Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| abap-mcp-adt chinhhn-dev/abap-mcp-adt MCP server for SAP ABAP development that enables AI assistants and code editors to interact with SAP systems via ABAP Developer Toolkit (ADT) APIs, supporting read, create, update, and delete of ABAP objects. | |
| SAP MCP-RFC Bridge chinhhn-dev/mcp_sap_private An MCP server that enables MCP clients like Claude Code to work with SAP ABAP objects over RFC, reaching systems without HTTP/ADT endpoints such as classic ECC/R/3. | |
| Engineering Operations MCP chinhong-chua/opsmcp A safe, read-only MCP server that gives Codex structured access to engineering operations evidence, with validated queries, secret redaction, and audit logging. Provides a search_logs tool for filtering logs by service, environment, severit | |
| TwinKit chiniyaocy-dotcom/twinkit Enables AI assistants to access a Markdown persona pack through MCP, providing work briefs, draft reviews, example lookup, and profile resources so generated work follows the user's decision principles, quality standards, and voice. | |
| screenshotfreeapi chinkauchenna2021/screenshotfreeapi-mcp MCP server for ScreenshotFreeAPI – capture website screenshots, render HTML/PDF, and fetch app store listing screenshots from any MCP-compatible AI client. | |
| Email MCP Server chinmay4382/gmail-mcp-server An MCP server that enables AI models to read, search, and send emails via IMAP and SMTP protocols. It supports various providers like Gmail and Outlook, allowing for tasks such as retrieving unread messages, searching by sender, and managin | |
| N8N MCP Server chinmaybhatk/n8n-mcp-server Model Context Protocol (MCP) server for managing n8n workflows, allowing Claude and other MCP-compatible tools to create, read, update, delete, and execute workflows in your n8n instance. | |
| Weather MCP Server chinmaybhattt/mcp-server-python A Model Context Protocol (MCP) server that provides US weather forecasts and active alerts using the National Weather Service API. | |
| Agentic Browser bridge chinmayshastry05-cpu/agentic-browser-bridge Enables an AI agent to observe, plan, and act inside a real browser session by exposing navigation, snapshot, click, type, and screenshot MCP tools over local JSON-RPC and SSE. It runs a Playwright-backed browser in-process and provides sta | |
| Scam Guardian MCP Server chinorab/alexa-scam-guardian Enables an Alexa+ assistant to name scam warning signs drawn from FTC and FBI alerts, verify a story by texting a family member's pre-saved number, and surface official report links and guidance. It exposes tools and MCP Apps views for chec | |
| Regulars chinorab/regulars An MCP endpoint exposing find_regular_spots, build_connection_plan, and explain_match so agents can surface real nearby venues matched to a user's tastes via the Qloo taste graph, assemble a tiered six-week connection plan, and explain why | |
| JobSpy MCP Server chinpeerapat/jobspy-mcp-server Enables job search and scraping across multiple job boards (LinkedIn, Indeed, Glassdoor, etc.) with advanced filtering, directly from Claude Desktop or other MCP clients. | |
| telegram-reader chinrw/telegram-reader Enables an LLM agent to read the Telegram channels and groups your account can see, search and fetch messages, and download posts' videos and files under names taken from the post, while excluding private chats, bots, and Saved Messages. | |
| Zentickr - Yahoo Finance MCP Server chintan-diwakar/zentickr-yahoo-query-mcp A Model Context Protocol server providing comprehensive access to Yahoo Finance data through the yahooquery library, enabling AI assistants to retrieve stock prices, financial statements, market data, and company analytics. | |
| Grid Connect MCP Server chintanavs/agentforce-grid-mcp Enables Claude Code and other MCP clients to create, modify, and monitor Agentforce Grid workbooks, worksheets, and columns via the Salesforce Grid Connect API. | |
| jules-worker-mcp chintu4/jules-worker-mcp Enables MCP clients to trigger and manage Google Jules automated coding tasks on GitHub repositories, including checking status and logs, sending follow-up messages, and retrieving generated artifacts such as pull requests and diffs. | |
| Veracode MCP chinyoong/veracode-mcp Enables interaction with the Veracode platform to perform security tasks like running SAST scans, checking SCA vulnerabilities, and retrieving CVE information. It allows AI assistants to manage scan workflows, from zipping source code to an | |
| mcp-hayabusa chiomao23/mcp-detection-knowledge-bases Enables EVTX (Windows Event Log) analysis via Hayabusa, providing tools to scan event logs and retrieve detection rules. | |
| HomeLab MCP chip10/homelab-mcp MCP server that integrates Home Assistant, Frigate, Docker, and Proxmox via STDIO, enabling secure read and write operations with configurable confirmation. | |
| Discussion Capsule chipagosfinest/mcp-discussion-capsule Turns GitHub Discussions into interactive, read-only briefs inside an MCP host, surfacing participants, questions, and thread maps without mutating GitHub state. | |
| GetKin MCP Server chipbaskets/getkin-mcp Provides six tools for LLM infrastructure: model recommendation, availability checking, LLM call routing, memory compression, model listing, and memory usage checking, with paid tools using Solana USDC. | |
| grok-bot-mcp-connector chipherndon/grok-bot-mcp-connector Enables two Grok Bots to exchange messages through a shared mailbox, with send and inbox tools and webhook-based wakeups. | |
| Tasks MCP Server chipocrudos/tasks-mcp Enables task management through natural language commands in English or Spanish. Supports creating, listing, updating, completing, and deleting tasks with local SQLite storage. | |
| video-face-masking-mcp chipolemayoo/video-face-masking-mcp Automatically detects and masks faces in videos and images, supporting mosaic, blur, or solid redaction. Masking is reversible with an encryption key, enabling restoration of original footage for legal review or audit. | |
