Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mcp-auth-proxy bobtheskull-flameeyes/mcp-auth-proxy Authenticating reverse proxy for MCP servers providing credential isolation, OAuth2 token management, and composite tool aggregation. | |
| Honeybadger MCP Server bobtista/honeybadger-mcp Enables AI agents to interact with the Honeybadger error monitoring service to list, filter, and analyze fault data. It provides tools for fetching error lists and retrieving detailed fault information from Honeybadger projects. | |
| mcp-luma-dream-machine bobtista/luma-ai-mcp-server Create videos and images using Luma AI, this MCP server handles all API functionality for Luma Dream Machine from Claude Desktop. | |
| Gemini MCP Server bobvasic/gemini-mcp-server Integrates Google Gemini AI into Warp terminal workflows through three focused tools: single-turn chat for quick questions, multi-turn conversations with context preservation, and AI-powered code analysis with bug detection and optimization | |
| GLM-4.6 MCP Server bobvasic/glm-mcp-server Enables Claude to consult GLM-4.6's architectural intelligence for system design, code analysis, scalability patterns, and technical decision-making. Provides specialized tools for enterprise architecture consultation, distributed systems d | |
| Remote MCP Server for Cloudflare bobwares/bobwares-mcp-server A deployable server that implements the Model Context Protocol (MCP) on Cloudflare Workers, enabling integration of custom tools with AI assistants like Claude without requiring authentication. | |
| director-shell-mcp bobzhou-source/director-shell-mcp Provides a controlled escape hatch for director-mode AI agents to run shell commands, write and edit files, execute Python code, supervise detached background jobs, acquire locks, and capture screenshots. | |
| Power BI PBIR MCP bobzhou-source/powerbi-pbir-mcp Local MCP server for editing Power BI Project reports saved in PBIR format. | |
| mobaxterm-mcp bobzzgm/mobaxterm-mcp An MCP server that enables AI agents to interact with MobaXterm for managing SSH sessions, executing remote commands, transferring files via SFTP, and monitoring terminal activity. | |
| Bocha Search MCP bochaai/bocha-search-mcp An AI-focused search engine that enables AI applications to access high-quality knowledge from billions of webpages and ecosystem content sources across various domains including weather, news, encyclopedia, medical information, train ticke | |
| tc-ftp-mcp bocimayer/tc-ftp-mcp Enables MCP clients to browse and manage remote FTP and explicit FTPS servers using connection sessions already saved in Total Commander's wcx_ftp.ini, without duplicating hosts or passwords. Exposes tools to list sessions and directories, | |
| seedflip-mcp bockenstette1/seedflip-mcp Give your AI coding agent design taste. 104 curated design seeds with colors, fonts, spacing, and shadows. Query by vibe, brand, or style. | |
| searxng-mcp-bridge bocklabs/searxng-mcp-bridge Enables MCP-compatible clients to perform web searches through a self-hosted SearXNG instance, with support for configurable languages, categories, time ranges, and safe search settings. | |
| dsh bodazi-na/codex-mcp-dsh Exposes a locally installed DeepSeek Harness as an MCP server so Codex can dispatch real tasks (with the harness's own skills, memory, and workspace) and check its own wiring, returning answers plus resumable session IDs. Every call is reco | |
| fundownloader-link-mcp boddapq/fundownloader-link-mcp Enables agents to validate and canonicalize Spotify track/playlist, Instagram post/reel, and Twitter/X status links into one consistent canonical URL form, locally and read-only. Rejects short links, unsupported platforms, and malformed or | |
| plainlykit-temporary-email boddapq/plainlykit-tempmail-mcp Enables creation and management of disposable receive-only inboxes through tools that create a mailbox, list and read messages, and delete it after confirmation, without requiring API keys or existing email credentials. | |
| AI Study Assistant MCP Server bodduvasavi17-source/ai-study-assistant Enables MCP-compatible clients to generate simple study plans from a subject, level, and available minutes, and to produce beginner-level practice questions, all locally without an API key. | |
| jev-router bodila51/jev-chooses-a-llm Enables Cursor to route coding tasks across cost, balanced, and intelligence tiers based on TypeSafe Jev decisions, with optional hard model switching through the Cursor SDK. | |
| BitSight Community MCP Server boecht/birre Enables access to BitSight security rating data through company search and rating retrieval functionality. Automatically manages BitSight subscriptions for one-time rating requests and provides structured security assessments for companies. | |
| Salesforce MCP Server (Extended) boejucci/mcp-server-salesforce Enables natural language interactions with Salesforce data, metadata, and reports, including report creation, discovery, and schema inspection. | |
| MCP Data Server boettiger-lab/mcp-data-server An MCP server that connects AI agents to cloud-native geospatial data via STAC metadata and DuckDB with H3 spatial indexing, enabling zero-configuration SQL queries on terabyte-scale datasets over S3. | |
| MCP Map Server boettiger-lab/mcp-map-server A Model Context Protocol server that provides a dynamic map interface with tools to add raster/vector layers, control map view, and modify paint properties. | |
| DuckDB MCP Server boettiger-lab/mcp-server-duckdb Enables AI assistants and IDEs to execute SQL queries on local DuckDB databases, in-memory databases, or cloud-stored databases with support for flexible connections and configurable result limits. | |
| TrySellr MCP Server boezac5150/trysellr-mcp AI-powered selling intelligence for multiple online marketplaces, enabling item analysis, optimized listings, pricing checks, negotiation coaching, and batch operations via any MCP-compatible AI assistant. | |
| RideWithGPS MCP Server boezzz/ridewithgps-mcp An AI-powered companion that provides access to the RideWithGPS API, allowing you to interact with cycling routes, trips, events, and user data through natural language. | |
