Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Meshtastic MCP Server consentirdev/meshtastic.mcp Enables AI assistants to interact with Meshtastic mesh networks for off-grid communication, including sending messages, network analysis, GPS positioning, waypoint management, and device configuration over LoRa radio. | |
| calmcp consetto/calmcp A read-only MCP server that bridges AI assistants to SAP Cloud ALM, exposing read APIs through four intent-based tools. It runs locally over stdio or remotely over Streamable HTTP, and can be deployed to SAP BTP Cloud Foundry. | |
| GitHub OAuth MCP Server conshus/mcp-github-oauth A remote MCP server for Cloudflare Workers featuring built-in GitHub OAuth for secure user authentication and identity-based access control to tools. It provides a reference implementation for managing remote MCP connections with persistent | |
| TP-Link Router MCP Server consigcody94/mcp-tplink-router Enables automation and management of TP-Link BE3600 routers through browser automation, supporting port forwarding configuration, network status monitoring, and device management without reverse-engineering the router's encryption. | |
| Notion Weaver consigcody94/notion-weaver Enables AI workflows to integrate with Notion workspaces, supporting page and database creation, queries with filters and sorting, content updates, and workspace-wide search operations. | |
| Office Whisperer consigcody94/office-whisperer Enables creation and manipulation of Microsoft Office files (Excel, Word, PowerPoint) through natural language commands. Supports generating spreadsheets with formulas and charts, formatted documents with tables, and presentations with vari | |
| Pythia MCP consigcody94/pythia-mcp An MCP server that interfaces with the Lilith library to analyze Higgs boson phenomenology and LHC experimental data. It enables AI assistants to constrain new physics theories by calculating likelihoods and signal strengths for various par | |
| Code-Index-MCP consiliency/code-index-mcp Local-first code indexer that provides deep code understanding for Claude and other LLMs with symbol/text search across 48+ languages, semantic search capabilities, and real-time index updates through the Model Context Protocol. | |
| pangram-mcp consiliency/pangram-mcp Exposes an analyze tool to classify text as human-written, AI-generated, or AI-assisted using Pangram Labs API. | |
| PMCP consiliency/pmcp A single MCP server gateway that reduces context bloat by providing progressive tool discovery and invocation, dynamically provisioning downstream servers on demand. | |
| Race MCP Server consolecowboy0/race-mcp Enables AI-powered racing coaching and telemetry analysis for iRacing, providing real-time racing advice, car spotting, lap analysis, and conversational interaction with racing data through live telemetry streaming. | |
| MCP Weather const5craciun/mcp_weather Fetches real-time weather for any city, serving major cities from cache and using live web search with AI extraction for all other locations. | |
| gimp-mcp constant-itis/gimp-mcp Enables AI agents to control GIMP 2.10 through its Script-Fu server, providing access to the entire GIMP procedure database with a vision feedback loop for iterative editing. | |
| media-engine constant-itis/media-engine MCP server exposing headless ffmpeg operations for video, audio, and image processing via auto-generated typed tools, enabling agentic media file manipulation. | |
| MCP Secure Agents constantinefedorov/mcp-secure-agents Secure MCP server that enforces allowlist-based policies, read-only access, input validation, and human-in-the-loop for sensitive actions, enabling safe vulnerability analysis. | |
| SolidPilot constructoai/solidworks_mcp Enables AI models to automate SolidWorks CAD at the feature level through MCP, including building parts from DXF/DWG drawings and reproducing existing parts via a deterministic compiler. | |
| sweethome3d-mcp consultantstanleymn/sweethome3d-mcp Enables local creation and editing of Sweet Home 3D .sh3d projects on disk, allowing an LLM to add, inspect, validate, export, and delete walls, rooms, furniture, and dimensions without opening Sweet Home 3D. | |
| kieboost-mcp consultoriaintegralrf/kieboost-mcp MCP server connecting Claude to kie.ai's unified API for over 30 AI models (image, video, audio), handling asynchronous task management and dedicated API routing for models like Veo3 and Aleph. | |
| Arc MCP Server consumeobeydie/arc-mcp-server Enables AI tools to access Arc Testnet blockchain data, including USDC balances, transactions, blocks, and network info. | |
| CCC Brand MCP consumer-choice-center/ccc-brand-mcp-final Strict Model Context Protocol server for Consumer Choice Center brand-guided generation. It exposes the CCC 2026 brand guide as machine-readable resources and tools so an LLM can retrieve brand assets, validate designs, and generate on-bran | |
| CP Brand MCP consumer-choice-center/cp-brand-mcp Enables local generation and validation of Considerate Pouchers one-pager deliverables with enforced brand guidelines, contextual visuals, layout QA, and strict file validation. | |
| Excel Analyser MCP contactakagrawal/excel-analyser-mcp Enables efficient reading, analyzing, and querying of Excel, CSV, and JSON files with support for chunked processing, column/field filtering, and streaming for large datasets. Supports multiple transport protocols (stdio, HTTP, SSE) for fle | |
| JSON Analyser MCP contactakagrawal/json-analyser-mcp A memory-efficient MCP server for analyzing large JSON files with streaming, querying, schema detection, and chunk processing. | |
| remote-mcp-server-authless contacto-cmd/remote-mcp-server-authless Deploy a remote MCP server on Cloudflare Workers without authentication, enabling custom tools and integration with Cloudflare AI Playground or Claude Desktop. | |
| YouTube MCP contactshahameer-stack/youtube-mcp Enables YouTube video upload, metadata updates, thumbnail management, stats retrieval, and analytics via the YouTube Data API v3 and Analytics API using OAuth 2.0. | |
| Mindway MCP Server contactwichit-design/mindway-mcp Provides a read-only context gateway for the Mindway operating protocol, enabling AI clients to load startup context, search public guidelines, and retrieve protocol documentation safely with path traversal protection. | |
