Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Grandpa MCP Server bytewhisker/grandpa Exposes tools that scan a repository for dependency bloat and fragile patterns, return a scored codebase health report, validate proposed code and bash commands before execution, and suggest drop-in native standard library replacements for | |
| mcp-byul byul-ai/mcp-server The Byul Finance MCP provides real-time financial data via the Byul API, including breaking economic news, the Fear & Greed Index, and an economic calendar for global events. | |
| Notion MCP Server for Antigravity byulsi/mcp_notion-antigravity Enables AI models to search and read Notion pages by keyword or ID, allowing users to retrieve workspace content like meeting notes through natural language. It supports integration with Antigravity and Gemini to provide seamless access to | |
| Elasticsearch MCP Server AI byviz/mcp-server-elasticsearch-ai Transforms Elasticsearch into an AI-powered observability engine for analyzing logs, APM traces, and system metrics through natural language. | |
| deepseek-bridge byyshka/deepseek-bridge Enables Claude Code to delegate bulk, read-heavy file analysis to a local DeepSeek Harness agent, keeping file contents out of the conversation context. | |
| kimi-bridge byyshka/kimi-bridge Enables Claude Code to delegate questions and BSL code reviews to a locally installed Kimi Code CLI, running it as a second agent with its own MCP servers and optional neutral profile. | |
| tk_mcp bz-bntyh-w/taoke_mcp_new 多多进定全平台 MCP 服务是一个基于 Model Context Protocol (MCP) 的服务，支持拼多多大电商平台的链接转换和商品推广功能，商品搜索等等一系列工具 | |
| Fictional Cats MCP bzannah/catsmcp Enables AI models to retrieve random or specified numbers of fictional cats with names, descriptions, and images. | |
| wechat-to-md bzd6661/wechat-article-for-ai Converts WeChat Official Account articles to clean Markdown with locally downloaded images, supporting single and batch operations via MCP tools. | |
| till bzdmin/till Lets agents discover, verify, and inspect x402/B402 payment endpoints on BNB Chain, with read-only tools to list skills, check live counter behavior, and review the settlement tape. | |
| akshare-jc-mcp bzetu/akshare-jc-mcp Unified MCP server for Chinese stock market data that batches multiple data requests (news, insider trading, financials, historical K-line, etc.) into a single call. | |
| hae-mcp bzhzion/hae-mcp MCP server for hae — a GTD-based task management app. Gives Claude full access to your hae instance: projects, cards, columns, checklists, comments, labels, organisations, notifications, users, and AI features. | |
| claude-mcp-server-gateway bzsasson/claude-mcp-server-gateway A lightweight Claude MCP gateway that dynamically loads tools only when needed, cutting MCP token clutter by up to 95% and keeping your context lean, fast, and focused. | |
| mcp-page-host bzz-public/mcp-page-host Hosts self-contained HTML pages deployed through MCP, giving each page a stable URL for sharing in wikis, PDFs, or presentations. | |
| GPT-MCP Bridge bzzimmy/gpt-mcp Enables Claude and other MCP-compatible tools to communicate with OpenAI's GPT models (GPT-5, GPT-5-mini, o3) with conversation history and session management. Features advanced controls like reasoning effort settings, token tracking, and p | |
| owmcp bzzimmy/owmcp Enables AI agents to drive the Opiumware Roblox executor on macOS by running Luau scripts and retrieving return values, prints, and errors. It also exposes tools for reading console logs, searching decompiled client scripts, capturing remot | |
| MegaMem c-bjorn/megamem Syncs Obsidian notes into a temporal knowledge graph and exposes 23 MCP tools for AI assistants to read, search, and write to your vault, enabling persistent memory across conversations. | |
| BI Chart MCP Server c-cf/bi-chart-mcp-server Enables business intelligence chart creation and visualization using Vega-Lite, with data loading and processing capabilities. | |
| IMF Data MCP Server c-cf/imf-data-mcp The server integrates with the free IMF data API and provides various features to facilitate data retrieval and analysis. The server is built using the FastMCP framework and offers the following functionalities: | |
| codequality-mcp c-daly/codequality_mcp Enables evaluating Python projects against a deterministic quality bar using analyzer findings, per-dimension scores, and a review verdict, exposed through MCP tools, resources, and prompts. Users can run evaluations, inspect rules, and lis | |
| lesson-loop c-lake864/lesson-loop Lets AI agents retrieve, search, and inspect generated lesson packs and rubrics, and enqueue new concepts for the lesson production workflow. | |
| opennms-mcp c-perronnet/opennms-mcp Connects Claude to OpenNMS, allowing plain language interaction with alarms, nodes, events, asset records, categories, and service collection. | |
| s2docs MCP Server c-pompa/s2docs Enables coding agents to access extracted Source 2 documentation data and resources for writing cs_script, Hammer logic, configs, and mods with verified names. | |
| Internship Scout & Quality of Life MCP Server c-r-lewis/n8n-international-internship-scout Integrates Eurostat quality-of-life metrics and real-time job searching to help users find international internships in high-ranking European cities. It enables ranking cities based on personalized criteria like safety or transport and retr | |
| Jimeng MCP Server c-rick/jimeng-mcp Integrates Jimeng AI image and video generation services through MCP protocol, enabling users to generate high-quality images and videos from text prompts with support for image mixing, reference images, and multiple AI models. | |
| Steward c-rogs/steward Enables AI coding agents to read an allowlisted monday.com board and propose changes, while writes require a frozen column contract and human approval before being committed. The monday API token never leaves the server. | |