| PanGo PDS Place & Route Expert MCP Server chippareyner-glitch/pango-pds-pnr-mcp Enables AI agents to query FPGA place-and-route strategies, lint and convert constraints, plan physical floorplans, diagnose clock-routing and pin-legality issues, and analyze build reports for Logos-2 PG2L200H designs. | |
| design-copier chipsxp/design-copier Captures webpage styles and HTML, converts CSS to Tailwind, and applies extracted designs to frontend frameworks like React. | |
| ChronoSphere AI Date-Time MCP chirag127/chronosphere-datetime-mcp-nodejs-api Provides AI agents with precise, locale-aware date and time data across multiple timezones through a Model Context Protocol API built with TypeScript/Node.js. | |
| Clear Thought MCP Server chirag127/clear-thought-mcp-server Provides systematic thinking tools including mental models, design patterns, debugging approaches, and collaborative reasoning frameworks to enhance problem-solving and decision-making capabilities. | |
| DDGS MCP Server chirag127/ddgs-mcp-server Enables DuckDuckGo search capabilities with full content extraction for AI agents, supporting text and news searches across multiple engines. | |
| OKF Knowledge MCP chirag127/okf-knowledge-mcp MCP server for managing an OKF markdown knowledge base, enabling AI agents to query, read, write, and auto-sync architectural decisions and rules via Git. | |
| Stochastic Thinking MCP Server chirag127/stochastic-thinking-mcp-server Provides advanced probabilistic decision-making algorithms including MDPs, MCTS, Multi-Armed Bandits, Bayesian Optimization, and Hidden Markov Models to help AI assistants explore alternative solutions and optimize long-term decisions. | |
| Vybog MCP Server chirag1749/fts-mcp MCP server for the Fund Tracking System, enabling agents to manage lending business data such as entities, borrowers, investors, deals, and referrals with full CRUD and bulk operations. | |
| Appwrite MCP Template chiragagg5k/appwrite-mcp-template Enables deploying stateless MCP servers on Appwrite Functions, supporting custom tools with JSON-RPC over HTTPS. | |
| PokeMCP chiragagg5k/poke-mcp An MCP server that provides detailed Pokémon information by integrating with the PokeAPI, allowing users to fetch comprehensive data about Pokémon and simulate battles. | |
| db-mcp chiraggahujaa/db-mcp Enables interaction with multiple databases (MySQL, PostgreSQL, SQLite, Supabase) through a unified interface with security features like SQL injection detection and rate limiting. | |
| trails-mcp chiraggahujaa/trails-mcp Enables searching outdoor trails by name or place, retrieving route details, elevation profiles, and optional weather forecasts via Windy. | |
| MA chiraghs/ma Enables hands-free Alexa+ voice interactions for logging feeding and sleep, checking maternal mood and trends with safety routing, managing partner tasks, and presenting supportive summaries through MCP tools and UI cards. | |
| AI Customer Support Bot - MCP Server chiragpatankar/ai-customer-support-bot--mcp-server A Model Context Protocol (MCP) server that provides AI-powered customer support using Cursor AI and Glama.ai integration. | |
| LogAnalyzer MCP Server chiragpatankar/loganalyzer-mcp An AI-powered server that provides rapid debugging of server logs with actionable fixes in under 30 seconds, featuring real-time monitoring and root cause analysis through Google Gemini integration. | |
| MCP Chat Support System chiragpatankar/mcp A comprehensive customer support platform featuring real-time messaging, knowledge base management, and a multi-tenant architecture with both React frontend and Node.js backend. | |
| @centr-ai/mcp chiragpgauswami/centr Enables AI coding agents to retrieve token-budgeted project context, search code symbols, look up definitions, and access project memory and cross-project learnings through local MCP tools. It reduces redundant exploration by supplying the | |
| NovaCorp Operations Assistant chiragsharma0794/novacorp-operations-assistant A multi-agent operations assistant that answers business questions by searching local documents and order records. | |
| manga-trans chiraitori/manga-trans Enables AI agents to perform local-first manga/comic scanlation by inspecting raw pages, translating text, cleaning speech bubbles, and typesetting localized content through MCP tools. | |
| mcp-docs-helper chiranth-24/mcp-docs-helper Enables LLMs to access MCP protocol specifications and TypeScript SDK documentation with context-aware search and code templates for building custom MCP servers. | |
| Simple MCP Data Manager with AI chirayupatel9/simple_mcp A Python-based Model Context Protocol server that integrates local AI models for managing data with features like CRUD operations, similarity search, and text analysis. | |
| MLIT Geospatial MCP Server chirikuuka/mlit-geospatial-mcp Enables LLMs to search and retrieve Japanese real estate data through unified access to the MLIT Real Estate Information Library API, supporting over 25 geospatial datasets for interactive queries. | |
| claude-memory-mcp chirpephippiorhynchus804/claude-memory-mcp Provides persistent local memory for AI assistants using SQLite and semantic search, enabling context-aware conversations. | |
| Riot Games API Documentation chirpon9/riot-docs-mcp Provides access to comprehensive Riot Games API documentation for League of Legends, Teamfight Tactics, Valorant, and Legends of Runeterra, including endpoint details, parameters, and response formats. | |
| Spotify & TMDB Web MCP Server chiru144/spotify-mcp-web-and-mcp-server Enables users to search movies and actor profiles, discover soundtracks, and generate curated Spotify playlists, with full playback control and playlist management through natural language. | |
| oss-skills-mcp chiruu12/oss-skills-mcp Guides AI agents through open-source contribution workflows, from finding issues to submitting PRs, while keeping decision-making and coding with the human contributor. |
38,451–38,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.