Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Zee.Media Client Reporting MCP dannyzeemedia/zm-reporting-mcp Read-only MCP server exposing client dashboard data (client series and reports) from Supabase, allowing live natural language queries about any client. | |
| deduplicator-merge-advanced danogurtsov/deduplicator-merge-advanced An MCP server that enables Claude agents to interactively merge security audit findings by grouping duplicates, selecting canonicals, preserving authorship, and generating edit instructions, all against a GitHub issues repository. | |
| Domainr MCP Server danohn/domainr-mcp-server Enables domain name search, availability checking, and registration URL retrieval using the Domainr API. Supports intelligent domain suggestions with advanced filtering by registrar, keywords, and location for AI-assisted domain research wo | |
| OneNote MCP Server danosb/onenote-mcp A Model Context Protocol server that enables AI language models like Claude to interact with Microsoft OneNote, allowing access to notebooks, creating pages, searching notes, and analyzing content directly through the AI interface. | |
| Judicature MCP danospanos/mcp-caselaw-server-cz Enables searching the ak-vrana.cz website for articles by keywords and extracting webpage content to Markdown format. | |
| Ferry danowicz/ferry-mcp Enables AI agents to turn codebase changes into animated, narrated presentations that open in a browser and update live as the agent builds them, including stepped diffs, sequence diagrams, and review feedback loops. | |
| G1 UART MCP Server danroblewis/g1_uart_mcp Enables communication with G1 Bluetooth devices using the Nordic UART protocol over BLE. Supports device discovery, connection management, and message exchange for G1 audio devices through natural language commands. | |
| Remote MCP Server with GitHub OAuth danrthompson/remote-mcps A Model Context Protocol server that supports remote connections and authenticates users via GitHub OAuth, allowing them to access tools based on their GitHub identity. | |
| DPC MCP Server dans-plugins/dpc-mcp-server Enables querying the DPC Zettelkasten knowledge base with full-text search, note retrieval, and structural GraphQL queries, each answer backed by pinned GitHub source citations. | |
| Fiken MCP dansheik/fiken-mcp Enables Claude Desktop and Claude Code on macOS to securely read Fiken accounting data—including documents, balances, invoices, purchases, and suppliers—and draft full posting proposals for human review, without writing to Fiken. | |
| Folio MCP dansheik/folio-mcp Enables Claude Desktop and Claude Code on macOS to read local invoice files and match them against Folio Norway bank transactions, events, and existing attachments. After an explicit human approval step in the terminal, it uploads the appro | |
| mcp-api-proxy danskebank/mcp-api-proxy Enables MCP clients to discover and call Danske Bank public APIs through a hosted MCP server, adding OAuth/mTLS authentication and endpoint URL validation via a local call_endpoint tool. | |
| MCP Camera Tool danson-dan/mcp_camera Enables AI assistants to access and control network cameras to capture images and perform analysis including brightness detection, color distribution, and edge detection. | |
| PlanManager MCP Server danson-dan/plan_mcp_service A hierarchical plan management system built on FastMCP and SQLite that enables users to create, track, and manage various types of plans including travel itineraries, study schedules, and work tasks with templates, search capabilities, and | |
| Kali MCP danspk/kali-mcp-server Enables AI applications to invoke 58 popular Kali Linux security tools for network scanning, web exploitation, password attacks, reconnaissance, Metasploit, evasion, forensics, post-exploitation, and miscellaneous tasks through the Model Co | |
| reverse-engineer-marketing dansugc/reverse-engineer-marketing Lets an MCP client collect the marketing evidence behind any URL — ad libraries, social, SEO, pixels, founders, Reddit, positioning history — as a token-cheap scorecard plus citable evidence index and unknowns. Enables the agent to fetch sp | |
| baatjie-mcp-server dantalan/baatjie-mcp-server MCP server exposing Baatjie Group's tanOS property OS and sigscheCore signal scheduler through generic CRUD and workflow tools, featuring audit logging, PII redaction, and dependency-aware action planning. | |
| Weather Prediction MCP Server dantas-tiago/weathermcpserver An MCP server that provides weather forecast tools (current weather, forecast, travel recommendations, and city comparison) powered by Open-Meteo, designed for Databricks Agent Bricks. | |
| expert-booking-mcp dante-dan/expert-booking-mcp Enables AI agents to discover and invoke expert booking tools via a Streamable HTTP MCP server, supporting slot search, holds, payments, and human-in-the-loop confirmations with strict validation and time-based contracts. | |
| SAP BTP ABAP ADT MCP Server dante-tx/sap-abap-adt-mcp Enables SAP ABAP development workflows including ADT login, object search, read, create, update, activate, delete, and OData service publishing. | |
| android-mcp-toolkit dante3750/android-mcp-toolkit Enables AI coding agents to build, test, lint, and debug Android projects with concise Gradle output, filtered logcat, and connected-device inspection and interaction. It also supports setup across several agent clients and caps noisy outpu | |
| PATK MCP Server dante7771/patk-mcp Filters verbose terminal output from commands like npm install, pip install, docker build, and pytest, reducing context token consumption for AI agents by condensing logs, removing progress bars, and grouping repeated warnings. | |
| comprehend-markdown dante83/comprehend-markdown Translates project README files into multiple languages via MCP server or standalone pipeline, using local LM Studio models for translation, critique, and revision. | |
