Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Home Assistant MCP Server bimo443trimdon/ha-mcp-trace Enables an AI assistant to set up and maintain a smart-home instance by adding integrations through config flows, editing registries, and building or debugging automations, scripts, scenes, helpers, dashboards, and blueprints. It also cover | |
| cowork-media-mcp bimross/cowork-media-mcp Lets Claude Cowork/Desktop generate images via Gemini Flash Image and videos via Google Veo through plain language requests. | |
| PassPaper bin-h-17/passpaper Enables AI agents like Claude Code and Codex to read handwriting and sketches drawn on a tablet in real time via MCP, with local recognition to text/LaTeX, session recording, and export to Markdown/Excalidraw. | |
| PowerTree MCP Server bin2ai/powertree Enables AI assistants to perform electronic circuit power tree analysis, including opening projects, solving margins, validating designs, editing elements, managing waivers, and exporting reports. | |
| MCP Authentication Example bin4yi/secure-ai-agent-with-asgardeo-and-mcp Demonstrates OAuth2/OIDC authentication for MCP servers using Asgardeo, with JWT validation and a sample weather tool to showcase secured API access. | |
| ce-mcp bin709/ce-mcp Bridges any MCP agent to Cheat Engine 7.x so it can attach to processes, read and write memory, disassemble code, scan for AOB patterns, execute Auto Assembler scripts and Lua, inject DLLs, and control speedhack. Exposes 17 tools over stdio | |
| Outlook MCP Server bina165/outlook_mcp_small Provides LLMs with access to Microsoft Outlook email functionality, allowing them to read, search, compose, and manage emails through a standardized MCP interface on Windows. | |
| Code Contractor MCP Server binacshera-ui/code-contractor-mcp Professional MCP Server with AST-powered code intelligence, high-performance search, and smart file operations. | |
| Binal Digital Twin MCP Server binal182/binal-mcpserver Enables users to search and interact with Binal's professional knowledge base through Claude Desktop using RAG technology. Users can ask natural language questions about Binal's technical skills, education, projects, and experience. | |
| Binalyze AIR MCP Server binalyze/air-mcp A Node.js server implementing Model Context Protocol (MCP) that enables natural language interaction with Binalyze AIR's digital forensics and incident response capabilities. | |
| governed-analytics-agent binary-yev/governed-analytics-agent Enables agents to answer analytics questions with provable correctness by resolving metrics through the semantic layer, tracing lineage, traversing knowledge graphs, checking freshness, and searching glossary definitions, while enforcing ac | |
| Microsoft Planner MCP Server binaryflow/planner-mcp Enables MCP clients to list, view details of, and update Microsoft Planner tasks grouped by bucket. | |
| claude-mesh binarykitten/claude-mesh Enables two live Claude Code instances on the same workstation to exchange synchronous questions and answers via a shared SQLite file. | |
| BMAD MCP Server binaryvortex/bmad-mcp-server A Model Context Protocol (MCP) server that bridges BMAD agents with GitHub Copilot, enabling AI-assisted development workflows through specialized agent tools and prompts. | |
| MCP Web Search Assistant binaykushwaha1244/mcp-web-search-assistant Enables an LLM to perform web searches through DuckDuckGo via a local MCP-style server and tool calls. | |
| adobe-custom binayprad/custom-mcp-adobe Enables Adobe Experience Platform and AEM content operations through a shared tool registry, exposing health checks, fragment search, sandbox management, dataset queries, and content fragment fetching via MCP and web interfaces. | |
| reddit-mcp binbinao/reddit-mcp Enables AI assistants to read Reddit data including user profiles, subreddits, posts, comments, and search via OAuth authentication. | |
| Simple Calculator MCP Server bincha1/simple-calculator-mcp-server A basic MCP server that provides arithmetic operations (add) and random number generation, with server metadata exposed as a resource. | |
| @bind-protocol/mcp-server bind-protocol/mcp-server Local MCP server for Bind Protocol — credential parsing, verification, and hashing tools for AI agents. | |
| Bindler MCP bindlerhq/bindler-mcp Provides MCP tools that calculate UAE Corporate Tax liability, classify EU AI Act risk and obligations, and compute CBAM certificate costs across the phase-in, with each figure traced to its governing article. | |
| space-mcp bindreams/space-mcp MCP server for JetBrains Space merge requests and Patronus CI dry runs, enabling creation, viewing, and management of merge requests as well as starting and monitoring CI dry runs. | |
| SharePoint MCP server bindresearch/sharepoint-mcp Enables read-only keyword search across configured SharePoint Online sites via Microsoft Graph, plus document metadata retrieval and text extraction from common file formats. Supports STDIO and Streamable HTTP transports without write permi | |
| MCP Zotero bindresearch/zotero-mcp Enables read-only retrieval of papers and synchronized full text from a Zotero group library, with tools for searching papers, fetching item metadata, and obtaining full-text excerpts. | |
| MCP NodeServer bing-xuan-lu/mcp_nodeserver A Node.js MCP server that gives Claude Code direct access to file operations, database queries, PHP execution, SFTP deployment, and over 60 specialized tools for development and debugging. | |
| xhs-douyin-reader-mcp bing-xw73/xhs-douyin-reader-mcp This self-hosted MCP server enables users to read public Xiaohongshu and Douyin content, including post text, images, video frames, and optional audio transcription, from compatible Streamable HTTP MCP clients like Claude and ChatGPT. | |
| CPA Image MCP bing2000me/cpa-image-mcp Enables cloud-based MCP clients to generate, edit, retrieve, and download full-resolution images through an existing CLIProxyAPI image endpoint, with reusable signed download links and automatic retention cleanup. | |
