Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Gmail MCP Server brentdemark/gmail-mcp Enables Claude to read, search, send, and manage Gmail messages and threads through natural language. | |
| GitHub Remote MCP Server brentlaster/agent-mcp-ollama A cloud platform for registering and using remote tools with GitHub's MCP service, enabling agents to access registered tools through SSE endpoints. | |
| paprika-mcp-server brentm5/paprika-mcp-server Gives AI assistants access to your Paprika Recipe Manager data by unpacking recipe archives and serving them via MCP. | |
| Evernote MCP Server brentmid/evernote-mcp-server Enables AI assistants to search and read your Evernote notes using natural language queries through secure OAuth authentication. Supports containerized deployment with production-ready security features. | |
| youtube-playlist-mcp brentvatne/youtube-playlist-mcp Enables analyzing and managing YouTube playlists, including Watch Later, using InnerTube authentication via browser cookies. | |
| Gmail MCP Server brentwpeterson/mcp-gmail Enables interaction with Gmail through MCP-compatible clients to list, read, search, and send emails. It supports advanced features such as managing labels, handling threaded replies, and utilizing Gmail's native search syntax. | |
| Strety MCP Server brentwpeterson/mcp-strety Enables Claude Code to manage Strety todos and people via read/write tools with OAuth token auto-refresh. | |
| youtube-mcp brentwpeterson/mcp-youtube An MCP server for authenticated YouTube writes, enabling video uploads, caption tracks, playlist management, and metadata edits with safety guards and async jobs. | |
| Where's Waldo Rick bretbouchard/gemini-vision-mcp An MCP server that provides agentic vision capabilities for visual regression testing by capturing and comparing screenshots using Gemini Flash. It enables users to detect UI changes and conduct conversational investigations to distinguish | |
| WFGY MCP Server bretbouchard/wfgy-mcp Enables real $1M-level reasoning through MCP protocol integration with Augment, providing tools for AI problem diagnosis, semantic analysis, and workflow optimization. | |
| LearnMCP Server bretmeraki/learnmcp Extracts and summarizes learning content from YouTube videos, PDFs, and web articles to provide context for project-based learning. It features automated background processing and integrates with Forest's HTA builder for informed task gener | |
| MariaDB MCP Server bretoreta/mariadb-mcp-server Provides secure, read-only access to MariaDB/MySQL databases, allowing users to list databases, explore table schemas, and execute SQL queries with built-in security measures. | |
| Multimodal RAG MCP Server brett-hardiman/multi-modal-rag-project Connects Claude to a personal knowledge base with hybrid search over code, documents, and images. Allows the AI assistant to retrieve and answer from your own files during conversations. | |
| notes-box brett-smithyac/mcp-snippetbox Enables clients to add, retrieve, update, delete, and list notes persisted to a local JSON file, with path configurable via an environment variable or command-line flag. Writes are atomic and locked, and a missing note raises an error rathe | |
| MCP-FinTechCo brett777/mcp-fintechco Provides real-time weather data for cities worldwide using the Open-Meteo API, with planned expansion into financial technology tools including market data, stock prices, and economic indicators. | |
| chesscom-mcp brettadams0/chesscom-mcp Enables querying Chess.com public data including player profiles, stats, games, and club information through natural language. | |
| google-workspace-mcp brettadams0/google-workspace-mcp An MCP server that gives Claude Code write access to a personal Google account — Gmail, Drive, Calendar, Sheets, and YouTube — backed by a self-owned Google Cloud OAuth client. | |
| reddit-mcp brettadams0/reddit-mcp An MCP server that enables authenticated Reddit account actions like posting, commenting, voting, and messaging via the Reddit API. | |
| supercell-mcp brettadams0/supercell-mcp Read-only MCP server for Supercell game APIs (Clash of Clans, Clash Royale, Brawl Stars) with prefixed tool names to search players, clans, clubs, and more. | |
| yahoo-fantasy-mcp brettadams0/yahoo-fantasy-mcp Enables querying Yahoo Fantasy Sports leagues, rosters, and matchups via an MCP interface (read-only). | |
| BookMarket Research MCP Server Agent brettanthonysjoberg079-code/bookmarket-agent Enables market research and analytics for digital, audio, POD, and ebook publishing by integrating DuckDuckGo search, Gemini API, Supabase, Airtable, Hugging Face, and GitHub. | |
| brettapps MCP Agent Workforce brettanthonysjoberg179-lab/brettapps-mcp-agent Exposes a fleet of specialized publishing and marketing agents — including manuscript authoring, ebook production, editorial, market research, cover direction, sales copy, and knowledge/Drive management — as MCP tools served over FastAPI, o | |
| Adversary MCP Server brettbergin/adversary-mcp-server A security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development. | |
| Pi-hole MCP Server brettbergin/pihole-mcp-server Enables management of Pi-hole DNS servers through natural language commands, including enabling/disabling blocking, viewing statistics, and configuration. | |
| Sounding brettdavies/sounding-webmcp-demo Serves public water depth readings as JSON, exposing the data through an MCP-compatible API. | |
