Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| xBase MCP Server by CData cdatasoftware/xbase-mcp-server-by-cdata This read-only MCP Server allows you to connect to xBase data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out our MCP Server for xBase (https://www.cdata.com/drivers/xbase/download/mcp). | |
| Xero MCP Server by CData cdatasoftware/xero-mcp-server-by-cdata This read-only MCP Server allows you to connect to Xero data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| XML Documents MCP Server by CData cdatasoftware/xml-documents-mcp-server-by-cdata This read-only MCP Server allows you to connect to XML Documents data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out our MCP Server for XML Documents (https://www.cdata.com/drivers/xml/download/mcp). | |
| YouTube Analytics MCP Server by CData cdatasoftware/youtube-analytics-mcp-server-by-cdata This read-only MCP Server allows you to connect to YouTube Analytics data from Claude Desktop through CData JDBC Drivers. Free (beta) read/write servers available at https://www.cdata.com/solutions/mcp | |
| Zendesk MCP Server by CData cdatasoftware/zendesk-mcp-server-by-cdata This read-only MCP Server allows you to connect to Zendesk data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| Zoho Books MCP Server by CData cdatasoftware/zoho-books-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for Zoho Books (beta): https://www.cdata.com/download/download.aspx?sku=GZ | |
| Zoho Creator MCP Server by CData cdatasoftware/zoho-creator-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for Zoho Creator (beta): https://www.cdata.com/download/download.aspx?sku= | |
| Zoho CRM MCP Server by CData cdatasoftware/zoho-crm-mcp-server-by-cdata This read-only MCP Server allows you to connect to Zoho CRM data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/). | |
| Zoho Inventory MCP Server by CData cdatasoftware/zoho-inventory-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for Zoho Inventory (beta): https://www.cdata.com/download/download.aspx?sk | |
| Zoho Projects MCP Server by CData cdatasoftware/zoho-projects-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for Zoho Projects (beta): https://www.cdata.com/download/download.aspx?sku | |
| Zuora MCP Server by CData cdatasoftware/zuora-mcp-server-by-cdata This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for Zuora (beta): https://www.cdata.com/download/download.aspx?sku=HZZK-V& | |
| ragmark cdcoonce/ragmark Local-first MCP server for retrieval over markdown wikilink vaults, offering hybrid vector+lexical search, note reading, neighbor expansion, and recent activity tracking with fully local embeddings and no network egress. | |
| oo.ai-mcp cdecl/oo.ai-mcp Enables searching content on oo.ai. | |
| Sample Data MCP cdelashmutt-pivotal/sample-data-mcp Generates fixed-length test data records with customizable field types including strings, enums, integers, dates, and fillers. Helps developers create realistic test datasets with specified formats and constraints. | |
| mcp-coding cdemeo92/mcp-coding Experimental MCP server for local LLM orchestration with filesystem tools (read, write, list, delete files) and a CLI agent that communicates via Ollama. | |
| MI PANA APP MCP Server cdepool/mipanaapp-mcp Enables management of ride-sharing operations including searching for available drivers, calculating dynamic fares, creating and tracking trips, and monitoring driver statistics in real-time using Supabase as the backend. | |
| ai-architect cdeust/ai-architect-mcp An autonomous software-engineering pipeline for Claude Code that runs on real evidence: codebase intelligence tools, git analytics, deterministic verification rules, and zero LLM-judges-LLM. Every claim traces to a paper and every PR passes | |
| TokenScope cdgaete/token-scope-mcp A Model Context Protocol server that enables token-aware directory exploration and file analysis for LLMs, helping them understand codebases through intelligent scanning and reporting. | |
| CRM Account Planning Cowork Agent MCP Server cdhamija/crm-account-planning-mcp Enables deploying an MCP server to Azure that exposes CRM account planning tools to Copilot, with sample or Salesforce data, supporting read-only or gated writes. | |
| mcp-watermelon cdit-dev/mcp-watermelon MCP server for Watermelon.ai that exposes all 13 public API endpoints as tools, enabling AI assistants to manage contacts, conversations, messages, custom fields, and webhooks. | |
| PostgreSQL MCP Server cdmmca2007/postgres-mcp-server-main-demo A Model Context Protocol server that enables connecting to PostgreSQL databases and executing queries, listing tables, retrieving schema, and obtaining database statistics through MCP tools. | |
| habitica-mcp cdmonsalvea/habitica-mcp Enables LLMs to read and manage Habitica data — habits, dailies, to-dos, rewards, checklists and tags — through workflow-level tools that accept task references by id or text and return compact responses. Writes that delete or buy require e | |
| authentik-mcp cdmx-in/authentik-mcp Authentik MCP provides seamless integration with Authentik's API, supporting both full-featured and diagnostic modes. These enable secure, automated user, group, and system management through MCP-compatible tools. | |
| goodday-mcp cdmx-in/goodday-mcp Goodday‑MCP is a lightweight Model Context Protocol (MCP) server designed to seamlessly integrate with the Goodday project management platform via its API v2. It enables querying of projects, tasks, and users—without altering any data—makin | |
| Hubstaff MCP Server cdmx-in/hubstaff-mcp A Model Context Protocol (MCP) server for Hubstaff API integration, enabling seamless time tracking, project management, and team collaboration through AI assistants. | |
