Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| FS-MCP Server boleyn/fs-mcp-server A Model Context Protocol server that provides intelligent file reading and semantic search capabilities across multiple document formats with security-first access controls. | |
| BolideAI MCP bolide-ai/mcp A comprehensive ModelContextProtocol server that provides AI-powered tools for marketing automation, content generation, research, and project management, integrating with various AI services to streamline workflows for developers and marke | |
| gmap bolin8017/gmap-place-saver Enables resolving places from URLs or text, confirming candidates, and saving them to the correct regional Google Maps saved lists with optional notes. | |
| retail-price-tracker-mcp bolin8017/retail-price-tracker-mcp Enables tracking retail product prices, checking price history, and managing tracked products via MCP tools, with a focus on UNIQLO Taiwan. | |
| Fantastic.jobs MCP Server boljo/fantastic.jobs-mcp Enables Claude to search fresh job postings through the Fantastic.jobs API, filtering by title, location, and time frame and returning trimmed results like organization, URL, and posting date. It runs locally over stdio, so users can ask na | |
| MCP Server Demo bollam1818/mcpserver A demonstration MCP server that provides calculator tools for arithmetic operations, personalized greeting resources, and code review prompt templates. Enables users to perform basic math calculations, generate dynamic greetings, and access | |
| Bollard MCP bollard-db/bollard Enables safe, AI-driven database interactions with schema discovery, intent validation, and session memory, supporting multiple databases. | |
| Bolna MCP Server bolna-ai/mcp Remote MCP server wrapping the Bolna voice AI REST API, providing 11 tools (7 read, 4 write) for voice AI interactions. | |
| Everything MCP Server bolo10/mcp-tools A test MCP server that exercises all MCP protocol features, including prompts, tools, resources, and sampling, for client builders. | |
| Windows Dev Agent bolohori/windows-dev-agent Enables Windows-native developer orchestration for Claude Code and Codex with PowerShell discovery, capability routing, safety-gated execution, package management, and sandbox-based isolation. | |
| repopedia bolongpa/repopedia Serves a repository's code knowledge graph over stdio (MCP) so coding agents can look up symbols, trace callers and callees, compute blast radius, list file symbols, run hybrid lexical-plus-graph search, and get citation-grounded answers fr | |
| boltcheckout boltapp/bolt-mcp-typescript MCP server enabling natural language interaction with the Bolt API for managing transactions, orders, product catalog, configuration, and testing. | |
| Telegram MCP Bridge boltholds/telegram_mcp_bridge Provides read-only access to a user's Telegram account via MTProto, enabling chat listing, message retrieval, search, and context fetching. | |
| NS MCP China bolton-z/ns-mcp-china Connects MCP-compatible AI assistants to NetSuite ERP with easy OAuth setup. Provides tools for records, SuiteQL, saved searches, reports, and metadata. | |
| @boltstore/mcp boltstore/mcp MCP server for Boltstore — exposes SQLite database operations as MCP tools for AI agents. | |
| agentpulse-mcp boltybolterson/agentpulse-mcp Provides AI agents with real-time, structured data feeds including news, trends, market sentiment, and crypto prices via MCP tools. | |
| Face-ID Photo Fusion MCP Server boluoyanshu/mcpserver A server that integrates with Claude to merge facial images with ID photo backgrounds using ComfyUI, allowing users to seamlessly replace faces in identity documents through natural language commands. | |
| MCP OpenProject Server boma086/mcp-open-project Enables AI assistants to manage projects through OpenProject's API, providing complete project management capabilities including work packages, tasks, and team collaboration features. | |
| Agentic Player 10 Saju MCP bombay/agentic-player10-fortune-mcp MCP server that generates fortune context packs based on Saju, Zi Wei Dou Shu, and Western astrology for AI interpretation, enabling reflective entertainment and structured self-counseling in KakaoTalk conversations. | |
| chatgpt-mcp bombless/chatgpt-mcp Enables remote control of a Windows machine through a Node.js agent, providing filesystem operations, PowerShell execution, and system information access via MCP. | |
| LANraragi MCP Server bomomoqwq/lanraragi-mcp Wraps all LANraragi APIs into 51 MCP tools, enabling AI agents to browse, search, upload, tag, and manage manga archives. | |
| Pron-download bomomoqwq/pron-download Enables searching and downloading PornHub videos via MCP tools with stealth anti-detection and aria2 for robust downloading. | |
| mysql-mcp-server bomsan69/mysql-mcp-server MCP server that lets clients run SQL (select/insert/update/delete) against a MySQL database, with readonly and readwrite modes. | |
| anydoc-serve bon5co/anydoc-serve Enables AI agents to convert Word, PowerPoint, Excel, OpenDocument, RTF, EPUB, CSV, PDF and image files into Markdown through a single MCP tool that accepts a URL or base64 content. Scanned and image-only pages are OCR'd locally for English | |
| Forensic Company MCP bonafon2009/forensic_company_mcp Enables corporate OSINT and compliance research by normalizing and comparing company names and addresses, searching GLEIF and OpenSanctions, retrieving entity details, and building relationship graphs from shared attributes and officers. It | |
| edu09-mcp bonbear/openedu09 MCP server that lets AI agents configure the EDU09 USB oscilloscope, acquire and measure waveforms, and export them over stdio or streamable HTTP. It can run against real hardware, a built-in simulator, or bridge to a GUI that already owns | |
