Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| threatlocker-mcp-server bigfootbytes/threatlocker-mcp-server MCP server for interacting with the ThreatLocker Portal API, enabling querying of computers, applications, policies, audit logs, and more through AI assistants. | |
| aipod bigg01/aipod Provides a reference MCP server that implements every MCP feature so client, gateway, and runtime authors can test against a single endpoint, and publishes a service contract describing its capabilities. | |
| Java JAR MCP Server biggerball/java-jar-mcp Enables AI assistants to look up Java class definitions and list dependencies from Maven projects by analyzing local JAR files via the Model Context Protocol. | |
| DeviceDeck biggersun/device-deck Enables local stdio MCP clients to list, get, plan, and probe registered devices and their connection endpoints from a private inventory, while keeping credential references rather than secrets in agent responses. | |
| xfeatures-control biggikos/xfeaturescontrolmcp An MCP server that lets AI clients manage game servers hosted on a Calagopus panel: list and inspect servers, read logs and files, edit configs, run console commands and power actions, and search, install, update, or remove plugins and mods | |
| Crypto Portfolio MCP biggling/crypto-portfolio-mcp Tracks multi-exchange cryptocurrency portfolio P\&L by storing holdings and providing live price data. | |
| Crypto Tax MCP biggling/crypto-tax-mcp Cost basis tracking, capital gains calculation, and 1099-DA reconciliation for Claude, built on top of the Crypto Portfolio MCP data layer. | |
| MCP NEAR Wallet Server bigguybobby/mcp-near-wallet Enables Claude Desktop and MCP clients to interact with NEAR blockchain accounts for balance checks, account info, access keys, transaction status, and sending signed transactions. | |
| Pexels MCP Server bighadj22/chatgpt-apps-sdk-examples Enables searching and displaying high-quality, royalty-free photos from Pexels directly in ChatGPT conversations via an interactive gallery widget. | |
| Cloudflare MCP with Google OAuth and Analytics bighadj22/cloudflare-mcp-google-oauth-analytics A deployable MCP server template for Cloudflare Workers that provides Google OAuth authentication and comprehensive analytics tracking of tool usage, performance metrics, and user behavior. | |
| MCP GitHub OAuth Analytics Server bighadj22/mcp-analytics-github-oauth A Model Context Protocol server that enables AI models to access tools through GitHub authentication and provides comprehensive analytics tracking of tool usage, performance, and user behavior. | |
| Yinghuochong MCP Server bighamd/mcp-ai Read-only business data adapter for Yinghuochong MySQL database, exposing order and user queries as structured MCP tools for safe inspection by Codex. | |
| Bear App MCP Server bigjeager/bear-mcp-server A Model Context Protocol server that integrates with Bear App, enabling AI assistants to create, search, modify, and organize notes and tags through X-callback-URL scheme. | |
| qmcp bigkaa/qmcp Semantic search server for code and documentation using Qdrant vector database. Supports multi-language indexing, live updates, and natural language queries. | |
| inFlow Inventory MCP Server bigl34/inflow-mcp-server Enables AI assistants to manage inFlow Inventory, including products, sales orders, purchase orders, customers, vendors, inventory operations, serial numbers, and webhooks through natural language. | |
| PAL MCP Server bigl34/pal-mcp-server A Model Context Protocol server that connects AI CLI tools to multiple models for multi-model orchestration, conversation continuity, and collaborative workflows like code reviews and planning. | |
| shopify-mcp bigl34/shopify-mcp-fork A Shopify MCP server enabling interaction with store data via GraphQL API, with enhanced order management fields for financial status, fulfillment status, and line item details. | |
| wiztree-mcp bigmanbass666/wiztree-mcp 基于WizTree的磁盘分析MCP服务器，通过MCP工具扫描驱动器、查询磁盘使用情况、搜索路径、比较快照以及可视化文件系统数据。 | |
| Azure Cost Management MCP bigonil/azure-cost-management-mcp Integrates Azure Cost Management APIs via MCP, enabling cost queries, forecasts, budgets, and Advisor recommendations through natural language in compatible clients. | |
| EdgeBox bigppwong/edgebox A local sandbox that provides AI agents with code execution, filesystem access, and a full GUI desktop environment for 'computer use' capabilities. It exposes tools for shell commands, multi-language code interpretation, and remote desktop | |
| Tyra Advanced Memory MCP Server bigrock776/tyra_advanced_memory_mcp_server A sophisticated MCP server providing advanced memory capabilities with RAG, hallucination detection, and enterprise-grade AI infrastructure for intelligent agent ecosystems. | |
| Fusion Studio MCP bigsbypuglise/fusion-studio-mcp MCP server for inspecting and controlling Blackmagic Fusion Studio through its scripting API. | |
| Local-MCP-server bigstationw/local-mcp-server Enables tool-calling LLMs to search the internet, capture website images, extract webpage text, and more via a local MCP server. | |
| Hyper MCP Terminal bigsweetpotatostudio/hyper-mcp-terminal 一个基于 MCP 协议的 Electron 桌面终端应用，为 AI 助手提供安全的远程 shell 执行能力。 | |
| clj-kondo MCP Server bigsy/clj-kondo-mcp A Model Context Protocol server that provides clj-kondo linting capabilities for Clojure/ClojureScript/EDN files, useful for environments like Claude code and desktop that lack built-in linting. | |
| maven-mcp-server bigsy/maven-mcp-server An MCP (Model Context Protocol) server that provides tools for checking Maven dependency versions. This server enables LLMs to verify Maven dependencies and retrieve their latest versions from Maven Central Repository. | |
