Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| superbi-mcp cyphonica/powerbi-pbix-mcp Enables AI agents to author and edit Power BI files locally (.pbix/PBIP), covering semantic models, reports, and Power Query M with 490 tools. | |
| MCP Chess Server cyprianfusi/mcp-chess-server Provides Chess.com player data integration, enabling AI assistants to fetch real-time chess player profiles and comprehensive statistics including ratings, game counts, and performance metrics from Chess.com's public API. | |
| MCP RAG with ChromaDB cyprianfusi/mcp-rag-with-chromadb Provides retrieval-augmented generation (RAG) capabilities by ingesting various document formats into a persistent ChromaDB vector store. It enables semantic search and retrieval using either OpenAI or Ollama embeddings for processing local | |
| mcp-research-assistant cyprianfusi/mcp-research-assistant A research assistant server that enables saving, organizing, and retrieving research content with semantic search using ChromaDB and OpenAI embeddings. | |
| PostgreSQL MCP Server cyprianfusi/mcp-server-postgres Enables interaction with PostgreSQL databases through resources, tools, and prompts for data analysis, including listing tables, executing read-only queries, and generating analysis workflows. | |
| mcp-discord cyprocypro/mcp-discord An MCP server that enables searching Discord messages using Discord's native search API. Designed for use with Claude Code to find project decisions and communications in Discord. | |
| MCP Antigravity Bridge cyq1017/mcp-antigravity-bridge Enables OpenClaw agents to delegate complex coding tasks to the Antigravity VS Code environment via a filesystem-based mailbox system. It provides tools to submit tasks, monitor execution status, and retrieve results directly within the dev | |
| MCP Dual-Cycle Reasoner cyqlelabs/mcp-dual-cycle-reasoner A Model Context Protocol server that empowers AI agents with metacognitive monitoring to detect reasoning loops and provide intelligent recovery using case-based reasoning and statistical analysis. | |
| duckduckgo-mcp cyranob/web-forager Search the web using DuckDuckGo and fetch/convert web content using Jina Reader. Privacy-focused search with no API key required. | |
| CONTINUUM cyrax321/continuum Universal verifiable recovery for long-running AI agents with semantic checkpoints, idempotent action ledger and hash chained log as a deny by default MCP server. Framework agnostic with adapters for LangGraph, LangChain and OpenAI plus gat | |
| BuiltWith MCP Server cyreslab-ai/builtwith-mcp-server Enables querying the BuiltWith API to discover and analyze website technology stacks, including frameworks, analytics tools, CMS platforms, and other technologies used by any domain. | |
| Burpsuite MCP Server cyreslab-ai/burpsuite-mcp-server Burpsuite MCP Server | |
| CIRCL CVE SEARCH MCP Server cyreslab-ai/circl-cve-search-mcp-server A Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API, providing comprehensive vulnerability and security information. | |
| Crunchbase MCP Server cyreslab-ai/crunchbase-mcp-server A Model Context Protocol (MCP) server that provides access to Crunchbase data for AI assistants. This server allows AI assistants to search for companies, get company details, funding information, acquisitions, and people data from Crunchba | |
| ExploitDB MCP Server cyreslab-ai/exploitdb-mcp-server A Model Context Protocol server that enables AI assistants to search and retrieve information about security exploits and vulnerabilities from the Exploit Database, enhancing cybersecurity research capabilities. | |
| FlightRadar MCP Server cyreslab-ai/flightradar-mcp-server A Model Context Protocol (MCP) server that provides real-time flight tracking and status information using the AviationStack API. | |
| flightradar24-mcp-server cyreslab-ai/flightradar24-mcp-server MCP server for the official Flightradar24 API (fr24api.flightradar24.com) | |
| Have I Been Pwned MCP Server cyreslab-ai/hibp-mcp-server A Model Context Protocol (MCP) server that provides integration with the Have I Been Pwned API to check if your accounts or passwords have been compromised in data breaches. | |
| MarineTraffic MCP Server cyreslab-ai/marinetraffic-mcp-server MarineTraffic MCP Server | |
| Nessus MCP Server cyreslab-ai/nessus-mcp-server Nessus MCP Server | |
| NIST NVD MCP Server cyreslab-ai/nist-nvd-mcp-server Enables AI agents to search, retrieve, and analyze vulnerability data from the NIST National Vulnerability Database through a comprehensive Model Context Protocol server. | |
| PhishTank MCP Server cyreslab-ai/phishtank-mcp-server Enables checking URLs against PhishTank's phishing database, searching for phishing URLs by target or date, and retrieving phishing statistics, with built-in rate limiting and caching. | |
| ransomware-live-mcp-server cyreslab-ai/ransomware-live-mcp-server MCP server for Ransomware.live API - Real-time ransomware victim monitoring | |
| Satellite Tracking MCP Server cyreslab-ai/satellitetracking-mcp-server Satellite Tracking MCP Server | |
| urlhaus-mcp-server cyreslab-ai/urlhaus-mcp-server MCP server for accessing URLhaus malicious URL database from abuse.ch - provides threat intelligence for cybersecurity research | |
| windy-webcams-mcp-server cyreslab-ai/windy-webcams-mcp-server MCP server for Windy Webcam Public API - Access live webcam feeds from around the world | |
| HermodMail MCP Server cyril-belin/hermodmail Enables AI agents to work with existing IMAP/SMTP mailboxes through a native MCP endpoint, with granular token scopes for reading, searching, organizing, drafting, sending, and managing folders plus optional AI-assisted summaries and replie | |
