Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| New Relic MCP Server cloudbring/newrelic-mcp Run NRQL, NerdGraph, and REST v2 operations to query data, manage incidents, create synthetics, and annotate deployments — all from your MCP client. | |
| storefront-mcp cloudcart/storefront-mcp Lets an AI assistant learn the CloudCart Storefront GraphQL API, look up types, queries and mutations by name, and validate GraphQL snippets against schema and common real-world mistakes. It runs entirely locally with no store, token, or ne | |
| GnosisLab cloudcell/gnosislab Enables AI agents and MCP clients to run research as an explicit scientific process: forming hypotheses, designing and executing sealed experiments, capturing observations and artifacts, linking claims to supporting evidence, and reviewing | |
| MCP Job-Tracker Server cloudcorprecords/mcp-job-tracker Enables users to search job applications, check reply status, find stale leads, and view pipeline statistics from their application tracker through MCP clients. | |
| KubeCraft MCP Server cloudcrafttech/kubecraft-mcp-server A Model Context Protocol (MCP) server that gives AI assistants full visibility and control over Kubernetes clusters. | |
| @cloudcraftwithfranck/govcloud-mcp cloudcwfranck/govcloud-mcp An MCP server providing 20 AI-powered tools for DoD/FedRAMP cloud engineering. | |
| TravelService clouddnagmbh/live-session-genai-mcp-integration-in-sap-cap Enables AI agents to query and act on SAP CAP travel domain data (travels, bookings, customers, agencies) via MCP tools, including unbound actions and security-aware access. | |
| Cloudera AI Workbench MCP Server cloudera/cai_workbench_mcp_server Enables LLMs to interact with Cloudera AI Workbench APIs for managing files, jobs, models, experiments, projects, and applications. | |
| Cloudera Iceberg MCP Server cloudera/iceberg-mcp-server Enables read-only access to Apache Iceberg tables via Impala, allowing LLMs to inspect database schemas and execute SQL queries to retrieve data from Iceberg tables. | |
| MCP Server Template cloudflare-mcp-apps/ads-roi A skeleton template for building MCP servers with SEP-1865 interactive widget support, dual authentication (OAuth + API Key), and Cloudflare Workers deployment. | |
| Cloudflare MCP Server cloudflare/mcp A token-efficient MCP server that provides access to the entire Cloudflare API (2500+ endpoints) using a code execution pattern, enabling natural language management of Cloudflare services. | |
| Cloudflare Playwright MCP cloudflare/playwright-mcp A server that leverages Playwright for automated browser testing and integrates with Cloudflare Workers, enabling AI assistants to control web browsers for navigation, interaction, and screenshots. | |
| Workers MCP cloudflare/workers-mcp A package that connects Claude Desktop and other MCP clients to Cloudflare Workers, enabling custom functionality to be accessed via natural language through the Model Context Protocol. | |
| project-sync cloudgentic/project-sync A self-hosted remote MCP server for cross-model AI session handoff, allowing users to start a project in one AI assistant and continue in another via shared project logs, files with version history, and full-text search, all stored in a sin | |
| Cloudglue MCP Server cloudglue/cloudglue-mcp-server Connects AI assistants to Cloudglue for video analysis, enabling video description, entity extraction, chapter segmentation, and metadata retrieval from various sources like YouTube and cloud storage. | |
| mac-parallel-accelerator cloudguo123/atomlane Enables Codex on macOS to accelerate builds, tests, Docker, and research pipelines by compiling work into a typed intermediate representation and executing only conflict-checked, independent atoms in parallel while preserving task semantics | |
| Cloudinary cloudinary/mcp-servers Cloudinary MCP server enables AI agents to upload, manage, analyze transform, optimize and deliver media using Cloudinary’s API. | |
| Cloudinary Media Generation MCP Server cloudinary/media-generation-mcp Enables generating images from text prompts using various AI models (FLUX, Recraft, GPT Image, etc.) and automatically delivering them through Cloudinary's platform. | |
| cloudisp-mcp cloudisp/cloudisp-mcp Enables AI agents to query, and when writes are enabled operate, an ISP management platform in natural language, including subscriber lookup, internet profiles, work orders, technicians, and network status. It runs locally against the platf | |
| oak-events cloudlabworks/oak-events Privacy-first events from Luxonis OAK cameras for AI agents: person enter/leave zone events, depth changes and camera health as text. Never returns pictures. | |
| CloudMailin MCP cloudmailin/cloudmailin-mcp Enables AI models to manage CloudMailin email data, including listing addresses, messages, and sending emails with markdown support. | |
| Supabase MCP Server cloudmediaservices/supabase-mcp-server Enables AI assistants to perform CRUD operations on Supabase databases through natural language. Supports advanced filtering, pagination, and safety checks for seamless database interaction. | |
| CodeWiki MCP Server cloudmeru/codewiki-mcp Enables querying any GitHub, GitLab, or Bitbucket repository and getting AI-generated answers about the codebase, powered by Gemini. | |
| MetaTrader 5 MCP Server cloudmeru/metatrader-5-mcp-server Provides read-only access to MetaTrader 5 market data, trading history, and technical analysis through Python execution. Supports querying price data, calculating indicators, creating charts, and generating forecasts with Prophet and ML mod | |
| MCP OCI Registry Server cloudowski/mcp-oci-registry A Model Context Protocol (MCP) server for querying OCI container registries. Provides tools and prompts for interacting with registries like Docker Hub, GHCR, and other OCI-compatible registries. | |
