Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Photoshop MCP bonora0413/photoshop_mcp_nonapi Enables AI assistants to control Adobe Photoshop through natural-language requests for tasks like background removal, portrait retouching, web and social export, carousel creation, and batch watermarking. This privacy-focused fork supports | |
| log-collector bonsai/log-collector MCP server for collecting and analyzing CLI/web server error logs. Enables watching log files/directories, parsing common error patterns, and querying/analyzing logs through natural language. | |
| renpy-mcp bonsai/renpy-mcp Enables AI assistants to create and manage Ren'Py visual novel projects, including adding labels and characters, validating syntax, and running projects via the Ren'Py SDK. | |
| StoryboardStudio MCP bonsai/storyboard-studio-mcp Enables LLM agents to generate and validate multi-granularity storyboard assets from text prompts, including 2D SVG motion, 3D Blender depth/blockout, and SDXL ControlNet final images. It also supports vision-based self-correction and a SQL | |
| Telegram MCP Server bonzhigh/msgmcp Enables AI assistants to send messages to Telegram users via a Model Context Protocol server, with support for chat IDs, usernames, and a web-based configuration interface. | |
| Yahoo Mail MCP Server boo1-boo1/yahoo-mail-mcp Enables Claude to access Yahoo Mail via IMAP, allowing users to list folders, search and read emails, download attachments, and manage flags, moves, and deletions. | |
| Unified Docs Hub boodrow/mcp-server-unified-docs-hub Provides AI assistants with searchable access to documentation from 170+ curated repositories and 1000+ popular GitHub projects across 20+ categories including trading, AI/ML, DevOps, and web development. | |
| astra-mcp boof2015/astra-mcp MCP server for Astra's Companion API v2 that lets Claude and other MCP clients view and control a running Astra desktop music player, including playback, search, queue, favorites, and playlists. | |
| mcp-comfyui bookandmusic/comfyui-mcp 通过MCP协议调用ComfyUI加载并执行工作流，支持文生图、图编辑、放大、去背景等场景。 | |
| openai-image-gen bookandmusic/openai-image-mcp Exposes multiple image generation backends as independent MCP tools for generating images with configurable models and parameters. | |
| Smart Connections MCP Server bookbran/smart-connections-mcp Provides semantic search and knowledge graph capabilities for Obsidian vaults using Smart Connections embeddings. | |
| discord-ops bookedsolidtech/discord-ops A Discord MCP server with multi-guild project routing, enabling messaging, moderation, and notification management across multiple Discord servers via natural language. | |
| HELiXiR bookedsolidtech/helixir MCP server that provides AI agents with accurate, hallucination-free access to web component APIs by reading the library's Custom Elements Manifest. | |
| ecommerce-mcp bookknhp/ecommerce-mcp Enables AI to view and manage e-commerce data such as products, orders, and coupons, and perform actions like updating prices, stock, and generating sales reports. | |
| booklib booklib-ai/booklib A context engineering tool for AI coding assistants that detects post-training knowledge gaps, resolves them automatically, and delivers team decisions via MCP to Claude, Cursor, Copilot, and other AI tools. | |
| hn-mcp booklib-ai/hn-mcp The only MCP server that can write to Hacker News, enabling story submission, commenting, and submissions checking via natural language. | |
| MCP TCE-PR booknando/mcp-tce-pr Enables AI assistants to consult public data from the Paraná State Court of Auditors (TCE-PR), including construction records, bidding processes, court decisions, process consultations, and portal information. | |
| Windows-MCP books-qaq/windows-mcp Enables AI agents to seamlessly integrate with the Windows operating system, performing tasks such as file navigation, application control, UI interaction, and QA testing via the MCP protocol. | |
| DeepSeek MCP Server booleamu/deepseek-mcp-server MCP server that wraps DeepSeek's AI capabilities into standard MCP tools, supporting three authentication modes including free web-based usage without API keys. | |
| modular-rag-mcp-server boombap777/evidra-rag Enables external agents to retrieve knowledge with source context through MCP tools for querying, listing collections, and obtaining document summaries. | |
| tuskr-mcp-server boombidibuybuy/tuskr-mcp-server Enables interaction with the Tuskr test management API through MCP, supporting account ID and access token authentication for managing test cases, runs, and projects. | |
| Image Worker MCP boomlinkai/image-worker-mcp A lightweight MCP server for image processing and cloud uploads that automates resizing, converting, optimizing, and uploading images to services like AWS S3, Cloudflare R2, and Google Cloud Storage. | |
| demo boompieman/mcp_server_demo demo | |
| cobro-browser boonblade/cobro-mcp Enables an AI agent to collaborate with a user in real-time on a web page, receiving selected elements and notes along with page context (selectors, styles, screenshots, console errors) and sending progress/completion signals back, with con | |
| Telegram MCP Server booniex/telegram-mcp-server Model Context Protocol server for Telegram. Let AI read, search, send, and forward your Telegram messages. | |
| mcp-google-contacts boonkgim/mcp-google-contacts A remote MCP server for Google Contacts, deployed on Cloudflare Workers, that enables Claude to create, search, list, get, and update your Google contacts via the People API. Designed as a custom connector for claude.ai, it supports OAuth a | |