| Postgres MCP Server bonboncinnabon/postgres-mcp A Model Context Protocol (MCP) server that provides secure database access to PostgreSQL through Kysely ORM, enabling Claude Desktop to interact with PostgreSQL databases using natural language. | |
| Pantry Buddy MCP bonbrainllc/pantry-buddy-mcp Enables managing a personal pantry, shopping lists, cookbook recipes, and saved receipts remotely through MCP tools using natural language or API calls. | |
| mcp-clt bonckewitz/mcp-clt MCP server for Brazilian labor law (CLT), enabling article lookup, topic search, and legal analysis through tools, resources, and prompts. | |
| Fathom MCP Server bondjacobbond/fathom-mcp Enables AI agents to access Fathom AI meeting data including transcripts, summaries, teams, and team members. Provides tools to list meetings with filters, retrieve detailed transcripts and summaries, and manage team information. | |
| lasuite-docs-mcp bone2510/lasuite-docs-mcp MCP server for LaSuite Docs API, enabling operations like list, read, create, update, delete documents, versions, favorites, and current user via OIDC authentication. | |
| Shodan MCP Server bonetrees/shodan_mcp Provides Claude with access to Shodan for IP address lookups, service discovery, and vulnerability scanning, allowing users to query information about hosts, count results, and check API usage. | |
| REAPER MCP Server bonfire-systems/reaper-mcp A Model Context Protocol server that enables AI agents to create fully mixed and mastered tracks in REAPER DAW, supporting project management, MIDI composition, audio recording, and mixing automation. | |
| mcp-server-silverbullet bong-u/mcp-server-silverbullet An MCP server that connects a SilverBullet space over its HTTP filesystem API, exposing a scoped prefix of notes to AI agents with read/write/delete capabilities. | |
| Nano-Banana MCP Server bongartzdiaz/nano-banana-mcp An MCP server that provides AI image generation and editing capabilities using Google's Gemini 2.5 Flash Image API. It allows users to create new images from text, modify existing files, and perform iterative edits through natural language | |
| opensql-doc bongjunpyo/opensource_contest_tmax Enables MCP clients to search documents stored in OpenSQL/PostgreSQL using vector similarity, with support for version history and changelog retrieval. | |
| memex bongsuchoi/memex Enables local-first personal knowledge management for Codex by turning conversations into a searchable archive, extracting durable facts, building a knowledge graph, and injecting relevant context into later sessions. | |
| mcp-tradecanvas bonguynvan/tradecanvas An MCP server for TradeCanvas Trading Chart, so a coding agent looks names up instead of guessing them. It answers from a catalog generated from the library's own code: the same version, the same names. | |
| myscrape bonifatius94/myscrape A self-contained web-research MCP server that lets local LLM agents search, fetch, and synthesize web content using tools like web_search, web_fetch, and web_research. | |
| OutlookMaster-MCP bonjourzzz/outlookmaster-mcp A comprehensive MCP server for Microsoft Outlook email management, enabling mail operations, smart search, statistical analysis, and more via natural language. | |
| confluence-mini-mcp bonkey/confluence-mini-mcp Lightweight MCP server that crawls Confluence subtrees and serves cached Markdown, enabling search and retrieval of Confluence pages via MCP tools. | |
| sf-symbols-mcp bonkey/sf-symbols-mcp An MCP server that helps AI agents pick the right SF Symbol for a UI function without hallucinating symbol names, using layered retrieval and verified catalog entries. | |
| p2p-tools-mcp bonklek/p2p-tools-mcp Provides MCP servers for VPN control (NordVPN) and torrent lifecycle management via Jackett search and qBittorrent operations, plus a unified CLI. | |
| bonnard bonnard-data/bonnard Open-source agentic schema layer. Define metrics once in YAML, query governed data from any warehouse (Snowflake, BigQuery, Databricks, PostgreSQL, DuckDB) via MCP. | |
| io.github.0xzr/freellmpool bonnet5763/freellmpool Pools enabled free-tier, keyless, and trial LLM chat routes behind a single OpenAI-compatible endpoint with automatic failover and local usage tracking, so coding agents and OpenAI/Anthropic-compatible tools can run on free models without c | |
| Claude IPC MCP bonnet794/claude-ipc-mcp Enables AI assistants on different platforms and sessions to send each other persistent messages using simple natural language commands like registering an instance, sending a message, and checking an inbox. Messages survive restarts, allow | |
| WhatsApp Channel bonnet873/whatsapp-claude-plugin Lets an AI coding session send and receive WhatsApp messages, media, and transcribed voice notes from a linked personal number or the official Cloud API, with pairing codes and allowlists gating every inbound chat and tool approvals handled | |
| mcp-starter bonniedooneconsulting/mcp-server-python-starter Enables Claude-compatible clients to search a bundled help center with pagination, draft validated support tickets, read documentation resources as Markdown, and use a reusable documentation-explanation prompt. It can run over stdio or stre | |
| FreeCAD MCP bonninr/freecad_mcp A FreeCAD addon that implements the Model Context Protocol (MCP) to enable communication between FreeCAD and Claude AI through Claude Desktop. | |
| TC-MCP bonnypro/twincat3-mcp Provides read-only search and retrieval over a locally built TwinCAT 3 knowledge base of official documentation, exposing tools to search, fetch documents, and check status. |
35,001–35,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.