| nvidia-vision-mcp cyril-belin/nvidia-vision-mcp Enables MCP-compatible agents to analyze images via NVIDIA NIM vision models, supporting file paths, URLs, or base64 input to return actionable textual descriptions. | |
| ABP.IO MCP Server cyrilnoah1/abp-io-mcp Enables AI models to interact with ABP.IO applications through over 48 tools for managing modules, entities, users, and multi-tenancy. It supports comprehensive application lifecycle management and automated UI generation across multiple fr | |
| Lattice HQ MCP Server cyrilnoah1/lattice-hq-mcp Enables AI models to interact with the Lattice HQ performance management platform for managing users, goals, review cycles, feedback, departments, and updates. | |
| genai-lab cyrilpanicker/genai-lab Exposes tools for semantic search and RAG-based Q\&A from a local knowledge base, along with resources and prompt templates. | |
| agent-notify cyrisxd/agent-notify Enables any MCP-capable agent or script to email you when something needs attention, sending alerts only to a single verified inbox from your own deployed Cloudflare Worker. It is send-only, requires no shared service, and can be deployed i | |
| HoYoLAB-MCP cyrne1-7208/hoyolab-mcp Provides read-only access to HoYoLAB and HoYoWiki APIs, enabling search and retrieval of posts, wiki entries, and article content converted to Markdown. | |
| claude-database-tools cyronius/claude-database-tools A SQL Server CLI and MCP server for Claude Code that supports standard SQL Server authentication for database interaction and management. It enables users to perform schema exploration, execute queries, and manage data records with built-in | |
| weskill cyrus-xc/weskill Enables compatible AI assistants to operate Linux WeChat through local stdio, including contact and group search, bounded message history retrieval, private and group text sending, shared service lifecycle management, capability discovery, | |
| hk-spatial-mcp cyruschu430/hk-spatial-mcp Enables any MCP-capable client to search Hong Kong's 1,154 official CSDI spatial datasets in English, Traditional or Simplified Chinese, retrieve them as GeoJSON, and answer questions with counts, sums and charts, interactive 2D/3D maps, fe | |
| geneva-tax-mcp cyrusgch/geneva-tax-mcp Enables read-only local analysis and comparison of Geneva personal tax declarations (GeTax/Dr. Tax PDFs) and tax simulations via the official ESTV calculator. | |
| Claude Code Bridge cyruskraad/codex-claude-mcp Lets Codex delegate coding and repository work to an installed Claude Code CLI with permission-aware inspect/write access, model and effort selection, resumable and cloud-attached sessions, and durable synchronous or asynchronous jobs. | |
| ml-lab-mcp cyrustao/ml-lab-mcp Enables LLMs to manage and run machine learning training jobs on a remote server, including syncing code, submitting experiments, monitoring progress, reading TensorBoard metrics, and receiving completion notifications. | |
| PT MCP cyt-666/pt-mcp Enables agents to search BitTorrent sites by native categories, read RSS snapshots, and manage qBittorrent downloads through eight fixed MCP tools while keeping site and downloader credentials server-side. | |
| RouterLens cyuanxv/openrouter-chatgpt-plugin Enables analysis of OpenRouter account credit, spend, and usage across models, providers, and API keys, along with cost-anomaly detection, optimization insights, and model comparison. It also provides read-only key metadata and live analyti | |
| mnova-mcp cyx1874cyx/mnova-mcp MCP server for MestReNova 15 that enables processing 1D NMR data, importing ChemDraw structures, running Mnova Verify, and writing back assignments with audit trails. | |
| ya360-mcp cyxar4uk/ya360-mcp An unofficial MCP server that enables AI assistants to work with Yandex Tracker, Yandex Mail, and Yandex Calendar on the user's behalf, supporting reading, writing, and workflow automations such as meeting follow-ups, standups, and email-to | |
| eBay MCP Server cyxg66au/ebay-mcp-project Enables eBay sellers to manage inventory, view orders, handle messages, and browse listings through AI assistants using eBay seller APIs. | |
| capability-sdk cyxysky/capability-sdk Enables existing agents to access browser automation, Office document generation and conversion, terminal and code execution, charts, knowledge retrieval, media, computer control, maps, data, and integration tools through one MCP server wit | |
| Remote MCP Server cyyzpanpan/remote-mcp-server A Cloudflare Workers-based Model Context Protocol server that enables AI assistants like Claude to access external tools via OAuth authentication. | |
| LightroomForge cyzhu98/lightroom-mcp Enables AI agents to drive Adobe Lightroom Classic directly — searching and organizing catalogs, reading and writing the full set of develop parameters, building geometric and AI-generated masks (sky, subject, mountains, water, people), app | |
| DevSpace cyzice/devs-codex A self-hosted MCP server that lets ChatGPT securely read, edit, search, and run code in your local projects via an owner-approved connection. | |
| mcp-server czabriskie/mcp-server An MCP server that provides weather and time tools, enabling users to get current time, weather alerts, and forecasts through natural language with Claude Desktop. | |
| MCP PII Tools czangyeob/mcp-pii-tools Enables high-precision detection, anonymization, encryption and decryption of personally identifiable information (PII) in text using GPT-4o-based detection and advanced cryptographic methods. Supports both deterministic encryption for sear |
41,451–41,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.