Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Medical Appointments Demo bicatu/mcp-skills-demo Enables users to manage medical appointments by searching for doctors, checking availability, and booking sessions through a natural language interface. It serves as a reference implementation for advanced MCP features like symptom-based sp | |
| hugo-llms-mcp biccio/hugo-llms-mcp A generic MCP (Model Context Protocol) server for any Hugo blog, deployed on Cloudflare Workers. It reads your blog's llms.txt and llms-full.txt files and exposes them as structured tools that AI assistants can query to understand your cont | |
| Solana Debug MCP biccsdev/solana_debug_mcp Inspects and debugs Solana transactions, accounts, Anchor IDLs, errors, and PDAs from MCP-compatible clients. | |
| Coinbase Chat MCP bichev/coinbase-chat-mcp Provides AI agents with access to real-time cryptocurrency data from Coinbase's public API, including prices, market statistics, historical data, and technical analysis, plus simulated wallet transactions for educational purposes. | |
| Bicho bicho-fyi/bicho Enables MCP clients to create and list error-tracking projects and investigate grouped exception issues using captured OTLP error data. It provides admin-token-secured tools for project setup and issue investigation. | |
| bitacora-mcp bidcomsrl/bitacora-mcp MCP server for creating, versioning, retrieving, and publishing HTML presentations, using git as the source of truth and Google Apps Script for deployment. | |
| bidda-mcp bidda-ai/bidda-mcp Source-verified regulatory and compliance intelligence: 10,000+ obligations across 39 pillars, each grounded in a primary legal source with a content hash. Covers the EU AI Act, GDPR, DORA, NIS2, HIPAA, Basel III and the MITRE ATT&CK/ATLAS | |
| Agent Wallet Gateway bidglow-ai/agent-wallet-gateway Enables compatible AI clients to connect to a local Coinbase Agentic Wallet through stdio MCP, so they can read wallet status, public address, Base USDC balance, and saved operations without signing, transferring, trading, or making payment | |
| BreedAPI Data Assistant MCP Server bidhan-ghimire/brapi-breeding-data-assistant Enables AI agents to retrieve and analyze breeding data from BrAPI-compliant databases through shared tools, with human-in-the-loop approval and verification. | |
| weather-mcp bidhan017/weather-mcp A FastMCP server that provides current weather, forecasts, and rule-based umbrella/jacket recommendations via Open-Meteo, deployable to Databricks Agent Bricks. | |
| cloudflare-crawl-mcp bidouilles/cloudflare-crawl-mcp MCP server for Cloudflare Browser Rendering Crawl API. Fetches and crawls web pages, returning clean Markdown optimized for LLM consumption. | |
| mcp-tradingview-server bidouilles/mcp-tradingview-server Exposes TradingView technical indicators and OHLCV data through MCP tools for Claude Desktop or any MCP-aware client. | |
| Mobile Pilot MCP bidouilles/mobile-pilot-mcp Enables AI assistants to control iOS simulators through WebDriverAgent, supporting taps, swipes, typing, screenshots, recording, and app actions with a real-time dashboard for visual feedback. | |
| Dext Codex Connector bidule995/dext-codex-connector An MCP server for Dext Data Health & Insights, enabling client portfolio summaries, health risk detection, client comparisons, and health snapshots through secure tenant-scoped tools. | |
| CloudOps MCP bienherasme/cloudops-mcp CloudOps MCP is a read-only Model Context Protocol server that exposes normalized operational infrastructure context (logs, metrics, deployments, health) to AI agents through a small set of typed, bounded tools. | |
| trello-ops-mcp bienherasme/trello-ops-mcp A read-only MCP server that gives LLM agents deterministic operational facts about Trello boards, including structural history, card movement, workflow flow, staleness, and due-date information. | |
| MCP VectorStore Server bierschneideremanuel/mcpdocserver Provides advanced document search and processing capabilities through vector stores, including PDF processing, semantic search, web search integration, and file operations. Enables users to create searchable document collections and retriev | |
