Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Transporter CC MCP Server carloscrcalderon/mcp_transporte_bogota Enables searching for TransMilenio and SITP bus routes in Bogotá with live GPS tracking, nearby stops, and estimated arrivals. | |
| formify-skills carlosdalv669/formify-skills Enables AI assistants to create fillable PDF forms, send contracts for electronic signature, verify signer identity via BankID or ID scan, and track document status after sending. | |
| Delegation MCP carlosduplar/multi-agent-mcp Intelligent routing layer that analyzes tasks and guides your AI agent to delegate work to specialized tools (Gemini, Aider, Copilot) using rule-based and capability-based routing. | |
| weather-history-mcp carlosecheverrycol/weather-history-mcp Exposes historical hourly weather data (temperature, humidity, wind chill, cloud cover) via the free Open-Meteo API, requiring no API key, and lets Claude answer questions about past weather conditions. | |
| MCP Bun Server carlosedp/mcp-bun Provides AI assistants with powerful tools to execute, optimize, and manage JavaScript/TypeScript projects using the Bun runtime. | |
| Redfish MCP Server carlosedp/redfish-mcp-server Enables AI agents and LLMs to control and monitor Redfish-enabled hardware through power operations, system inventory, event logs, health monitoring, sensor readings, and user account management. | |
| Windows MCP Server carlosedp/windows-mcp-server Exposes Windows system information and control tools including hardware stats, network details, and process monitoring. It enables AI applications to retrieve real-time data about CPU, memory, drives, and active system processes. | |
| figma-docs-mcp carlosfernandescrypt/figma-mcp Local MCP server that transforms Figma documentation and business rules into a semantically searchable index, exposed as a tool for Claude Code to query via natural language. | |
| WooCommerce MCP Server carlosflores779/woocommerce-mcp-server Enables interaction with WooCommerce stores through the WordPress REST API, providing tools for managing products, orders, customers, shipping, taxes, coupons, and store settings. | |
| openapi-to-mcp carlosfuentesdev/openapi-to-mcp Converts any OpenAPI 3.x spec into a live MCP server, making every endpoint a validated tool that AI agents can call without writing glue code. | |
| catastro_mcp_server carlosgalisteo/catastro_mcp_server A Python MCP server that queries Spanish Cadastre services for non-protected cadastral data and exports parcel geometry in GML, GeoJSON, and IFC formats. | |
| ClipToWSL MCP Server carlosgtrz/cliptowslmcp Enables AI coding agents like Claude to read Windows clipboard contents (text and images) from within WSL environments, providing seamless cross-platform clipboard access through the Model Context Protocol. | |
| Azure SQL MCP Server carlosgutierrezch/mcp_component Enables querying, exploring, and interacting with Azure SQL databases through MCP-compatible clients like Claude Desktop. | |
| binance-mcp-enhanced carlosirineucosta/binance-mcp-enhanced A powerful cryptocurrency analysis MCP server that adds advanced technical analysis capabilities to the original Binance MCP implementation. | |
| MCP Leyes Ecuador para Desarrolladores carlosjchiles/eculegaldev Enables MCP-compatible assistants to query Ecuadorian legislation and perform local static audits of software repositories for privacy, security, and compliance risks. | |
| n8n-mcp-connector carlosjperez/n8n-mcp-connector A Model Context Protocol server that enables AI assistants to interact with N8N workflows, executions, and automation capabilities. | |
| Sugar carlosm297/sugar Enables AI coding agents to store and retrieve persistent project and cross-project memory over MCP, so decisions, preferences, error patterns, and guidelines survive across sessions. Searches that memory semantically and locally, with an o | |
| MiAsistente carlosmaroruiz/mcp_sencillo A FastMCP server that provides mathematical tools (addition, multiplication, temperature conversion) for Claude to execute via natural language. | |
| diagram-ai-generator carlosmgv02/diagram-ai-generator Professional AI-powered architecture diagram generator with multi-cloud support and MCP server integration. Generates beautiful, accurate diagrams with provider-specific icons for AWS, Azure, GCP, Kubernetes, and more. | |
| falcon-mcp carlosmmatos/falcon-mcp Connects AI agents with the CrowdStrike Falcon platform to programmatically access detections, threat intelligence, host management, and other security capabilities for intelligent security analysis and automation. | |
| catalog-intelligence-agent carlosnunesjr1/catalog-intelligence-agent MCP server for autonomous catalog enrichment, turning raw ERP data into storefront-ready product listings with SEO titles, descriptions, images, schema.org, and validation. Provides tools for EAN lookup, image search, enrichment, batch proc | |
| hass-history-mcp carlosperezc/hass-history-mcp Enables querying historical Home Assistant data from InfluxDB, including energy consumption, entity history, device uptime, and custom InfluxQL queries. | |
| phyll carlosphyll/phyll Enables AI agents to conduct UX reviews of web applications, detecting and fixing AI-generated design and usability issues while preserving the original style. | |
| Google Classroom MCP carlosrm22/mcp-classroom-codex This MCP server provides comprehensive read and write access to Google Classroom, enabling management of courses, rosters, assignments, and grades. It supports full lifecycle operations for educational environments including student submiss | |
| TunnelGPT MCP Core carlosrodera/tunnelgpt-mcp-core It enables MCP integrations to safely access a chosen project folder with path-boundary enforcement, read and search files, and perform confirmed writes over a bounded local Unix-socket transport. | |
