Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mcp-jenkins bryant927/mcp-jenkins Enables AI language models to securely interact with Jenkins through the Model Context Protocol, providing tools to manage jobs, builds, nodes, queues, views, plugins, and Groovy scripts with authentication and read-only options. | |
| rockin-worker bryantjavaint/rockin-worker MCP server that exposes tools to search and list GitHub repositories synced to SQLite, enabling natural language queries for top repos by stars or by name. | |
| mcp-github bryarpatch36/mcp-github Read-only GitHub MCP server that lets assistants search and read repositories, issues, pull requests, commits, and file contents, scoped to the user's personal access token. | |
| Growth Mind Ads MCP bryce-liggins/growth-mind-ads-mcp Enables AI agents to read a Google Ads account, prepare and validate allowlisted changes, obtain approval, apply an unchanged batch, and read results back through a local stdio MCP server. | |
| mcp-api-bridge bryceewatson/mcp-api-bridge Enables AI assistants like Claude to interact with any REST API through typed, validated MCP tools. Provides a pattern to wrap REST APIs as MCP servers. | |
| agent-env-mcp brycepelletier/agent-env-mcp Provides a restricted Docker-based sandbox for LLM agents, enabling file operations, command execution, and local Git within an isolated runtime. | |
| @brycepelletier/github-app-mcp brycepelletier/github-app-mcp Enables secure GitHub App authenticated Git operations and GitHub API workflows through MCP, using ephemeral containers and a private key broker to protect credentials. | |
| web-research-mcp brycepelletier/web-research-mcp Enables bounded web research through DuckDuckGo search and retrieval of public HTTPS pages as readable text, Markdown, JSON, or XML, with optional excerpt matching and strict safety validation. | |
| md2 brycewang-stanford/md2 Enables AI agents to turn a single Markdown document into platform-ready output — WeChat Official Account inline-styled rich text, Zhihu HTML, Xiaohongshu 1080×1440 card sets with covers, split X/Threads/Bluesky/LinkedIn threads, long image | |
| deepseek-search brylexia/deepseek-search-fetch-mcp Enables MCP clients and agents to run structured web searches and fetch web pages as Markdown through a search/fetch API, with rate limiting, retry/backoff, request deadlines, and private-address blocking for safer agent use. | |
| laravel-forge-readonly-mcp brynj-digital/laravel-forge-readonly-mcp A read-only MCP server for the Laravel Forge API, enabling AI assistants to query Forge infrastructure details like servers, sites, deployments, and logs without any write capabilities. | |
| ONS + Nomis MCP server brynmrgn/ons-mcp Provides access to UK economic, social, and labour-market statistics via the ONS beta and Nomis APIs, enabling discovery and retrieval of time series, datasets, and census data. | |
| Open Parliament MCP brynmrgn/open-parliament-mcp A thin MCP connector to UK Parliament's public APIs and Members OData endpoint, providing generic tools to list, describe, and query data sources, with playbooks for procedural guidance. | |
| PocketBase MCP Server brynnjocelyn/pocketbase_mcp_server Enables LLMs to manage PocketBase databases with comprehensive CRUD, authentication, file management, backup, and hook operations through a standardized protocol. | |
| SQL MCP Server bryr0/sql-mcp Enables AI models to interact with multiple database types (MySQL, MSSQL, Oracle, Sybase) through a unified interface with standardized tools for querying, inspecting schemas, and managing connections without requiring separate server confi | |
| AV-MCP Automator bryshdw/av-mcp_automator Middleware that uses Model Context Protocol and generative AI to automatically generate native Crestron Construct interfaces (.cuig/.cuib), enabling natural language creation of AV control UI components. | |
| DeltaTask MCP Server brysontang/deltatask Provides API access to a locally-hosted task management system with features for creating, updating, and organizing tasks, including support for urgency levels, effort estimates, subtasks, and bi-directional sync with Obsidian markdown file | |
| resume-mcp brysontang/resume-mcp An MCP server that provides a structured API for AI agents to query a person's resume, including profile, projects, writing, and gated access to experience and skills. | |
| MSIO brystal00/msio-server MSIO is an MCP server that gives AI agents tools to interact with Housecall Pro (HCP), enabling job history search, business intelligence, estimate generation, and validated write operations for plumbing company operators. | |
| Software Management MCP Server bs4876/mcp Enables AI agents to automate local software management workflows including installation, uninstallation, updates, and environment recommendations. It provides a standardized, non-interactive interface for managing system applications and t | |
| community-research-mcp bsaa141aly-bit/community-research-mcp MCP server for researching community discussions, with a focus on Reddit. It enables searching Reddit posts and reading threads/comments, providing structured JSON output for LLM consumption. | |
| Deep Research MCP Server bsaajith-droid/openai-deep-research-compatible-mcp-with-next-js Provides semantic search and document retrieval via OpenAI Vector Store API, extending ChatGPT Deep Research with custom knowledge and tools. | |
| milano-mobility-mcp bsab/milano-mobility-mcp It enables documented checks on Milan's Area B and Area C vehicle access, MoVe-In budget calculations, and anti-smog restriction status, returning structured MCP responses with references and clear limitations. | |
| kali-mcp-server bsahane/kali-mcp-server Enables MCP clients to drive Kali Linux ethical hacking tools for authorized penetration testing, with enforced engagement scope, exploitation gating, and full audit logging. | |
| legal-mcp-server bsahane/legal-mcp-server A production-ready template for developing Model Context Protocol (MCP) servers using Python and FastMCP. | |
