Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| blame-mcp blame-today/blame-mcp Provides a self-serve recipe for agents to anonymously post and read blames on blame.today via Nostr. | |
| openwiki-mcp blanceone/openwiki-mcp Enables MCP hosts to generate and update repository wikis using OpenWiki's documentation generation tools. | |
| wanderlog-mcp blanchard303/wanderlog-mcp Enables Claude or any MCP-compatible agent to view, build, and edit trip itineraries through conversation, including places, notes, hotels, transit, checklists, expenses, and custom sections. | |
| Codex Control Plane MCP blanchard8935/codex-control-plane-mcp Enables MCP clients to submit and manage long-running Codex Desktop tasks through durable asynchronous operations, polling, approvals, Plan Mode workflows, and final reports. | |
| zyta-expedientes-mcp blanck1945/zyta-expedientes-mcp MCP server for managing Argentine judicial cases (expedientes) from portals like PJN, MEV, CABA, and custom cases, supporting CRUD operations, synchronization, and management of tasks, fees, and alerts. | |
| zyta-mcp blanck1945/zyta-mcp Exposes tools to query the Zyta API for legal data (judicial, jurisprudence, trademarks, Minerva) and supports document generation via natural language. | |
| zyta-sign-mcp blanck1945/zyta-sign-mcp Enables AI agents to manage Zyta Sign documents, signatures, and studies with secure authentication and permission-respecting operations. | |
| Mandat MCP Server blanco1er/mandat-alexa Enables Alexa+ and other MCP clients to set household budgets, discover real products and local businesses, negotiate merchant agents, approve a plan, and manage PayPal sandbox payment holds, captures, voids, and refunds through an account- | |
| centauri-mcp blanders2/centauri-mcp MCP server for the Elegoo Centauri Carbon 3D printer that enables monitoring, control, and notifications via the SDCP 3.0 protocol over the local network. | |
| Blandskron Signals blandskron/blandskron-signals Enables agent-based editorial operations by consuming Django's internal API. Manages content publication with authorization and auditing. | |
| aviation-weather-mcp blangys/aviation-weather-mcp MCP server providing real-time aviation weather data (METAR, TAF, PIREPs, AIRMETs) from aviationweather.gov for flight planning and analysis. | |
| Moodle MCP Server blank6890/moodle-mcp-server A read-only MCP server that exposes courses, assignments, calendar events, announcements, participants, and course materials from IIIT Hyderabad's Moodle instance through browser automation with persistent CAS-authenticated sessions. | |
| confluence-wiki-mcp-server blantian/fetch_wiki_page MCP server for fetching Confluence Wiki content, including pages, search, attachments, comments, and references, with automatic authentication via a managed Chrome profile. | |
| pantry-agent blanxlait/pantry-agent An MCP server for grocery shopping at Kroger-owned stores, enabling product search, store finder, cart management, and more through AI assistants. | |
| px4-flight-debugger blar-tw/px4-flight-debugger Lets an MCP client read PX4 SITL .ulg logs and answer why a flight failed or underperformed — failsafes, arming reasons, estimator validity versus simulator ground truth, and how late PX4 followed offboard velocity setpoints. It also lists, | |
| code2mcp blas0/code2mcp Enables execution of TypeScript code to call MCP tools instead of direct tool calls, reducing token usage by up to 98% while orchestrating complex multi-tool workflows through secure sandboxed code execution. | |
| rev-eng-cursor-regex-mcp blas0/rev-eng-cursor-regex-mcp Enables fast literal and regex search over local workspaces using a sparse n-gram index for candidate pruning, with deterministic verification against file contents. | |
| tryonfy-mcp-server blasfin-finance/tryonfy-mcp-server MCP server for TryOnfy - AI virtual try-on platform that lets you preview clothing, hairstyles, and accessories instantly. | |
| claude-work-mcp blaspinto5/claude-work-mcp A local MCP server that connects Claude Code to your work environment through auditable tools for file operations, API calls, and command execution, with safety gates and configuration. | |
| mcp-truth-check blasrodri/truth truth is a deterministic fact-checker for the claims an AI coding agent makes about its own work. | |
| WoW 3.3.5a Live MCP blaszkaaa/wow-335-live-mcp Enables an MCP client to retrieve live World of Warcraft 3.3.5a character data — such as location, target, quests, bags, equipment, spells, stats, and group info — plus screenshots, addon listings, saved snapshots, and recent combat log lin | |
| OpenCTI MCP Server blauwers/opencti-mcp-server Enables interaction with OpenCTI threat intelligence platform through the Model Context Protocol, providing tools for indicators, observables, reports, cases, investigations, and more. | |
| r7-office blazar-source/dsh-r7-office Enables AI agents to inspect, read, create, format, edit, validate and convert DOCX, XLSX, PPTX and PDF documents through standard OOXML manipulation plus a locally installed R7 converter, without emulating mouse or keyboard input. It also | |
| Frappe MCP Bridge blaze-technology-solutions/frappe_mcp_bridge Enables MCP clients to securely read, write, and maintain Frappe/ERPNext sites with role-based permissions, audit logging, and dry-run safeguards. | |
| Bitso MCP Server blaze-xyz/bitso-mcp Enables interaction with the Bitso cryptocurrency exchange API to access withdrawals and fundings data. Provides comprehensive tools for listing, filtering, and retrieving withdrawal and funding transactions with proper authentication and e | |