| MCP Assistant Toolkit bingaapookie/mcp-project Exposes a toolbox of math operations, Google web search, Gmail-sent email, and timezone-aware time lookups so an AI agent can discover each tool's schema at runtime and call the right one to answer a question. Tools degrade gracefully with | |
| Workroom bingak36-creator/workroom Enables ChatGPT to inspect and manage approved local project folders, read files, propose edits, patches, and deletions, run shell commands subject to approval, and track jobs and tasks through MCP. It provides controlled access to local pr | |
| FastDomainCheck MCP Server bingal/fastdomaincheck-mcp-server-python Enables checking domain name availability for single or multiple domains using WHOIS and DNS verification. | |
| Webshot MCP bingal/webshot-mcp Enables taking screenshots of web pages with support for multiple devices (desktop, mobile, tablet), custom dimensions, full-page capture, and various image formats. Built with Playwright for reliable web page rendering and screenshot gener | |
| @bingeljell/lead-gen-mcp bingeljell/lead-gen-mcp Enables AI-assisted B2B lead generation by discovering, extracting, scoring, and exporting company leads from any MCP-compatible agent. | |
| Vivado MCP binghin2/vivado_mcp_student Enables AI coding assistants to drive Xilinx Vivado through natural language, letting users open .xpr projects, run synthesis, implementation, and bitstream generation, inspect timing, resource, and clock reports, and launch simulations to | |
| GAS MCP binghong-xu/stemteacher-bing-gas-mcp Enables AI assistants to directly read and write Google Apps Script projects, manage versions and deployments, inspect execution logs and failures, and run functions through natural language, with user-owned OAuth authorization and self-hos | |
| Mi Fitness MCP CN binglua/mi-fitness-mcp-cn Enables reading and syncing Xiaomi Mi Fitness health data (steps, heart rate, sleep, workouts) from the Chinese cloud region to a local SQLite database via MCP tools. | |
| sox-mcp bingo-tango/sox-mcp Provides audio inspection, conversion, processing, and generation capabilities via SoX, enabling AI agents to 'hear' and manipulate audio files through structured JSON interfaces. | |
| Benchhand bingoweb/benchhand A durable, cross-platform development MCP server providing managed Git worktrees, bounded file operations, atomic writes, deterministic patches, and durable operation state. It gives MCP clients a reliable development control plane that sur | |
| Persistent Terminal MCP bingoweb/persistent-terminal-mcp Enables persistent remote terminal sessions that survive dropped client connections, using pty-mcp and ai-tmux for interactive work and native OpenSSH for structured remote operations. Supports SSH config alias resolution, remote execution, | |
| capsule-agents bingqing007/pi-capsule-agents Enables running isolated main and sub agent tasks in networkless Docker capsules with explicit input grants, verified artifact delivery, and independent reviewer oversight via MCP tools. | |
| ssh-mcp bingzi-233/ssh-mcp An MCP server enabling Claude to execute commands on multiple remote servers via SSH and transfer large files (40GB+) with resume support via SFTP. | |
| IBM QRadar SIEM MCP Server binhnguyen143/qradar-siem-mcp Enables AI agents to interact with IBM QRadar SIEM, including querying and updating offenses, running AQL searches, managing threat intelligence reference sets, and checking console connectivity. | |
| Remote MCP Server on Cloudflare binhtrongg/mcp A Model Context Protocol server implementation that runs on Cloudflare Workers with OAuth authentication support, allowing users to connect MCP clients like Claude Desktop or the MCP Inspector to utilize remote AI tools. | |
| Tavily News Search MCP Server binhtrongg/news-mcp A remote MCP server that enables searching for news articles on specific topics through the Tavily API without requiring authentication. | |
| Bink MCP Server bink-ai/bink-mcp-server Enables AI agents to perform blockchain operations like wallet management, token info, DeFi swaps, cross-chain bridging, and price checking across Ethereum, BNB Chain, and Solana. | |
| Bear MCP Server binnapro/bear-mcp-server Enables Claude Code to interact with Bear notes on macOS, supporting create, search, update, delete, open notes, and tag management via natural language. | |
| IBP MCP Server binnyrd/ibp-mcp-server Enables AI assistants such as Claude to read SAP IBP master data and key figures through IBP's standard OData APIs on SAP BTP, with read-only access enforced. | |
| MCP Server Example binodrajpandey/mcp-example A reference implementation of a Model Context Protocol server that demonstrates core primitives including tools, resources, and prompts. It enables users to perform basic arithmetic operations and manage notes through a simple storage syste | |
| MySQL MCP Server binoy154/mysql-mcp Enables Cursor IDE to interact with MySQL databases through schema and data operations, including read and write capabilities with environment-specific safety controls. | |
| hcloud MCP Server binrogithub/hcloud-mcp-server Enables AI assistants to discover and manage Huawei Cloud resources such as ECS, VPC, CCE, RDS, VPN, OBS, and IAM through 149 structured read-only tools, plus a generic CLI tool for write operations that defaults to dry-run and requires exp | |
| anvie-frappe-mcp-wrapper binsarjr/anvie-frappe-mcp-wrapper Automates setup and configuration for frappe-mcp, enabling management of multiple Frappe projects with easy switching and binary downloads. | |
| Svelte 5 MCP Server (Bun Version) binsarjr/svelte5-mcp A specialized MCP server for Svelte 5 frontend development, providing curated knowledge, code examples, and intelligent assistance with runes, snippets, and enhanced reactivity. |
34,251–34,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.