| Illustrator AI & MCP Control bieuulls/illustrator-ai-mcp Enables external AI assistants and MCP clients to programmatically control Adobe Illustrator via WebSocket, supporting generative vector creation, layer organization, and document automation from natural language prompts. | |
| Rippling MCP Server bifrost-mcp/rippling-mcp Connects AI agents to the Rippling HR/IT/Finance platform to query employees, manage leave requests, and view organizational structures. It provides eighteen tools for accessing company data, employee details, and administrative activities | |
| Supabase MCP HTTP Stream Server bifrotek-com/supabase-mcp-http-stream-n8n Docker-deployable server that enables interaction with Supabase databases via HTTP streaming, allowing n8n workflows, AI agents, and automation tools to execute SQL queries, manage database migrations, deploy edge functions, and search docu | |
| Mem0 MCP Server big-omega/mem0-mcp Enables persistent storage and semantic search of coding preferences, patterns, and implementations using Mem0, allowing AI agents to remember and retrieve development best practices across sessions. | |
| TradingView MCP Jackson big-tea-rice/tradingview-mcp-jackson MCP server for controlling TradingView Desktop via CDP, enabling chart navigation, Pine Script development, replay trading, and a morning brief workflow with customizable rules. | |
| MCP Agent Tracker big0290/mcp Automatically tracks and logs all client-agent conversations in real-time without user intervention. Provides conversation history, analytics, weather tools, and continuous system health monitoring with complete request-response pair record | |
| WariMCP bigabou007-dev/warimcp A unified MCP server for West African payment providers, enabling AI agents and REST clients to initiate payments, payouts, refunds, and manage webhooks across 10 providers with a single API. | |
| x402-commodity-mcp bigabou007-dev/x402-commodity-mcp An MCP server providing global soft-commodity data (cocoa, coffee, sugar, cotton, cashew) with per-call billing in USDC, offering tools for farmgate prices, ICE futures, CFTC COT positioning, and historical series. | |
| x402-md-mcp bigabou007-dev/x402-md-mcp Enables extracting clean Markdown from any webpage by paying $0.005 USDC per call via the x402 protocol, with automatic wallet-based payment settlement. | |
| Document Organizer MCP bigbabyfilmrentals-tech/document-organizer-mcp Enables agents to manage and organize local documents by listing, inspecting, extracting text, searching, and renaming files, with optional Google Drive integration. | |
| LLMDoc bigbag/llmdoc MCP server for semantic search across llms.txt documentation sources, with hybrid two-stage retrieval and automatic background refresh. | |
| MCP Server Node bigbangmarket/mcp-server-node A Node.js MCP server with user, task, and calculator tools. Supports Bearer token authentication and Docker/Cloudtype deployment. | |
| opn-mcp bigbatmanorg/opn-mcp Enables agents to search and call the full OPNsense core and plugin API, perform model-validated CRUD and settings operations, and use curated firewall, service, and network tools with optional auto-revert writes. | |
| pve-mcp bigbatmanorg/pve-mcp Enables schema-validated access to all 680 Proxmox VE API endpoints plus curated guest, snapshot, backup, storage, and task tools, with read-only behavior by default and controlled writes when explicitly enabled. | |
| rss-publisher-mcp bigbatmanorg/rss-publisher-mcp Enables deterministic RSS 2.0 feed publishing and lifecycle management, including immutable entry IDs, corrections, retractions, archiving, content-addressed media assets, and semantic search over active entries. | |
| ssh-winrm-mcp bigbatmanorg/ssh-winrm-mcp MCP server for administering Linux/Unix hosts via SSH and Windows hosts via WinRM/PowerShell Remoting, supporting persistent inventory, sessions, jobs, and command groups. | |
| winrm-mcp bigbatmanorg/winrm-mcp Enables running PowerShell and CMD commands on Windows hosts over WinRM, with multi-host inventory management. | |
