Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Mealie MCP Server bitmonster/mealie-mcp-server A security-conscious MCP server for self-hosted Mealie that enables recipe management, meal planning, and shopping list operations with robust security defaults. | |
| MCP Bitnovo Pay bitnovo/mcp-bitnovo-pay Enables AI agents to create cryptocurrency payments, check payment status, generate QR codes, and manage transactions through Bitnovo Pay API integration with automatic webhook support. | |
| convey bitovi/convey Enables designing, modifying, and bug reporting in web apps, sending changes to coding agents via MCP. | |
| freshbooks-mcp-server bitovi/freshbooks-mcp-server An MCP server that connects Claude to FreshBooks, enabling reading and management of invoices, clients, expenses, projects, and time entries via natural language. | |
| tokyo-opendata-mcp bitpackman/tokyo-opendata-mcp An MCP server that enables AI to correctly search and query Tokyo's open data by automatically handling synonym variations, warning about misleading update timestamps, and skipping empty rows in API responses. | |
| Bitpanda Developer API MCP Server bitpanda-labs/bitpanda-mcp Enables interaction with the Bitpanda cryptocurrency exchange through their Developer API. Exposes Bitpanda trading and account management endpoints as MCP tools via a FastAPI wrapper. | |
| glintefy bitranox/glintefy Provides comprehensive code quality analysis and automated fixing, available as a CLI and MCP server (currently in early beta with MCP part untested). | |
| semdex bitranox/semdex Enables read-only semantic search over local folders of markdown, text, and optionally other document formats via a local vector store, without ever mutating the source files. It also watches each configured source for changes and auto-rein | |
| bitrovas-psbtcheck bitrovas/bitrovas-psbtcheck Enables agents to submit unsigned Bitcoin PSBTs for automated pre-sign checks over Nostr, handling Lightning payment when required and returning a verdict, full JSON, and German/English text. It also supports retrieving the result for a sub | |
| BitSage MCP Server bitsage-network/bitsage-mcp Enables LLMs to interact with the BitSage Network for distributed compute operations including job management, worker discovery, proof verification, staking, and network monitoring. | |
| football-scraper-mcp bitsahara/football-scraper-mcp Provides tools to query football match data, odds, standings, and team statistics via natural language, integrating with the football-scraper-api. | |
| BitsBound MCP Server bitsbound/bitsbound-mcp-server Enables AI-powered contract analysis with partner-level redlines and real OOXML Track Changes for Claude Desktop and Claude.ai. | |
| Adjust MCP bitscorp-mcp/mcp-adjust MCP server that interfaces with the Adjust API, allowing you to query mobile analytics reports, metrics, and performance data using natural language from any MCP client like Cursor or Claude Desktop. | |
| MCP FFmpeg Video Processor bitscorp-mcp/mcp-ffmpeg A Node.js server that enables video manipulation through natural language requests, including resizing videos to different resolutions (360p to 1080p) and extracting audio in various formats (MP3, AAC, WAV, OGG). | |
| Embedded Debug MCP bitshelf/sermcp Provides serial debugging for embedded Linux targets, enabling boot log capture, automatic login, crash detection, U-Boot interrupt, and hardware reset via MCP protocol. | |
| Futurama Quote Machine MCP Server bitsofjeremy/fqm_mcp_server Enables interaction with Futurama quotes through Claude Desktop by connecting to the Futurama Quote Machine API. Supports getting random quotes, searching by character, adding new quotes, editing existing ones, and managing the quote collec | |
| Thunderbird MCP bitswype/thunderbird-mcp Provides a Model Context Protocol interface for Mozilla Thunderbird, allowing AI assistants to manage emails, filters, calendars, and contacts. It exposes 24 tools for tasks like searching messages, drafting replies, and organizing folders | |
| marktplaats-mcp bitsy-chuck/marketplaat_mcp Read-only MCP server for Marktplaats.nl (Dutch classifieds) that lets agents search listings and read price, specs, condition, delivery, location, and seller details. | |
| posthog-ff-mcp bitterbit/posthog-ff-mcp A read-only MCP server that lets Claude read PostHog feature-flag state and metadata, enabling listing flags, checking staleness, and evaluating flags for a person. | |
| scraper-api-mcp bitterdev/scraper-api-mcp Enables AI assistants to access structured public web data (profiles, posts, videos, etc.) from social networks and directories via natural language, by forwarding tool calls to the scraper-api.com API. | |
| Officient MCP Server bitterpanda63/officient-mcp-server Enables interaction with the Officient HR API to manage people, days off, and salary slips through natural language. | |
| Bittrees MCP integration service bittrees-technology/mcp Enables scoped project discovery, deterministic rule and profile management, and durable automation with trigger/pause/resume/cancel and audit history for approved project contexts. | |
| bitty-mcp bitty-terminal/bitty-mcp This MCP server is pre-implementation; it is intended to enable read-only agent interaction with Bitty debug and command protocols, with explicit fine-grained authorization. | |
| Bitwarden MCP Server bitwarden/mcp-server Enables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol. | |
| Price Service MCP bitwavecorp/price-service-mcp Provides real-time and historical cryptocurrency price data from multiple exchanges including Coinbase, Binance, and Kraken. It enables users to fetch prices with customizable parameters such as specific timestamps, time resolutions, and fi | |
| air_choose bitwiresys/air-choose MCP server that watches flight and train fares across multiple provider APIs, with tools to manage watched routes and a background scheduler that re-checks hourly for new offers. | |
