Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Colombia MCP Server crexative/colombia-mcp-server Provides access to geographical and tourism information about Colombia, including regions, departments, cities, and tourist attractions through the API Colombia service. | |
| ultra-confluence-mcp criblio/ultra-confluence-mcp A Model Context Protocol server for Confluence Cloud that aggressively trims API responses to reduce token usage, with features like disk offload and tunable tool surface. | |
| Jira MCP Server criblio/ultra-jira-mcp Provides AI models with full access to Jira Cloud functionality, enabling issue management, project tracking, sprint planning, and agile board operations through the Jira REST API v3 and Agile API 1.0. | |
| DSH Crew cricci5744/dsh-crew Enables coding hosts such as Claude Code, Codex, Antigravity, and Grok to dispatch tasks to DeepSeek Harness agents as native subagents with live progress, tier-based model presets, escalation, and workspace guardrails. It also bridges text | |
| Elder Care MCP Server crichard201718/-rk3588- Enables natural language control of an elderly care system on RK3588, integrating face recognition, object recognition, voice interaction, health monitoring, and IoT services through MCP tools. | |
| openfox-rag cried-nutty-won/openfox-rag MCP server for OpenFox that provides a rag_search tool for hybrid retrieval from local knowledge bases (Obsidian vaults, docs) using BM25, vector search, and cross-encoder reranking. | |
| mcp-sii crilam/mcp-sii Open-source MCP server for Chile's SII free invoicing system, enabling AI agents to query issued and received tax documents. | |
| YAPI MCP Server criller/yapi-mcp-server A Model Context Protocol (MCP) server for YAPI API Platform integration. Enable AI assistants to interact with YAPI seamlessly. | |
| nwtools-mcp crims0n/nwtools-mcp Provides accurate IPv4 subnet and address tools for LLMs using Python's ipaddress library. Includes CIDR parsing, overlap detection, IP classification, and more. | |
| ssh-bridge-mcp crimsoncosmos/ssh-bridge-mcp Lets MCP-capable AI clients run commands and manage files on remote machines over SSH without installing anything remotely. | |
| Android Studio MCP crimsun-dev/android-studio-mcp Lets AI coding agents build, test, and lint Android projects with Gradle, control devices and emulators via adb, automate UI through screenshots and input injection, and use a live IDE bridge for refactoring, code inspection, and run config | |
| Chrome MCP crimsun-dev/crimsun-chrome-mcp Enables AI coding assistants to control a live Google Chrome browser, allowing tab management, navigation, clicking, typing, screenshots, and JavaScript evaluation through the user's real profile. | |
| Garmin MCP Worker cringeisen/garmin-mcp This server provides a read-only remote connection between MCP clients and a Garmin Connect account. It allows users to query extensive personal health and activity data using natural language. | |
| ollama-mcp-workers crino-999/ollama-mcp-workers Enables local image analysis and document processing through MCP workers (Vision and Document) using Ollama models, with cloud orchestration for mixed hierarchical tasks. Supports tools for image understanding, requirement extraction, test | |
| mcp-genoffice criptogus/mcp-genoffice An MCP server for byte-preserving, surgical editing of Office documents (docx, pptx) via the GenOffice engine, enabling extraction, patching, creation, deletion, watermarking, and app/CDP-driven operations without breaking layout. | |
| MCP Server Python Template cris-0k/mcp-server-python-template A streamlined foundation for building Model Context Protocol servers in Python, designed to make AI-assisted development of MCP tools easier and more efficient. | |
| argentina-markets-mcp cris-devtrading/argentina-markets-mcp Exposes Argentine market data to AI agents, including MEP, CCL, official, blue and other dollar quotes, plus simulated USD/ARS paper-trading orders with deterministic risk guardrails, a kill switch and an auditable call log. | |
| Custom Email crisantus/custom-email Enables users to create a Zoho mailbox on a domain they own at Namecheap by connecting their own Zoho account, previewing and approving the required DNS records, and getting browser-guided help entering them in Namecheap Advanced DNS withou | |
| roiq-os-mcp crisglezz/roiq-mcp Lightweight connector to operate ROIQ OS from Claude Code, enabling management of spaces, pages, boards, tables, cards, scripts, and more within token-based permissions. | |
| Orbit — centro MCP para Siigo crisgon0295/mcp-siigo-server Plataforma administrativa multi-cliente para conectar Siigo con paneles, automatizaciones y agentes de IA mediante MCP Streamable HTTP, ofreciendo herramientas para productos, clientes, cotizaciones e inventario. | |
| Siigo MCP Server crisgon0295/siigo-mcp-ferriperfiles A Model Context Protocol (MCP) server that provides full integration with the Siigo API, enabling access to Colombian accounting software features including products, customers, invoices, quotations, purchases, credit notes, vouchers, payme | |
| Remote MCP Server Authless crismardev/remote-mcp-server-authless A deployable MCP server on Cloudflare Workers that enables tool integration without authentication requirements, allowing connection from AI Playground or Claude Desktop. | |
| Smart Context MCP Server crisnc100/smart_context_mcp An AI Context Engineer that transforms vague queries into structured context packages for LLMs by extracting code, mapping relationships, and providing insights. | |
| FBEM crisng95/fbem An MCP server that enables AI agents to post Reels and Photos to Facebook by capturing and replaying the native web API through a Chrome extension. | |
| @crisog/railway-mcp-server crisog/railway-mcp-server Unofficial MCP server for Railway that enables managing Railway infrastructure through natural language, including projects, services, deployments, environments, variables, templates, domains, volumes, observability, integrations, networkin | |
