Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP-Data-Analysis-Server craig1901/mcp-data-analysis-server Provides comprehensive data analysis utilities including statistical functions, probability distributions, and data processing tools through natural language. | |
| ghl-mcp craig248/ghl-mcp MCP server for GoHighLevel sub-accounts, enabling management of CRM contacts, pipelines, calendars, invoices, and more via natural language. | |
| Basecamp MCP Server craigashields/basecamp-mcp Enables AI assistants to interact with Basecamp projects through natural language commands. Supports managing projects, to-do lists, messages, and creating tasks with full content rendering capabilities. | |
| sleeper_mcp craigchang/sleeper_mcp Provides read-only access to Sleeper fantasy football data including user info, leagues, rosters, matchups, and NFL state through MCP tools. | |
| au-weather-mcp craigles75/au-weather-mcp Provides access to Australian weather data from the Bureau of Meteorology, enabling location search, forecasts, and current observations. | |
| Remote MCP Server on Cloudflare craigsdennis/govee-cf-mcp A server that implements the Model Context Protocol (MCP) on Cloudflare Workers, allowing Claude to access external tools through a secure OAuth login system. | |
| Govee WDC CF MCP craigsdennis/govee-wdc-cf-mcp A remote MCP server that can be deployed on Cloudflare Workers without requiring authentication, allowing users to add and use custom tools through the Model Context Protocol. | |
| Remote MCP Server (Authless) craigsdennis/m-remote-mcp-server-authless A template for deploying MCP servers on Cloudflare Workers without authentication. Enables quick deployment of custom tools accessible from both Cloudflare AI Playground and local MCP clients like Claude Desktop. | |
| here-hgv-mcp craigst/here-hgv-mcp Enables HGV-aware routing, geocoding, place search, travel-time matrices, reachable-area isolines, multi-stop optimisation, live traffic, UK toll analysis, static maps, and polyline decoding through HERE Platform APIs. | |
| sumo-mcp-readonly craigwetzelberger/sumo-mcp-readonly A read-only MCP server for querying Sumo Logic logs, enabling AI assistants to search and investigate application logs with opinionated tools and secure credential handling. | |
| pocket-recall cranedon/pocket-recall Enables an AI assistant to keep every conversation verbatim in a local SQLite store and recall the most relevant past turns on demand, using hybrid keyword and embedding search plus time-awareness. Results are packed into a small token budg | |
| mcp-data-source crankhead/mcp-data-source Multi-datasource MCP server that connects AI assistants to 6 database types (MySQL, PostgreSQL, ClickHouse, MongoDB, SQLite, Huawei DWS) with dynamic configuration, encrypted credential storage, and schema discovery. | |
| roam-code cranot/roam-code Provides local codebase intelligence as an MCP server, enabling AI agents to query dependencies, assess change impact, and produce tamper-evident change evidence packets. | |
| time-tracking-google-calendar-mcp cranthony/time-tracking-google-calendar-mcp Enables managing a Google calendar as a set of non-overlapping events representing one person's time. | |
| memos-mcp crapex/memos-mcp MCP server providing CRUD operations for Memos, enabling users to create, list, get, update, and delete memos via natural language. | |
| synology-calendar-mcp crapex/synology-calendar-mcp MCP server that exposes Synology Calendar (CalDAV) operations as tools, enabling listing calendars and creating, querying, deleting events with timezone handling. | |
| wiznote-mcp crapex/wiznote-mcp MCP server for WizNote private server, enabling agents to search, read, write, and manage notes, and save webpages (including WeChat articles) as notes with image localization. | |
| Loomscope crapthings/agent-loom Password-protected dashboard and Remote MCP observer for Codex work, recording concise task milestones via observe_start, observe_report, and observe_finish tools. | |
| Yandex Webmaster MCP Server crash-sv/yandex-webmaster-mcp-server-for-api-v4-1 MCP server for Yandex Webmaster API v4.1 with 37 tools covering indexing, search queries, diagnostics, recrawl, sitemaps, links, and important URL monitoring. | |
| OHMS crashzero9/ohms-mcp Exposes Shopify order and inventory management tools via MCP, allowing agents to fetch, update, and print orders without exposing raw Shopify credentials. | |
| dev-mcp crasnec/dev-mcp A self-contained Docker Compose deployment that exposes MCP tools for files, shell commands, background processes, and Git operations, enabling ChatGPT to work with a host directory via OAuth authentication. | |
| CrateDB MCP Server crate/cratedb-mcp Connects AI assistants to CrateDB clusters to enable natural-language Text-to-SQL, data analysis, and documentation retrieval. It allows users to manage database operations, troubleshoot cluster issues, and query information through convers | |
| CraveUp MCP Server craveup-oss/craveup-mcp Enables AI agents to onboard restaurant brands and manage Crave menus, storefronts, and mobile releases via natural language. | |
| ComplianceIQ MCP Server crawde/complianceiq-mcp Generates professional compliance documents like privacy policies and terms of service directly from AI tools. Supports multiple document types and export formats with API integration. | |
| Crawlab MCP Server crawlab-team/crawlab-mcp A Model Context Protocol server that allows AI applications to interact with Crawlab's functionality through natural language, enabling spider management, task execution, and file operations. | |
| Crawlbase MCP crawlbase/crawlbase-mcp A Model Context Protocol server that enables AI agents to fetch live web content with JavaScript rendering, proxy rotation, and anti-bot evasion. | |
