Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| personal-timesheet-mcp cruzleedan/personal-timesheet-mcp MCP server providing CRUD operations for timesheet management via REST API endpoints, enabling creation, reading, updating, and deletion of timesheet entries along with project management. | |
| Doorbell Without Ears MCP Server crxsh-1/doorbell-without-ears Enables users to retrieve simulated visitor events, manage accessibility and response preferences, propose and human-confirm replies, correct visitor classifications, and dismiss events through seven MCP tools. | |
| WebSurfer MCP crybo-rybo/websurfer-mcp A Model Context Protocol server that enables AI assistants to securely fetch and extract readable text content from web pages through a standardized interface. | |
| Vast.ai MCP Server crydevok/vastai-mcp Enables comprehensive management of Vast.ai GPU cloud instances, including searching for GPU offers, creating and managing instances, executing remote commands via SSH, and monitoring background tasks for ML training workflows. | |
| jaicp-mcp cryleech/jaicp-mcp Enables AI assistants to interact with JAICP / Conversational Cloud HTTP APIs, covering projects, channels, analytics, text campaigns, CAILA NLP, and Dialer calls through OpenAPI-defined tools. | |
| DSH Desktop MCP Bridge cryocell77/deepseek-harness-desktop-mcp-bridge Enables Codex Desktop or CLI to delegate tasks to an already running DeepSeek Harness Desktop over an authenticated local socket, reusing that Desktop's model configuration, Skills and allowed tools without a separate API key or runtime. Ea | |
| CVE MCP Server crypkachu/security-mcp-server Enables CVE vulnerability lookup and search using the National Vulnerability Database (NVD), allowing users to retrieve detailed information about specific CVEs and search for vulnerabilities by keyword. | |
| Wizzypedia MCP Server cryppadotta/mcp-wizzypedia A Model Context Protocol server that enables searching, reading, and editing wiki pages on Wizzypedia from MCP-enabled tools like Cursor or Claude Desktop. | |
| Scryfall MCP Server cryppadotta/scryfall-mcp Enables interaction with the Scryfall API, allowing users to search for Magic: The Gathering card details, retrieve card rulings, and access pricing information using the Model Context Protocol. | |
| cryptbrew-mcp cryptbrew/cryptbrew-mcp Enables AI agents to answer Cryptbrew product questions and check live API health without merchant authentication. Exposes tools for pricing, FAQs, invoice flow, and health probes over stdio or streamable HTTP. | |
| cdcx crypto-com/cdcx-cli MCP server for the Crypto.com Exchange API, providing 86 dynamically generated tools for market data, trading, account management, and more with real-time WebSocket streaming and safety enforcement. | |
| edgeconnect-mcp crypto-gi/edgeconnect-mcp Enables MCP clients to read and safely modify an HPE Aruba EdgeConnect SD-WAN Orchestrator through its REST API, using plain-language requests that are translated into the correct operations. Writes are opt-in and confirmed, secrets are red | |
| 0nMCP crypto-goatz/0nmcp A universal AI API orchestrator that connects to 17+ services (Stripe, Slack, GitHub, etc.) and enables natural language task execution, multi-step automation, and complex orchestration across them without coding. | |
| viraill-mcp crypto-yannso/viraill-mcp Enables MCP clients to audit AI search visibility, generate intent-aligned social content, and assess Agentic Commerce Readiness with remediation files. | |
| avocado-mcp cryptocurb2025-png/avocado-mcp Bridges MCP clients to AVOCADO, enabling users to find public jobs, apply, submit evidence, and read receipts through a stdio interface. | |
| Name: CryptoScholar cryptographer11/cryptoscholar Crypto technical analysis inside Claude. Get live TA from Binance (EMA, RSI, MACD, ADX, TSS score), macro market context (ARS/MRS scores), coin ranking, and a grounded bull/bear debate — no chart-switching needed. | |
| MediaWiki MCP Server cryptograss/pickipedia-mcp Enables LLM clients to interact with any MediaWiki wiki, supporting page creation/editing, search, file uploads, category browsing, and page history retrieval. Supports multiple wikis with OAuth2 or bot password authentication for both publ | |
| UnSplashPlusMCP cryptojones/unsplashplusmcp MCP server that automates a Chrome profile to sign in to Unsplash+, search Plus-only images, and download them with metadata and checksums. | |
| OSS 120B Autonomous Project Manager MCP cryptojym/oss-120b-pm-mcp Enables autonomous project management with intelligent synchronization between GitHub, Notion, and Motion, including pattern recognition, self-optimization, and automated field population. | |
| Google Trends MCP Server cryptoken/googletrendsmcp Enables AI assistants to access Google Trends data for comparing keywords, discovering trending searches, and analyzing regional interest through natural language. | |
| kepleragents-mcp cryptokepler/kepleragents-mcp KeplerAgents MCP server: connects ChatGPT and Claude to real business operations — WhatsApp, sales, remittances, treasury — with read-only access, per-organization permissions and traceability. | |
| enVector-MCP-Server cryptolabinc/envector-mcp-server Enables AI applications to perform homomorphic encryption-based vector search via enVector, allowing secure data retrieval in private networks. | |
| Solana Agent Kit MCP Server cryptoleek-team/awesome-solana-mcp A Model Context Protocol server that provides onchain tools for Claude AI, allowing it to interact with the Solana blockchain through a standardized interface for operations like managing assets, executing token operations, and retrieving n | |
| GOAT MCP Server cryptoleek-team/goat-mcp An MCP server that connects Claude for Desktop with blockchain functionality, allowing users to check balances and send tokens on EVM and Solana chains through natural language interactions. | |
| myvideogift-mcp cryptolibertus/myvideogift-mcp Create and deliver personalized video gifts (photos + an original song) from any Model Context Protocol client. | |
