-fatura-mcp MCP server for creating, listing, and signing Turkish e-invoices, e-producer receipts, and e-self-employment receipts on the GİB e-Arşiv portal. | |
| trendyol-mcp bevren/trendyol-market-mcp MCP server for Trendyol Seller API providing tools to manage products, orders, claims, finances, invoices, customer questions, and webhooks. | |
| bewell-catalyst-mcp bewellit/bewell-catalyst-mcp MCP server for managing activity libraries on BeWell Catalyst, enabling creation, update, listing, fetching, and deletion of activities with media uploads. | |
| mobbin-mcp bewinxed/mobbin-mcp Enables AI agents to search Mobbin for apps, flows, screens, and website sections, returning compact text results and fetching screenshots only for the screens the agent selects. Requires the user's own Mobbin account and runs locally over | |
| CFAST MCP bewygs/cfast-mcp Enables LLMs to build, inspect, run, and analyze CFAST fire models step by step via tools for compartments, materials, vents, fires, devices, and surface connections, with simulation and result summaries. | |
| Beancount MCP bex-co/beancount-io TypeScript Streamable HTTP MCP server for Beancount double-entry ledgers, including BQL, reports, files, imports, and dry-run previews. The public monorepo includes the implementation and a full-stack Docker Compose self-hosting guide. | |
| mysql-readonly-mcp beydemirfurkan/mysql-readonly-mcp Provides secure, read-only access to a single MySQL database for schema inspection and querying. |
33,851–33,900 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.