Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Velocitron Simulator MCP Server circuitmeridian/velocitron-simulator Enables an agent to inspect and replace .petrinet source code open in a live browser page of the Velocitron simulator. | |
| Circuitry MCP Server circuitry-dev/circuitry-mcp-server Connects AI coding agents to Circuitry's visual workflow platform, enabling them to create and sync code nodes from project files, understand user-drawn flowcharts and diagrams, generate visual flowcharts, and create data visualizations lik | |
| Circulara Observe MCP Plugin circularroute/circulara-core Provides Claude Code integration to capture LLM usage events and surface cost, carbon, and savings reports via tools and hooks. | |
| Montauk circumtropical/montauk Enables personal AI agents to store and recall durable, private, human-readable relationship memory about people in a user's life, using Markdown as canonical storage with disposable SQLite and vector indexes for fast retrieval. | |
| DroidLab MCP cirkasssian/droid-lab-mcp Enables AI agents to fully control an Android emulator via MCP, including UI interaction, screenshots, APK installation, logging, and clipboard access, with optional live browser viewing for humans. | |
| Tabhand ciro-maciel/assistant-navigation Enables AI agents to read, navigate, click, type, hover, scroll, screenshot, and run scripts in pages inside the user's own logged-in Chrome, working in a dedicated background tab group in their active window. It relies only on plain extens | |
| Self MCP Server ciro-maciel/self-mcp Enables AI assistants to interact with Self, a self-awareness framework that connects daily actions to personal values, missions, and goals. Supports tracking foundations, intentions, projects, obstacles, and daily reflections through natur | |
| Second Eyes MCP cirrefera/second-eyes-ai A thin stdio client that proxies to the Second Eyes API, enabling wallet-equipped agents to pay via x402 and receive deterministic verdicts. | |
| Godot GDRE MCP cirrhosis233/godot-gdre-mcp A Windows stdio server that lets users query, list, extract, export, and patch Godot project and package resources through a separately provisioned GDRE runtime. It supports selective extraction, resource exporting, translation patching, an | |
| Assay MCP Server cirruslycurious/assay-mcp-server Enables Claude Desktop to search, retrieve summaries, and explore documents from an Assay document library. | |
| iphone-reminders cis-aconiticacid/myplannar Enables Codex on Windows to manage iPhone/iCloud Reminders through a local MCP bridge, including listing, creating, updating, completing, and deleting reminders with due dates, notes, and priorities. | |
| quickfile-mcp cisbrh/quickfile-mcp MCP server for the Quickfile REST API v2, supporting multi-account and secret-isolated configurations with 45 tools for managing Quickfile data. | |
| mcp-drink-inventory cisco890/mcp_redes Enables local drink inventory management, cocktail recipe retrieval, and food pairing recommendations through MCP. | |
| Cisco Catalyst SD-WAN MCP Server ciscodevnet/catalyst-sdwan-mcp-community MCP server for Cisco Catalyst SD-WAN Manager (vManage) that exposes REST API as tools for AI assistants to query and manage SD-WAN fabric, including device management, monitoring, templates, and policies. | |
| Cisco Secure Firewall FMC MCP Connector ciscodevnet/ciscofmc-mcp-server-community MCP server that exposes high-level tooling for Cisco Secure Firewall Management Center (FMC), allowing discovery of FMC profiles and searching access rules by IP, FQDN, or identity indicators. | |
| Meraki Magic MCP ciscodevnet/meraki-magic-mcp-community A Python-based MCP server that enables querying Cisco's Meraki Dashboard API to discover, monitor, and manage Meraki environments. | |
| Network Lab MCP ciscodevnet/network-lab-mcp-community Enables MCP-capable AI clients to inspect live lab topology, manage terminal sessions, run commands, collect evidence, and support network investigation, troubleshooting, and validation while engineers retain control over managed definition | |
| Cisco RADKit MCP Server ciscodevnet/radkit-mcp-server-community Enables LLMs to interact with network devices via Cisco RADKit, supporting inventory discovery, device attribute inspection, CLI command execution, and SNMP queries. | |
| ThousandEyes MCP ciscodevnet/thousandeyes-mcp-community Enables AI assistants to query Cisco ThousandEyes v7 API for network monitoring data including tests, agents, alerts, dashboards, and test results (network, page-load, web-transactions, path visualization) for faster troubleshooting through | |
| zotero-mcp cishii55929/zotero-mcp Enables MCP clients and AI assistants to search a Zotero library, retrieve detailed item metadata and PDF full text, and work with either the local Zotero API or the Zotero Web API. | |
| cislunarspace-mcp cislunarspace/cislunarspace-mcp Enables AI clients to search a bilingual glossary of Earth-Moon space terms by keyword and retrieve individual entries with full definitions, references, and page links through two read-only MCP tools. It covers 720 terms across 8 categorie | |
| arm-migrate-mcp cisneroscodes/arm-migrate-mcp Analyzes, plans, and benchmarks LLM workload migration from x86 to Arm64, generating measurable speedups using free GitHub Arm runners. | |
| wazuh-mcp-soc cisse-lalya/wazuh-siem-claude-desktop-conversational-soc-via-mcp Enables natural-language security operations by connecting Wazuh SIEM to Claude Desktop via MCP, allowing querying of alerts, agents, vulnerabilities, and generating security reports with Slack integration. | |
| citadelle-mcp citadelleop/citadelle-mcp Enables AI assistants to interact with Citadelle options markets on EVM/Robinhood Chain, including fetching market liquidity, wallet positions, and generating secure trade links. | |
| Mythos Data citarium/mythos-data-mcp Comparative mythology as citable data — Greek, Roman, Norse and Egyptian gods and primary sources. | |
