Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| voice-mcp clj0828/voice-mcp Enables AI assistants to synthesize speech in a custom cloned voice and present it through an inline audio player with waveform visualization and transcript toggle. | |
| IMBA Agent MCP clnt2021/imba_agent_mcp Enables AI agents to spend with the user's own key by paying via USDT TRC-20 and buying Visa/Mastercard prepaid cards, travel eSIMs, and gift cards, and also provides access to policy and how-to documentation. | |
| IMBA Agent Spend MCP clnt2021/imba_agent_spend_mcp Enables agents to spend funds on Visa/MasterCard prepaid cards, travel eSIMs, and gift cards, with paid KYT address screening and USDT TRC-20 funding. | |
| Cloaked MCP Server cloakedagent/cloaked Enables AI agents to make autonomous payments on Solana with on-chain enforced spending limits, preventing unauthorized fund drainage. | |
| WoLiu-MCP cloakgloom/woliu-mcp A plugin-based MCP server framework that auto-discovers service modules such as ComfyUI, PPT generation, TTS, and Spine2D, enabling any MCP client to connect and use these capabilities. | |
| Cloak Agent cloakhq/cloakbrowser-agent Enables an agent to run whole browser tasks on live web pages from a plain-language goal — opening tabs, clicking, typing, scrolling, and returning the relevant page sections as markdown — with every step reported alongside its confidence. | |
| CloakLLM MCP Server cloakllm/cloakllm-mcp Wraps CloakLLM's Python SDK to provide tools for PII detection, cloaking, and restoration within MCP-compatible clients. It enables users to sanitize sensitive data before sending it to an LLM and restore original values using unique token | |
| CloakLLM MCP Gateway cloakllm/cloakllm-mcp-gateway Enables MCP clients to safely connect to MCP servers by sanitizing sensitive data in tool results and restoring it in tool arguments, so the model never sees PII while downstream tools still receive real values. | |
| MIST - Model Intelligence System for Tasks cloaky233/mist Empowers AI assistants with real-world capabilities including note management, Gmail integration, Google Calendar and Tasks management, and Git repository operations through the Model Context Protocol. | |
| Freelance MCP server clockbook-com/freelance-mcp Lets MCP-capable AI assistants interact with the Clockbook freelance marketplace through GraphQL, covering talent search, job postings, proposals, contracts, milestones and escrow, wallet, messaging, and notifications. | |
| Flight + Stay Search MCP clockworked247/flights-mcp-ts Enables searching for flights (one-way, round-trip, multi-city) and hotels using the Duffel API, with support for detailed offer information, cabin class preferences, and guest reviews. | |
| Tushare MCP Server cloga/tushare-mcp Provides access to Tushare financial data through the Model Context Protocol, enabling users to query and retrieve Chinese stock market and financial information. | |
| SemaphoreUI MCP Server cloin/semaphore-mcp Enables AI assistants to interact with SemaphoreUI for managing and running Ansible automation tasks through natural language commands. | |
| ppt-master cloneorcopy/ppt-master-mcp Enables AI assistants to create, edit, and export PowerPoint decks through natural language, with live preview, project tracking, and direct browser-based editing. | |
| xiaohongshu-mcp-py cloneyourproj0/xiaohongshu--mcp-py MCP server for Xiaohongshu automation, enabling feed browsing, search, note publishing, and interaction via Playwright and FastMCP. | |
| Personal MCP Server cloonix/mymcp Enables AI assistants to fetch and process YouTube video transcripts in multiple formats and languages, with built-in caching and rate limiting for efficient video content analysis. | |
| TikTok-Reddit Poster MCP cloph-dsp/tiktok-reddit-mcp Downloads TikTok videos, transcribes them, suggests subreddits and titles, and posts them as native Reddit videos with auto-comment for source links. | |