| dukaan-agent blazehue/dukaan Enables AI agents to search a merchant's product catalog and complete UPI checkouts via Razorpay test-mode APIs, with spend mandates and full audit logging. | |
| reddit-research blazejp83/reddit-research MCP server that answers questions using Reddit discussions as evidence, searching threads, fetching comments, and ranking useful context, with optional cited answer synthesis. | |
| BlazeMeter MCP Server blazemeter/bzm-mcp Enables AI agents to manage performance testing workflows on BlazeMeter's cloud platform through natural language interactions. | |
| BlazeMeter Service Virtualization MCP Server blazemeter/sv-mcp Connects AI tools to BlazeMeter's Service Virtualization platform, enabling natural language management of virtual services, transactions, and configurations. | |
| Shell MCP Server blazickjp/shell-mcp-server A secure server that enables AI applications to execute shell commands in specified directories, supporting multiple shell types (bash, sh, cmd, powershell) with built-in security features like directory isolation and timeout control. | |
| web-browser-mcp-server blazickjp/web-browser-mcp-server Enables web browsing capabilities using BeautifulSoup4 | |
| QGIS MCP Server bld933/qgis_mcp_server Enables AI agents to interact with QGIS, supporting project management, layer inspection, spatial queries, styling, and map export in both headless and desktop modes. | |
| Proxmox MCP Server bldg-7/proxmox-mcp A comprehensive MCP server providing 92 tools for managing Proxmox Virtual Environment, including QEMU VMs and LXC containers. | |
| gcontext-mcp bleak-ai/gcontext-mcp Bridges AI agents to a gcontext workspace in the cloud, enabling file and folder management while keeping secret values and script execution local. | |
| Generic Database MCP Server bleckcorp/generic-database-mcp-server Enables read-only SQL querying and schema inspection across MSSQL, PostgreSQL, and MySQL databases via MCP tools. | |
| SocialMCP bledny1099/social-mcp Enables extracting video and post metadata, creator feeds, comments, direct media streams, and transcripts from YouTube, TikTok, Instagram, and Threads, with no API keys or logins required for most sources. Combines Faster-Whisper audio tra | |
| sSmcp bledny1099/ssmcp Enables retrieval and analysis of content from YouTube, TikTok, Instagram, and Threads, including metadata, captions, comments, feeds, search results, transcripts, and on-screen text from videos or slides. Supports local stdio and remote HT | |
| TryHackMe MCP Server bledny1099/tryhackme-mcp Enables AI assistants to search TryHackMe rooms and extract room overviews, task instructions, commands, and questions as clean Markdown for training and reference. Supports session-cookie authentication for subscriber content and includes | |
| ReActMCP Web Search blee8704/reactmcp This MCP server enables AI assistants to perform real-time basic and advanced web searches via the Exa API, returning Markdown-formatted results with titles, URLs, dates, and summaries. It supports filtering by domains, required text, and d | |
| personal-mcp bleg/personal-mcp Enables an AI assistant to search and read multiple Hotmail/Outlook and Gmail accounts plus Google Drive and Calendar, and to create drafts, calendar events, and files without sending email. It supports local and remote operation with owner | |
| Blekline MCP Server blekline/blekline-oss Provides AI ingress governance by masking prompts, classifying risk, and enforcing tool policies before agent calls reach model providers or sandboxes. | |
| Metabase MCP Server blekzz/metabase-mcp-zsh52013148087 Enables AI assistants to interact with Metabase analytics platform, allowing them to query databases, manage dashboards, execute SQL queries, and organize collections through natural language. | |
| Capture MCP Server blencorp/capture-mcp-server Integrates SAM.gov, USASpending.gov, and Tango APIs to enable natural language queries for federal procurement and spending data, providing both human-readable and structured JSON outputs. | |
| codex-blender blend3dweb/codex-blender-mcp-plugin Enables local interaction between Codex and Blender for scene and object inspection, Python/bpy modeling, materials, lighting, cameras, animation, rendering, file import/export, spatial inspection, and reversible local mesh edits. | |
| beamng-modding blendfoul/beamng-mcp A local MCP server for BeamNG.drive mod development that provides official documentation search, mod scaffolding, validation, and packaging tools. | |
| codeops-mcp blendsdk/codeops-mcp MCP server that bundles curated development rules and tools to teach AI agents universal coding standards, testing, planning, and requirements engineering. | |
| godot-mcp blentz/godot-mcp An MCP server that lets an AI agent work on a Godot 4.x project the way a developer does: read and edit scenes, write scripts, build, test, run, look at the result, and debug what went wrong. | |
| scratch-unified-mcp blessed0x/scratch-unified-mcp Enables AI agents to build, playtest, and publish Scratch projects headlessly over MCP, with 112 tools covering the website/social graph, block-level project editing, headless VM execution, and Python-to-blocks workflows. | |
| hh-ru MCP server blessed234640/mcp Enables searching for jobs in Russia and remote positions from AI assistants using multiple job platforms (hh.ru, Trudvsem, SuperJob, and remote job aggregators). | |
| MCP Server — Aster DEX blessedberserker/mcp-server-aster-dex MCP server providing read-only access to Aster DEX volume, points, leaderboard rank, and airdrop eligibility as natural-language tools for LLM agents like Claude, Cursor, and Cline. |
34,651–34,700 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.