| Sardinia Forest Dieback EO MCP Server bitwiseops/sardinia-forest-dieback-eo Enables users to run Sentinel-2-based forest-dieback analysis through tools that list scenes, compare vegetation, and return ranked dieback alerts. It helps agents identify which forest areas field teams should inspect first after drought. | |
| ARM Verification MCP Servers bivex/f3mcp A collection of MCP servers providing structured tools for ARM specification, verification, assembly analysis, and performance checks. They enable LLM agents and engineers to perform formal verification, analyze assembly code, and evaluate | |
| Scancode License Analysis Tool for MCP bivex/scancodemcp Analyzes software licenses using Scancode data to help users identify problematic licenses, affected files, and compliance issues through the Model Context Protocol. | |
| MCP-RAGNAR bixentemal/mcp-ragnar A local RAG server that enables document indexing and sentence window retrieval across multiple file formats like PDF, MD, and DOCX. It supports both local Hugging Face models and OpenAI embeddings for efficient context-aware querying throu | |
| clarity-mcp biz2gig/clarity-mcp Enables MCP clients to query Microsoft Clarity analytics data via a single HTTP endpoint, providing live insights, metric-specific tools, cached responses, quota tracking, and historical snapshots from a local database. | |
| bizbell bizbell-site/bizbell-cli Enables agents to search and retrieve Korean government grant, startup-support, R&D, and Nara Market procurement bid notices through the BizBell announcements API. It also supports favorites and keyword-based alert management, with required | |
| Google Ad Manager MCP bizclik-media/google-ad-manager-mcp Read-only MCP server that connects Claude Desktop to the publisher-side Ad Manager API so users can browse networks, saved reports, orders, and line items, and run saved reports to pull their rows into a conversation. No tool mutates data, | |
| Recme bizcuit47/recme-mcp Enables Claude to drive a Windows screen recorder: start and stop captures of the desktop, a display, region, saved area or window, review screenshots and frames, trim and reorder clips, extract audio, compress to a size limit, and send fil | |
| BOS MCP Server bizino/bos-mcp MCP server enables AI assistants to interact with BOS ERP System via REST API, providing 69 tools for business operations such as health checks, product management, orders, customers, inventory, and more. | |
| sylvanas-docs bizkut/sylvanas-docs-mcp This local, read-only MCP server enables coding assistants to search Project Sylvanas developer docs, SDK Lua stubs, and example plugins, look up exact API symbols and signatures, browse namespace members, and statically check Lua code for | |
| perplexity-mcp-server bizopsyello/perplexity-mcp-server Enables interaction with Perplexity AI through MCP tools for chatting, searching, and retrieving documentation. | |
| bizprint-mcp-server bizswoop-development/bizprint-mcp-server Connect AI agents to physical printers. Print receipts, shipping labels, and packing slips to your existing BizPrint-connected printers from Claude and other MCP clients. | |
| Day 5 Remote MCP Server bizuayeu/day5-api-remote-mcp Enables Claude Web to interact with Google Docs through a remote HTTP-based MCP server. Provides scalable document operations including creation, editing, and management with service account authentication. | |
| jev bizuayeu/genericjevmcp-via-diffusiongemma Enables structured yes/no, choice, and score decisions through MCP, a terminal, or HTTP using a self-hosted DiffusionGemma backend. | |
| Squarespace MCP Server bj-beer/squarespace-mcp-2026-complete A comprehensive MCP server for Squarespace that enables AI assistants to manage websites, handle e-commerce operations, create content, and view analytics through 67 tools and 15 React apps. | |
| SendaShield bj-taduran/sendashield Self-hosted MCP server that filters sensitive data from email and calendar before it reaches AI assistants, masking or withholding confidential content based on user policy. | |
| REA MCP Server bj1919810/dsh-rea Provides 207 reverse-engineering tools spanning Ghidra/IDA static analysis, APK and DEX inspection via jadx and apktool, frida, adb, pcap, firmware, browser, Electron, and managed-code workflows. It ships as a single DSH plugin toggle that | |
| pycentauri MCP server bjan/pycentauri An MCP server that enables AI agents to monitor and control an Elegoo Centauri Carbon 3D printer via local network, supporting status checks, snapshots, and print control. | |
| excalidraw-room-mcp bjcoombs/excalidraw-room-mcp Enables an AI agent to join a live Excalidraw collaboration room as a headless participant, read the drawing in real time, and add or modify elements on the shared canvas. | |
| wxauto-mcp-sse bjdr69/wxauto-mcp-sse MCP server for WeChat automation, supporting message sending, chat history retrieval, and contact list management via SSE protocol. | |
| homelab-mcp bjeans/homelab-mcp MCP servers for managing homelab infrastructure. Monitor Docker/Podman containers, Ollama AI models, Pi-hole DNS, Unifi networks, and Ansible inventory. | |
| jw-org-mcp bjern/jw-org-mcp An MCP server that provides controlled, verifiable access to official jw.org content, enabling AI applications to search articles, retrieve full articles, and lookup scriptures without hallucinations. | |
| Begagnad MCP bjesus/begagnad-mcp Enables AI agents to search and retrieve listings from Sweden's largest second-hand marketplaces, Blocket and Tradera. Returns unified data including prices, images, seller information, and direct links to listings. | |
| TypeScript MCP Server Boilerplate bjh5098/mcp-server A boilerplate project for quickly developing Model Context Protocol (MCP) servers using TypeScript SDK, with example implementations of tools (calculator, greeting) and resources (server info). |
34,451–34,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.