| DCAP Disco boorich/dcap_disco Connects to the DCAP intelligence stream to discover and cache tools in real time, and enables autonomous tool acquisition by allowing agents to call any discovered tool without manual configuration, including automatic x402 payment handlin | |
| MCP Human Loop Server boorich/mcp-human-loop An intelligent middleware that determines when human intervention is necessary in AI agent operations using a sequential scoring system that evaluates multiple dimensions of a request. | |
| Remote MCP Server Authless boos/remote-mcp-server-authless Deploy a remote MCP server on Cloudflare Workers without authentication, enabling custom tools and integration with Cloudflare AI Playground and Claude Desktop. | |
| MCP Server Boilerplate boosclues/mcp-creator A starter template for building MCP servers with TypeScript support, example tools, and automated installation scripts for Claude Desktop, Cursor, and other MCP-compatible AI assistants. Provides a foundation for creating custom tools, reso | |
| MCP Server Boilerplate boosclues/new-mcp-builder A starter template for building custom MCP servers that can integrate with Claude Desktop, Cursor, and other AI assistants. Provides example tools, TypeScript support, and automated publishing workflow to help developers create their own to | |
| Integrator MCP Server boostspace/integrator-mcp-server A Model Context Protocol server that allows AI assistants to invoke and interact with Integrator automation workflows through an API connection. | |
| combell-mcp-boostu boostuagency/combell-mcp-boostu Enables AI assistants to manage Combell hosting resources such as domains, DNS, mailboxes, databases, and SSL certificates through natural language. | |
| Bootpay Developer Docs MCP Server bootpay/bootpay-mcp Enables AI coding tools to search and retrieve Bootpay payment and commerce developer documentation, including integration guides and customer service manuals. It facilitates tasks such as payment linking, billing key issuance, and webhook | |
| pebblehost-mcp bop-del/pebblehost-mcp Enables natural language management of Pebblehost Minecraft servers, including server status, control, console commands, file management, and backups. | |
| gws-mcp borabicaco/gws-mcp Enables Claude to read and, when explicitly enabled, modify Gmail, Google Calendar, and Google Drive across multiple Google Workspace accounts while defaulting to read-only access. | |
| ipasen-mcp boraita/ipasen_mcp Lets AI assistants query a family's school grades, absences, timetable, messages, trips, and calendar, and—after explicit human confirmation—report or justify absences, answer authorizations, reply to teachers, and book meetings. | |
| ajan-sql borakilicoglu/ajan-sql An MCP server that provides safe, read-only SQL access for AI agents to query databases (PostgreSQL, MySQL, SQLite) with schema awareness and guardrails. | |
| iddaa-mcp borakilicoglu/iddaa-mcp MCP server that provides structured access to real-time sportsbook data from iddaa, including live events, competitions, and league fixtures with strategy analysis. Designed for AI agents and automation workflows. | |
| devflow-mcp boranesn/devflow-mcp A production-ready MCP server that provides AI assistants with comprehensive GitHub developer tooling including PR analysis, code review, changelog generation, dependency auditing, commit summarization, and refactoring suggestions. | |
| MCP-NetDisk borankux/mcp-netdisk A private cloud storage system with Model Context Protocol integration that allows AI models to manage files through operations like searching, reading, and creating content. It features a complete web interface for user administration, sto | |
| Bosca Ceoil MCP boraswim/bosca-ceoil-mcp Lets AI tools compose music live in the Bosca Ceoil Blue app, creating and editing songs, instruments, patterns and arrangements with playback control and undo, then exporting to WAV, MIDI, XM or MML. | |
| Mina Archive Node boray/mcp-mina-archive-node Provides access to Mina blockchain data, enabling queries for events, actions, and network state information through a standardized interface. | |
| arXiv Research MCP Server borderlessboy/arxiv-research-mcp Enables natural language search and analysis of arXiv academic papers with AI-powered relevance ranking, full-text extraction, and support for multiple integrations like Claude and LangChain. | |
| mcp-plus-tard boreales/mcp-plus-tard Schedule posts around social networks | |
| SiYuan MCP Server boreastra/siyuan-mcp-sever An MCP server that provides high-level AI workflows for SiYuan, enabling knowledge context aggregation, project and customer overviews, meeting summaries, and automated daily/weekly reviews. | |
| sandbox boredem125/architecture-mcp Enables AI agents to safely execute privileged commands by routing them to a human approver, who runs them outside the agent's context and returns the output to the model. | |
| BCS Timesheet MCP boredom1234/bcs_mcp_releases MCP server for BCS timesheet management on Windows, providing executable download, checksum verification, and installation for Claude Code and Codex hosts. | |
| Berlin Group MCP Server borelli-7/bg-mcp-server Provides AI assistants with contextual access to Berlin Group Open Finance API specifications, enabling specification-compliant guidance through semantic search, graph database queries, and document retrieval. | |
| sztu-library-mcp borey78/sztu-library-mcp Enables AI assistants to search a university library's catalog by keyword, title, author, subject, or ISBN, and to check each copy's real-time availability, floor location, and expected return date. Also provides recommended reading lists, |
35,051–35,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.