Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| personal-mcp buyoung/mcp MCP server that bridges coding agents (Claude Code, Codex, Gemini CLI) via ACP for pair programming, enabling agents to consult each other as tools. | |
| BuyWhere buywhere/buywhere Enables AI agents to search, compare, and track prices across 40+ retailers in Southeast Asia and the US using MCP tools. | |
| cortex buzburg/roms Enables AI coding agents and local LLMs to store and recall project memory, compact verbose logs, look up code symbols, create and rewind workspace snapshots, detect risky commands and loops, pack context optimally, and draft tokens through | |
| SwarmMojo MCP Server buzburg/swarmojo Enables compatible agents to call registered local tools and read resources through one stdio server, including harness preparation, knowledge search and document management, memory retention/recall, correction proposals, advisory decisions | |
| dns-intel buzdolapci/dns-intel Enables domain intelligence lookups including RDAP registration data, DNS records, and Certificate Transparency searches. | |
| git-repo-brief buzdolapci/git-repo-brief MCP server that provides structured briefs for public GitHub repositories, including metadata, key files, release notes, and activity snapshots. | |
| json-validate buzdolapci/json-validate MCP server for validating JSON against JSON Schema and repairing malformed/invalid JSON. | |
| Package Intel MCP Server buzdolapci/package-intel A Model Context Protocol server for querying package registries (npm, PyPI, crates.io) to retrieve metadata, release timelines, and maintenance signals. | |
| BeforeShip MCP Server buzz39/beforeship Provides pre-deploy AI-assisted security and readiness checks for AI-built apps, including scanning for secrets, auth gaps, and payment safety. | |
| imap-mcp buzzer/imap-mcp Enables AI assistants to read IMAP mailboxes and create drafts without sending them. Supports multiple accounts and folders, read-only message fetching, and search, with sending deliberately disabled so drafts are reviewed and sent manually | |
| BuzzSearch MCP Server buzzsearch/buzzsearch-mcp-server Enables AI agents to search and read social comments across Reddit, TikTok, YouTube, and Facebook, returning cited verbatim quotes, pain points, objections, and customer vocabulary. Agents can then page through quotes, sources, and raw comm | |
| tradingview-mcp bv2026/tradingview-mcp Enables AI assistants to interact with TradingView Desktop charts via Chrome DevTools Protocol, supporting chart analysis, Pine Script development, drawing, alerts, and replay automation. | |
| Betaflight MCP bvandevliet/betaflight-mcp Enables AI assistants to control Betaflight flight controllers over serial via MSP and CLI, providing real-time sensor reads, full CLI access, and auto-generated variable tools for configuration and tuning. | |
| Console MCP Server bvelasquez/console_mcp Captures and stores console output from any process in SQLite with full-text search, enabling AI assistants to search logs, monitor errors, and analyze multi-process activity through natural language queries. | |
| Mini CRM MCP bvenkatesulu909/mcp_server Enables querying and interacting with a SQLite CRM database of sales leads using natural language, offering tools for pipeline summaries, lead search, and weighted forecasting. | |
| timescribe-mcp bverhoeve/timescribe-mcp Enables Claude to query your local TimeScribe time tracking database read-only, listing projects and returning work, break and scheduled hours per project or day, plus individual entries and the live running timer, without exporting CSVs. A | |
| napier bvk7787/napier Enables AI assistants to find page-cited answers in gear manuals and community docs, and to inspect, check, and sketch what-if Eurorack rack layouts with power and placement validation. | |
| GitHub Models Helper bvm-arjun108/mcp-typescript-github-models-helper MCP server that lists available GitHub Models and compares responses from multiple models for the same prompt. | |
| MCP-Discord bvolkov19/mcp-discord Enables AI assistants to interact with Discord through a bot, supporting server and member inspection, channel and role management, message and reaction handling, forum operations, and webhook administration. | |
| MCP Server OAuth Toy bvolpato/mcp-server-oauth-toy A simple MCP server with OAuth 2.0 authentication for testing OAuth support in mcp-cli. | |
| LTspice MCP bw493/ltspice-mcp-automation This MCP server enables agents to control LTspice on macOS for running simulations, generating schematics, extracting data, and automating verification workflows. | |
| cc-session-search bwads001/cc-session-search An MCP server that provides tools for searching and analyzing Claude Code conversation history. | |
| lcao-mcp-server bwalks/lcao-mcp-server Enables searching Lackawanna County, PA real property parcel records by owner, address, or municipality, and retrieving full parcel details from the county Assessor's public website. | |
| Zammad MCP Server bwan910/zammad-mcp Enables AI assistants to manage Zammad tickets, users, organizations, and attachments through the Zammad API. | |
| WhatsApp Channel bward749/whatsapp-claude-plugin Enables driving a Claude Code session from a personal or business chat account, with bidirectional messaging, full media support, local voice transcription, per-group personalities, emoji-reaction tool approval, and pairing-code access cont | |
| knowledge-server bwarzecha/knowledge-server Enables LLMs to search and retrieve information from large technical documentation (OpenAPI specs, markdown) via intelligent chunking and semantic search. | |
