Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| google-calendar-mcp coldinnn/google-calendar-mcp Enables Claude to read, create, update, and delete Google Calendar events directly through natural language. | |
| 3Notch coldlogicai/3notch Local-first working-state checkpoints and portable handoff packets for AI coding agents. Continuation checkpoints recover Claude Code sessions after rate limits, crashes, and compaction; packets hand tasks across tools, repos, and machines | |
| mood-radio-mcp coldmans/mood-radio-mcp Enables users to anonymously share and pass along songs with messages in mood-based rooms, and view community-featured radio feeds, relay chains, and charts. | |
| Vanish Email MCP Server coldpatch/vanish-mcp A Model Context Protocol (MCP) server for Vanish Email, allowing AI agents to manage temporary email addresses and read incoming messages. | |
| autonomous-intelligence coldrazer/autonomous-intelligence Enables AI agents to perform workspace file operations (read/write/recover) with transaction-safe guarantees, durable recovery, and explicit human approval via a separate Broker. | |
| coldframe coldzero94/cold-frame Local-first memory for your AI agent. One SQLite file you own — offline, no API key. Plugs straight into Claude Code. | |
| HealthLedger MCP cole-will-i-am/healthledger-mcp A local-first, model-agnostic MCP server that stores personal health data in a SQLite file and provides analysis-ready views for any AI client to log, retrieve, and reason over health records. | |
| Crawl4AI RAG MCP Server coleam00/mcp-crawl4ai-rag Web crawling and RAG implementation that enables AI agents to scrape websites and perform semantic search over the crawled content, storing everything in Supabase for persistent knowledge retrieval. | |
| MCP-Mem0 coleam00/mcp-mem0 A Model Context Protocol server that provides AI agents with persistent memory capabilities through Mem0, allowing them to store, retrieve, and semantically search memories. | |
| PostgreSQL MCP Server with GitHub OAuth coleam00/remote-mcp-server-with-auth An MCP server that enables chatting with PostgreSQL databases using secure GitHub authentication for access control between read and write operations. | |
| Supabase MCP coleam00/supabase-mcp An MCP server enabling AI assistants to perform CRUD operations on a Supabase database via a standardized interface. | |
| virtuous-mcp colecantu904/virtuous-mcp An MCP server that enables AI assistants to interact with Virtuous CRM+ through the entire API, with reads allowed freely and mutating operations requiring explicit user confirmation. | |
| oh-my-cassette coleman24/oh-my-cassette Enables users to turn raw clips into finished, beat-synced montage videos through natural-language chat, handling clip analysis, shot selection, music matching, subtitles, transitions, and rendering. | |
| AWS Athena MCP Server colemurray/aws-athena-mcp Enables execution of SQL queries against AWS Athena databases with schema discovery, query status management, and result retrieval through a standardized Model Context Protocol interface. | |
| Moondream MCP Server colemurray/moondream-mcp Provides AI-powered image analysis capabilities including captioning, visual question answering, object detection, and coordinate pointing for both local files and remote URLs through the Moondream vision language model. | |
| instantly-mcp colenew1/instantly-mcp MCP server for Instantly.ai, allowing Claude to query campaign analytics, warmup health, and sending accounts, and to manage campaigns and replies with confirmation. | |
| zencontrol-tpi-mcp colesiu415/zencontrol-mcp MCP server for controlling zencontrol TPI Classic and Advanced lighting systems, enabling DALI dimming, on/off, and fault queries via Docker and SSE transport. | |
| MCP Demo colesmcintosh/cursor-mcp-hackathon-denver A FastMCP server providing hackathon overview resources and reusable starter prompts for quick integration with Cursor. | |
| NumPy Calculator colesmcintosh/numpy-mcp A Model Context Protocol (MCP) server that provides mathematical calculations and operations using NumPy, enabling users to perform numerical computations like matrix operations, statistical analysis, and polynomial fitting directly through | |
| whoop-chatgpt-app colesmcintosh/whoop-chatgpt-app MCP server that connects WHOOP health tracker data to ChatGPT, enabling read-only search, fetch, summary, and a React dashboard widget for recovery, sleep, strain, and workouts. | |
| badland-brain coletebou/badland-brain Provides a single self-hosted memory that any MCP client can read and write, combining keyword and vector search with facts that keep their history as they change. Entries carry per-agent keys and provenance, and secret-shaped content is re | |
| pg-migration-verify coleud/pg-migration-verify Enables coding agents to determine whether Postgres/Supabase migration files were truly applied by parsing each migration and comparing every object it should create against the live pg_catalog. It also surfaces discrepancies between reposi | |
| lineageverse-mcp colganwi/lineageverse-mcp MCP server for single-cell lineage tracing analysis, enabling conversational reconstruction, visualization, and heritability analysis of lineage trees using Cassiopeia, pycea, and treedata. | |
| shelfwatch colin-andrew-rasiga/matval Enables automated weekly meal planning and grocery price comparison across Swedish supermarkets through a Claude/GPT interface. | |
| chatgpt-local-coder colin-dmme/chatgpt-local-coder A self-hosted MCP server that gives ChatGPT full local machine access for coding tasks, including file editing, shell commands, git operations, and project exploration via 40+ MCP tools. | |
| desktop-coworker-for-chatgpt colin-dmme/desktop-coworker-for-chatgpt Self-hosted MCP coding server and unified local Control Center for ChatGPT web, enabling file editing, command execution, Git operations, and optional upstream MCP tools with conversation access controls. | |