| crawlcove-mcp crawlcove/seo-mcp-server Lets AI assistants crawl sites or load exported crawl data, then query SEO issues, inspect individual pages, and trace broken internal links from real crawl results. It supports live same-origin crawls up to 200 pages and exported datasets | |
| Rohlik MCP Server cray70313/rohlik-mcp Enables AI assistants to search grocery products, manage shopping carts, and retrieve account, order, delivery, and discount information across multiple European online grocery platforms. | |
| MCP Home crayonlu/toolhome A self-hosted MCP control plane and protocol gateway that aggregates and manages multiple MCP servers, exposing them via stable, authenticated MCP endpoints for any client. | |
| autocad-arch-mcp crazay247/autocad-mcp-server Enables architectural design in AutoCAD 2021 via chat, using YQArch (NBC standard) to build, draw, and dimension directly through natural language. | |
| Roblox Compact MCP crazy-or-something/roblox-compact-mcp Enables a bot to inspect, query, create, edit, and script Roblox Studio instances in token-cheap batches, plus run Luau, playtests, screenshots, and inputs through Roblox's official Studio MCP connection. It runs locally over stdio or an au | |
| Brex MCP Server crazyrabbitltc/mcp-brex-server A Model Context Protocol server that enables AI agents to interact with Brex financial platform data, allowing retrieval of account information, expenses, budgets, and team data through standardized resource handlers. | |
| Code Review MCP Server crazyrabbitltc/mcp-code-review-server Analyzes codebases using Repomix and LLMs to provide structured code reviews with specific issues and recommendations, supporting multiple LLM providers including OpenAI, Anthropic, and Gemini. | |
| CoinGecko MCP Server crazyrabbitltc/mcp-coingecko-server Enables interaction with the CoinGecko Pro API to access cryptocurrency data including price history and market metrics through both MCP and OpenAI function calling. | |
| MCP Ethers Wallet crazyrabbitltc/mcp-ethers-server A Model Context Protocol server that gives LLMs the ability to interact with Ethereum networks, manage wallets, query blockchain data, and execute smart contract operations through a standardized interface. | |
| MCP Etherscan Server crazyrabbitltc/mcp-etherscan-server Facilitates interaction with Ethereum blockchain data via Etherscan's API, providing real-time access to balances, transactions, token transfers, contract ABIs, gas prices, and ENS name resolutions. | |
| MCP Expert Server crazyrabbitltc/mcp-expert-server A Model Context Protocol server utilizing Claude AI for generating intelligent queries and offering documentation assistance based on API documentation analysis. | |
| Morpho API MCP Server crazyrabbitltc/mcp-morpho-server Enables interaction with the Morpho GraphQL API, providing tools for accessing market data, vaults, positions, and transactions through a Model Context Protocol (MCP) server. | |
| MCP Snapshot Server crazyrabbitltc/mcp-snapshot-server A Model Context Protocol server that enables interaction with Snapshot.org, providing tools to query Snapshot spaces, proposals, and users through natural language. | |
| Twitter MCP Server crazyrabbitltc/mcp-twitter-server Enables interaction with Twitter through a Model Context Protocol, allowing large language models to post tweets, search for tweets, and reply to tweets. | |
| Vibe-Coder MCP Server crazyrabbitltc/mcp-vibecoder An MCP server that implements a structured workflow for LLM-based coding, guiding development through feature clarification, documentation generation, phased implementation, and progress tracking. | |
| Dune API MCP Server crazyrabbitltc/mcp-web3-stats Allows LLM agents and MCP clients to analyze blockchain data including wallet balances, token information, and transaction history across EVM and Solana chains through the Dune API. | |
| MPC Tally API Server crazyrabbitltc/mpc-tally-api-server A server that allows AI agents to interact with the Tally API to access DAO governance data, proposals, and metadata using Model Context Protocol (MCP), built with TypeScript and GraphQL. | |
| GitHub Integration Hub crbatista/mcp-cli-github-integration Enables AI agents to interact with GitHub through OAuth-authenticated operations including starting authorization flows, listing repositories, and creating issues using stored access tokens. | |
| mbta-mpc-server crdant/mbta-mcp-server mbta-mpc-server | |
| Remote MCP Server (Authless) creamzcsgo-hash/remote-mcp-server-authless Deploy a remote MCP server on Cloudflare Workers without authentication. Enables custom tools and connections to MCP clients like Claude Desktop and Cloudflare AI Playground. | |
| Wafle-Scraper creandoaldia/wafle-scraper Enables AI agents to scrape web pages safely with incognito browsing, rate limiting, and ethical CAPTCHA handling. | |
| Create app hosting createdotcom/create-mcp Enables AI assistants to create projects, deploy files, container images, or Git repositories, attach domains, set write-only secrets, add Postgres, read logs, metrics, and failure summaries, and roll back. | |
| HubSpot MCP createitv/hubspot-mcp Provides comprehensive access to HubSpot CRM data and operations, enabling management of contacts, companies, deals, engagements, and associations through a standardized interface with type-safe validation. | |
| maria-rag createm1nd/agent-library Enables fully local retrieval over a personal document corpus via hybrid search, cross-encoder reranking, RAPTOR summaries, and knowledge graph queries, served to AI agents over MCP. |
40,651–40,700 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.