Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| @chaosintelligence/mcp chaos-intelligence-inc/chaos-mcp-server MCP server for Chaos Intelligence to access Capture thoughts and Resonate posts from AI tools like Claude and Cursor. | |
| Protocol Chaos reference server chaos-xxl/protocol-chaos This MCP server lets any compatible AI assistant read, extend and connect the matters in a person's life — plans, trips, people and places — from a repository that belongs to the user, so a new assistant picks up where another left off. It | |
| CadenceAI MCP chaosaiman/cadence-ai-mcp Exposes Cadence EDA tools such as OrCAD Capture, Allegro PCB Designer, and PSpice to AI assistants, enabling them to browse PCB files, generate schematics and netlists, and run circuit simulations through a license-free, cross-platform inte | |
| chaos-core-mcp chaosbrewing/chaos-core-mcp Enables AI agents to hand high-level objectives to a decision-making core that autonomously reasons, plans, enforces deterministic policy, executes capabilities, evaluates outcomes, and persists semantic memory over stdio or Streamable HTTP | |
| AppFlowy MCP Server chaoschild/appflowy-mcp Provides AI assistants with full read/write access to AppFlowy Cloud, enabling management of workspaces, pages, databases, trash, and favorites, plus conversion of Markdown into formatted AppFlowy document blocks. | |
| feedback-graph chaosdeselva/feedback-graph Serves approved lessons learned from past corrections to coding agents, delivering task context and file-scoped lessons before work starts and checking finished work against them before the agent declares done. It also exposes module facts, | |
| anamnesis chaosisnotrandomitisrhythmic/anamnesis-mcp Persistent session memory for Claude Code, providing episodic recall across sessions via structured markdown logs and BM25 search. | |
| anki-mcp chaosisnotrandomitisrhythmic/anki-mcp MCP server for Anki via AnkiConnect, enabling creation, search, and management of flashcards directly from Claude Code or any MCP client. | |
| flights-mcp chaosisnotrandomitisrhythmic/flights-mcp Search flights using Google Flights data via SerpAPI, covering all airlines including low-cost carriers like Ryanair and easyJet. | |
| doc-fine-tuning-mcp chaosst/doc-fine-tuning-mcp Enables large language models to refine Office documents (Word, Excel, PowerPoint) via interactive visual selection of text and fine-grained prompt annotations in a browser window, with version history and precise location-based edits. | |
| PyMCP Sum Server chaosxu/pymcp A simple MCP server that provides integer addition functionality. Enables users to perform basic arithmetic operations by adding two integers together through natural language interactions. | |
| MacroFactor MCP chaotix345/macrofactor-mcp Enables Claude.ai to read your MacroFactor nutrition data and log food back into MacroFactor. | |
| PJE MCP Server chapirousia/pje-mcp-server A Model Context Protocol server that enables integration with the Brazilian PJE (Electronic Judicial Process) system, providing complete support for A1 and A3 digital certificates for accessing judicial data. | |
| Rutherford MCP Server chapmanjw/rutherford-mcp-server Enables one AI coding agent to delegate tasks to, and build consensus across, multiple other coding CLIs (Claude Code, Codex, etc.) by orchestrating them as headless subprocesses. | |
| web-picker chappse6/web-picker Enables users to select UI elements on localhost pages and send fix requests to MCP-compatible coding agents, which retrieve the captures and edit the code, with masking of sensitive values. | |
| databricks-mcp-server characat0/databricks-mcp-server databricks-mcp-server | |
| DeployFlow MCP Server charan-pagolu/deployflow-mcp An MCP server that provides deterministic deployment-safety analysis tools, enabling AI agents to run checks on migration safety, task hygiene, and deploy readiness. | |
| FHIR Tools MCP Server charan-pagolu/fhir-tools-mcp Provides FHIR resource validation, synthetic test fixture generation, and HIPAA-safe logging review as MCP tools for AI agents. | |
| dpr-mcp charan-sharan/dpr-mcp Provides a Model Context Protocol interface for secure, multi-agent collaboration on Git repositories, offering isolated workspaces, change requests, reviews, and approval workflows with Git as the source of truth. | |
| AdmitPath MCP Server charan1845/admitpath Enables families to get voice-guided engineering admissions guidance using official JoSAA and TG EAPCET cutoffs, including Safe/Target/Reach predictions, college comparisons, choice list building, and process explanations. | |
| Just Us? charan1845/just-us Enables Alexa+ and a web app to run real home-network diagnoses, report and track neighbourhood internet, power and water outages, estimate restoration, and draft provider complaints with evidence, including live maps and weather-risk insig | |
| Lakehouse Copilot charan32/lakehouse-copilot Enables language models to safely explore lakehouse tables and governed metrics, run guarded read-only SQL, and inspect pipeline health and data-contract violations through MCP tools. | |
| Ubuntu MCP Server charanbalaji2005/mcp-server Enables AI clients to perform sandboxed filesystem, directory, Ubuntu system, network, git, and code/text operations through 38 typed tools confined to a workspace. Ships with a browser-based web console that provides an interactive Linux t | |
| artifactory-mcp charanchelloju/artifactory-mcp Enables AI assistants to query Maven artifacts in JFrog Artifactory by reusing credentials from ~/.m2/settings.xml and providing tools like getting latest stable versions, listing artifacts, and checking dependency updates. | |