| Hyperliquid cryptolir/agentglob-trader An MCP server that lets AI agents read Hyperliquid perpetual futures market data and their own account state, then place and cancel orders, adjust leverage, move USDC from spot to perp, and convert stablecoins to USDC. It holds no credentia | |
| All-in-One Crypto Trading MCP Server cryptomcp/allinone-crypto-trading-mcp-server Enables AI-powered cryptocurrency trading and analytics across multiple exchanges and blockchains, with integrated Telegram bot and live trading capabilities. | |
| VedIntel AstroAPI MCP cryptonaidu/vedintel-mcp Enables compute of live Vedic astrology birth charts, dashas, kundali matches, and AI readings via 22 real API tools. | |
| chungus-kali-mcp cryptopepy/chungus-kali-mcp MCP server that gives AI agents direct access to a Kali Linux penetration testing toolkit, with 155 tools for network scanning, exploitation, forensics, and more. | |
| CryptoPilot MCP cryptopilot-tools/cryptopilot-mcp Connects Claude Desktop to crypto and brokerage portfolio data via Coinbase and SnapTrade, providing read-only tools to inspect accounts, holdings, prices, and provider health. | |
| Haloscan MCP Server cryptoptimiste/haloscanmcpserver An MCP server that integrates with the Haloscan SEO API to provide tools for keyword research, SERP analysis, and domain performance tracking. It enables users to perform comprehensive SEO tasks, including competitor analysis and visibility | |
| SchemaFlow MCP Server cryptoradi/schemaflow-mcp-server Provides AI-IDEs with real-time access to PostgreSQL and Supabase database schemas through the Model Context Protocol, enabling smarter code generation in tools like Cursor, Windsurf, and VS Code + Cline. | |
| nordbastion-mcp cryptoservers/nordbastion-mcp Provision KYC-free, crypto-paid Nordic VPS and dedicated servers from any AI agent. Enables natural language hosting workflows including comparison, top-up, and provisioning of anonymous servers. | |
| whale-insights cryptowhaleinsights-ux/whale-insights Real-time crypto whale intelligence MCP server with 55 tools across 14 blockchains. Free, no auth required. | |
| harness-health-engineering cryptoyoginya/harness-health-engineering Enables querying a local health knowledge base with hybrid RAG (vector + FTS5) and exploring backlinks between notes. | |
| cryptunnel-mcp cryptunnel/cryptunnel-mcp Enables coding agents to create and look up crypto payments over stdio, returning checkout links, payment statuses, paged payment lists, and receivable currencies, with real payments gated behind an explicit opt-in environment flag. | |
| @cryptyx/mcp-server cryptyx-ai/cryptyx-mcp-server The conviction engine for autonomous crypto trading agents. 376 metrics across 8 factor classes, multi-factor backtesting, signal persistence, and regime analysis — 21 tools for AI agents via MCP. | |
| matmcp crystalhihihi/matmcp Enables LLM agents to run verified DFT materials workflows (structure fetch, relaxation, band/DOS) with automated convergence gates and physics validation, ensuring every result is machine-verified with a complete evidence trail. | |
| agentos crystalstrategysup-prog/agent-os Enables MCP clients to retrieve Telegram setup plans, normalize task briefs, and run health diagnostics locally without exposing shell access or stored credentials. | |
| hacker-news crzyc0d3r/hacker-news-mcp-server Provides read access to Hacker News through tools for fetching top, best, and new stories and looking up individual items by ID, for use with MCP clients like Claude Desktop and Cursor. | |
| mcp-context-engineering crzyc0d3r/mcp-context-engineering Scopes MCP tool definitions and strips Markdown from outputs to minimize token usage, improving agent cost and accuracy. | |
| multimodal-mcp-router crzyc0d3r/multimodal-mcp-router Exposes multimodal analysis tools (text search, image metadata/captions, audio features, video frame sampling) over a local media store via MCP, and includes an optional CrewAI Router/Specialist/Responder client that routes requests by moda | |
| multi-monetdb-mcp-server cs-codespace/multi-monetdb-mcp-server Enables AI agents to query and explore multiple MonetDB column-store databases from one server, using named config labels or runtime credentials via dynamic connect. Provides SQL execution, schema/table inspection, health checks and EXPLAIN | |
| GLM OCR MCP Server cs-qyzhang/glm-ocr-mcp Enables text extraction from images and PDF files using the ZhipuAI GLM-OCR API. It allows users to process documents through local file paths or base64-encoded data for high-quality OCR results. | |
| webverb-mcp cs0317/openverbs Enables agents to perform typed, site-specific actions across a signed-in Chrome browser, interacting with services like Gmail, Reddit, Drive, and Amazon through natural language requests. | |
| claude-teams cs50victor/claude-code-teams-mcp MCP server that enables multi-agent collaboration with task lists, inter-agent messaging, and tmux-based spawning, making Claude Code's agent teams protocol available to any MCP client. | |
| Date Operations MCP Server cs97jjm3/date-operations-mcp Provides UK-centric date calculations including bank holiday integration, sprint planning tools, and specialized Asana workflow automation. It enables users to calculate working days, track upcoming holidays, and manage project schedules sp | |
| FastMCP IoT Sensor Server csaad-ai-engineer/fastmcp_iot_sensors Simulates a network of IoT environmental sensors and exposes their data and controls as MCP tools that any MCP client can query and act on. | |
| agent-hub csabakecskemeti/agent-hub A private message hub that allows multiple Claude Code instances to communicate across machines and sessions. | |
| rulesmith csabakovacs/rulesmith Provides a CLI and MCP server for scanning repositories to generate evidence-backed, project-specific instruction files for AI coding assistants, ensuring AI behavior aligns with existing codebase conventions. |
40,901–40,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.