| shadow-cljs-mcp bigsy/shadow-cljs-mcp A Model Context Protocol server that monitors shadow-cljs builds and provides real-time build status updates for ClojureScript projects, allowing LLMs to verify build status after making code changes. | |
| numero-virtual-mcp bigteck2021/numero-virtual-mcp Enables MCP clients such as Claude and Cursor to purchase virtual phone numbers, wait for SMS verification codes, and resend, complete, or cancel activations using the user's API key. | |
| mcp-local-access bigtolly/mcp-local-access Enables cloud services with MCP support, such as Notion AI, to read, search, edit, create, and delete files within a single designated folder on your computer, and to run only allowed commands. | |
| grok bigu1/grok-plugin-codex Enables OpenAI Codex to invoke the local Grok CLI as a second agent for code review, planning, design documents, PR babysitting, and media creation via MCP tools. | |
| Fast-Whisper-MCP-Server biguncle/fast-whisper-mcp-server A high-performance speech recognition MCP server based on Faster Whisper, providing efficient audio transcription capabilities with support for multiple model sizes, batch processing, and various output formats. | |
| Outlook MCP Server biguxuzz/outlook-mcp-server Enables LLMs and MCP clients to read, search, and manage Microsoft Outlook emails through a standardized interface. | |
| zotero-comfort bih-cei/zotero-comfort High-level Zotero MCP integration with smart research workflows, enabling tasks like building reading lists, adding papers with duplicate check, and exporting bibliographies. | |
| Express MCP Server biilmann/mcp-example A basic example of a serverless Model Context Protocol (MCP) server implemented using Netlify Functions with Express, enabling AI agents to interact with custom capabilities. | |
| Bijon Portfolio MCP Server bijon2002/build-own-mcp Exposes a personal portfolio's resume, projects, skills, certifications, and live GitHub repositories as tools for AI assistants to query via natural language. | |
| HostProfit bijou-web/hostprofit-mcp Audit any Airbnb, VRBO, or STR listing URL for dollar-denominated revenue gaps. Free tier shows category grades and monthly losses. Pro tier unlocks ranked action plans. | |
| GitHub Master MCP bikashbinfhaniyqtqu-del/github-master-mcp Enables compatible AI clients to open, inspect, edit, test, commit, and manage GitHub repositories through local STDIO or authenticated remote Streamable HTTP, including issues, pull requests, workflows, and repository creation. | |
| BizDesk MCP bikashnayak36331-pixel/bizdesk-mcp Enables Claude and other MCP clients to manage a small-business back office, including clients, quotes, invoices, payments, reports, and PDF invoice export, while keeping data in a local SQLite file. | |
| bikky bikky-dev/bikky Provides persistent memory for AI coding agents via MCP, enabling teams to share and recall facts across sessions. Automatically captures, classifies, and curates knowledge from supported transcript sources. | |
| Local 3GPP MCP Server bikramjitchawla/local-3gpp-mcp-server Extracts and serves 3GPP specification PDFs from disk locally, enabling search and retrieval of spec content without external API calls. | |
| igagent bilal140202/igagent Enables AI agents to harvest public Instagram posts, carousels, and reels—returning metadata-only lookups or verified downloaded media plus a JSON manifest—without login, cookies, API keys, or a browser. Exposes tools for full extraction, m | |
| ttagent bilal140202/ttagent Enables AI agents to extract TikTok video and soundtrack media, metadata, covers, and manifests from public URLs or IDs through verified downloads and schema access via MCP tools. | |
| expensify-mcp bilalatique/expensify-mcp A full-capability MCP server for Expensify that enables creating expenses, reports, managing policies, categories, tags, members, and expense rules, while restricting approval and payment operations. | |
| Smart Terminal MCP bilalcodephoenix/smart_terminal_mcp A lightweight MCP server that enables AI assistants to interact with the local machine through terminal, filesystem, and Python execution tools. | |
| offsec-mcp bilaldev61/offsec-mcp Enables MCP clients and local LLMs to run subdomain enumeration, DNS resolution, liveness checks, vulnerability scanning, and takeover detection using wrapped recon tools with Python fallbacks. Supports saving and listing previous scan resu | |
| ConstructAI bilalgit/constructai Enables natural-language querying of construction project data to analyze schedules, delays, critical activities, risks, and resource bottlenecks, and to generate schedule recovery recommendations. | |
| Social Analytics MCP Server bilaltariq01/instagram-analytics-mcp Enables Instagram and Facebook analytics via the Meta Graph API, offering account insights, media analytics, and post engagement data. | |
| Thesis bilaltariq98/invest Enables AI agents to access and synthesize per-ticker financial research data from multiple providers within a private, self-hosted workspace. | |
| vibecheck bilaluchiha/vibecheck-mcp Enables AI coding agents to submit work for external review before declaring a task done, receiving evidence-backed fix lists and verdicts based on git-measured changes and calibrated quality scoring. | |
| waqi-mcp bilazann/waqi-mcp Enables AI assistants to connect to business tools like Stripe, Xero, Slack, Jira, and more, with PII redaction applied to tool responses before they reach the model. |
34,151–34,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.