| vaporcheck cdmx-in/vaporcheck Blocks AI coding assistants from installing non-existent packages and accessing non-existent files. | |
| Remote MCP Server Authless cdn221/remote-mcp-server-authless A serverless MCP implementation on Cloudflare Workers that allows connecting AI models to custom tools without requiring authentication. | |
| Remote MCP Server on Cloudflare (Authless) cdnguy425/remote-mcp-server-authless A template for deploying a remote Model Context Protocol server on Cloudflare Workers without authentication. It enables users to build custom tools accessible via SSE for integration with clients like Cloudflare AI Playground and Claude De | |
| Palo Alto Networks MCP Server cdot65/pan-os-mcp Enables MCP clients to interact with Palo Alto Networks firewalls and Panorama, providing tools to retrieve address objects, security zones, policies, and system information. | |
| remote-mcp-starter cdotta/remote-mcp-starter A production-ready remote MCP server with per-user tenant isolation, PAT authentication, and a notes domain, using Stateless Streamable HTTP transport. | |
| axis-camera-mcp cdp/gsx2026-axis-camera-mcp MCP server that lets an LLM control an Axis network camera over VAPIX, including live streaming, PTZ, image settings, overlays, clock, light, user management, and a built-in RAG knowledge base of VAPIX docs. | |
| mcp-server-chatgpt-app cdpath/mcp-server-chatgpt-app MCP server that enables integration of the ChatGPT macOS app with MCP clients like Cursor and Chatwise. | |
| MDict MCP Server cdpath/mdict-mcp A server that provides access to MDict dictionaries through the Model Context Protocol, enabling word lookups, searches, and dictionary management. | |
| The Hive cdprice02/colony Enables AI agents to search and modify a personal knowledge base through OAuth-secured MCP tools, covering Obsidian vaults and Google Drive mirrors with semantic search, note read/write operations, audit logging, and eval-gated local classi | |
| MCP Python Server — API Wrapper cdryampi/mcp A Python server implementing the Model Context Protocol that exposes tools for querying external APIs, compatible with Claude Desktop and ChatGPT Desktop. | |
| MCP Server Boilerplate cds-id/mcp-server-boilerplate A ready-to-use starter implementation of the Model Context Protocol (MCP) server that enables applications to provide standardized context for LLMs with sample resources, tools, and prompts. | |
| 그때 뭐랬지? cdsassj00/kakao-mcp A personal memory MCP server that stores and retrieves conversation memories, enabling AI agents to recall past discussions, promises, and preferences using natural language. | |
| Financial Modeling Prep MCP Server cdtait/fmp-mcp-server A Model Context Protocol (MCP) server that provides tools, resources, and prompts for financial analysis using the Financial Modeling Prep API. | |
| DocsFetcher MCP Server cdugo/package-documentation-mcp Fetches and extracts comprehensive package documentation from multiple programming language ecosystems (JavaScript, Python, Java, etc.) for LLMs like Claude without requiring API keys. | |
| Fantasy Tabletop Helper MCP Server cdvolvik/ftthelper-mcp Connects MCP-capable clients to hosted tabletop campaigns so users can ask plain-language questions about their campaigns, sessions, and codex entries (NPCs, locations, items, lore, religions, groups) and submit notes, recaps, events, and D | |
| pr-legislative-x402 cdvolvik/pr-legislative-x402 MCP server that enables AI agents to search and read Puerto Rico legislative measures with pay-per-call in USDC on Base, using the x402 agent-payment standard. | |
| practice-fusion-mcp cdvolvik/practice-fusion-mcp Enables read-only FHIR access to Practice Fusion EHR to search patients, appointments, conditions, medications, and lab results. | |
| Minecraft Client MCP cdx-1/minecraft-client-mcp Enables an agent to control a Minecraft Java Edition client through Mineflayer, supporting authentication, chat and slash commands, pathfinding and movement, combat, block and entity interaction, inventory and container management, world sn | |
| clash-verge-mcp-pro cdxiaodong/clash-verge-mcp-pro A comprehensive MCP server for Clash Verge Rev/Mihomo that enables full control over proxies, rules, and subscriptions through 58 tools. It also supports rule editing, scenario switching, and configuration generation with hot reload. | |
| llm-eval-mcp cdywolf/llm-eval-mcp MCP server that provides tools for evaluating LLM agent reliability, including adversarial task generation, automated LLM-as-judge assessment, and confidence statistics. | |
| hybrid-rag-project ce23b006-byte/hybrid-rag-project Enables hybrid retrieval-augmented generation with semantic and keyword search over documents, supporting multiple formats and providing MCP integration for Claude Desktop. | |
| dnomia-knowledge ceaksan/dnomia-knowledge Local knowledge engine for codebases with hybrid search, knowledge graph, and interaction tracking, enabling Claude Code to search and interact with project knowledge locally. | |
| Nornir MCP Server ceasarjackson/nornir-mcp-server Enables natural language orchestration of multi-vendor network infrastructure by combining NAPALM for structured data retrieval and Netmiko for CLI execution via Nornir. | |
| spt-forge-mcp cebarks/spt-forge-mcp MCP server for the SP-Tarkov Forge API. Exposes Forge endpoints as MCP tools over stdio, letting LLMs search mods, check updates, resolve dependencies, browse addons, and list SPT versions. | |
| mlbb-mcp cebarrett/mlbb-mcp Enables querying Mobile Legends: Bang Bang hero data including win rates, counters, synergies, and builds via natural language. |
37,501–37,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.