Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| capskip-mcp capskip/capskip-mcp An MCP server that lets AI agents solve reCAPTCHA, Cloudflare Turnstile, GeeTest, and image captchas via the local CapSkip solver. It enables autonomous captcha handling without per-solve fees or human intervention. | |
| WealthSchema capsterasupport/wealthschema-mcp Cited 2026 and 2027 U.S. financial-planning figures (IRS, SSA, CMS), synthetic household samples, and an AI financial-advice benchmark. | |
| Worthune Models capsterasupport/worthune-sdk 55 Concordance-tested financial models with published specs;
responses cite assumptions and sources. | |
| @capsulate/mcp capsulatedev/capsulate Enables MCP clients such as Claude Desktop and Cursor to launch and control Capsulate virtual machines, providing exec, file, screenshot, accessibility-tree, checkpoint, and replay capabilities. | |
| Capsule Bash Server capsulerun/bash Sandboxed Bash for Agents. Full state capture on every command. | |
| Capsule server capsulerun/runtime Capsule MCP server gives your AI agent the ability to safely run untrusted Python and JavaScript code in a secure WebAssembly sandbox. | |
| IDA-MCP captain-ai-hub/ida-mcp Enables interaction with multiple IDA Pro instances through MCP, allowing users to list functions, search instances, and manage reverse engineering analysis across different binary files. Supports multi-instance coordination with automatic | |
| Anki MCP Server captain-blue210/anki-mcp-server Connects Claude Desktop to Anki, allowing retrieval and analysis of leech-tagged cards and adding review tags through natural language requests. | |
| polyg-mcp captain-jay29/polyg-mcp A multi-graph memory MCP server that traces cause-effect chains across semantic, entity, temporal, and causal graphs to answer 'why' questions with confidence-scored paths, enabling agents to reason beyond simple similarity retrieval. | |
| Search Intent MCP captainchaozi/search-intent-mcp An MCP-based service that analyzes user search keywords to determine their intent, providing classifications, reasoning, references, and search suggestions to support SEO analysis. | |
| MCP Server Boilerplate captaincrouton89/browser-tools-mcp A starter template for building MCP servers. It provides a clean foundation for creating custom tools, resources, and prompts for AI assistants. | |
| Claude Parallel Tasks MCP Server captaincrouton89/claude-code-mcp Enables running multiple Claude prompts simultaneously in parallel with support for file contexts and output redirection to individual files. | |
| MCP Server Boilerplate captaincrouton89/google-mcp A starter template for building Model Context Protocol servers that can integrate AI assistants with custom tools, resource providers, and prompt templates. | |
| MCP Server Boilerplate captaincrouton89/json-mcp A starter template for building custom MCP servers with example implementations of tools, resources, and prompts. Includes TypeScript support and installation scripts for Claude Desktop, Cursor, and other MCP-compatible clients. | |
| MCP Server Boilerplate captaincrouton89/mcp-boilerplate A starter template for building custom MCP servers with example tools, TypeScript support, and multi-client installation scripts for Claude Desktop, Cursor, and other MCP-compatible AI assistants. | |
| MCP Maker captaincrouton89/mcp-maker A specialized server that helps users create new Model Context Protocol (MCP) servers by providing tools and templates for scaffolding projects with various capabilities. | |
| MCP Server Boilerplate captaincrouton89/mcp-reasoning A starter template for building Model Context Protocol servers that integrate with AI assistants like Claude and Cursor, providing custom tools, resource providers, and prompt templates. | |
| MCP Server Boilerplate captaincrouton89/mcp-reddit A starter template for building Model Context Protocol servers that integrate with AI assistants like Claude and Cursor, providing custom tools, resource providers, and prompt templates. | |
| MCP Server Boilerplate captaincrouton89/mongo-mcp A starter template for building custom MCP servers that can integrate with Claude Desktop, Cursor, and other AI assistants. Provides example tools, TypeScript support, and automated publishing workflows to help developers create their own A | |
| Task Planner MCP Server captaincrouton89/planner Enables AI assistants to create, manage, and break down tasks into subtasks with priorities, and track progress through a hierarchical task list. | |
| Music and Madness Sync Bridge captaincurso/music-madness-sync-bridge Enables synchronization and management of FoundryVTT journal entries within a Notion Story Bible, including media export and conflict resolution tools. It provides a Model Context Protocol interface for LLMs to preview, apply, and monitor d | |
| Captain Data MCP API captaindatatech/captaindata-mcp A middleware API that connects AI assistants like ChatGPT to Captain Data tools for extracting information from LinkedIn company and profile pages. | |
| smart-context-packer captainfatih61/smart-context-packer Enables LLMs to progressively explore a project's dependency graph and retrieve only relevant code through a three-layer MCP workflow, with AST skeletons, Prisma schema extraction, token budgeting, and secret redaction. | |
| cli-executor-mcp captainji/cli_executor Enables LLMs to execute CLI commands and scripts for system deployment and management tasks, with support for directory listing, system info, and deployment templates. | |
| obsidian-brain captainkeat/obsidian-brain Enables AI clients to search and retrieve notes from a local Markdown vault using hybrid keyword/semantic search, and to save typed memories with append and guarded replacement operations. | |