| YouTube Personal Playlist noAPI MCP bigbatmanorg/youtube-personal-playlist-noapi-mcp Enables managing your own YouTube playlists through an MCP-capable agent using existing YouTube browser cookies, without requiring a Google API key, Google Cloud project, or OAuth app. Supports listing, creating, renaming, describing, addin | |
| GitHub MCP Gateway bigbizze/github-mcp-gateway Deploys to Cloudflare Workers as a read-only MCP server that lets authorized GitHub users query only the repositories where its GitHub App is installed, with 32 read operations covering code, commits, pull requests, issues, Actions, artifac | |
| GitHub MCP Server bigbro2454/github-mcp-server Enables LLM hosts to perform scoped GitHub operations over stdio, including repository intelligence, pull request lifecycle and diff inspection, and commit history queries. It exposes 12 FastMCP tools backed by PyGithub for repository, PR, | |
| BigBugAI MCP Server bigbugai/bigbugai-mcp Enables access to BigBugAI cryptocurrency tools for getting trending tokens and performing token analysis by contract address. Provides production-ready API access with rate limiting and authentication for crypto market intelligence. | |
| qwen-vision-mcp bigcheese18/qwen-vision-mcp MCP server that adds Qwen3-VL vision capabilities to Claude Code or any MCP client, enabling OCR, UI/screenshot recognition, and chart understanding. It provides tools for analyzing single or batch images via DashScope's OpenAI-compatible A | |
| mcp_3d_relief bigchx/mcp_3d_relief mcp\_3d\_relief | |
| mcp-neovim-server bigcodegen/mcp-neovim-server Leverages Vim's native text editing commands and workflows, which Claude already understands, to create a lightweight code assistance layer. | |
| Weather MCP Server bigdaddy118/weather-mcp-server Enables real-time weather lookups for cities through the wttr.in service, accepting both Chinese and English city names along with tools to list supported Chinese cities and retrieve server metadata. It runs over Streamable HTTP with config | |
| Ontology MCP bigdata-coss/agent_mcp A Model Context Protocol (MCP) server that connects GraphDB's SPARQL endpoints and Ollama models to Claude, enabling Claude to query and manipulate ontology data while leveraging various AI models. | |
| mcp-eastmoney bigdataorfrontend/mcp-stock Enables MCP clients to access A-share research data, run quantitative screening and Chan-theory/factor analysis, scan dragon leaders and sector rotation, and manage recommendation feedback with realistic entry-price validation. | |
| MarketScope AI MCP Server bigdatateam5/marketscope-ai-powered-industry-segment-intelligence-platform Enables AI-powered analysis of healthcare market segments, product comparisons, and sales data insights using natural language processing and retrieval-augmented generation. | |
| PSCAD AI bigdemobear/pscad-ai Enables AI clients to incrementally edit native PSCAD 4.6.2 projects, execute simulations, query numerical outputs, and search local official Help through MCP tools. | |
| Nova bigduu/nova Gives an LLM agent control of the macOS desktop from a single self-contained Rust binary: Set-of-Mark numbered screenshots, Accessibility-tree clicks with browser-JS fallback for web content, Apple Vision OCR, mouse, keyboard, and clipboard | |
| BigeSQL bigedev/bige-sql Multi-database management tool and MCP server supporting MySQL, PostgreSQL, SQLite, and Dameng DM8, enabling AI assistants to query and manage databases via stdio or HTTP. | |
| Bigeye MCP Server bigeyedata/bigeye-mcp-server Enables interaction with the Bigeye Data Observability platform to query data quality issues, analyze data lineage and dependencies, track AI agent data access patterns, and perform root cause analysis for data issues. | |
| Linkr KVM MCP Server bigfootaca/linkr-mcp Linkr KVM MCP Server exposes Radxa Linkr KVM controls through the Model Context Protocol (MCP). It lets an MCP client capture screenshots, crop screen areas, send keyboard and mouse events, type text, wait for on-screen text, and ask vision |
34,101–34,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.