Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ABIS MCP Server cijlabs/abis-mcp Enables real-time AI behavioral drift monitoring and detection for Claude Code, tracking shifts in model behavior across 11 major models with tools for scorecards, version changes, and compliance reports. | |
| Google Workspace MCP cikeyz/google-workspace-mcp Enables coding agents to read and manage Google Workspace apps like Gmail, Drive, Docs, Sheets, and Calendar through 41 tools, with staged writes that require review and explicit commit before any change is applied. | |
| spotify-dj cikeyz/spotify-dj Enables DJs to retrieve BPM, key/Camelot, energy, and other track metadata with provider provenance, score transitions, plan setlists, and control Spotify playlists and playback with staged, revalidated writes for safety. | |
| mcp-template ciltress/mcp-template Enables agents to read and write an in-memory notes store through reliable MCP tools, with configurable profiles, response budgets, capability gating, self-documentation resources, session recovery, and stdio/Streamable HTTP transports. | |
| sap-abap-mcp ciltress/sap-abap-mcp MCP server providing full read/write access to SAP ABAP systems via ADT with password-less SSO (Kerberos, X.509, OAuth2), offering 128 tools for object CRUD, source editing, debugging, RFC calls, and more. | |
| Skyrim Modding Tools MCP ciltress/skyrim-modding-tools-mcp Provides a TypeScript MCP server scaffold that exposes tested, one-file tools to models with profile-scoped listings, honest annotations, response budgets, capability gating, and self-served guides and skills. Ships an in-memory notes backe | |
| billy-mcp cimalys/billy-mcp An MCP server for Danish accounting via Billy.dk API, enabling natural-language control over invoices, bank lines, reports, and more, with a write-guard for safety. | |
| MetaRouter Image MCP cimicimi9090/mcp-pic-metarouters MCP server that connects Codex or MCP clients to MetaRouter's OpenAI-compatible image generation API, enabling natural language image generation, local image editing, batch editing, and multi-reference image synthesis. | |
| Feishu Codex MCP cimorn/feishucodexmcp Enables Codex to access Feishu knowledge bases and authorized shared cloud drives, allowing listing, searching, and reading wikis, documents, spreadsheets, bitable, and files, with scoped and approval-gated create and edit capabilities. | |
| udisc cin/disc-golf-trends Enables answering questions about your disc golf rounds, courses, hole-by-hole scores and scoring trends, plus practice-throw speed, distance, spin and angle, read entirely from your own CSV exports with no credentials or network access. | |
| Roamtime cinaisv/roamtime-mcpb Enables querying autumn foliage peak forecasts for Japanese viewing spots, with best-viewing windows, confidence in days, and nearest station details via read-only tools. | |
| mcp-resile cinar/mcp-resile mcp-resile is a resilience gateway for the Model Context Protocol that sits in front of your own MCP servers and protects them from autonomous-agent traffic, with zero backend code changes. | |
| Kroger MCP Server cincyjosh/kroger-mcp-server Integrates Kroger's public API with Claude to allow adding meal plan grocery lists directly to your Kroger cart via natural language. | |
| heygen-mcp cinderhaus/heygen-mcp Exposes HeyGen's video generation API to MCP-compatible clients, enabling listing avatars, generating videos, and checking render status. | |
| congatudo_mcp cinderl/congatudo_mcp Enables AI agents to control a Cecotec Conga robot vacuum via 26 tools for state, cleaning modes, settings, timers, and system info. | |
| NorthCinder cinderline/northcinder NorthCinder is an MCP server that enables AI agents to compare products against a brief, rank them with explanations, and support approved checkout, all while running locally with privacy controls. | |
| Discord MCP Extended cindiekinzz-coder/discord-mcp-local- A feature-rich MCP server for Discord, giving AI companions full presence in Discord communities — reading, responding, reacting, searching, and speaking. | |
| MCP File Analyzer cindygao8/mcp An MCP server that enables the analysis of CSV and Parquet files by providing tools for statistical summaries, data previews, and structure exploration. It allows users to query local datasets and create sample data using natural language. | |
| mcp-server-simpsons-cities cindyhsugit/mcp-server-simpsons-cities An MCP server that finds real U.S. cities near a given zip code whose names match anything from The Simpsons. | |
| Midjourney MCP Server cindylimantoo/midjourney-mcp A Model Context Protocol server for AI image and video generation using Midjourney through the AceDataCloud API. | |
| MCP PR Workflow Server cindyylim/mcp-pr-workflow-server Streamlines GitHub PR workflows, monitors CI/CD, and sends Slack notifications. Provides tools for PR analysis, CI monitoring, and follow-up tasks. | |
| cinetpay-mcp cinetpay/cinetpay-mcp MCP server that connects AI assistants to the CinetPay API for mobile money payments across Africa, enabling balance checks, payment initialization, transfers, and more. | |
| fetch-url-raw cinit/fetch-url-raw A stateless MCP server that provides a configurable HTTP client tool for LLM agents, supporting custom methods, headers, bodies, timeouts, redirects, response size limits, DNS overrides, and TLS verification. | |
| mcp-socket cinit/mcp-socket Stateful outbound TCP/UDP MCP server enabling LLMs to perform multi-step network protocols like HTTP/1.x, SMTP, Redis, and DNS. | |
| gemini-cli-mcp-server cinnamobot/gemini-cli-mcp-server A MCP server wrapper for Google's Gemini CLI that enables AI assistants to perform searches, have conversations, list sessions, and analyze files using Gemini's capabilities. | |