| issue-board captainkie/issue-board-mcp Connects Claude Code and Claude Desktop to a user's self-hosted bug-tracking service via a personal token, enabling bug reporting, queue and image review, status changes, PR/build link attachment, and QC verification. Permissions and workfl | |
| lablog-mcp captainsean0411-hub/lablog-mcp Enables AI clients to scan local Markdown experiment notes and synthesize a chronological timeline with changes, outcomes, and decisions for easier comparison and reproducibility. It provides read-only access to parsed experiment metadata a | |
| Documentary MCP Server captainsp/documentary-mcp-server Enables creating, listing, and searching project-based documentation with Markdown content, table of contents, full-text search, and multi-client support via Streamable HTTP transport. | |
| uikit-registry captainy7/uikit-registry MCP server enabling AI agents to search, retrieve details, and compare UI components from 13 popular UI libraries. | |
| Remote MCP Server Authless captainz1016-ux/remote-mcp-server-authless Deploys a remote MCP server on Cloudflare Workers without authentication, allowing custom tools to be used from clients like AI Playground or Claude Desktop. | |
| CaptchaLa MCP Server captcha-la/captchala-mcp Enables searching CaptchaLa documentation and validating or issuing CaptchaLa tokens directly from MCP clients like Claude Desktop and Cursor. | |
| ultimate-debate-mcp captdevc/ultimate-debate-mcp Enables adversarial collaboration between Claude and GPT for automated code critique, verification, and multi-round debate to improve output quality. | |
| Laravel Cloud MCP Server captenmasin/laravel-cloud-mcp-server MCP server for Laravel Cloud to manage projects, environments, deployments, and other resources. | |
| Ploi.io MCP Server captenmasin/ploi-mcp-server Enables managing Ploi.io servers, sites, databases, and Docker containers through the Ploi API, supporting both local stdio and remote Cloudflare Worker deployments with multi-tenant authentication. | |
| godoc-mcp captjt/godoc-mcp Provides real-time access to Go package documentation, function signatures, and type definitions directly from pkg.go.dev. It enables LLMs to search for packages, retrieve specific versions, and access code examples from the official Go mod | |
| nuxt-mcp / vite-plugin-mcp captn-hook/mcp MCP server that helps AI models understand Vite/Nuxt applications better, available as both a Nuxt module and Vite plugin. | |
| yeepforge capture0x/yeepforge Enables LLM hosts like Claude Code, Cursor, or Claude Desktop to drive YeepForge's 28 web penetration testing tools (recon, crawling, SQLi/XSS testing, nuclei scans) and set engagement targets via Model Context Protocol, using the host's ow | |
| imo-rules-mcp captw/imo-rules-mcp Provides offline semantic search and reading of IMO maritime rules (SOLAS, MARPOL, STCW, etc.) to AI clients via MCP. | |
| bindiff-mcp captwake/bindiff-mcp Enables reverse-engineering agents to export binaries to BinExport format and compare two builds, returning matched, changed, and build-unique functions with addresses, names, similarity, and confidence scores. Diff results are written as J | |
| Baidu Netdisk Knowledge MCP capwitf/baidu-netdisk-knowledge-mcp Connects Baidu Netdisk to MCP-compatible AI clients, enabling AI to safely read selected files and generate summaries, key points, to-dos, tags, and organization suggestions. | |
| gemini-researcher capybearista/gemini-researcher-mcp A research proxy that lets Claude, Cursor, and other MCP clients utilize Gemini's generous free tier for deep codebase analysis without burning your main model's quota! | |
| Cerebrito MCP Server car202ui/cerebrito-mcp-server MCP server that exposes the knowledge base of the Cumplimiento Digital project, allowing AI agents to query KB entries, project status, endpoints, and glossary via MCP tools. | |
| Garmin Health Gateway cara-labs/garmin-health-mcp-gateway Enables users to query Garmin health, activity, sleep, HRV, and training data through read-only MCP tools from ChatGPT or Codex. | |
| Garmin MCP Worker caracaos/garmin-mcp A read-only remote MCP server that connects Claude or other OAuth-capable clients to your own Garmin Connect account through Garmin's official Personal API, letting you ask natural-language questions about recovery, HRV, sleep, Body Battery | |
| Remote MCP Server Authless caradocnava/remote-mcp-server-authless A serverless solution for deploying a Model Context Protocol server on Cloudflare Workers without authentication requirements, allowing tools to be used with Claude Desktop and Cloudflare AI Playground. | |
| MCP Canvas Dev carainc/canvas-medical-mcp A Model Context Protocol (MCP) server for Canvas Medical API/SDK development assistance, providing streamlined access to Canvas Medical documentation and AI-powered development tools. | |
| Slack-MCP caramuto-redhat/slack-mcp-logger A Message Control Protocol server that integrates with Slack to provide channel management, messaging capabilities, and log monitoring across multiple servers, enabling teams to share logs and receive automated alerts in Slack channels. | |
| PriceTracker GLP-1 caraulani/pricetracker-glp1-mcp Enables AI assistants to look up dated, source-linked US GLP-1 medication prices — cheapest month-to-month programs, per-provider price history and changes, manufacturer cash-pay ladders, and a monthly price index — filterable by drug, prov | |
| cocos-mcp-server caravanglory/cocos-mcp-server Enables AI assistants to directly control the Cocos Creator 3.8.x editor via MCP protocol, providing over 130 tools for scene, node, component, asset, and project operations. | |
| MiniZinc MCP Server carban/minizinc-mcp Enables LLM agents to parse, validate, and solve MiniZinc constraint models directly from chat sessions, returning solutions and solver statistics. |
36,751–36,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.