Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Server Starter dao-genesis/mcp-server-starter A production-ready starter kit for building Model Context Protocol servers in TypeScript with validated config, modular structure, and full test suite. | |
| CAD-MCP Server daobataotie/cad-mcp Enables controlling CAD software (AutoCAD, GstarCAD, ZWCAD) through natural language instructions, allowing users to create and modify drawings without manually operating the CAD interface. | |
| MSSQL MCP Server daobataotie/mssql-mcp Provides database interaction and business intelligence capabilities, enabling users to run SQL queries, analyze business data, and automatically generate business insight memos for Microsoft SQL Server databases. | |
| