Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.0xzr/freellmpool charlotteo2975/freellmpool Pools enabled free LLM chat routes behind a single OpenAI-compatible endpoint, letting agents list available models, check provider capacity and health, and send chat requests with automatic failover. It can start without credentials whenev | |
| BigQuery MCP server charlotteruiz7685/mcp-server-bigquery Enables LLMs to inspect database schemas and execute SQL queries against BigQuery, including listing tables and describing table schemas. | |
| Express REST API and MCP Server Framework charlottesaito87/express-rest-api-and-mcp-server-framework Enables LLMs to discover and invoke generated CRUD tools and resources, allowing AI assistants to interact with the same data exposed by the REST API. Supports MCP clients such as Cursor and Claude over HTTP. | |
| LinkedIn Ads MCP Server charltonmediagroup/licampaignsmcp An MCP server that connects Claude to the LinkedIn Ads API for natural-language control over campaign management, audience targeting, creative uploads, analytics, and account auditing. | |
| ai-guardrails charlysmoky2010-hub/ai-guardrails-protocol Enables autonomous AI agents and MCP clients to validate observation records so unverified states can pass while self-declared VERIFIED claims are blocked unless an independent external verifier is present. | |
| MCP Roku Control charlysotelo/mcp-roku-control Enables AI assistants to control Roku TVs on the local network via natural language commands. | |
| docu charlyzeta/docu Enables read-only access to generated technical documentation across one or multiple documented repositories, exposing tools to search code and docs, inspect modules and symbols, list gaps, review architecture, and check freshness with file | |
| AGTask MCP Server charmly2/agtask-agent-kit Enables AI agents to publish, claim, submit, and settle tasks with each other, including automatic decomposition of complex work into subtasks assigned to specialized agents. Also provides a unified gateway to call multiple large language m | |
| ashare-mcp charmyue/ashare-mcp Production-grade MCP server for Chinese A-share market data, offering 30 tools including real-time quotes, K-lines, fund flows, and financial reports, with stdio and HTTP transport support. | |
| bunny charnet3d/unreal-mcp-bunny An always-on MCP proxy that connects any MCP harness to Unreal Engine 5.8's ModelContextProtocol plugin, negotiating protocol versions with each side so clients that would otherwise be rejected still work. It caches UE's tool catalog so too | |
| Pirsch MCP Server charpeni/pirsch-mcp A read-only MCP server for the Pirsch Analytics API that lets users list domains and query traffic, pages, events, and other analytics metrics through conversational agents. | |
| notion-mcp-wrapper charpup/openclaw-notion-mcp-wrapper Wraps Notion's MCP server with health monitoring, auto-reconnect, and fallback to direct REST API, enabling reliable Notion page operations from headless environments. | |
| Azure Pricing MCP Server charris-msft/azure-pricing-mcp Enables querying Azure retail pricing information, comparing costs across regions and SKUs, estimating usage-based expenses, and discovering Azure services with savings plan information through the Azure Retail Prices API. | |
| Chat Mode Creator MCP Server charris-msft/chat-mode-creator-mcp Creates custom VS Code chat modes and prompts for specialized development workflows such as Azure migration, Bicep development, and spec-driven development. | |
| topopt chartergroup/topopt Lets AI agents turn an existing STL, a sketch, or a plain-language description of a part with its mounts and loads into a topology-optimized, printable STL. Includes problem checks with time estimates, a live dashboard of the run, fine pass | |
| ChartMogul MCP Server chartmogul/chartmogul-mcp-server Enables interaction with the ChartMogul API to manage subscription data, customer relationships, and sales CRM activities. It allows users to retrieve key business metrics like MRR and churn while performing data operations on plans, invoic | |
| chartpng chartpng/chartpng Draw Chart.js charts as PNG images: a shareable image URL for emails, Slack and Markdown reports, or the PNG itself, with KPI, ranking, comparison, funnel and gauge presets. | |
| STS2 AI Agent chartyr/sts2-agent Enables AI agents to play Slay the Spire 2 by exposing game state and actions through an MCP server, supporting combat, rewards, and run management. | |
| test-data-mocking-mcp charul0718/test-data-mocking-mcp An MCP server that mocks payments, third-party API responses, and test data to enable QA flows for donation, checkout, SIP, and subscription pages without depending on a live gateway. | |
| Python Jira MCP Server chase-bullock/python-jira-mcp A server implementation that allows AI models to interact with Jira through the Model Context Protocol, enabling tasks like JQL searches and retrieving issue details. | |
| CHASE MCP Server chase-cps/chase-mcp Enables AI agents to write, compose, and check assume-guarantee contracts, including refinement, consistency, compatibility, realizability, and LTL checks, and to use returned counterexamples to fix specifications. | |
| knife4j-mcp chaselen/knife4j-mcp 用于读取Knife4j/Swagger多模块接口文档，为Agent提供结构化接口查询能力的MCP服务器。 | |
| CronGrid chaser164/crongrid-mcp This MCP server enables LLMs to POST, GET, and DELETE cron jobs that schedule email sends via SendGrid. | |
| 小红书热帖获取 chasespace/mcp_fetch_xhs_post 根据关键词获取小红书的热帖数据，需要钉钉扫码登录，配合 Chrome 使用。 | |
| shopify-admin-mcp chasewnorton/shopify-admin-mcp Production-grade MCP server for the Shopify Admin GraphQL API, exposing typed tools for AI agents to manage products, orders, customers, and more. | |
| Mermaid-MCP chasey-ai/mermaid-mcp An MCP server that converts text inputs into visualized flowcharts, enabling AI clients to generate high-quality Mermaid diagrams directly from natural language descriptions or structured text. | |
| Doubao Desktop chassychan/codex-doubao-desktop-gateway Enables Codex to drive a locally running Windows Doubao desktop app over localhost CDP, so users can send tasks and follow-ups to existing conversations, wait for runs to finish, and read back replies. It also lists local sessions and check | |
| GPTers Search MCP Server chat-prompt/gpters-search-mcp-server Searches knowledge from the GPTers AI study community with filtering by date, author, and board. | |
| jiri-mcp chatchawarn035/jira-mcp-type-script Enables AI agents to manage Jira Cloud issues through natural language, including searching, creating, updating, commenting, assigning, and transitioning issues. | |
| Chess MCP Server chatkausik/chess-mcp-server-build Enables AI assistants to play, analyze, and track chess games with full rule validation and support for standard algebraic notation. It provides tools for position evaluation and game state persistence during user sessions. | |
| HeyBeauty MCP Server chatmcp/heybeauty-mcp A TypeScript-based MCP server that implements virtual try-on capabilities using the HeyBeauty API, allowing users to visualize how clothes would look on them through Claude. | |
| mcp-server-collector chatmcp/mcp-server-collector A MCP Server used to collect MCP Servers over the internet. | |
| MCP Server Flomo chatmcp/mcp-server-flomo A TypeScript-based MCP server that enables users to write text notes directly to Flomo from Claude. | |
| mcprouter chatmcp/mcp-server-router A proxy service that connects MCP clients to remote MCP servers, allowing users to use server keys from MCP.so to access remote resources without running their own server. | |
| 1313 chatmcp/mcpso directory for Awesome MCP Servers | |
| ChatPush MCP Server chatpush/mcp-chatpush Enables AI agents to send WhatsApp, Telegram, SMS, VK/OK, and MAX messages, files, and bulk mailings, and to manage delivery status, webhooks, and sub-accounts. | |
| jsonplaceholder-mcp chatre7/jsonplaceholder-mcp An MCP server that provides tools to interact with the JSONPlaceholder fake REST API for testing and prototyping, supporting CRUD operations on posts, comments, todos, and users. | |
| chatgpt-local-mcp-bridge chatre7yos/chatgpt-local-mcp-bridge Enables ChatGPT Web to inspect a single local workspace read-only via the OpenAI Secure MCP Tunnel, with tools for listing files, reading text, searching, and viewing Git status/diff. | |
| TeamDynamix MCP Server chatt-state/teamdynamix-mcp-server Connects AI assistants to TeamDynamix, enabling natural language search and management of tickets, knowledge base, people, assets, projects, time entries, reports, service catalog, and custom attributes. | |
| ChatterBox MCP Server chatterboxio/chatterboxio-mcp-server A Model Context Protocol server that enables AI agents to join and interact with online meetings (Zoom and Google Meet), capturing transcripts and recordings to generate meeting summaries. | |
| Shopify MCP chatterjeearjun/shopify-mcp-simple A read-only MCP server that lets AI assistants answer Shopify store operations questions via tools like get_shop, list_products, get_product, and list_orders. | |
| boc-valet-mcp chatusvi-karnati/boc-valet-mcp Provides LLM agents with live access to Canadian economic and financial data (exchange rates, interest rates, inflation, etc.) through the Bank of Canada Valet API, with no API key required. | |
| Airline Flight Delays MCP Server chatwithsrini/airlinesmcp An AI-powered customer service automation system designed to handle flight disruptions by providing real-time flight status, sentiment-aware passenger communication, and personalized engagement activities. It streamlines rebooking, airport | |
| nit-mcp-server chauary21/nit-mcp-server Exposes nit's code review agent as tools for Claude, enabling local path and GitHub PR/commit/URL review over Streamable HTTP. | |
| AbletonMCP chaudepark/ableton-mcp A server that connects Ableton Live to Claude AI through the Model Context Protocol, enabling AI-assisted music production and direct control of Ableton Live features. | |
| forge3d-mcp chaudharyvivek1/forge3d Enables AI agents to plan, generate, inspect, validate, repair, preview and hand off 3D models across five interchangeable geometry engines (procedural, OpenSCAD, Blender, CadQuery and hosted text-to-3D). Profile-based validation for print, | |
| locklens chaudhry592/locklens Enables auditing npm, Yarn, and pnpm lockfiles in local project directories or remote Git repositories through an MCP tool, returning unified vulnerability results with configurable thresholds, registry, dev-dependency skipping, retries, an | |
| Instagram → ChatGPT MCP Server chaudryammar7861-pixel/instagram-chatgpt-mcp Enables a Professional Instagram account to connect to an MCP client through Meta's official API and OAuth, supporting profile and media reading, publishing, insights, and comment management. | |
| Medical MCP Server chauhan1483/medical-mcp Enables AI assistants to query authoritative sources such as FDA, WHO, PubMed, RxNorm, and ClinicalTrials.gov for drug information, health statistics, medical literature, pediatric guidance, and clinical guidelines. Runs locally with no API | |
| BOSS 直聘 MCP Server chauhan5497/boss-zhipin-mcp Enables AI assistants to automate recruiter workflows on zhipin.com, including batch candidate search, resume screenshot/OCR, intelligent filtering and scoring, share-link extraction, greeting, and report export. |
38,051–38,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.