Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AI QA Agent MCP bisminizzar84/ai-qa-agent-mcp Enables MCP-compatible clients to execute Playwright-based UI and API test suites (login, inventory, checkout, API, regression) and receive structured JSON test results. | |
| Elliot Foster – Brazilian Funds bissuh/elliotfoster-mcp Brazilian investment-fund analytics for AI clients via the Model Context Protocol (MCP).
Connect Claude Desktop, Cursor, ChatGPT, or any MCP-compatible client to query 30,000+ Brazilian investment funds: daily NAV, complete holdings (CDA), | |
| max-mcp bistin/max-mcp-server An MCP server for the MAX Exchange (MaiCoin) V3 REST API, enabling market data queries, account history reads, and optional trading operations through MCP tools. | |
| optivise biswajitpanday/optivise Optivise is an intelligent MCP tool that enhances AI-assisted Optimizely development. It analyzes developer prompts for Optimizely relevance and provides curated, contextual information to LLMs. | |
| agentbus biswajitpatra/agentbus A local message bus for AI agent sessions that enables Claude Code sessions to communicate directly via channels, allowing message sending and peer discovery without network or copy-paste. | |
| mwaa-mcp-server biswasbiplob/mwaa-mcp-server MCP server for Amazon MWAA that enables managing Airflow environments, DAGs, runs, task instances, and configurations through natural language, using secure AWS-native API access and read-only by default. | |
| biszx-odoo-mcp biszx/biszx-odoo-mcp Enables interacting with Odoo ERP systems to search, read, create, update, and delete records, inspect models and fields, and invoke custom methods. | |
| Dell Enterprise MCP Workflow Proxy bit-aura/drake An air-gapped, edge-native, deterministic translation layer that ingests raw Dell OpenAPI endpoints, clusters them into high-level workflows using a local offline LLM, and executes them deterministically at runtime via FastMCP and HTTPX. | |
| crunchy-work bit-gang-studio/crunchy-work A local kanban board and docs tool that AI agents can drive over MCP. It enables project management without accounts or API keys. | |
| BitOasis MCP Server bit-oasis/bitoasis-mcp Enables AI assistants to interact with the BitOasis cryptocurrency exchange, including market data, account management, order placement, and deposit/withdrawal operations through natural language. | |
| Microsoft Ads MCP Server bit-of-a-shambles/microsoft-ads-mcp-server A Model Context Protocol (MCP) server for Microsoft Advertising (Bing Ads / DuckDuckGo Ads). This server enables AI assistants to create, manage, and report on Microsoft Advertising campaigns programmatically. | |
| MT Content Refactor MCP Server bit-part/mt-content-refactor-mcp Enables AI-driven batch refactoring of Movable Type content via the MT Data API using natural language instructions. It provides a secure workflow featuring automated backups, visual diff reports, and rollback capabilities for safe HTML tra | |
| Bit2Me MCP Server bit2me-devs/bit2me-mcp Enables AI assistants to interact with the Bit2Me cryptocurrency ecosystem, including real-time market data, wallet management, trading, and products like Earn and Loans. | |
| perplexity-mcp bitaru/perplexity-mcp Enables ChatGPT or another MCP client to run private Perplexity searches through a Cloudflare-hosted MCP server, returning answers and source links. | |
| BitBadges Builder MCP Server bitbadges/bitbadges-builder-mcp MCP server for building, auditing, and querying BitBadges collections via AI. Works with Claude Desktop and other MCP clients to generate transaction JSON for BitBadges tokens and collections (deprecated, use bitbadgesjs-sdk). | |
| bitbank-lab-mcp bitbankinc/bitbank-lab-mcp MCP server for analyzing cryptocurrency markets from bitbank API, enabling technical analysis, charting, and trading via AI clients. | |
| bitbank MCP Server bitbankinc/bitbank-mcp-server MCP server for bitbank cryptocurrency exchange enabling ticker, candlestick, order book, and transaction data retrieval. | |