| Moodle MCP Server charansai021/moodle-mcp-server Connects Moodle LMS with AI assistants through the Model Context Protocol, enabling users to interact with Moodle data via a conversational chatbot interface. | |
| Terminal MCP Server charantek1styearbtech/terminal-mcp A production-ready MCP server for secure, session-based command execution, file manipulation, and system inspection via local terminal sessions. | |
| excalidraw-diagram-agent charanyaponnala/excalidraw-diagram-agent Generates editable Excalidraw diagram files from natural language descriptions of systems and architectures. | |
| rental-data charanyaponnala/mcp-rental-server Exposes multifamily rental data including average rent by market, occupancy anomalies, and property summaries to LLM tools via MCP. | |
| ScrapeLads MCP Server charbeld/scrapelads-mcp Enables AI assistants to pull TikTok creator profiles with published contact emails and social links, uncover the contact email behind YouTube channels alongside their video stats, and fetch transcripts from TikTok, Instagram, YouTube and X | |
| Relatio CRM MCP Server charbelkassab/relatio-crm Enables AI assistants to manage CRM prospects, activities, reminders, and mailbox via natural language commands through the Model Context Protocol. | |
| Daily Hard Truths MCP Server charchourb/daily-hard-truths-mcp Enables retrieving daily hard truths, including today's truth, a random truth, or all 30 day titles, with each truth including a lesson and action step. | |
| scrcpy MCP Server charettep/scrcpy-mcp Exposes Android device control via adb and scrcpy as 22 tools for MCP clients like Claude Code and Codex CLI. | |
| Ubuntu Desktop Control MCP charettep/ubuntu-desktop-control-mcp Enables AI assistants to control Ubuntu desktops through screenshots, mouse clicks, and keyboard interactions using AT-SPI integration and computer vision. It features optimized element detection and workflow batching for fast and accurate | |
| @chargebee/mcp chargebee/agentkit MCP Server that connects AI agents to Chargebee Platform. | |
| tic-mcp charith-heymilo/tic-mcp Enables AI assistants to read Tic lists, tasks, and task images through read-only database queries. | |
| MCP Feature Reference Server charithadevarinti24-boop/example-mcp-server-2 A complete MCP server implementation demonstrating all protocol features (tools, resources, prompts, sampling, and elicitation) with OAuth authentication, serving as a learning resource and starting template for building MCP servers. | |
| VoiceOS Discord MCP Server charitydex/voiceos-discord-mcp Enables VoiceOS to read and write Discord messages through Composio's DISCORDBOT toolkit, with authentication handled via Composio Connect. | |
| User Timezone Tool charl-kruger/my-mcp-worker123 Cloudflare Worker that deploys an MCP server providing a single tool to return a user's timezone based on their IP address. | |
| Lilith Shell charles-adedotun/lilith-shell An enhanced MCP server that grants AI assistants the ability to execute terminal commands on a user's system with improved security controls, designed for use in controlled environments. | |
| Notifications MCP Server charles-adedotun/notifications-mcp-server MCP server that lets Claude Desktop or another MCP client trigger macOS sound and visual notifications through a task_status tool. | |
| rb209-mcp charles-gentry/rb209-mcp MCP server that exposes the AHDB RB209 Nutrient Management Guide Web API v2 as tools, enabling nutrient planning and access to all 97 endpoints. | |
| sfrbox-mcp charles-hl/sfr-box-toolkit Exposes 21 tools that let an AI agent read and write the configuration of an SFR NB6VAC fibre box over its reverse-engineered web interface, covering WAN status, connected devices, Wi-Fi SSIDs and WPA keys, DHCP, NAT port forwarding, DMZ, U | |
| freshbooks-time-mcp charlesabarnes/freshbooks-time-mcp Enables Claude and other MCP clients to log, update, and delete FreshBooks time entries, run and stop timers, and pull summaries of billable and unbilled hours by day, week, client, project, or service, with OAuth-based sign-in and per-user | |
| Gmail MCP Server charlesad/gmail-mcp-server-claude Enables AI assistants to read unread Gmail messages and create properly threaded draft replies through the Gmail API, allowing natural language email management while keeping drafts for manual review before sending. | |
| mysql-mcp charlesaugust44/mysql-mcp A read-only MySQL MCP server that provides a safe_query tool for executing SELECT and SHOW queries while blocking write operations, designed for use with OpenCode. | |
| mcp-shodan charlesbaker578/mcp-shodan Provides AI agents with Shodan-powered host and device reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence, including EPSS and KEV status. | |
| samsung-re-health-mcp charlesbel/samsung-re-health Enables MCP hosts to query and analyze a local Samsung Health mirror, with tools for status, metadata, inventory, daily summaries, and aggregate analyses, plus optional bounded access to raw records and cloud synchronization. | |
| Nano Banana MCP charlesdove977/nanobanana-mcp MCP server for Google Gemini image generation with configurable model support, enabling text-to-image generation, image editing, and iterative refinement. | |
| Ask AI charlesemarsh/ask-ai-mcp Hosted MCP server connecting Shopify, Klaviyo, GA4, Meta Ads, Google Ads, Xero, Gorgias and 20+ e-commerce data sources so AI assistants can answer merchant questions that span every source at once. | |
| Garmin Workouts MCP charlesfrisbee/garmin-workouts-mcp Enables creation of Garmin Connect workouts using natural language descriptions. Supports multi-sport workouts with heart rate zones and automatic sync to Garmin devices. |
37,951–38,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.