Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP4Acumatica cchesebro-prog/mcp4acumatica A remote MCP server that connects Claude to Acumatica ERP 2025 R2 with per-user OAuth, role-based access, and sensitive field redaction. | |
| MCP4Acumatica cchesebro-prog/mcp4acumatica1 Enables Claude to securely interact with Acumatica ERP 2025 R2 via per-user OAuth, role-based access, and sensitive field redaction, providing 48 tools for data lookup, utility, and schema discovery. | |
| BridgeHub cchitse/bridgehub Enables AI applications to search SEC company profiles by ticker, name, or CIK through a single MCP endpoint, returning structured identity, industry, exchange, filing-count data, official source links, and retrieval timestamps. | |
| Rohlik MCP Server ccho10088/rohlik-mcp Enables AI assistants to shop groceries online across the Rohlik Group platforms by searching products, managing carts, finding weekly deals, and checking delivery slots, account, and order history. It also uses past order history to sugges | |
| ZVA Demo MCP Server ccieno/mcp A Cloudflare Worker that provides MCP tools for querying order details, customer accounts, and product inventory from a D1 database, and also exposes a REST API for integration with Zoom Virtual Agent flows. | |
| imagegen ccimen/imagegen Local-first MCP image generation server supporting OpenAI and Google Gemini models for generating and editing images, with an embedded interactive studio. | |
| Game Hub ccjacobs94/vertex-gameplay-db Enables AI assistants to query and manage a unified multi-platform game library, including playtime, achievements, ratings, backlog status, recommendations, duplicate reconciliation, and genre enrichment through MCP tools. | |
| decision-lite cckyros/decision-lite An MCP server that answers typed noul/choice/score questions about a given state with probability distributions and confidence, for routing, escalation, and gating decisions. It runs on pluggable backends (local Needle 3 or Laya models, or | |
| agent-browser-ga MCP ccl333/agent-browser-ga Enables AI agents to interact with a user's real Chrome browser tabs, executing JavaScript, reading cookies, and making fetch requests within authenticated sessions. | |
| music21-mcp cclawton/music21-mcp Exposes 16 music21 MIDI analysis and editing tools to AI agents, enabling them to read, edit, generate, and analyze MIDI files through natural language. | |
| PodcastIndex MCP Server cclawton/podcastindex-mcp-server Enables users to search for podcasts, discover trending shows, find episodes, and explore Value4Value monetization using the PodcastIndex API. | |
| reascript-mcp cclawton/reascript-mcp Enables AI agents to control Reaper DAW by parsing .rpp project files and generating Lua ReaScripts for project-level tasks. | |
| TaskMCP cclucky-uu/cctaskmcp A personal task management MCP server that allows LLM clients to create, read, update, and delete tasks with projects, labels, and comments, using a local SQLite database that can also be accessed via a web UI. | |
| Obsidianki MCP Server ccmdi/obsidianki-mcp Generates flashcards from Obsidian notes using obsidianki, with support for note patterns, card count, and deck selection. | |
| SEO AI Assistant ccnn2509/app-seo-ai Provides SEO automation with tools for keyword research, SERP analysis, and competitor analysis through Google Ads API integration, enabling AI assistants to access these capabilities via MCP. | |
| mcp-makefile-server ccollicutt/mcp-makefile-server Exposes Makefile targets as MCP tools, allowing AI agents to execute project automation tasks like build, test, and deploy through natural language. | |
| kakao-mcp-ccomajeon ccomajeon/kakao-mcp-demon-ccomajeon Connects a single KakaoTalk account to a server daemon so AI clients, terminal CLIs, and local web UIs can read permitted conversations and send messages as MCP tools. Per-room read/send permissions, human approval prompts, operator ceiling | |
| Nicotine+ Soulseek MCP Server ccombe/nicotine-plus-mcp Enables AI assistants to search and download music from the Soulseek peer-to-peer network via Nicotine+, with smart ranking of results by audio quality and peer speed, bulk automation, and real-time transfer monitoring. | |
| studieplus-mcp ccoodduu/studieplus-mcp MCP server that gives Claude Desktop access to school data from Studie+ (Danish school platform), enabling queries about schedules, homework, assignments, and files directly in chat. | |
| camoufox-mcp ccostello97/camoufox-mcp Browser automation MCP server using Camoufox anti-detect browser with fingerprint spoofing, geolocation/timezone spoofing, and human-like cursor movement. | |
| hackernews-mcp ccozad/hackernews-mcp Enables LLMs to search and read Hacker News posts and comments via the Algolia API. | |
| agent-mem0 ccperdst-lab/agent-mem0 Provides persistent cross-session memory for Claude Code, enabling it to remember user preferences, decisions, and project context across new sessions. | |
| codesign-mcp ccpopy/codesign-mcp Local MCP server for Tencent CoDesign sharing links, exposing artboards, layer specs, preview images, and exported slices to support design-to-code workflows. | |
| cn-financial-mcp ccq1/cn-financial-mcp Provides access to Chinese mainland financial data including A-stock quotes, financial statements, industry analysis, and macroeconomics through 42 MCP tools, with automatic data source fallback and no API key required. | |
| can2cup ccqqder/can2cup Enables users' AI agents to join signed, hash-chained rooms with another person's agent to negotiate, coordinate, or hand off work, while a locally enforced mandate filters every outbound message. Commitments such as accepts, grants, or pri | |