| Bank File Tool Statement Review MCP content-true/bankfiletool-statement-review-mcp Enables local reconciliation of statement totals using exact cent arithmetic and verification that export headers include date, description, and amount or debit/credit fields, plus retrieval of official converter links. | |
| FindBPM tempo planning MCP content-true/findbpm-tempo-planning-mcp Locally converts a known BPM into per-beat, eighth-note, sixteenth-note, and bar durations, compares two reported tempos to flag possible half/double-time interpretations, and lists nearby Camelot codes for a key estimate. Runs over stdio w | |
| Image Unblur image preflight MCP content-true/imageunblur-image-preflight-mcp This MCP server lets an agent validate a local image's format, byte size, and pixel dimensions against published upload limits, and draft a cautious Basic or Pro enhancement plan from a blur description. It also surfaces the official site, | |
| LiveSwapFace public information MCP server content-true/live-swap-face-public-info-mcp Lets an MCP client read allowlisted pages from the LiveSwapFace website, retrieve its official links, and estimate credits for a planned browser session using rates fetched at call time. It is read-only and never performs face swaps, signs | |
| TI 84 math practice MCP content-true/ti84-math-practice-mcp Calculates discriminants, roots, vertices, opening directions, and starting x-windows for quadratic functions, and computes count, min/max, mean, median, population, and sample standard deviations from numeric lists. It also returns officia | |
| Code Review MCP Server contentforge-press/code-review-mcp Enables automated pull request review, security vulnerability analysis, and code quality improvement suggestions through any MCP client. | |
| dvq contentforge-press/datacheck-mcp Exposes data validation as tools so an AI agent can check whether data is actually correct before using it, scoring CSV files with per-row problem details, catching impossible dates, inferring schemas, and generating readable reports. | |
| FeeGuard contentforge-press/feeguard-mcp Enables auditing marketplace settlement CSVs for abnormal fee-rate changes across SKUs and dates, returning deterministic findings with dollar leak estimates, onset dates, baseline sources, and next actions, plus a per-SKU/day evidence tabl | |
| Shopify Change Intelligence contentforge-press/shopify-change-intelligence Enables AI agents to read live Shopify catalog snapshots, detect product, price, and stock changes against stored baselines, and produce competitor intelligence reports across single stores or batches of up to 50. Paid tiers settle automati | |
| Contentful contentful/contentful-mcp-server A Model Context Protocol (MCP) server that provides AI assistants with comprehensive tools to interact with Contentful APIs. | |
| ContentHero MCP Server contenthero-ai/contenthero-sdk Enables programmatic image, video, and audio generation via ContentHero, with tools accessible from any MCP client like Claude or Cursor. | |
| Google Ads MCP Server contentkueche/google-ads-mcp-render Enables AI agents to interact with Google Ads accounts by searching, retrieving resource metadata, and listing accessible customers via the Google Ads API. | |
| Cue contentmaster669-tech/usecue.online An MCP server that audits AI draft responses in real-time for sycophancy and hallucination, returning a short alert with a rewritten prompt only when a problem is found, and staying silent otherwise. | |
| Contentrain MCP Server contentrain/mcp Enables AI agents to manage Contentrain CMS content, models, and assets with automatic git branch synchronization across different environments. It provides standardized tools for performing CRUD operations on git-based headless CMS project | |
| qrcoding Skill MCP contentscoin/qrcoding-skill-mcp Enables integration with QR Agent Studio via MCP Streamable HTTP and Agent Skills, forwarding authenticated requests to manage QR records. | |
| Notion MCP Server SSE contexaai/notion-mcp-server-sse Enables interaction with Notion workspaces through the Notion API using Server-Sent Events (SSE) transport. Allows reading, searching, commenting on pages, and managing Notion content through natural language. | |
| context context-dot-dev/gemini-cli-context Provides live web and document intelligence, including search, company news, scraping, crawling, structured extraction, document parsing, brand intelligence, screenshots, website monitoring, and batch jobs. | |
| cfabric-mcp context-fabric/context-fabric Enables AI agents to perform corpus analysis tasks such as discovery, search, and data access via the Model Context Protocol. | |
| CTX: Context as Code (CaC) tool context-hub/generator CTX is a tool made to solve a big problem when chatting with LLMs like ChatGPT or Claude: giving them enough context about your project. | |
| context-server context-server/context-server A lightweight MCP server for semantic search over markdown knowledge bases, enabling AI coding agents to index, search, and answer questions from local markdown documents. | |
| Tasks.md MCP Server context-you-keep/tasks-md-mcp Enables AI-native task management using plain markdown files to create, update, query, and organize Epics, Stories, Tasks, and Milestones without requiring a database. | |
| Context3D MCP Server context3d/context3d-model-mcp-server Enables AI-powered 3D model generation from text and images with PBR textures, supporting blockchain authentication and MCP integration. | |
| @contextable/mcp contextable-me/mcp A persistent AI memory server that enables storage and retrieval of context and project artifacts across conversations. It features full-text search, version history, and automatic content chunking using local SQLite or hosted cloud storage | |
| ContextBolt Bookmarks contextbolt/mcp-server AI-powered recall over your saved bookmarks. It gives Claude semantic search, topic clusters, recent saves, and save-from-chat across the content you save from X, Reddit, LinkedIn, and the web. |
40,251–40,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.