| mcp-fs-obsidian bitbonsai/mcp-fs-obsidian Provides Claude with safe read/write access to Obsidian vaults, with YAML frontmatter protection and path filtering to prevent corruption. | |
| MCPVault bitbonsai/mcpvault A universal AI bridge for Obsidian vaults using the MCP standard, enabling any MCP-compatible AI assistant to read and write notes safely. | |
| Burp MCP bitbytelabio/burp-mcp Exposes Burp Suite operations through a local authenticated HTTP server and an MCP stdio bridge, enabling tools like burp_proxy_history via MCP. | |
| KPN (Korea Persona Network) bitcard1-art/kpn-mcp Verifiable Korea-specific judgment for AI agents — Go/Conditional/Hold verdicts cross-checked by a human expert council, per-report audit endpoint (committee DIDs + signatures). x402/USDC per call ($1–$5), free preview. | |
| bwalletx bitcoin-corp/bwalletx-cli Enables MCP clients to run and monitor agent accounts: view balances and token prices, send BSV, buy BSV-21 tokens, load or inspect strategies, review logs, and activate a stop switch, with spending subject to kill-switch, daily cap, rate-l | |
| pretix-agent-mcp bitcoinaustria/pretix-agent-mcp MCP server that enables AI agents to safely administer pretix events, with capability controls, PII masking, and approval-gated destructive operations. | |
| bsl-agent-mcp bitcoinscalinglabs/bsl-agent-mcp MCP server that lets AI agents operate a user-owned wallet on the Bitcoin-IPC testnet, enabling BTC deposits, cross-subnet wBTC payments, and anchored payment receipts, with local key signing and spend caps. | |
| pizza-mcp bitcraze26/pizza-mcp Calculates pizza dough ingredient quantities using baker's percentages from ball count, weight, hydration, flour blend, and fermentation schedule. Returns grams of each flour, water, salt, and yeast with a readable summary and structured JS | |
| TableRAG bitdg/tablerag Turns Excel/CSV folders into a traceable, read-only AI knowledge layer; provides deterministic data queries, schema discovery, and evidence-backed search via MCP. | |
| calendar-mcp-server biterik/calendar-mcp-server A thin, privacy-respecting CalDAV toolkit that lets an LLM read and manage your calendars safely, with dry-run writes and role gating. | |
| RapidOCR MCP Server bitfarer/rapidocr-mcp High-performance OCR MCP server supporting multiple input modes (path, base64, URL, upload), batch processing, and output formats like plain, JSON, and Markdown. | |
| local-docs-mcp bitfigther/local-docs-mcp Enables local document search and reading across formats like docx, pdf, md, and more, providing tools for listing, searching, and reading documents. | |
| mcp-json-yaml-toml bitflight-devops/mcp-json-yaml-toml A token-efficient, schema-aware MCP server that enables AI assistants to safely read, modify, query, and validate JSON, YAML, and TOML files with automatic schema detection and format conversion capabilities. | |
| BitFlux MCP Server bitflux-ai/bitflux_mcp Enables users to analyze data from BitFlux-enabled AWS EC2 instances and AWS pricing APIs to determine optimal instance types for their workloads. It provides recommendations by comparing instance usage statistics with current AWS pricing a | |
| reelapi bitgate/reelsdk-mcp Lets coding agents create and edit video through cloud rendering: animated captions, photo slideshows with voiceover, AI-generated shorts, and arbitrary ffmpeg commands, with finished files saved into the project. | |
| ship-page bitgate/ship-page-mcp One-call static page/site deploys for AI agents — POST HTML, a files map, or a zip and get back a live unguessable URL. Remote endpoint at https://ship.page/mcp, free tier needs no account or API key. | |
| Sequential Questioning MCP Server bitgeese/sequential-questioning A specialized server that enables LLMs to gather specific information through sequential questioning, implementing the MCP standard for seamless integration with LLM clients. | |