| Legal MCP Server bsahane/legal-open-mcp-server An MCP server for Indian legal work that enables case-law research with verified citations, limitation and deadline calculations, legal document drafting, matter tracking, and contract search. | |
| MCP Ansible Server bsahane/mcp-ansible Enables comprehensive Ansible automation management through natural language, including playbook creation and execution, inventory management, role scaffolding, and project workflows. Supports both local inventories and full project lifecyc | |
| MCP Proxmox Server bsahane/mcp-proxmox Enables comprehensive management of Proxmox virtualization infrastructure through natural language, supporting VM/LXC lifecycle operations, networking, snapshots, backups, metrics monitoring, and cluster orchestration. Provides full access | |
| Memory MCP Server bsahane/memory-mcp-server Enables AI agents to store, search, and manage persistent memories, todos, kanban boards, reminders, and progress trackers in a local SQLite database. | |
| OKF MCP Server bsahane/okf-mcp-server Enables MCP-capable AI assistants to browse, search, and retrieve cited, trust-aware answers from enterprise documents by converting them into a searchable knowledge base with provenance. | |
| Google Docs & Gmail MCP Server bsaiprasad13-main/mcp-server A Model Context Protocol-style server using FastAPI that integrates Google Docs and Gmail via official Google APIs with OAuth 2.0 and interactive terminal-based human-in-the-loop approval. | |
| android-use bsaisuryacharan/android-use Enables Claude to see and control a real Android phone via MCP, reading the accessibility tree to tap, type, navigate, launch apps, and diagnose connectivity over ADB or cellular. | |
| endplay-dd-mcp-server bsalita/endplay-dd-mcp-server Exposes endplay double-dummy calculations for chatbots/agents, providing full trick tables for bridge deals. | |
| codecity-mcp bsana1/codecity-mcp Analyzes a local codebase and exposes its structure, per-file summaries, dependency graph, and complexity hotspots as tools for MCP clients like Claude. | |
| MPO MCP Server bsangars/mcp Enables AI assistants to interact with GitHub repositories, Confluence documentation, and Databricks Unity Catalog through comprehensive tools for code exploration, documentation retrieval, and data schema management. | |
| codexpro-bridge bsbofmusic/codexpro-bridge A companion MCP server that exposes live Hermes Skills, filtered native MCP tools, and conditional Memos recall to ChatGPT while isolating Bridge failures from CodexPro VPS operations. | |
| octo-mcp-server bscarberry/octo_mcp A production-ready MCP server built with Node.js and Express that supports remote deployment via HTTP and SSE. It provides a modular framework for building and scaling tools while serving multiple clients concurrently. | |
| ableton-live-mcp bschoepke/ableton-live-mcp Enables AI agents to control Ableton Live by evaluating arbitrary Python code and using predefined tools for common tasks, supporting voice and text commands for music production. | |
| NotePlan MCP Server bscott/noteplan-mcp A Message Control Protocol server that enables Claude Desktop to interact with NotePlan.co, allowing users to query, search, create, and update notes directly from Claude conversations. | |
| MCP Code Flow Analyzer bsdnn/mcp-code-flow-analyzer An MCP server that analyzes and traces business code flows across your codebase, enabling developers to quickly understand the complete execution path of features from frontend to backend to database. | |
| Yazio MCP Server bserem/yazio-mcp-pyton An MCP server that connects AI assistants to your Yazio nutrition diary, enabling food tracking, product search, and nutrition goal management via reverse-engineered endpoints. | |
| NSE-BSE MCP Server bshada/nse-bse-mcp Provides real-time and historical Indian stock market data from NSE and BSE exchanges with 66 tools covering quotes, options chains, corporate actions, IPOs, and market analytics for LLM-powered financial analysis. | |
| mcp-shodan bshah04/mcp-shodan Enables AI agents to perform internet reconnaissance through the Shodan and CVEDB APIs — searching internet-connected devices, inspecting host ports, banners, TLS certificates and DNS records, and pulling CVE, CPE, EPSS and KEV vulnerabilit | |
| Homelab MCP Server bshandley/homelab-mcp Enables Claude to monitor and manage homelab infrastructure including Docker containers, OPNsense firewall, and TrueNAS storage with configurable capability levels from read-only monitoring to full management control. | |
| gpon-mcp bsiamer/gpon-godmode Enables AI agents to manage Nokia G-240W-F fiber router settings, including router status, connected devices, optical power, Wi-Fi channel selection, Ethernet speeds, port forwards, DMZ, and gaming optimization through 12 tools. | |
| fec-mcp bsilha/fec_mcp An MCP server that searches official FEC PDF rulebooks for compliance and contribution limits, and provides real-time lookups against the OpenFEC API for candidates, committees, filings, and financial data. | |
| TexasSolver MCP Server bsim0927/texas-solver-mcp-server Enables interaction with the TexasSolver poker solver to run game theory optimal (GTO) poker calculations, load preflop ranges, and build game trees with structured parameters for analyzing poker hands and strategies. | |
| Apache Iceberg MCP Server bsisduck/iceberg-mcp-server Enables lookups across Apache Iceberg Javadocs, local source evidence, and Iceberg REST Catalog operations through MCP tools and prompts. | |
| eventos MCP Server bsj-m-takigawa/eventos-mcp MCP server for eventos event management platform, enabling AI assistants to manage events and tickets via API integration. Supports authentication, ticket CRUD operations, and listing with pagination. | |
| LQABR HubSpot MCP Server bsmahi/lqabr_mcp Enables interaction with HubSpot CRM through two tools (upsert_lead_profile and get_lead_profile) for managing lead profiles, using FastMCP with Secret Manager-based authentication and supporting both stdio and HTTP transports. |
35,851–35,900 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.