| YAMS (Yet Another MCP Server) carlosroman/yet-another-mcp-server A batteries-included MCP server providing common coding-agent tools like web search, page fetching, file system access, shell command execution, and Git integration, built in Python with a local-first, Unix-style philosophy. | |
| Luma MCP carloss430/luma-mcp Enables AI coding clients that lack native vision to analyze screenshots of code, errors, UIs, and documents by routing images through a single image_understand tool backed by multiple vision LLM providers such as GLM-4.6V, DeepSeek-OCR, Qw | |
| Tapetide Indian Stock Market MCP Server carlosschwarz6646/nse-bse-indian-stock-market-data-mcp Enables AI assistants to search, screen and analyze all 8,200+ NSE and BSE listed stocks through 55 tools covering live quotes, quarterly financials, technical indicators, a 326-ratio screener, FII/DII flows, option chains and IV, corporate | |
| Sinch MCP Server carlostardezasin/test-mcp-server Enables users to interact with Sinch APIs to send messages and emails, manage conversation apps, channels, templates, and webhooks, and perform phone number verification through natural-language MCP tools. | |
| tqs-mcp carlostavares-manager-mngt/tqs-mcp MCP server for TQS structural engineering CAD/analysis software, enabling Claude to read building models, extract drawing data, run structural processing, and script against the TQS API. | |
| mcp-typebot carlosventurar/mcp-typebot-startchat-fix Enables natural language management of Typebot bots: create, update, publish, list results, and start chat sessions via Claude Desktop. | |
| Jusratio Case File carlosvictorodrigues/jusratio-case-file Local-first MCP server that transforms civil case PDFs into queryable cases with structural provenance, evidence IDs, and page-level verification for drafting and factual review. | |
| elevenlabs-mcp carlosvidal/elevenlabs-mcp Provides tools for generating speech from text using the ElevenLabs API, including voice listing, text-to-speech conversion, and quota checking. | |
| heygen-mcp carlosvidal/heygen-mcp MCP server for the HeyGen avatar video API. Provides tools to generate talking-avatar videos, including video creation, status checking, downloading, and listing avatars/voices. | |
| taita-mcp-server carlosvidal/taita-mcp-server Enables managing blog posts on Taita Blog via natural language, including creating, listing, updating, and deleting posts, as well as managing categories and tags. | |
| Session Hub carlosvisbal/session-hub Enables AI assistants to list, search, and read complete AI coding sessions shared by teammates over an encrypted peer-to-peer network. | |
| diagnosis-service carlosyonng/diagnosis-service Enables business services to push error logs and generate diagnostic reports using MCP tools for log searching, code querying, and report generation. | |
| MCP Python Interpreter carlotakahashi55776/mcp-python-interpreter Enables LLMs to interact with Python environments, run code and scripts, manage packages, and read or write files within a configured working directory. | |
| BigQuery MCP Server carlpapadopoulos7896/mcp-server-bigquery Enables LLMs to inspect database schemas, list tables, describe table schemas, and execute SQL queries against configured datasets and projects. | |
| mem0-mcp-selfhosted carlphan09680/mem0-mcp-selfhosted Enables Claude Code to maintain persistent, searchable memory across sessions using self-hosted Qdrant vector storage, optional Neo4j knowledge graphs, and Ollama embeddings, with Claude or local Ollama as the main LLM. Exposes tools for ad | |
| Vectorize MCP Server carlr84977/vectorize-mcp-server Enables vector search and document retrieval, text extraction and chunking from files into Markdown, and private deep research through configured pipelines. | |
| MCP REST API Tester carlrivera086/mcp-rest-api Enables testing and interacting with REST API endpoints through MCP clients like Claude and Cline, supporting multiple HTTP methods, authentication, custom headers, and response size limits. | |
| mcp-bdm carlsamma/mcp-bdm Enables AI assistants to search, read, and analyze Italian civil court decisions from the Ministry of Justice's Banca Dati di Merito, using CIE authentication. | |
| Financial Modeling Prep MCP Server carlsenturk/financial-modeling-prep-mcp-server Enables AI assistants to access and analyze financial data, stock information, company fundamentals, and market insights through 250+ tools spanning stocks, ETFs, crypto, forex, commodities, economics, and more. | |
| mcp-ip2location carlslee95/mcp-ip2location Enables IP geolocation, proxy detection, bulk IP lookup, and domain WHOIS searches through natural language in MCP-compatible clients. | |
| zotero-mcp carlson683/zotero-mcp Enables AI assistants and MCP clients to search a Zotero library, retrieve item metadata, and access full-text/PDF contents through the Zotero API. | |
| Remote MCP Server with Azure Functions (Python) carlstavrou653/remote-mcp-functions-python Enables developers to build, run locally, and deploy to the cloud a custom MCP server on Azure Functions that exposes tools, resources, prompts, and an interactive weather app over HTTP. Includes built-in authentication via Microsoft Entra, | |
| dtu-learn carlsvejstrup/dtu-learn-mcp Enables AI assistants to browse your own university courses by downloading files, slides, announcements, deadlines, grades and lecture transcripts to your machine, then answering questions and searching across them through MCP tools. It log | |
| Databases MCP Server (Access and SQLite 3) carltk/mcp-server-access-mdb-with-access97 Enables AI to interact with Microsoft Access (.mdb, .accdb) and SQLite 3 databases, including read-only support for Access 97 databases. Supports executing SQL queries, importing/export data from CSV and Excel files, and storing notes about | |
| Mac Use carlvincetan/mac-use Provides an MCP server for macOS that allows agents to control a managed browser with accessibility-first actions, visible cursor, and screenshot return. |
36,901–36,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.