| grok-lab-bridge closedladder/grok-lab-bridge An MCP server that gives AI bots tool access to home lab machines, enabling remote command execution, file operations, directory listing, GPU status checks, web research, scheduled jobs, shared memory, and deterministic artifact review. It | |
| m4x closeofbusiness/m4x Local, private audio transcription MCP server enabling AI agents to transcribe audio files entirely on-device without uploading data. | |
| APAC Compliance MCP closermethod/apac-compliance-mcp MCP server for AI agents selling into APAC. 7 tools: country briefs (Japan/Singapore/Korea/India/Australia/Hong Kong/Indonesia), outreach templates, etiquette guides, follow-up cadences, stakeholder maps. PDPA/APP/APPI-aware. | |
| B2B Buyer-Signal MCP closermethod/buyer-signal-mcp Interprets B2B buyer signals (hiring, funding, tech changes) into structured outreach implications for AI sales agents, bridging the gap between raw signal data and actionable intent. | |
| EMEA Compliance MCP closermethod/emea-compliance-mcp EMEA sales + employment compliance for AI agents across 7 countries (UK, Germany, France, Spain, Italy, Netherlands, Sweden). GDPR, IR35, CNIL, B2B opt-out rules, cultural buyer psychology. Built by an ex-Deel ($12B) compliance + sales oper | |
| EOR Compliance MCP closermethod/eor-compliance-mcp MCP server for AI agents handling EOR & global hiring conversations. 8 tools: country EOR briefs, misclassification risk, EOR vs entity calculator, termination rules, statutory benefits, work visa paths, objection handlers. | |
| LATAM Compliance MCP closermethod/latam-compliance-mcp MCP server for AI agents selling into Latin America. 7 tools: country briefs (Mexico/Brazil/Colombia/Argentina/Chile/Peru/Costa Rica), Spanish + Portuguese templates, etiquette guides, follow-up cadences, LGPD/CFDI/Habeas Data compliance. | |
| Sales-Engineering/RFP-Response MCP closermethod/sales-engineering-mcp Provides structured templates for security questionnaires, RFP responses, and competitive battlecards to help AI agents and sales engineers draft responses efficiently. | |
| SMB Sales Intelligence MCP closermethod/smb-sales-intelligence-mcp Domain-expert SMB sales playbooks for AI agents. Discovery questions, objection handlers, cold email + LinkedIn DM templates, BANT/MEDDIC frameworks, closing tactics. Built by an ex-Criteo (268% quota) / ex-Deel ($12B) / ex-HBO / ex-Bloombe | |
| MarginDeck MCP clot/margindeck-mcp Enables Claude Desktop users to query recorded business finances—such as revenue, costs, estimated contribution profit, and cash runway—from a paired local Mac app, with in-app approval required for financial reads and separate confirmation | |
| Notebook Library MCP Server clotho2/notebook-library-mcp Provides token-efficient semantic search and document retrieval by indexing PDFs, text, and markdown files into local notebooks using ChromaDB. It enables AI agents to query relevant passages from large documents through local embedding mod | |
| CPersona cloto-dev/clotohub-servers Persistent AI memory server with 3-layer hybrid search (vector + FTS5 + keyword), confidence scoring via Reciprocal Rank Fusion, episodic/profile memory, and 16 tools. Zero LLM dependency. Works standalone with Claude Desktop and Claude Cod | |
| Clotr Guard clotr-app/clotr Checks text for credentials and personal details on your device, before it goes anywhere. Runs locally over stdio and opens no network connection. | |
| decisions-judge-mcp clouatre-labs/decisions-judge-mcp Enables coding agents to send natural language and JSON application state to a judge tool that returns typed judgments (yes/no probability, choice, or score) with model and usage metadata, and fails gracefully without blocking workflows. | |
| Config MCP Server cloud-aspect/config-mcp-server Enables AI assistants to search documentation, read and update configuration files, and discover settings across your development workspace. Supports JSON, YAML, TOML, and Markdown files with seamless integration for GitHub Copilot and othe | |
| mcp-outlook-calendar cloud-li1/mcp-outlook-calendar Enables interaction with Microsoft Outlook Calendar and To Do lists via the Microsoft Graph API, allowing users to manage events and tasks through natural language. | |