| csa-skilljar cloudsecurityalliance/csa-skilljar Enables local MCP access to both Skilljar REST APIs (v1 and v2), reproducing the official 73-tool v2 surface and adding v1-only capabilities such as per-lesson progress, webhooks, asset upload, commerce, learning paths, and instructor-led t | |
| csa-zendesk cloudsecurityalliance/csa-zendesk Intended to enable interaction with Zendesk ticketing, Help Center, and Status operations over local stdio, with fail-closed capability policy; nothing is implemented yet. | |
| Easysearch MCP Server cloudsmithy/easysearch-mcp-server Enables AI agents to interact with INFINI Easysearch (compatible with Elasticsearch/OpenSearch APIs) through 121 tools covering cluster management, index operations, document manipulation, search queries, snapshots, and monitoring. | |
| Gear MCP Server cloudstudioiot/gear-mcp Enables MCP clients to read facilities, devices, live values, history, and alarms from a Cloud Studio Gear IoT account, filtered to the user's permissions and strictly read-only. | |
| Postgres MCP Pro Plus cloudthinker-ai/postgres-mcp-pro-plus An extended PostgreSQL management and analysis server that provides database professionals with tools for schema management, query optimization, performance monitoring, and health analysis through a collection of specialized functions. | |
| FastMCP Server cloudtype-examples/fastmcp A simple MCP server for task management with Bearer token authentication, supporting create, complete, and list tasks operations. | |
| MCP Server Node cloudtype-examples/mcp-server-node A Node.js MCP server providing user management, task management, and calculator tools with Bearer token authentication, deployable on Cloudtype. | |
| CloudTypeJ MCP Server cloudtypej/mcp-server MCP server providing calculator, user list, and statistics tools with Bearer Token authentication. | |
| OSINT MCP Server cloudwaddie/osint-mcp A comprehensive MCP server providing tools for IP, domain, email, and image-based open-source intelligence. It integrates services like Shodan, VirusTotal, and HaveIBeenPwned to facilitate advanced security research and data gathering. | |
| PGScope MCP cloudwallker/pgscope-mcp Enables AI agents to explore PostgreSQL schemas, run read-only queries, inspect execution plans, and receive evidence-backed SQL diagnostics with reproducible optimization benchmarks over local stdio. | |
| hackyeaster-solver cloudwarriors-ai/hackyeaster-solver MCP server enabling Claude to solve HackyEaster CTF challenges through web scraping, decoding, image analysis, and progress tracking. | |
| OpenAPI MCP Server cloudwarriors-ai/openapi-mcp-server A generic MCP server that dynamically exposes any OpenAPI-documented REST API to LLMs by auto-discovering endpoints. It provides tools for exploring API capabilities and making authenticated requests directly through natural language interf | |
| DiffuGen cloudwerx-dev/diffugen Powerful image generation system leveraging multiple Stable Diffusion models (flux-schnell, flux-dev, sdxl, sd3, sd15) for creating high-quality AI-generated images with precise customization. | |
| GPT Image 1 MCP cloudwerx-dev/gpt-image-1-mcp A Model Context Protocol server that enables generating and editing images using OpenAI's gpt-image-1 model, allowing AI assistants to create and modify images from text prompts. | |
| rednote-agent cloudy-sfu/mcp-rednote-assistant MCP server which collects data from www.xiaohongshu.com social media | |
| Doorway cloudy070/doorway-paypal-ai-hackathon-2026 Exposes an owner-reviewed, server-validated merchant catalog as MCP shopping tools that let an agent fetch store details, search products, check availability, build a cart, and start a checkout that hands a capability-protected link to a hu | |
| mixxx-mcp cloudygetty-ai/mixxx-mcp MCP server for Mixxx DJ software that enables AI agents to control transport, mixing, EQ, loops, hotcues, and effects in real time through MIDI and OSC. | |
| Sky Compass MCP cloudyrathor/sky-compass-mcp Enables users to determine a celestial object's magnetic compass bearing, altitude, and horizon visibility for a given location and time, including coordinate conversion and timed tracking samples. | |
| python-sandbox-mcp-server cloudywu0410/python_sandbox_mcp_server This is a secure Python code execution server that enables LLMs to run Python code safely in isolated Docker containers, supporting stdout capture and Matplotlib PNG generation. | |
| Clous MCP server clousai/mcp Provides access to SEC/EDGAR filings data through the Clous API, enabling search and retrieval of filings, financials, insider trades, 13F holdings, and more from a single JSON interface. | |
| clover-mail-mcp clover475/clover-mail Enables AI assistants to query a local, read-only Apple Mail archive, letting them search messages by keyword, sender, subject, date or account and retrieve summaries, individual message bodies, pending action items and stored daily briefs. | |
| mcp-cctb-search cloveric/deepseek-harness-web-search-plugin Provides source-traceable live web search and URL extraction through Brave and Tavily, with provider status, health checks, fallback notices, and optional TaroCub guidance. | |
| Qianji Bridge MCP Server cloverstd/qianji-bridge Enables ChatGPT to read and analyze a self-hosted Qianji ledger through 15 MCP tools exposed over OpenAI's Secure MCP Tunnel, covering login, sync, multi-ledger queries, bill details and filtering, income/expense statistics, budget progress | |
| Figma Bridge clovis500c/figma-bridge Connects an MCP client such as Claude Code to the Figma file open in the desktop app, letting the agent create frames, write text, apply styles, import images and SVGs, take screenshots, and run arbitrary Figma Plugin API code. Commands tra | |
| mcp-server-cloudbrowser clpublic/mcp-server-cloudbrowser mcp-server-cloudbrowser |
39,401–39,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.