| forkable-mcp colinds/forkable-mcp Enables ordering and managing Forkable corporate lunches from any MCP client, including viewing menus, setting/skipping/confirming meals, and getting personalized recommendations. | |
| fomo-mcp colinedw/fomo-mcp Enables interaction with fomo.family through MCP, providing tools for user profiles, balances, leaderboards, trades, token data, and more. | |
| Strava Coach MCP Server colinfrisch/chathletique-mcp Enables AI assistants to access Strava running data, route planning, and weather information for intelligent running coaching. | |
| mailcom colingamez/grokbot-mail.com-plugin Enables users to manage a Premium email mailbox over IMAP/SMTP, supporting folder and message listing, search, reading, attachment downloads, sending, replying, marking read, and deletion. | |
| SCPI MCP colingimenez/scpi_mcp Enables agentic coding harnesses to control benchtop test equipment — waveform generator, multimeter, oscilloscope, and power supply — over SCPI, with typed tools and raw passthrough for investigating circuits. | |
| scryfall-mcp-server colinhauch/scryfall-mcp-server MCP server that searches and retrieves Magic: The Gathering card data from the Scryfall API. | |
| omnicall-mcp colinhughes2121/omnicall-mcp Keyless, pay-per-call AI gateway: 248 LLMs plus image/video/voice/music generation and live crypto, DeFi, markets, web-search and research tools through one MCP server. Pay per call in USDC via x402 on Base/Solana — no API key, no signup, f | |
| @kineticist/mcp-server colinize/kineticist-mcp Enables AI agents to search a pinball database, read game details and news, find places to play, and manage a user's library by logging plays, ownership, wishlists, fun scores, and reviews. | |
| qtpy-mcp colinkennedy/qtpy-mcp Enables an AI agent to find, screenshot, GIF-record and drive Qt widgets inside running Qt applications and DCCs such as Houdini, Blender, Maya and Nuke, working across PySide6, PyQt6, PySide2 and PyQt5. It routes one agent connection to ma | |
| MyHealth Companion MCP colinkkk/medical-helper-mcp Enables users to understand lab test results, check food-drug interactions, and get medication information from official Korean sources. Offers personalized insights based on user's health profile and current medications. | |
| Bay Wheels MCP Server colinterface/bay-wheels-mcp Provides access to Bay Wheels realtime bikeshare data, enabling users to find nearest available bikes (standard or ebike) and docking stations with available spaces in the San Francisco Bay Area. | |
| Clicky MCP Server colintoh/clicky-mcp Enables users to retrieve website traffic analytics data from Clicky, including visitor counts, top pages, traffic sources, and domain-specific visitor data. Provides comprehensive web analytics insights through natural language queries wit | |
| Metasploit MCP Server coliovacruz/metasploit-mcp-server Integrates Metasploit Framework with MCP, enabling LLMs to perform penetration testing tasks like exploitation, payload generation, and session management via natural language. | |
| Slay the Spire Copilot colitify/slay-the-spire-copilot Enables AI-assisted gameplay for Slay the Spire by reading game state and providing strategy advice or automated actions via Claude Code. | |
| MCP Stock Analyzer collaborium/mcpagentstockanalyzer Analyzes global and Indian stock market data via yfinance and queries local NSE BhavData CSV files using AI-generated SQL. It enables users to generate interactive HTML graphing dashboards for visual performance tracking and historical data | |
| Next MCP Server collaborne/mcp-server An MCP server that enables LLMs to interact with NEXT structured data, providing tools for retrieving highlights and clusters. | |
| Peggle AI MCP Server collabvmgamez/peggle-ai-mcp Enables AI models to play the game Peggle by capturing the primary monitor's screen and simulating mouse clicks. It provides tools for visual analysis and coordinate-based interaction to automate gameplay. | |
| Gemini Image & Video Generation MCP collactivelabs/gemini-image-gen-mcp A production-ready MCP server that enables Claude and other LLMs to generate images and videos using Google's Gemini AI models (Gemini 2.0 Flash and Veo 2.0). | |
| pinterest-mcp-server collactivelabs/pinterest-mcp-server Enables AI agents to interact with the Pinterest API, allowing management of boards and pins through natural language commands. | |
| colleag-mcp-ups colleag-ai/mcp-ups Enables UPS shipping operations on your own UPS account: negotiated rate shopping, live tracking with an interactive MCP Apps card, and landed-cost estimates for international shipments. | |
| Gravalist-MCP collective-social/gravalist-mcp Enables querying high-end gravel routes with micro-elevation maps, weather pacing, and MCP integration for AI agents to scout route gaps and identify locked gates. | |
| moodle-mcp college-things/moodle-mcp Connects AI assistants to any Moodle site through the official mobile web service, with a limited browser-session fallback, enabling access to courses, grades, deadlines, assignments, quizzes, forums, and course files. It also supports read | |
| WinMCP Server collero/winmcp Enables Windows users to search and retrieve Outlook calendar appointments, tasks, and mail, as well as local/OneDrive files via Windows Search and OneNote pages, with additional OneNote page creation and update capabilities, all through MC | |
| Foundry Boards MCP collie-valley/foundry-mcp Enables AI coding agents to manage agile boards and notes, including cards, epics, sprints, labels, progress and verification records tied to commits, human-reviewed criteria and decisions, and Area documentation. |
40,001–40,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.