| Aurora 4x MCP Server crispiboi/aurora-mcp Read-only MCP server that lets Claude query your Aurora 4x campaign database for colonies, fleets, minerals, and more, with support for registering custom queries. | |
| MCP Document Reader crispvibe/mcp-document A multi-format MCP server that enables reading and generating Office, PDF, text, EPUB, and presentation documents. It provides unified tools for document processing and creation through AI assistants. | |
| ziroom-mcp crispyian/playwright_with_ziroom MCP server for Ziroom rental that supports stateful session-based filtering and scraping individual listing detail pages. Enables agents to search, filter, sort, and retrieve listing details from Ziroom via natural language. | |
| Chrome Course MCP crispyw0nton/chrome-mcp A local MCP server that enables Codex to inspect and interact with Chrome tabs through the Chrome DevTools Protocol, primarily for collecting authorized Brightspace course materials into local folders. | |
| Chrome Course MCP crispyw0nton/coinbase-mcp-ghost Enables browsing and collecting course materials from Brightspace through Chrome DevTools Protocol, allowing snapshotting, downloading media, and automating page navigation. | |
| Unreal-MCP-Ghost crispyw0nton/unreal-mcp-ghost Enables AI clients to control Unreal Engine 5 editor for automated Blueprint authoring, level inspection, actor spawning, and other editor workflows via a local Python MCP server and UE plugin. | |
| Agile Squad MCP crisrivlop/agile-squad-mcp Enables integrating an AI-powered agile squad with MCP-compatible clients like Antigravity, Claude Desktop, and Cursor over Stdio or SSE. | |
| MCP-Allure crisschan/mcp-allure A server that converts Allure test reports into LLM-friendly formats, enabling AI models to better analyze test results and provide insights about test failures and potential fixes. | |
| MCP-Repo2LLM crisschan/mcp-repo2llm A MCP server that transforms code repositories from GitHub, GitLab, or local directories into LLM-friendly formats, preserving context and structure for better AI processing. | |
| agent-gmail-mcp crissmoldovan/agent-communications Enables coding agents to search, read, analyse, draft, and organise Gmail across multiple mailboxes, with sending strictly gated behind user approval. | |
| upstream-watch cristiancaro-portfolio/upstream-watch Enables users to inspect Potomac basin gauge details, estimate downstream crest arrival times, retrieve stage-specific flood impacts, and ask cited questions through four read-only tools. | |
| drillsite-mcp cristiangm3005/drillsite-mcp Enables AI agents to query and annotate a drill-site prospectivity API, exposing validated tools to list, rank, and inspect exploration zones, write field observations, and read zone resources. It also provides a prompt for generating a gro | |
| truth-anchor-agent cristiano-c1/truth-anchor-agent An MCP server that provides fact-checking capabilities and truth anchoring for AI agents using verified data sources. | |
| MCP Mobile Server cristianoaredes/mcp-mobile-server Transforms AI assistants into mobile development powerhouses with 36 tools for Flutter, Android, and iOS development, including intelligent device management, automated builds, testing, and deployment workflows. | |
| MCP Senado Federal cristianoaredes/mcp-senado Enables AI assistants to query Brazilian Senate data including senators, bills, voting records, committees, and plenary sessions through natural language. | |
| RepoNova cristianociuti/reponova RepoNova is an MCP server that builds a persistent knowledge graph of your codebase, enabling AI agents to query code structure, dependencies, and semantics through 11 specialized tools. | |
| Solvent MCP Server cristianpalomino/solvent-mcp-server Enables Claude to interact with Solvent Personal Finance Manager through natural language to manage expenses, incomes, categories, and recurring transactions. | |
| Bricks MCP cristianuibar/bricks-mcp A WordPress plugin that enables AI assistants to manage Bricks Builder sites through natural language. It provides over 20 tools for reading and writing pages, templates, global styles, and WooCommerce layouts directly from MCP-compatible c | |
| tech-glossary-mcp cristianvirtus/tecno-chatbot-portal Provides a curated technical glossary with search, lookup, and category listing tools, enabling AI assistants to answer tech concept questions via MCP. | |
| whatsapp-desktop-mcp cristinacarolsouza/whatsapp-desktop-mcp-windows Enables AI assistants to read and send WhatsApp messages on Windows through the official WhatsApp Desktop application using Edge WebView2 CDP automation. | |
| Dynalist MCP Server cristip73/dynalist-mcp Enables Claude and other AI assistants to read, write, and manipulate Dynalist.io documents programmatically, including operations like searching, editing nodes, bulk importing from markdown, and managing document structure. | |
| gpt5mcp cristip73/gpt5mcp Integrates OpenAI GPT-5 capabilities into Claude Code, providing autonomous agents for complex multi-step tasks and deep code analysis via the Codex CLI. It supports features like web search, code interpretation, and persistent file operati | |
| Gmail MCP Server cristip73/mcp-email-server Enables interaction with Gmail through the MCP protocol, supporting sending, reading, searching, replying, forwarding, managing drafts and labels, and saving attachments. | |
| MCP Server for Asana cristip73/mcp-server-asana This server implementation allows AI assistants to interact with Asana's API, enabling users to manage tasks, projects, workspaces, and comments through natural language requests. | |
| React Native SME Documentation MCP Server cristminix/react-native-sme-docs-mcp Provides AI assistants offline fuzzy search, precise section retrieval, and section listing over bundled mobile-development documentation, enabling natural-language lookups of components, hooks, guides, and best practices. |
40,751–40,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.