Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| agentic-remote-pc cogniziocompany/agentic-remote-pc Enables AI agents to securely control a remote Windows/Linux PC via MCP and REST, executing shell commands and driving coding-agent CLIs like Claude, Cursor, and Codex. | |
| Cogniz Memory Platform MCP Server cognizonline/cogniz_claude_mcp Official Model Context Protocol (MCP) server for Cogniz Memory Platform. Enables AI assistants like Claude to store and retrieve memories across conversations. | |
| beads-mcp-server cognovis/beads-mcp-server An MCP server that exposes a curated typed surface over the Beads CLI, managing workspaces and issues through secure, sessionless HTTP with static bearer authentication. | |
| agroclimate-mcp cogrowersqa/agroclimate-mcp Enables querying AgroClimate company data via natural language through ChatGPT or Claude. | |
| qualitycontrol-mcp cogrowersqa/qualitycontrol-mcp Connects ChatGPT/Claude with the QualityControl REST API, allowing users to query company information, sensor data, weather, harvest, exports, dispatches, and more using natural language. | |
| conclave cogspro1234/conclave An MCP server that enables an AI orchestrator to convene a council of other AIs via their CLIs, deliberate, and synthesize consensus. | |
| fin-data-mcp-server cohend/fin-data-mcp A Model Context Protocol server providing free financial market data across 13 categories with 83 no-key tools, enabling access to stocks, indices, options, forex, crypto, energy, prediction markets, and more. | |
| cohesivity cohesivity-org/cohesivity-plugin Cohesivity lets AI agents provision and manage infrastructure like postgres, hosting, storage, redis, realtime, etc. and other useful APIs. | |
| indico-mcp cohm/indico-mcp MCP server for the Indico meeting agenda system, enabling AI agents to search event categories, browse agendas, and extract contribution and session details. Works with multiple Indico instances simultaneously. | |
| Google Ads MCP cohnen/mcp-google-ads A tool that connects Google Ads with Claude AI, allowing users to analyze advertising data through natural language conversations and access campaign information, performance metrics, keyword analytics, and ad management. | |
| Magasins U MCP server cohozen/magasins-u-mcp-server Enables an AI agent to access a user's own Courses U grocery-drive account through a manually opened browser session in Docker, so it can search and compare products in the selected store. Cart, shopping-list, pickup-slot, order, receipt, a | |
| bluesky-mcp coilyco/bluesky-mcp A read-only MCP server for Bluesky that provides tools to access profiles, posts, feeds, and notifications using AT Protocol. | |
| eco-mcp-app coilyco/eco-mcp-app An MCP server that provides live status updates for the Eco via Sirens game server, displaying meteor countdowns, player statistics, and world information directly within Claude Desktop. It also serves as a minimal reference implementation | |
| claude.design-mcp coin-seeker/claude.design-mcp Drives the real Claude Design web app from your editor or agent, enabling creation, iteration, and retrieval of designs generated on your own claude.ai account via automated browser interaction. | |
| @coinbase/payments-mcp coinbase/payments-mcp Combines wallets, onramps, and payments via x402 to enable AI agents to autonomously discover and pay for services without API keys or complex setup. | |
| coinex-mcp-server coinexcom/coinex_mcp_server An MCP server for interacting with the CoinEx cryptocurrency exchange, enabling market data queries and authenticated trading operations via AI agents. | |
| CoinGecko MCP - Cryptocurrency Price & Market Data coingecko/coingecko-typescript Official CoinGecko API MCP Server for Crypto Price & Market Data.
More details: https://docs.coingecko.com/reference/mcp-server | |
| CoinLobster MCP coinlobster/coinlobster-mcp Provides real-time crypto whale trade data and market analysis to AI agents, including unusual flow radar, liquidations, funding rates, and market snapshots across 15 exchanges and on-chain DEXs. | |
| coinrule-mcp-ai-trading coinrule-com/coinrule-mcp-ai-trading Enables AI assistants to manage crypto trading through Coinrule via natural language, including portfolio inspection, strategy creation, backtesting, and execution with configurable read/write permissions. | |
| MCP Server Starter coinselor/mcp-zenon A production-ready template for building Model Context Protocol servers in TypeScript, offering fast development with Bun, Biome linting, and automated version management. | |
| CoinStats MCP Server coinstatshq/coinstats-mcp MCP Server for the CoinStats API.