| layer-memory dante926/layer-memory A local-first, Markdown-native AI agent layered memory system that provides MCP tools for storing, recalling, exporting, and importing memories with types like working, persona, and fact. | |
| mymore dante926/mymore A category-first, lightweight MCP memory server that provides persistent memory for AI agents using Markdown and SQLite FTS5, with triage classification and consolidation. | |
| Telegram MCP dantekorep-ux/telegram-mcp Connects Claude, ChatGPT, and Codex to a bot so assistants can message the user, exchange files, ask questions with answer buttons, and read connected group or personal chats. Supports searching messages, following replies, working within f | |
| DoorDash over text dantemagg/poke-doordash-recipe Enables ordering DoorDash via Poke over text, with tools for restaurant discovery, cart management, promo application, and order submission requiring explicit user confirmation. | |
| DeFi Intelligence Engine danteriva45-hub/defi-yield-engine Complete DeFi intelligence — Yield, Staking, Restaking, RWA, Perps,
Gas Optimization & Contract Security. One answer, not raw data. | |
| imagengen danton721/imagengen Generates and edits images via Gemini, Grok, and GPT-image providers for MCP clients like Claude Code that lack native image generation. | |
| inxt dantoniomarte/inxt-agent Enables agents to browse, search, upload, download, move, rename, and trash files on an Internxt Drive account through end-to-end encrypted transfers, with browser or headless login and destructive actions gated behind explicit confirmation | |
| oarx-docs-mcp dantte-lp/oarx-docs-mcp MCP server for semantic search across the complete ObjectARX 2026 documentation set. Indexes 89,715 text chunks from 22 guides in ChromaDB with hybrid BM25 + dense retrieval. | |
| Eternity MCP danttis/eternity-mcp A privacy-focused local memory server that provides long-term semantic storage and retrieval for AI agents using SQLite and ChromaDB. It enables LLMs to persist and query text, chat histories, and PDF documents across sessions through the M | |
| mcp-video-vision danusiojr/mcp-video-vision MCP server that enables video analysis capabilities to Claude, including frame extraction, scene detection, and video metadata retrieval. | |
| Empresa Gemini MCP danuzu11/mpcserver-gemini An MCP server that integrates Google Gemini with corporate management APIs to handle employees, clients, and suppliers through natural language. It enables dynamic data retrieval, record creation, and secure document listing without includi | |
| trippy-mcp danvaneijck/trippy-mcp An MCP server that lets coding agents trade on Injective, including launching tokens on SHROOM Pad, trading bonding-curve tokens, and swapping any Injective token via the Choice aggregator. It is non-custodial, uses a budgeted burner wallet | |
| MCP Tool Security Inspector danveil/mcp-security-inspector Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift without executing tools. | |
| mcp-ssh-gateway danvic-dev/mcp-ssh-gateway Enables managing Linux servers via SSH with tools for command execution, file operations, service management, and log analysis. | |
| AI Repo Adventures MCP danwahlin/ai-repo-adventures Transforms code repositories into interactive, themed adventures for exploration and learning through a Model Context Protocol server. | |
| Marvel MCP danwahlin/marvel-mcp MCP Server for the Marvel Developer API, enabling interaction with characters and comics data. | |
| Marvel MCP Server danwahlin/marvel-mcp-azure-functions An Azure Functions-based MCP server that enables interaction with Marvel characters and comics data through the official Marvel Developer API. | |
| open-memory danwahlin/open-memory Gives AI tools (Copilot, Claude, etc.) access to a personal knowledge base stored as plain markdown files, indexed and searched via QMD (BM25 + vector embeddings). | |
| Toss Place MCP danyay/toss-place-mcp Enables querying live Toss Place POS data—sales, orders, menu availability, tables, payments, and inventory—through a self-hosted bridge, allowing Codex to answer analytics questions. | |
| Git MCP Server danyelkirsch/git-mcp-server Provides comprehensive Git functionality to MCP clients, enabling users to manage repositories through operations like commits, diffs, and branch management via natural language. It automatically detects the current working directory and su | |
| reelfaceless-mcp danyial/reelfaceless_mcp Schedule short-form video posts to YouTube and TikTok from Claude Desktop or any MCP client using the ReelFaceless public API. | |
| vocald danylo-dudok/vocald Headless text-to-speech and speech-to-text server with REST and MCP API, supporting Kokoro TTS and Whisper STT. | |
| Codebase MCP danyqe/codebase-mcp An open-source AI-powered development assistant that connects Claude Desktop to your codebase via MCP, enabling semantic code search, AI-assisted editing, and persistent memory without additional subscriptions. | |
| Atlas Scolaire danyvilela/atlas-scolaire-mcp Enables AI assistants to query French middle and high school exam results, always paired with social intake and value-added context, including tools to search, compare, and explore schools by area or similarity. | |
| UnSplashX danywalls/unsplashx An MCP server for the Unsplash API that enables searching, downloading, and inserting high-quality images with automatic photographer attribution into local projects. | |
| image-provenance-mcp danzai233/image-provenance-mcp Enables an agent to determine whether an image is AI-generated, edited, or captured by reading signed C2PA Content Credentials first and falling back to labelled pixel-level forensic heuristics (noise, ELA, spectral, colour, EXIF) only when | |
| ai-delivery danzxz/ai-delivery Enables agents and teams to manage versioned delivery work items, role-tagged handoffs, revision- and source-bound evidence, QA gate evaluation, and release-owner attestations through MCP tools. |
42,251–42,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.