| forge-mcp-server bretterer/forge-mcp-server MCP server for managing Laravel Forge servers, sites, and deployments via the Forge API. | |
| sunny-dispatch brettknox/sunny-dispatch Enables Claude to route sub-tasks to the cheapest suitable model tier based on semantic rules, with tools for dispatching and previewing routing decisions. | |
| Stoa brettnye/stoa Persistent shared memory for AI coding agents that turns a folder of markdown files into searchable memory across sessions, repos, and machines. | |
| ELM MCP brettscharm/elm-mcp Enables AI assistants to interact with IBM Engineering Lifecycle Management (ELM), including DOORS Next Generation, EWM, and ETM, for managing requirements, work items, tests, and project builds through natural language. | |
| elm-mcp v2 brettscharm/elm-mcp-v2 A federated MCP server that combines IBM's engineering-ai-hub tools with its own authoring and orchestration tools for IBM ELM, enabling AI hosts to manage requirements, models, and compliance through a single interface. | |
| Edgar MCP Service brettvtcrowe/edgar-mcp-service Enables deep analysis of SEC EDGAR filings through universal company search, document content extraction, and advanced filing search capabilities. Provides AI-ready access to business descriptions, risk factors, financial statements, and fu | |
| Obsidian CLI MCP Server brettwinterflood/obsidian-cli-mcp MCP server that exposes Obsidian vault operations over HTTP via the Obsidian CLI, enabling note management, search, and daily note operations. | |
| MovieGlu MCP brettyandell/movieglu_mcp_openwebui Enables users to search real movie theater showtimes, discover films and cinemas, and retrieve ticket deep links through natural language chat in Open WebUI or any MCP client. | |
| Brev brevdev/brev-mcp Run, build, train, and deploy ML models on the cloud. | |
| free-video-edit-mcp breverdbidder/free-video-edit-mcp Enables AI agents to programmatically edit videos via FFmpeg, providing tools for probing, trimming, concatenating, timeline composition, LUT generation/application, rendering, and edit verification over MCP. | |
| GG Deals MCP Server brewek/mcp-server-ggdeals Enables LLMs to fetch game prices, historical lows, and bundles from gg.deals. | |
| Grok MCP Server brewmytech/grok-mcp Enables interaction with the Grok AI through an MCP server, supporting chat completions, text completions, embeddings, and model operations with streaming capabilities. | |
| Kite MCP Trading Server brextherfx/kite-mcp-server An MCP server for Zerodha Kite Connect that enables AI agents to execute trades, manage portfolios, fetch market data, and perform technical and fundamental analysis. | |
| CustomerOS MCP Server brgmry/customeros-mcp A local MCP server for managing CustomerOS tickets, accounts, team members, and notes, backed by Supabase. | |
| Multi-Tool MCP Server brguru90/multi_tool_executer_mcp A Docker-based FastMCP server for dynamic Python code execution with support for multiple MCP clients, automatic validation, runtime installation, and browser automation. | |
| Webpage MCP Server brian-bfz/fireworks Enables querying and retrieving webpage content from websites by parsing sitemap.xml files and fetching HTML content from specified URLs. Includes built-in rate limiting and supports listing available pages and accessing raw sitemap data. | |
| Webpage MCP Server brian-bfz/fireworks2 Enables querying and retrieving webpage content from websites by parsing sitemap.xml files and fetching HTML content from specified URLs. Includes rate limiting protection and supports listing all available pages from a sitemap. | |
| Webpage MCP Server brian-bfz/fireworks3 Enables querying and retrieving webpage content from websites by parsing sitemap.xml files and fetching HTML content from specified URLs. Includes built-in rate limiting for responsible web scraping. | |
| Webpage MCP Server brian-bfz/fireworks4 Enables querying and retrieving content from webpages by parsing sitemap.xml files and fetching HTML content from specified URLs. Includes rate limiting for abuse protection. | |
| Webpage MCP Server brian-bfz/fireworks5 Enables querying and retrieving webpage content from websites by parsing sitemap.xml files and fetching HTML content. Includes rate limiting protection and supports listing available pages and accessing raw sitemap data. | |
| Webpage MCP Server brian-bfz/fireworks6 Enables querying and retrieving content from webpages by parsing sitemap.xml files and fetching HTML content from specified URLs. Includes built-in rate limiting for protection against abuse. | |
| jazz_agent brian-egan/jazz_agent Enables querying a permanent taste log of NYC jazz club playlists and recording personal feedback on liked acts via natural language to Claude. | |
| youtube-mcp brian-huanggg/youtube-mcp Fast, minimal YouTube 'watch' engine for AI agents that extracts clean transcripts, searches, and slices any YouTube video without requiring an API key. | |
| MacOS Clipboard MCP Server brian-ln/clipboard-mcp Provides AI assistants access to the macOS clipboard content, supporting text, images, and binary data via OSAScript. | |
| Stealth Browser MCP Server brian-ln/stealth-browser-mcp Provides stealth browser capabilities using Playwright with anti-detection techniques, allowing MCP clients to navigate websites and take screenshots while evading common bot detection systems. |
35,501–35,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.