| NeedleRoute ccrngd1/needleroute Enables MCP clients to proxy tool selection through a tiny local model, filtering large tool catalogs and escalating only low-confidence or destructive operations to a frontier model. This reduces latency, token costs, and frontier-model ca | |
| ToolGate ccrngd1/toolgate Enables AI agents to connect to multiple upstream MCP servers while dynamically returning only semantically relevant tools, with lazy schema loading, session-aware boosting, and rule-based gating to reduce token bloat and improve performanc | |
| Google Analytics MCP for Coolify ccsdevs/google-analytics-mcp-coolify Provides a secure FastMCP gateway to Google Analytics Admin and Data APIs, deployable on Coolify with OAuth protection and encrypted storage. | |
| Fellow MCP Server ccsi-sandbox/fellow-mcp-server Enables AI tools to interact with the Fellow.ai API for managing action items, notes, recordings, webhooks, and user info with full CRUD operations. | |
| Google Analytics 4 MCP Server ccsmatt/ga-mcp-server Enables Claude and other MCP clients to query GA4 read-only through tools for listing properties, running historical and realtime reports, and inspecting metadata. | |
| vidlens-mcp cctv2333/vidlens Enables local, upload-free analysis of publicly viewable videos through tools that pull metadata, chapter plans, platform subtitles or speech-to-text transcripts, sampled frames and contact sheets, 527-class sound event tags, and comment an | |
| web-search-mcp cctv2333/web-search-mcp Provides ad-filtered web search and full-page content reading, including multi-page and JavaScript-rendered pages, with source verification and configurable search providers. | |
| GLM-4.5V MCP Server ccw33/multimodel-mcp Enables multimodal AI capabilities through GLM-4.5V API for image processing, visual querying with OCR/QA/detection modes, and file content extraction from various formats including PDFs, documents, and images. | |
| klaviyo-mcp ccwellness/klaviyo-mcp Enables Claude to access Klaviyo campaign and flow reporting, including email and SMS performance metrics, via MCP stdio or a Flask REST API. | |
| AlphaCAM MCP Bridge cczzyy-cn/alphacammcp AI-driven CAM automation server that wraps AlphaCAM 2016 R1 COM API into MCP tools, enabling geometry creation, machining operations, tool management, nesting, and NC code output. | |
| WeChat Dot Bridge cd233ljx/wechat-dot-bridge Enables chatting with an existing OpenAI dot from WeChat by bridging incoming text, images, and files to the dot and sending its replies back to the same conversation. | |
| Obsidian CRUD MCP cdalton713/obsidian-crud-mcp Enables AI agents to search, read, create, update, and delete notes in an Obsidian vault over the Model Context Protocol, running either locally against vault files or in the cloud through an S3-synced bucket, with optional semantic search | |
| MCP Weather Server cdalwadi/mcpserver_agenticapp Exposes weather forecast APIs as MCP tools, allowing LLMs to retrieve current weather conditions and multi-day forecasts for any location using latitude and longitude coordinates. | |
| Access MCP Server by CData cdatasoftware/access-mcp-server-by-cdata This read-only MCP Server allows you to connect to Access data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out our MCP Server for Access (https://www.cdata.com/drivers/access/download/mcp). | |
| Act CRM MCP Server by CData cdatasoftware/act-crm-mcp-server-by-cdata This read-only MCP Server allows you to connect to Act CRM data from Claude Desktop through CData JDBC Drivers. Free (beta) read/write servers available at https://www.cdata.com/solutions/mcp | |
| Act-On MCP Server by CData cdatasoftware/act-on-mcp-server-by-cdata This read-only MCP Server allows you to connect to Act-On data from Claude Desktop through CData JDBC Drivers. Free (beta) read/write servers available at https://www.cdata.com/solutions/mcp | |
| Active Directory MCP Server by CData cdatasoftware/active-directory-mcp-server-by-cdata This read-only MCP Server allows you to connect to Active Directory data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| ActiveCampaign MCP Server by CData cdatasoftware/activecampaign-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for ActiveCampaign (beta): https://www.cdata.com/download/download.aspx?sk | |
| Acumatica MCP Server by CData cdatasoftware/acumatica-mcp-server-by-cdata This read-only MCP Server allows you to connect to Acumatica data from Claude Desktop through CData JDBC Drivers. Free (beta) read/write servers available at https://www.cdata.com/solutions/mcp | |
| Adobe Analytics MCP Server by CData cdatasoftware/adobe-analytics-mcp-server-by-cdata This read-only MCP Server allows you to connect to Adobe Analytics data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| Adobe Commerce MCP Server by CData cdatasoftware/adobe-commerce-mcp-server-by-cdata This read-only MCP Server allows you to connect to Adobe Commerce data from Claude Desktop through CData JDBC Drivers. Free (beta) read/write servers available at https://www.cdata.com/solutions/mcp | |
| ADP MCP Server by CData cdatasoftware/adp-mcp-server-by-cdata This read-only MCP Server allows you to connect to ADP data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| Airtable MCP Server by CData cdatasoftware/airtable-mcp-server-by-cdata This read-only MCP Server allows you to connect to Airtable data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| AlloyDB MCP Server by CData cdatasoftware/alloydb-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for AlloyDB (beta): https://www.cdata.com/download/download.aspx?sku=KYZK- | |
| Amazon Athena MCP Server by CData cdatasoftware/amazon-athena-mcp-server-by-cdata This read-only MCP Server allows you to connect to Amazon Athena data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). |
37,251–37,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.