| nc-mcp-server cloud-py-api/nc_mcp_server An MCP server that exposes Nextcloud APIs as tools for AI assistants, enabling management of files, calendar, contacts, conversations, and more. | |
| mcp-server-mattermost cloud-ru-tech/mcp-server-mattermost Lets AI assistants read, search, and post messages in Mattermost channels, manage threads, reactions, files, and users with 38 tools. | |
| Multi-cloud MCP RAG demo cloud-skunkworks/docker_universal_mcp_server Enables AI agents to run citation-backed retrieval over a read-only, bounded knowledge base, exposing a ranked search tool, document resources, and a grounding prompt that labels retrieved text as untrusted. The corpus can be loaded from lo | |
| Live Memory cloud-temple/live-memory MCP server providing shared working memory for collaborative AI agents, with real-time notes and LLM-consolidated structured memory bank. | |
| MCP Tools cloud-temple/mcp-tools A passive MCP server that exposes a toolbox of executable tools (shell, network, HTTP, AI search, SSH, S3 file operations) to autonomous agents via Streamable HTTP, with strong security features including Docker sandboxing and WAF. | |
| local-repo-mcp cloud-xolt/local-repo-mcp Secure agent coding runtime for local Git repos with policy enforcement, RBAC, sessions, approval workflow, and sandboxed writes, optionally connectable to ChatGPT via Secure MCP Tunnel. | |
| Azure MCP Blueprint cloud2br-msftlearninghub/azure-mcp-blueprint Deploys a Model Context Protocol (MCP) server on Azure with industry-specific templates, sample data, and pre-configured tools for AI agents to query and manage resources. | |
| @cloud9-labs/mcp-github cloud9-labs/mcp-github MCP (Model Context Protocol) server for GitHub API integration. This server provides comprehensive tools for interacting with GitHub repositories, issues, pull requests, branches, and code search through a unified interface. | |
| Google Calendar MCP Server cloud9-labs/mcp-google-calendar MCP server for Google Calendar API, providing 10 tools for event and calendar management such as listing calendars, creating events, and checking availability. | |
| HubSpot CRM MCP Server cloud9-labs/mcp-hubspot A Model Context Protocol (MCP) server that provides AI assistants with full access to HubSpot CRM. Manage contacts, companies, deals, pipelines, and associations directly from Claude, Cursor, or any MCP-compatible client. | |
| Notion MCP Server cloud9-labs/mcp-notion Provides full access to the Notion API, enabling search, creation, and management of databases, pages, blocks, and users directly from MCP clients. | |
| mcp-shopify cloud9-labs/mcp-shopify MCP server for Shopify Admin API. Enables product, order, customer, and inventory management via natural language. | |
| @cloud9-labs/mcp-slack cloud9-labs/mcp-slack MCP server for Slack API integration with 14 tools for messaging and channel management, including sending messages, managing channels, searching messages, and file uploads. | |
| MCP Supabase Server cloud9-labs/mcp-supabase MCP server for Supabase database and storage operations, enabling querying, inserting, updating, deleting rows, schema introspection, and file storage management. | |
| Knowi-mcp cloud9charts/knowi-mcp Knowi’s MCP server gives AI tools full access to the entire analytics workflow.
Knowi's 20+ specialized data agents automatically chain together to connect you datasources, write queries, build dashboards, and deliver reports. | |
| aegis-re cloudauraa/aegis-re Enables AI coding assistants to inspect ELF, PE, and Mach-O binaries for hardening mitigations and high-risk symbols, and to triage source or decompiled code against MITRE CWE patterns through MCP tools. | |
| ontology-mcp-self-healing cloudbadal007/ontology-mcp-self-healing Self-healing MCP server that monitors database schema changes, detects differences, and automatically updates ontology mappings using AI to ensure agents continue working without manual intervention. |
39,351–39,400 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.