Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Quemo Budget, Quemo Workout, Quemo Health, Quemo Food chxmxii/quemo Enables users to track budgets, workouts, medications and health metrics, and meals/nutrition from AI chat clients through MCP, with follow-ups and printable reports. | |
| CryptoConduit-MCP chxndre/cryptoconduit-mcp An MCP server that gives AI agents direct access to Polymarket Crypto prediction markets, enriched with live spot prices. Discover markets, analyze order books, paper trade strategies, track activity, and execute live trades — all through n | |
| Google Chat MCP Server chy168/google-chat-mcp-server Provides MCP (Model Control Protocol) tools for accessing and interacting with Google Chat spaces and messages through OAuth2 authentication. | |
| remote-mcp-google-chat-server chy168/remote-mcp-google-chat-server A remote MCP server for Google Chat, deployed on Cloudflare Workers without authentication, enabling tool execution via MCP protocol. | |
| global-memory chy4pro/global-memory-mcp Enables AI assistants across Claude Code, Claude Desktop, Codex CLI, and Gemini CLI to remember and automatically apply user-confirmed behavioral instruction presets, with a trust curve for scheduled re-confirmation and one-command uninstal | |
| jev-in-mcp chy4pro/jev-in-mcp An MCP relay that adds a use_jev tool to every connected server, letting the Jev model autonomously select and execute tool calls while the calling model supplies any required text values. It enables agents to delegate multi-step tool use a | |
| claude-aws-mcp chyang222/mcp_project_aws Enables natural language control of AWS resources (EC2, Security Groups, S3, Bedrock, etc.) directly from Claude Desktop or Claude Code. | |
| MCP Word Commander chyinan/mcp-word-commander Enables AI assistants to directly read, edit, and manipulate Word documents, supporting image and table operations, paragraph editing, and search/replace. | |
| ClickUp MCP Server - Enhanced chykalophia/clickup-mcp-server---enhanced Enables comprehensive ClickUp workspace management through 170+ AI-powered tools with GitHub Flavored Markdown support, webhook processing, and production-grade security. Provides 50-70% efficiency gains in common workflows with smart tool | |
| WeChat MCP Enhanced chylove1982/wechat-mcp-enhanced An MCP server that enables file transmission, voice message processing, and voice call management through the WeChat PC client. It provides tools for automated communication including audio format conversion and call status tracking within | |
| Bitbucket MCP Server chzkyy/mcp_bitbucket Enables MCP-compatible clients to read repositories and source code from Bitbucket. Provides tools for listing workspaces and repositories, browsing directories, reading files, searching code, and inspecting commits and pull requests. | |
| mcp-mongodb chzkyy/mcp_mongodb Enables Claude to explore, query, and modify MongoDB databases through natural language, including CRUD operations, aggregation, indexing, and administrative tasks. | |
| mcp-obsidian chzkyy/mcp_obsidian MCP server that connects Claude Desktop to Obsidian vault via the Local REST API plugin, enabling search, read, write, and management of notes plus executing Obsidian commands. | |
| mcp-workato chzkyy/mcp_workato MCP server that exposes the Workato Platform API to Claude Desktop and other MCP clients, enabling management of recipes, jobs, connections, folders, custom connectors, and account properties through natural language. | |
| CBCI MCP ci671233/cbci_mcp Enables dynamic database querying through natural language questions using LLM-powered parameter extraction and template-based SQL generation. Supports flexible configuration for various domains and databases with automated response formatt | |
| Bitrix24 Tasks, CRM & Lists MCP Server cia-les/bitrix_mcp_free Enables MCP clients to work with Bitrix24 tasks, projects, CRM entities, and universal lists via the Bitrix24 REST webhook. It provides 46 validated tools for reading and writing business data without caching or storing derivative copies. | |
| RFQ_SIEMENS_Teamcenter_MCP cialfor-research-labs/rfq_siemens_teamcenter_mcp Enables Phase 1 upload-to-Teamcenter-draft workflow with file validation, extraction, similarity search, BQ drafting, document generation, approval, and save, including a deterministic mock mode for demos. | |
| Amplitude MCP Server ciaraadkins/amplitude-mcp-server Enables AI assistants to integrate Amplitude analytics for tracking events, page views, user signups, user properties, and revenue. | |
| Mixpanel MCP Server ciaraadkins/mixpanel-mcp-server Enables AI assistants to track events, page views, user signups, and update user profiles in Mixpanel. | |
| Cortex XSIAM MCP Gateway ciaran-finnegan/cortex-xsiam-mcp-gateway Enables governed agent access to Cortex XSIAM security operations APIs, including XQL log search, issues, cases, endpoints, and assets, with dataset authorization and optional identity-based access control. | |
| RIP.ie MCP Server ciaranmcaleer/ripiemcp A Model Context Protocol (MCP) compliant server that provides access to the RIP.ie GraphQL backend, allowing users to query and retrieve death notices and related information from RIP.ie. | |
| cdisc-library-mcp-server cicatriiz/cdisc-library-mcp-server Provides a compact, task-oriented wrapper around the CDISC Library API for discovering, searching, and fetching Biomedical Concepts and SDTM Dataset Specializations. | |
| Civitai MCP Server cicatriiz/civitai-mcp-server Provides AI assistants with access to Civitai's collection of AI models, enabling users to browse, search, and discover AI models through MCP-compatible AI assistants. | |
| Consumer Rights Wiki MCP Server cicatriiz/consumer-rights-wiki-mcp Enables AI assistants to access the Consumer Rights Wiki, providing tools to search and retrieve information about modern consumer exploitation issues like privacy violations, dark patterns, and deceptive pricing practices. | |