| lifeos-mcp bwats/lifeos-mcp Provides MCP-compatible AI agents with read access to a LifeOS knowledge base, exposing identity, preferences, projects, wiki, skills, and rules via tools and resources. | |
| keepa-adapter bwb03/keepa-adapter MCP server for Amazon product monitoring via the Keepa API, providing 18 tools for prices, BSR trends, buy box changes, variation families, sales estimates, coupon/deal tracking, seller stats, category lookup, and promotion impact analysis. | |
| Google Search Console MCP Server bwengr/bw-gsc-mcp Enables querying Google Search Console data including rankings, clicks, and impressions for websites. Provides tools for analyzing search performance, top queries, page metrics, and ranking changes. | |
| Weixin MCP bwkyd/wexin-read-mcp Enables reading and extracting content from WeChat public account articles using browser automation, allowing AI models to analyze and summarize WeChat articles through natural language requests. | |
| dsh-codex-bridge bwndlct/dsh-codex-bridge Enables Codex to hand off coding tasks to a locally running DeepSeek Harness Desktop Host over MCP, reusing the Host's configured model and runtime and returning a session ID for status checks, incremental event streaming, waiting, and canc | |
| Apple Music MCP bwu109-netizen/applemusic-mcp Lets Claude or any MCP client drive the macOS Music app locally to control playback, search the library, build and edit playlists, set favorites, and pull listening statistics like top tracks, artists, albums, and genres. | |
| MCP File Organizer bwv-personal-act/thaipq-mcp Enables AI-driven file organization by listing and moving files into structured folders by extension and modification date, based on natural language requests, without reading file contents. | |
| minerva-mcp bxnicelemon/minerva-mcp Enables read-only access to University of Leeds Minerva (Blackboard Learn Ultra) and Gradescope through a browser-authenticated session. Supports listing courses, announcements, contents, grades, deadlines and calendar events, downloading a | |
| micrOSMCP bxnxm/microsmcp Standalone TypeScript MCP server for micrOS devices. Enables discovering devices, inspecting device cache, running micrOS commands, and discovering each device's available module commands. | |
| mcp-edgar-ux bxxd/mcp-edgar-ux Enables efficient SEC EDGAR filing access by saving filings to disk, returning file paths to avoid context overflow, and providing Bloomberg Terminal-style formatted output for selective reading and search. | |
| mcp-fetch-ux bxxd/mcp-fetch-ux Fetches web pages with JavaScript rendering, pierces Shadow DOM, and enables interactive actions like clicking and form filling using a real Chrome browser. | |
| mcp-yfinance-ux bxxd/mcp-yfinance-ux Provides Bloomberg Terminal-style market data for AI agents, with formatted tables and navigable hierarchy (markets → sector → ticker). | |
| OlaOla Supplement MCP bxxf/olaola-supplement-mcp Connects a model to OlaOla supplement store data for personalized supplement recommendations, order history, and cart planning. | |
| Todo MCP Server bxxf/todo-mcp-assignment A multi-node todo application server using MCP protocol, Redis for storage, and OpenRouter for AI-powered prioritization analysis. | |
| BrainHub bxy3045134656/brainhub A unified FastAPI web panel and single MCP gateway that aggregates knowledge base, cloud drive, kanban, memory, and ops agent capabilities for the Brain product family. | |
| MCP Recommender bxzymy/mcp-recommend Provides intelligent recommendations for MCP servers based on development needs using natural language queries. Searches through 874+ curated MCP servers across 36+ categories with advanced matching algorithms. | |
| mcp-ploomes by-bc/mcp-ploomes Read-only MCP server for the Ploomes CRM API, providing 49 tools to query contacts, deals, products, and other business data using natural language. | |
| word-doc-mcp by-oneself/word-doc-mcp MCP server for creating and reading Word (.docx) documents with rich formatting support. | |
| bitbrowser-agent-kit by10457/bitbrowser-agent-kit Exposes BitBrowser automation to MCP hosts over stdio, letting agents check online status and inspect windows, tabs, and displays, and carry out authorized window creation, launch, close, delete, rename, URL browsing, tab actions, fingerpri | |
| board-clerk by42ppcrps-dev/board-clerk Enables an Alexa+ style assistant to run a board meeting minutes loop: ingest a transcript, list meetings, motions and decisions, confirm a mover or seconder from a roster, prepare topic packets with approved totals, and approve or hold min | |
| foster-first-night by42ppcrps-dev/foster-first-night Enables MCP clients to generate a safe, age-appropriate first-night plan for a newly placed foster child, including screened shows, films, music, nearby restaurant options, and per-item safety checks based on age, triggers, and first-night | |
| knoten by571/knoten Enables coding agents to query and commit to a research graph that remembers failed experiments, ensuring reproducibility and preventing redundant work. | |
| Meta Ads MCP Server byadsco/meta-ads-mcp Self-hosted MCP server providing secure, multi-tenant access to Meta Marketing API for managing Facebook and Instagram Ads via AI agents, with OAuth, encrypted tokens, and compliance features. | |
| scholar-memory bybasiliosp/rlm-agent Enables scientific literature research through multi-agent search, analysis, and semantic memory, exposing 9 MCP tools for querying, storing, and retrieving research findings. |
36,201–36,250 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.