Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Vensim MCP cybing521/vensim-mcp Converts structured system dynamics specifications into Vensim .mdl files with layout, SVG preview, static audit, and native Vensim integration. It can be used as an MCP server or from the command line. | |
| mcp-docmost cyborgx0x/mcp-docmost An MCP server for the Docmost documentation platform that enables managing pages, spaces, and comments through natural language. It supports content search, page exports, and revision history tracking within the Docmost workspace. | |
| OpenProject MCP Server cyborgx0x/mcp-openproject Enables AI assistants to manage OpenProject work packages, projects, and time tracking. It provides comprehensive tools for creating, updating, and querying tasks and project metadata through the OpenProject API. | |
| Cybrium MCP Server cybrium-ai/mcp-server Provides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment. | |
| Office 365 Email MCP cybrlou/office365-email-mcp Enables AI agents to send emails via Microsoft 365/Office 365 using app-only authentication and Microsoft Graph API, supporting HTML content, attachments, and CC/BCC. | |
| Weather MCP Server cyc20020404-sys/weather-mcp-server A real-time weather query server based on the HelloAgents framework that provides weather data for major Chinese cities and global locations via the wttr.in API. It allows users to retrieve temperature, humidity, and atmospheric conditions | |
| Outlook MCP Python cycle-sync-ai/outlook-mcp-server A Python-based MCP server for Microsoft Outlook integration using Microsoft Graph API, enabling email reading/sending, calendar management, and contact operations through Claude Desktop. | |
| skillnet-mcp cyclechain/skillnet-mcp SkillNet MCP Server - Use 200.000k+ Community Skills with MCP | |
| mcp-openai-platform cyclomax-x/open_ai_mcp A local MCP server exposing the OpenAI platform REST API as tools for file management, fine-tuning, inference, images, audio, batch processing, and organization usage/costs. | |
| Cycode cycodehq/cycode-cli Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning | |
| draw.io MCP cycspring/draw.io-use Enables local Draw.io diagram creation, editing, and export via MCP tools, using the desktop app. | |
| MCP + DeepSeek AI Integration Server cycweb01/my_mcp_service A Node.js-based FastMCP protocol server that integrates DeepSeek AI capabilities for intelligent conversations and code analysis, providing tool invocation abilities through the MCP protocol. | |
| hr-agent-mcp cydgxbriel/hr-agent-mcp An MCP-based conversational HR agent that handles time tracking queries, policy lookups, adjustment approvals with human confirmation, and BigQuery analytics via natural language. | |
| fcp-mcp-server cydradocci/fcp-mcp-server Enables Claude to read, edit, and generate real Final Cut Pro timelines from exported project XML, handling cut detection, markers, roles, silence removal, rough cuts, keyframes, speed ramps, and transcript-based editing. Every write is sha | |
| PDF Reader MCP Server cydynamic/pdf-reader-mcp Enables AI agents to securely read and extract information from PDF files including text content, metadata, and page counts from both local files and URLs within the project context. | |
| agy-mcp cyeezy08/agy-mcp Enables management of Antigravity IDE skills and configuration through MCP tools, including listing, reading, searching, installing, and deleting skills, plus reading/writing config.json and provider settings. | |
| CodePier cyeinfpro/codepier Connects ChatGPT and MCP clients to authorized local development environments, enabling secure file access, shell execution, persistent tasks, browser/desktop control, and remote management of projects. | |
| e-Stat MCP server cygkichi/estat-mcp-server MCP server for accessing Japanese government statistics portal 'e-Stat' API, enabling language models to search and retrieve statistical data. | |
| J-Quants Free MCP Server cygkichi/jquants-free-mcp-server Enables access to Japanese stock market data via the free J-Quants API, providing tools for company search, daily quotes, and financial statements. | |
| coros-mcp cygnusb/coros-mcp A Model Context Protocol (MCP) server that fetches sleep, HRV, and training data from the unofficial Coros API and exposes them to AI assistants like Claude, enabling natural language queries about fitness metrics and workout management. | |
| knowledgebase-mcp cygnusyang/knowledgebase-mcp Enables MCP clients to read, search, list, and explore an Obsidian vault through coarse, intent-shaped tools, with optional read-only enforcement and a single write tool. | |
| OmniPlan MCP Server cygnusyang/omniplan-mcp-legacy Enables Claude to read and analyze project schedule files in OmniPlan (.oplx) and Microsoft Project (.mpp) formats, answering questions about tasks, milestones, resources, and progress. | |
| mem cyhano/mem Enables AI agents to save, search, and manage local Chinese semantic memories on demand, with support for updating, merging, and Obsidian-style linking. | |
| JLink MCP Server cyj0920/jlink_mcp An MCP server that provides comprehensive debugging capabilities for J-Link debuggers, enabling memory, flash, register, and RTT operations through AI assistants. | |
| Dexcom MCP Server cykj40/dexcom-mcp-server A Model Context Protocol (MCP) server that connects Claude to your personal Dexcom CGM (Continuous Glucose Monitor) for assistive diabetes management intelligence. | |
| audiototext-mcp cykk/audio-transcription-mcp Enables local audio and video transcription via the audiototext engine, returning detected language, full text, and timestamped segments. | |