Provides access to cryptocurrency market data, portfolio tracking, and news. | |
| engram coinstax/engram Provides persistent project memory for AI coding agents, enabling context retention across sessions via event logging, briefing generation, and querying. | |
| InvokeAI MCP Server coinstax/invokeai-mcp-server A Model Context Protocol (MCP) server that integrates InvokeAI with Claude Code, enabling AI-powered image generation, transformation, and upscaling directly from your AI assistant. | |
| Coinugget Crypto Signals coinugget/coinugget-mcp Provides real-time cryptocurrency market signals including RSI, top gainers, price action, kimchi premium, market prices, and derivatives data from multiple exchanges. | |
| CoinVello MCP Server coinvello/coinvello-ai Enables AI agents to accept non-custodial crypto payments by creating hosted checkout sessions and invoices, tracking payments and wallets, registering and verifying signed webhooks, purchasing prepaid credits, and querying or exporting the | |
| ctxkeeper coisini-cyber/ctxkeeper-mcp Enables AI coding agents to keep durable project memory across sessions and retrieve token-budgeted context packs, so they can recall decisions, gotchas, and TODOs and locate relevant code without rereading entire repositories. | |
| Fang coisini-cyber/fang Enables coding agents to run diff-scoped mutation testing on Python code, returning mutation scores and surviving mutants with actionable hints so they can improve tests. | |
| Journal MCP Server coji/journal-mcp An MCP server that integrates with Claude Desktop for managing personal journal entries, providing both a web viewer for browsing journals and tools for adding, searching, and analyzing journal content. | |
| flashcard-mcp cokovali10-sketch/flashcard-mcp A lightweight MCP server that adds spaced-repetition flashcards (SM-2) to AI assistants, storing data locally in SQLite and enabling card creation, review, and scheduling. | |
| colacloud-mcp cola-cloud-us/colacloud-mcp Provides access to over 2.5 million US alcohol label records from the TTB via the COLA Cloud API. It enables users to search for labels by brand, barcode, or permit holder and retrieve detailed product information including label images and | |
| Figma Context MCP cola-sk/figma-context-mcp Converts Figma designs into structured code context with token-aware styling, enabling AI agents to generate production-level frontend code. | |
| Naver Encyclopedia MCP Server cola314/naver-encyc-mcp A Model Context Protocol server that wraps Naver's encyclopedia search API, allowing users to search for information from Naver's encyclopedia through stdin/stdout or HTTP interfaces. | |
| yt2vlc-mcp cola314/yt2vlc-mcp Streams YouTube videos to VLC Media Player via MCP. Allows searching YouTube and playing videos directly in VLC. | |
| handoff-mcp coladapo/handoff-mcp Enables AI assistants to manage complex development workflows by creating structured handoffs between strategic planning and tactical implementation, with project management, task tracking, and intelligent scaffolding. | |
| Librarian MCP Server coladapo/librarian-mcp An intelligent document management MCP server that leverages mental models and orchestration patterns for context-aware document storage, retrieval, and analysis. | |
| Google Places MCP Server colakang/google-places-mcp Integrates with Google Places API to allow searching, retrieving details, and finding nearby places through an MCP server interface. | |
| Personal Assistant MCP colasrab/personal-assistant Enables Mistral connectors to draft LinkedIn posts and list, prepare, or import website LinkedIn drafts through authenticated MCP tools, while leaving publication to an admin-approved website workflow. | |
| crv-leak-scan colby999/crv-leak-scan Enables AI agents to autonomously scan repositories and staged changes for leaked secrets, move exposed credentials into environment files, purge secrets from Git history, and verify remediation through deterministic tools. | |
| mcp-omics colbyford/mcp-omics A Model Context Protocol server that enables retrieval of -omics data from sources like PDB, ChEMBL, UniProt, PubChem, and HUGO. | |
| CodeGraph colbymchenry/codegraph Supercharges AI coding agents with a pre-indexed semantic code graph, enabling instant symbol relationships, impact analysis, and context retrieval across 20+ languages. | |
| shopify-graphql-admin-mcp colbymchenry/shopify-graphql-admin-mcp Enables full interaction with Shopify's Admin GraphQL API, including raw queries, schema exploration, and CRUD operations for products, collections, customers, and more. | |
| Clash Royale MCP Server colbymk97/clash-royale-mcp An MCP server that integrates with the official Clash Royale API to provide real-time data on players, clans, cards, and tournaments. It enables users to query battle logs, chest cycles, and global rankings directly through Claude Desktop o | |
| Cairo-Context-MCP colbyserpa/cairo-context-mcp Enables semantic search across Cairo and Starknet documentation, providing AI assistants with precise code examples and documentation chunks via vector search. | |
| OpenFDA MCP Server colbyw5/openfda-mcp-server An MCP server that enables AI assistants to query U.S. FDA public datasets, including drug adverse events, labeling, recalls, approvals, shortages, NDC directory, and medical device regulatory information. | |
| phenoforge colbyw5/phenoforge Enables semantic retrieval and assembly of ICD-10-CM value sets from natural language descriptions for clinical cohort definitions. | |
| interactive-mcp coldcat8120/interactive-mcp Enables MCP-compatible agent frameworks to open a dedicated browser window that renders step-by-step SVG blackboard explanations with KaTeX math, and to pause for user input through a blocking show-and-wait loop while keeping reasoning in t | |
| trace32-mcp coldclosewin-design/trace32-mcp AI-driven interface for Lauterbach TRACE32 PowerView debugging, inspection, and scripting via remote API. | |
| MCP Server (fac_mcp_hub) coldenjohnson/fac_mcp_hub Enables AI models to seamlessly integrate with external tools and data sources via the Model Context Protocol, extending functionality without modifying the core model. | |
| Toast MCP Integration coldestadam/toast-mcp-integration An MCP server that enables Claude Desktop to interact with Toast restaurant data, including sales summaries, top items, and product mix analysis. | |
| Owner avatar beijing-car-quota-draw coldfire-x/beijing-car-quota-draw-mcp Owner avatar beijing-car-quota-draw |
39,951–40,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.