| mcp-server-tron bofai/mcp-server-tron A comprehensive MCP server that enables AI agents to interact with the TRON blockchain, including tools for blockchain data, token transfers, smart contracts, staking, and wallet management. | |
| Déjà MCP Server bogacsmz/deja Enables agents to check proposals against team decisions via check_decision tool and recall memory via recall_memory tool, preventing conflicts with standing decisions in Slack. | |
| Shop Analytics MCP Server bogdaamn/database-mcp Enables AI agents to answer analytical questions about an online store's SQLite database through specialized read-only tools, without any risk of modifying the underlying data. | |
| zapcap-mcp-server bogdanminko/zapcap-mcp-server An MCP (Model Context Protocol) server that provides tools for uploading videos, creating processing tasks, and monitoring their progress through the ZapCap API. | |
| smartbill-mcp bogdanripa/smartbill-mcp An MCP server for the SmartBill Cloud API. It lets an MCP client issue and manage Romanian invoices, proformas and payments, download document PDFs, and read VAT rates, series and stock levels. | |
| use-computer-mcp bogdanstamenovic/use-computer Enables an agent to see and operate a GNOME Wayland desktop like a human, including screenshots, mouse/keyboard control, accessibility tree access, OCR, clipboard, and audio listening. | |
| mcp-memento bogeymanlicitness496/mcp-memento Provides AI coding assistants with persistent memory storage using a local SQLite database. Enables tools to remember project details, notes, and relationships across sessions to maintain context and reduce repetitive explanations. | |
| OpenAI GPT MCP Server boghyjunior-dot/openai-image-mcp A local MCP server that provides OpenAI GPT text generation and image generation over standard input/output. | |
| Google Slides MCP Server bohachu/botrun-google-slides-mcp Provides MCP server for Google Slides API, enabling creation, reading, modification, and management of Google Slides presentations using service account authentication. | |
| GitHub But Fast bohanyt/github-but-fast A read-only remote MCP gateway that lets MCP-capable agents discover GitHub REST endpoints and run many read-only GitHub reads (files, issues, comments, pull requests, checks) inside a single sandboxed JavaScript execution, returning only t | |
| Product MCP bohaohao/product-mcp MCP server for ERP product operations that enables AI agents to precheck product packages, upload files, and create products automatically without manual token copying. | |
| Google Ads MCP Server boheastill/google-ads-mcp Connects Claude Desktop to your Google Ads account, allowing you to analyze and manage campaigns, ad groups, and keywords using natural language. | |
| phone-eye boheastill/phone-eye Enables AI agents to see and operate a real Android phone over adb by fusing live screenshots with UI-tree data, supporting look, tap, swipe, type, and screenshot actions through any MCP client. | |
| Basecamp Classic MCP Server boian/basecamp-classic-mcp Enables interaction with Basecamp Classic (the original Basecamp) through its API, providing tools for managing projects, to-do lists, messages, comments, people, milestones, and time entries. | |
| MatDrupal MCP boisvertmath/mat-drupal-mcp An intelligent Model Context Protocol server that enhances GitHub Copilot with specialized Drupal development capabilities, offering project analysis, module exploration, technical debt assessment, and Lando environment management in both E | |
| Stage AI MCP boivert/stage-ai-mcp This MCP server replicates how a creative strategist gathers context by expanding queries and performing hybrid search against a Google Drive knowledge base, delivering structured, role-categorized context for ad copy and creative briefs. | |
| mcp-paprika bojanrajkovic/mcp-paprika MCP server for Paprika recipe manager enabling search, CRUD operations, grocery lists, meal planning, and menus via natural language, with semantic search and background sync. | |
| dsh-jev-mcp bojansandhaus/dsh-jev-mcp A dependency-free stdio MCP server that exposes typed Jev decision tools, enabling coding agents to make binary checks, routing choices, scored rubric ratings, and mixed judgments with calibrated probabilities. It validates questions locall | |
| TypeScript WordPress MCP Server bokazio/ts-wordpress-mcp-server MCP server for WordPress content management that provides a secure interface for AI assistants to interact with WordPress sites, enabling content creation, editing, and media management without destructive operations. | |
| repocks boke0/repocks Transforms Markdown documentation into an intelligent knowledge base with AI-powered search and Q\&A through an MCP server. | |
| rhythm-vibe-studio bolabaden/rhythm-vibe-studio MCP server for vibe coding with music, enabling format conversion (LilyPond, MusicXML, MIDI, ABC, etc.), audio-to-sheet transcription, and transposition with robust fallback outputs. | |
| Magento 2 MCP Server boldcommerce/magento2-mcp A Model Context Protocol server that connects to a Magento 2 REST API, allowing Claude and other MCP clients to query product information, customer data, and order statistics from a Magento store. | |
| appicon bolens/appicon Resolves desktop and brand icons to local file paths for use in Waybar, Rofi, scripts, and AI agents via an MCP stdio server with tools for resolve, prefetch, cache, sources, packs, and overrides. | |
| crypto-transactions-mcp bolesk/crypto-transactions-mcp MCP server for tracking crypto transactions (trades, swaps, transfers) with exact Decimal precision, allowing LLM agents to log and query historical records with JSON or Notion persistence. | |
| FastGPT Knowledge Base MCP boleyn/fastgpt-dataset-mcp Intelligent knowledge base management tool that enables searching, browsing, and analyzing documents across multiple datasets with smart document analysis capabilities. |
34,951–35,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.