| ngt-mcp cinnamobot/nic Enables AI assistants to retrieve real-time Niigata weather, warnings, tourism, and statistics from official data sources with source attribution. | |
| Ads Optimiser MCP server cintelis/adsoptimiser-mcp Lets Claude Desktop, Claude Code, or any MCP client generate ad images and videos from chat, including batches from folders of local files, prompt lists, and pipelines. Sign-in uses an OAuth device flow with workspace-scoped, revocable toke | |
| agentic-mcp-server cintelis/agentic-mcp-server Real-time observability dashboard for monitoring AI agents in multi-agent development workflows, with live WebSocket updates of tool calls, sessions, and usage statistics. | |
| brainstorm-mcp cintelis/brainstorm-mcp Connects Claude or any MCP client to a Brainstorm Board workspace via SSO, enabling note management, reading/writing markdown notes, and fetching attachments through natural language. | |
| taskmaster-mcp cintra-payroll-hr/cintra-taskmaster-interview MCP server providing Jira tools to fetch, create, update tickets, manage attachments, and generate AI-powered ticket content. | |
| da-mcp cioinside/da-mcp Cross-platform desktop automation MCP server that lets AI agents capture screenshots, run OCR with UI-element classification, control mouse/keyboard, and launch programs on Linux, macOS, and Windows. | |
| Jules MCP Server cipansor/mcp-jules Enables LLMs to create and manage Google Jules coding sessions programmatically. | |
| battle-training-mcp ciperx/battle-training-mcp Exposes the battle.training agent tank arena API as MCP tools, letting clients read ladder standings, bot ratings, recent matches and replay URLs, and inspect cup info. With an API key it also enables registering bots, uploading smoke-teste | |
| verify-mcp ciperx/verify-mcp Enables agents to verify SHA-256 artifact digests and decode Base USDC transfer transactions, returning trustworthy PASS/PARTIAL/FAIL verdicts for paid API calls and deliverables. | |
| photon-workshop-mcp ciphemonjy/anycubic-photon-workshop-mcp Enables preparing resin prints by driving Anycubic Photon Workshop's GUI through Windows UI Automation: resin-aware auto-orientation (suction cups, peel, cosmetic faces), mesh repair, auto-support generation, plate layout, and slicing. It a | |
| Generic ERP Analytics MCP Server cipher-preet/massaed_mcp_server_node Read-only MCP server for MongoDB ERP analytics with catalog-driven collection allowlist and safe find/aggregate tools. | |
| mcp-ariel-memory cipher208/a-memory Enables AI agents to maintain persistent, searchable two-layer memory with 37 tools, hybrid search, knowledge graphs, and enterprise features like authentication and backups. | |
| Airtable MCP Server cipher416/airtable-mcp Enables AI assistants to interact with Airtable databases by listing accessible bases and retrieving detailed schema information. Supports secure authentication and provides tools for exploring Airtable base structures through natural langu | |
| Katamari MCP Server ciphernaut/katamari-mcp An adaptive MCP server that grows and evolves based on user needs through self-modification, dynamic learning from feedback, and intelligent capability composition with workflow optimization. | |
| Credential Vault MCP ciphersatoru/credential-vault-mcp Enables secure credential storage for AI agents by encrypting secrets and providing agent-invisible references, ensuring sensitive data never leaks to the model. | |
| PrivateEmail MCP ciphersolutions-dev/private-email-mcp MCP server for Namecheap PrivateEmail that enables reading, searching, sending, and managing emails and folders via IMAP/SMTP. | |
| x64dbg-MCP cipherwire/x64dbg-mcp Connects AI models and autonomous agents to the x64dbg debugger through the Model Context Protocol, exposing 234 tools for live execution control, register and memory inspection, disassembly, breakpoints, thread scheduling, console I/O, and | |
| vit-bhopal-vtop-mcp-server cipherxhub/vtop-bhopal-mcp VTOP MCP Server for VIT Bhopal — connect Claude, Cursor, OpenCode and AI assistants to your VTOP student portal. Check attendance, marks, timetable, exam schedule, grades, CGPA, curriculum, faculty info, syllabus PDFs and hostel leave in pl | |
| mcp-image-gen cipriantuz/mcp-image-gen Enables MCP clients such as Claude Code to generate images from text prompts, optionally guided by reference images, through a single generate_image tool that uses the OpenAI Images API when configured and automatically falls back to Qwen-I | |
| taskmarket-mcp circadian-agent/taskmarket-mcp An MCP server that lets AI agents browse, create, and review work on TaskMarket (an onchain task marketplace on Base) from any MCP client, with money-moving actions gated by confirmation tokens and spending caps. | |
| Bilibili 互联 circlecrop/bilimcp Provides read-only access to Bilibili through 25 MCP tools for videos, subtitles, danmaku, comments, Opus, user profiles, feeds, public favorites, video collections, live rooms, public crew lists, images, and video frame capture. Supports s | |
| mcp-docs-server circlesac/mcp-docs-server Serves Markdown documentation as an MCP server, enabling AI agents to answer questions from your content. Supports local, npm, and Cloudflare deployment with reusable prompts and resources. | |
| circuit-mcp circuit-llm/mcp Provides AI agents with real-time Solana data and agent-swarm intelligence as tools, with auto-paid per-call micropayments in CIRC via x402. | |
| Deferno MCP Server circuit-stitch/defernowork-mcp Exposes the Deferno task-manager backend to AI agents, enabling them to read, create, update, and manage tasks, habits, chores, events, and daily plans. | |
| mcp-kicad-sch-api circuit-synth/mcp-kicad-sch-api MCP server for creating, modifying, and analyzing KiCAD schematic files using natural language. |
38,951–39,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.