| Healthcare MCP Server cicatriiz/healthcare-mcp-public A Model Context Protocol server providing AI assistants with access to healthcare data tools, including FDA drug information, PubMed research, health topics, clinical trials, and medical terminology lookup. | |
| OpenEdu MCP Server cicatriiz/openedu-mcp A comprehensive Model Context Protocol server providing educational resources and curriculum planning support with intelligent filtering across multiple educational APIs. | |
| PopHIVE MCP Server cicatriiz/pophive-mcp-server Provides access to comprehensive public health data from Yale's Population Health Information Visual Explorer, including metrics on immunizations, respiratory diseases, and chronic conditions. It enables users to perform state-level compari | |
| TextToolkit cicatriiz/text-toolkit A text transformation and formatting MCP server that provides common text manipulation functions such as case conversion, encoding/decoding, formatting, analysis, and regex operations directly within your AI assistant workflow. | |
| TimezoneToolkit MCP Server cicatriiz/timezone-toolkit Enables timezone conversion, astronomical calculations, and date utilities through natural language, supporting sunrise/sunset, moon phases, business days, and more. | |
| Universal Clipboard MCP cicatriiz/universal-clipboard-mcp Enables seamless content conversion between multiple formats including Markdown, HTML, and DOCX directly within development environments. | |
| zpl-engine-mcp (discontinued) cicicalex/zpl-engine-mcp DISCONTINUED (October 2026): the ZPL Engine service is offline, so this MCP server no longer works. Repository archived, npm package deprecated. | |
| Electron MCP Server cicy-dev/electron-mcp Provides browser automation and system-level control with multi-account isolation, session management, rich CDP operations, and YAML/JSON dual format support. | |
| agent-shared-memory cidlucas/agent-shared-memory Enables AI agents to share persistent memory via an MCP server using SQLite, supporting multi-tenant, categorized knowledge with TTL and semantic links, without requiring vector databases. | |
| mcp-agent-tools cidlucas/mcp-agent-tools Enables AI agents to execute tools securely with Docker isolation, tier-based permissions, and feature flags, providing a centralized tool registry and MCP server. | |
| langchain-mcp-user-query-demo ciel-17/langchain-mcp-server A demonstrative MCP server that exposes a query-user tool for retrieving user info by ID, integrated with LangChain for agent-driven model reasoning and tool calls. | |
| Multi-Purpose MCP Server ciel240/class_study Provides various utilities including timezone-aware time queries, basic calculator operations, multilingual greetings, code review prompts, and AI image generation through Hugging Face API. | |
| Firefly III MCP Server cielhaidir/firefly-iii-mcp Enables AI tools to interact with a Firefly III personal finance instance via MCP protocol, deployed on Cloudflare Workers for low-latency global access. | |
| PartnerCore ciellosinc/partnercore-cli Enables AI assistants to perform Business Central AL development tasks including language server operations, container management, Git version control, and file system operations for professional BC development workflows. | |
| PRG MCP ciembor/prg-mcp Enables interaction with the Polish National Register of Borders (PRG) data, currently providing health status monitoring and a server skeleton for future data retrieval features. | |
| teryt-mcp ciembor/teryt-mcp MCP server for querying the Polish TERYT registry, including territorial units, localities, streets, and locality types via tools and CLI. | |
| mcp-server-motherduck cienco/mcp-motherduck-undercontrol-light An MCP server that enables SQL analytics on DuckDB and MotherDuck databases, allowing AI assistants and IDEs to query and analyze data. | |
| Personal Google MCP Server cieszyn/google-mcp-server Gives Claude read/write access to your own Gmail, Google Docs, Google Sheets, and Google Tasks via a tiny always-on web service. | |
| mysql-ops-mcp cieveme/mysql-ops-mcp Enables AI agents to query a private MySQL database through a self-maintained SSH tunnel while enforcing read-only SQL by default, with optional opt-in server and Docker operations. | |
| gcm cifeng/gcm Enables an AI assistant to read a project's git diff and generate Angular-style, company-standard commit messages, then stage and commit the changes on the user's behalf. It runs on the host's built-in AI capabilities with no API key or cos | |
| grok cigenb/grok-subagent-mcp Enables Codex and other MCP clients to dispatch, wait for, inspect, steer, interrupt, and collect asynchronous subagent tasks through a local CLI, with resumable conversations and session-scoped history management. | |
| Tensorfire cignal-ai/tensorfire MCP server for security-testing AI models, exposing garak vulnerability scanning and URL/MCP-endpoint scanning as callable tools. It lets agents probe LLM endpoints for jailbreaks, prompt injection, and data leakage, and classify URLs or sc | |
| ChatGPT MCP Bridge cihanak1/chatgpt-mcp-bridge Enables MCP-compatible AI agents and IDEs to send prompts to an active ChatGPT web session and retrieve the completed response without needing an API key. | |
| YHT Bilet MCP Server cihatata/yht-bilet-mcp-server Enables searching Turkish high-speed train (YHT) tickets via TCDD API. Supports real-time availability, station name resolution, date formatting, and passenger count. | |
| Agent Index MCP Server ciii-glitch/agent-index-mcp Enables users to search and discover over 500 AI agent endpoints and x402 APIs directly from MCP-compatible clients like Claude and Cursor. It provides tools to query endpoints by keyword, category, or capability while offering access to de | |
| Basic MCP Server cijaein/ci-openapi-mcp A minimal template MCP server demonstrating basic tools, resources, and prompts functionality, built with Smithery SDK for quick prototyping and deployment. |
38,901–38,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.