| apple-calendar-mcp cykriz/apple-calendar-mcp Enables Claude Desktop to list calendars and events and to create, update, and delete entries in the macOS Apple Calendar store through EventKit. It runs entirely locally with no cloud service or network access. | |
| LPG Connector MCP Server cylindr-org/cylindr-mcp Enables Claude to query live LPG price and stock data, find nearest stations, view market trends, and submit crowdsourced price reports via MCP tools. | |
| QR Code MCP Server cympfh/qr-mcp-server Enables the generation of QR codes in PNG, SVG, Base64, and ASCII formats via Model Context Protocol clients. Users can save codes directly to local files or display them as terminal-friendly art through natural language commands. | |
| @cynco/mcp cynco-labs/cynco-mcp Enables AI agents to read and write Cynco accounting data, including querying books, creating invoices, reconciling transactions, and generating financial reports. | |
| mcp-kibana cynephy6/mcp-kibana Enables Cursor and Claude Code to inspect Kibana APM data—services, transaction and error groups, trace samples, and trace waterfalls—through Kibana's internal APM APIs. It focuses on Kibana-computed aggregates rather than raw logs or Elast | |
| mcp-sentry-ts cynephy6/mcp-sentry Enables querying and managing Sentry projects, issues, and events through natural language. | |
| AI Bridge cynicism66/ai-bridge Enables multiple AI agents and humans working in the same project to share status, exchange messages, and claim files through a local collaboration board. It supports project-specific enablement, conflict-aware file claims, and shared state | |
| mcp-starter cynthiaflora/mcp A local MCP server providing general utility tools, persistent note storage, and keyword-searchable knowledge base via Streamable HTTP, enabling multiple agents to share the same data. | |
| mcp-raw cynthiaflora/mcp-raw A zero-dependency MCP server that demonstrates the raw MCP protocol over stdio and Streamable HTTP transports, with simple tools like time, echo, and add. | |
| GBrain for BOS cynthiajones34/gbrain This MCP server provides a cost-optimized personal-knowledge brain, enabling AI agents to query imported documents via hybrid search and synthesis at minimal monthly spend. | |
| Basecamp MCP Server cynthiamoretti23205/basecamp-mcp-server Enables MCP-capable clients to browse, search, and manage Basecamp 3 projects, todolists, todos, messages, campfires, card tables, inbox forwards, documents, uploads, comments, events, and webhooks through OAuth-authenticated API calls, inc | |
| Langfuse MCP Server cynthias612/langfuse-mcp Enables AI agents and developers to query Langfuse trace data for debugging and observability, including traces, sessions, exceptions, route decisions, prompts, datasets, and metrics. Supports local stdio/HTTP access through MCP clients wit | |
| Gov Data MCP cyntrica/gov-data-mcp MCP server with 562 tools accessing 114 government data APIs covering economic, health, education, energy, and more from federal, state, and international sources. | |
| Cyoda Calculation Node MCP cyoda/mcp-cyoda-quart-app Enables AI assistants to interact with Cyoda platform entities and workflows through the Model Context Protocol, supporting entity management, workflow execution, and data synchronization. | |
| Asciipaper cyoren/asciipaper-engine Engine that creates animated ASCII wallpapers, in many different ways. | |
| licitacoes-mcp cyoren/licitacoes-mcp Enables AI agents to discover and analyze Brazilian public procurement opportunities from official PNCP and Compras.gov.br open data in a read-only way. Provides tools for full-text tender search, procurement details, document links, awarde | |
| mcptube-vision cyoshida944/mcptube Turns YouTube videos into a persistent, compounding wiki by combining transcripts with scene-change frame descriptions analyzed by vision models. Exposes that knowledge store as an MCP server so clients like Claude and Copilot can search an | |
| chaoxing cyoung-van/chaoxing-mcp Enables MCP clients to query course catalogs, assignments, exams, activities, and learning progress through a local Chrome CDP session, refresh and inspect saved snapshots, and open task entries while leaving login, verification, and submis | |
| Blockbench MCP cypernexus/blockbench-mcp Enables AI agents to interact with Blockbench, a 3D modeling tool for Minecraft, through a plugin-based MCP server. | |
| Browser MCP cypherpotato/browser-use-mcp Enables MCP clients to control a real local browser window for web automation tasks such as clicking, typing, scrolling, and taking screenshots. | |
| Chrome MCP cypherpotato/chrome-use-mcp Enables MCP clients to control real Chrome tabs in existing profiles, supporting navigation, interaction, screenshots, and console/network inspection across multiple Chrome instances. | |
| Render Fetch MCP cyphid-academy/render-fetch-mcp MCP server that retrieves bot-unfriendly page content as Markdown and screenshots as vision-ready image tiles, escalating through increasingly sophisticated extraction tiers (plain HTTP, trafilatura, TLS impersonation, headless Chromium) on | |
| Internet Archive MCP server cyphid-academy/wayback-machine-mcp Provides tools to query the Internet Archive, including enumerating historical captures, listing revisions, reading snapshots as clean text, diffing captures, and searching archived items. | |
| daxops-mcp cyphonica/daxops-mcp Build Power BI dashboards from your data, straight from Claude Code (or any MCP client). |
41,401–41,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.