| citedbyai-mcp-server citedbyai/citedbyai-mcp-server Free AI citation readiness checker powered by Cited By AI's CPS® framework. Instantly scores any website 0-100 across structured data, meta tags, content quality, technical config, and AI signals. Returns a grade (A-F) and the top issues bl | |
| citedhealth-mcp citedhealth/citedhealth-mcp MCP server for CITED Health that allows AI assistants to query evidence-based supplement data, including ingredient evidence grades, health conditions, PubMed papers, glossary terms, and educational guides. | |
| BreachSpider MCP server citedrelevance/breachspider-mcp Enables AI agents to check industrial and IT devices by vendor, product, and firmware version, returning affecting CVEs, fixes, vendor advisories, fix plans, and change tracking through read-only tools. | |
| CiteRocket MCP citerocket-hq/reddit-mcp Enables AI assistants to access Reddit data through the Model Context Protocol, including searching posts and comments, retrieving comment trees, looking up user profiles and karma, and checking account status. | |
| Citesurf MCP citesurf/mcp Enables brand visibility monitoring across major AI platforms like ChatGPT, Claude, Gemini, and Perplexity. It allows users to track visibility scores, analyze competitor data, and receive actionable insights to improve AI-generated brand r | |
| mcp-csv-forwarder cithukyaw/mcp-csv-forwarder Enables sending CSV data to a configured API endpoint, supporting grouped entries with optional date markers and configurable column count. | |
| gameface-devtools-mcp citiesskylinesmodding/agents-plugins An MCP server that lets AI models drive any Coherent Gameface UI over Chrome DevTools Protocol, enabling JavaScript evaluation, screenshots, DOM inspection, console capture, and breakpoint debugging. | |
| Yahoo Finance MCP Server citizenhicks/yahoo-finance-mcp Enables AI assistants to access real-time financial data, historical stock prices, company information, financial statements, options data, market news, and analyst recommendations through Yahoo Finance. Built with FastMCP v2 for efficient | |
| @citizenofthecloud/mcp-server citizenofthecloud/mcp-server MCP server for Citizen of the Cloud — agent identity verification, trust scoring, and registry access for any AI runtime that speaks the Model Context Protocol. | |
| Citizen Deployment MCP Server citizenteam/mcp Enables deployment and management of applications on the Citizen platform from git repositories or local files. It allows AI assistants to monitor deployment logs, handle authentication, and automatically fix build errors using intelligent | |
| Logos Web MCP citizenyolo/logos-web-mcp Enables AI clients to search a user's licensed Logos library, retrieve targeted passages and bounded context blocks, and support human-initiated research through an authenticated local Safari session. | |
| Obsidian Tasks Engine MCP cito/obsidian-tasks-engine-mcp Enables AI assistants to run the real Obsidian Tasks query language against a Markdown vault via MCP, supporting filters, relative dates, dependencies, grouping, sorting, and query explanations without requiring Obsidian to be running. | |
| Deepghs MCP citronlegacy/deepghs-mcp MCP server for the DeepGHS anime AI ecosystem. Dataset discovery, tag search, character dataset finder, and training pipeline code generation. | |
| Gelbooru MCP citronlegacy/gelbooru-mcp A Python MCP server that wraps the Gelbooru API. Connect it to any MCP-compatible client (Claude Desktop, Cursor, etc.) to search posts, look up tags, and generate Stable Diffusion prompts from real character appearance data — all directly | |
| ZeroChan MCP citronlegacy/zerochan-mcp MCP server for the Zerochan anime image board API. Browse the global feed, search by tags, and retrieve full entry metadata — directly from any MCP-compatible AI assistant. | |
| mcporter-bridge citrus086/mcporter-bridge Bridges a local mcporter registry into a single MCP server, enabling clients like Codex and Claude to list, inspect, and call tools from multiple MCPs with lazy loading. | |
| CityJSON Specification MCP Server cityjson/cj-mcp Provides AI assistants with structured access to the CityJSON specification, enabling on-demand fetching of specific chapters. | |
| lowcode-mcp citywalki/amis-docs-mcp Converts lowcode component documentation into an authoritative, branch-versioned source that LLMs can retrieve hierarchically, enabling agents to write schema with verifiable references. | |
| local-code-index ciulla/local-code-index A local MCP server that indexes codebases using Tree-sitter AST parsing and LanceDB, enabling AI models to search across repositories with sub-second latency. | |
| X402 MCP civicteam/x402-mcp Enables micropayments for MCP tool invocations using the X402 payment protocol, allowing servers to charge per tool usage in USDC and clients to automatically handle payments. | |
| korean-people-persona civilian7/korean-people-persona MCP server for querying a database of 1 million Korean personas with full-text search, enabling AI agents to retrieve detailed demographic, professional, and personal profiles. | |
| telegram-sender civilian7/telebot Enables AI agents to send Telegram messages including text, images, links, and documents through MCP tools. | |
| Civis MCP Server civisanalytics/mcp-server-civis Enables interaction with the Civis Platform for data exploration, querying, and workflow execution. Supports schema-restricted read-only mode and tools like run_query, list_tables, and publish_html_report. | |
| Civitai MCP Server civitai/civitai-mcp-server Enables AI agents to fully interact with the Civitai platform, including browsing models, images, and creators; posting, reacting, reviewing, following, collecting, writing articles and comments; sending DMs; and managing bounties and annou | |
| CivNode MCP Server civnode/civnode-mcp MCP server for CivNode, an AI-powered creative writing platform. Provides 263 tools for writing, world-building, entity exploration, and platform administration. |
39,001–39,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.