| Bitget MCP Server bitget-ai/agent_hub The official Bitget MCP (Model Context Protocol) server. Gives AI assistants direct, real-time access to the Bitget exchange through natural language. | |
| Bitget Signal bitget-ai/bitget-signal 5 crypto market analysis skills for Claude Code, Codex & OpenClaw — macro, on-chain, sentiment, technical & news. Installer deploys skills and registers the public MCP data server. | |
| Bitget Wallet MCP Server bitget-wallet-ai-lab/bitget-wallet-mcp Exposes Bitget Wallet's ToB API to AI agents for querying multi-chain token data, security audits, and market statistics. It allows users to retrieve real-time prices, liquidity pool information, and generate unsigned swap transaction data | |
| Bitgold MCP bitgold-network/bitgold-mcp Enables AI clients to query and operate EVM-compatible networks, including Bitgold mainnet/testnet, through tools for blocks, transactions, wallets, tokens, NFTs, contracts, and gas estimation, with preview-and-confirm safeguards for fund-m | |
| Remote MCP Server for Cloudflare bithou/my-mcp A tool that allows deployment of a Model Context Protocol server on Cloudflare Workers without authentication requirements, enabling users to create and use custom AI tools via the Cloudflare AI Playground or Claude Desktop. | |
| pydantic-mcp bitingsnakes/pydantic-mcp An MCP server for inspecting and interacting with Pydantic models and Python type contracts. It enables LLMs to perform deterministic validation, schema generation, model explanation, and Pydantic v1 to v2 migration analysis. | |
| pytorch-mcp bitingsnakes/pytorch-mcp A full-featured MCP server for PyTorch documentation workflows, providing tools for search, symbol lookup, code examples, troubleshooting, and question-answering using local docs. | |
| silkworm-mcp bitingsnakes/silkworm-mcp A full-featured MCP server for building scrapers, with tools for page fetching, HTML parsing, CSS/XPath querying, and spider generation using silkworm-rs and scraper-rs. | |
| Baserow Streamable MCP bitingwaxen/baserow-streamable-mcp Enables remote access to Baserow workspaces over Streamable HTTP, allowing discovery of accessible tables and creation of rows using user-facing field names. | |
| bitinz bitinz/bitinz This MCP server lets AI agents compress JPG, PNG, WebP and AVIF images, or convert JPG and PNG to WebP, by giving them absolute paths of files or folders and writing the smaller results to a bitinz-compressed folder or in place. It caps bat | |
| VÆR bitjungle/vaer Provides LLM-friendly weather tools and Norwegian place name resolution via MCP, enabling weather forecasts, air quality, marine conditions, and activity planning. | |
| opencode-model-control bitl8-byteshort/opencode-model-control Enables local-first management of OpenCode model routing, letting users discover, enable, and assign orchestrator/specialist roles to models while safely connecting the chosen policy to OpenCode via a local MCP bridge. | |
| Snowflake Managed MCP Server bitlabsdevteam/snowflask_managed_mcp_server Enables AI agents to securely query governed Snowflake data and use Cortex AI tools like semantic search and LLM completions, with read-only, allow-listed access and dual transport options (stdio and authenticated SSE). | |
| bitmap-mcp bitmapasset/bitmap-mcp Provides real-time Bitcoin on-chain data including Bitmap districts, Ordinals inscriptions, Runes, sat rarity, block details, and current fees via the Model Context Protocol, with zero configuration required. | |
| continuityos bitmaster162/continuityos An MCP server offering hybrid memory recall and continuity tools for AI agents. It also provides a governance gateway that pre-approves risky shell/file/git actions before execution. | |
| Remapdb MCP Server bitmeshltd/remapdb-mcp Connects AI tools to Remapdb vehicle tuning data, enabling search and retrieval of manufacturers, models, engines, and tuning information. |
34,401–34,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.