| WordPress MCP Server c-sakel/wp-mcp-server Enables AI assistants to manage WordPress content, design, SEO, WooCommerce, and more through natural language commands. | |
| omniroute-bridge-mcp c-viper-work/omniroute-bridge-mcp Cross-chain instant bridge, Polymarket & Hyperliquid one-click onboarding (USDC.e + POL on Polygon, HYPE on HyperEVM, and USDC on Arbitrum), and multi-wallet gas refuel MCP server powered by Relay Protocol across Ethereum, Base, Arbitrum, O | |
| GitHub Issues MCP Server c-you-know/github-issues-mcp-server Enables AI assistants to discover, filter, and triage GitHub issues across repositories, with tools for fetching issue details, listing issues by state/labels, and finding related pull requests. | |
| miyagi c00p75/miyagi Enables an interactive, gamified coding tutor that executes commands, provides lessons with explanations and quizzes, and tracks progress through levels and streaks, optionally with voice narration. | |
| knowledge-mcp c0cl3c/mallen-knowledge-mcp Serves markdown knowledge from a git repository over MCP, providing tools to list, search, and retrieve documents. | |
| obsidian-mcp c0d1g0v3c/obsidian-mcp MCP server that provides read and write access to an Obsidian vault by interacting directly with markdown files on disk. Supports searching, listing, reading, creating, editing, and appending notes without requiring any Obsidian plugins. | |
| opentoonz-mcp c0d33ngr/opentoonz-mcp Enables AI agents to drive OpenToonz headlessly through MCP tools for creating workspaces and scenes, drawing or importing frames as levels, placing cells on the xsheet, and rendering frames, PNG sequences, or MP4 videos. Also exposes a gen | |
| cityflo-otp c0derator/cityflo-otp-mcp Provides auditable Mumbai route lateness metrics, including route ranking, performance summaries, and trip-level evidence, derived from a reloadable CSV dataset. | |
| Canteen MCP c0dr/canteen-mcp A Model Context Protocol server that provides structured access to canteen lunch menus for specific dates through a simple API integration. | |
| MSSQL MCP Server c0h1b4/mssql-mcp-server Enables execution of SQL queries and management of Microsoft SQL Server database connections through the Model Context Protocol. | |
| binance-mcp-chainvector c0inflips/binance-mcp-chainvector One MCP server that pairs Binance execution with ChainVector market intelligence. Connect it to any MCP client and the agent can read live signals, regime classification, probabilities and risk gauges from ChainVector, pick a strategy templ | |
| threads-factory MCP server c0mrade530/threads-content-factory Enables AI assistants to interview users about their niche, generate original Threads posts from reference examples, connect and verify accounts, and schedule, pause, or inspect publishing queues through MCP tools or GPT Actions. | |
| agent-workspace-mcp c0sc0s/agent-workspace-mcp A TypeScript-aware MCP server that provides coding agents with repository discovery, code intelligence, and web project context for local codebases. It enables deep symbol navigation, diagnostic reporting, and structural analysis of monorep | |
| Hardened Google Workspace MCP c0webster/hardened-google-workspace-mcp A security-hardened integration that enables Claude to interact with Google Workspace tools like Gmail, Drive, and Docs while preventing data exfiltration by disabling features like email sending and external file sharing. It allows users t | |
| @uselink/mcp c0x12c/uselink-mcp MCP server to publish HTML/Markdown docs, upload assets, and reply to stakeholder comments on uselink.app directly from AI tools like Claude and Cursor. | |
| Portboard MCP Server c10dev/portboard Enables AI agents to coordinate ports and dev servers on a shared Linux machine, reserve ports, start and stop worktree servers, inspect listening services, Tailscale devices and dev worktrees, and clean up safely without collisions. | |
| telegram-notifier c1hucktay4lors/headsup-mcp Enables a local LM Studio model to send push notifications to your phone via Telegram and to ask questions or wait for your replies, allowing remote, two-way steering of tasks without touching the computer. | |
| mnemonic-mcp c1hucktay4lors/mnemonic-mcp Persistent memory server for MCP clients that lets AI assistants remember facts about users across sessions via a single markdown file, with tools to read, save, search, update, delete, and organize memory. | |
| icost-mcp-server c1j1u/icost-mcp Enables an AI agent to read and write iCost bookkeeping data on macOS — 38 tools covering records, accounts, categories, tags, books, budgets and statistics — by reading the app's Realm database, creating records through the app's official | |
| @sylvia/reddit-mcp c1nn3r/mcp-sylvia MCP server for Reddit data — subreddits, users, search, live comments. No OAuth required. | |
| MCP Examples Project c1r5/mcp-examples A demonstration project that implements a Model Context Protocol (MCP) server with example tools for calendar, task management, and weather functionality in a Docker container. | |
| AppSignal MCP Server c20020207/mcp-appsignal A Model Context Protocol server that connects to AppSignal, allowing users to fetch, list, and analyze incident information from their AppSignal monitoring. | |
| Company Docs MCP Server c200bzh/mcp_server_poc Provides read-only access to company GitHub repositories, enabling code search, file retrieval, documentation search, and repo browsing via natural language. | |
| MCP Ping Server c3budiman/mcp-ping Provides a ping tool to check connectivity and measure latency to any hostname or IP address across platforms. |
36,301–36,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.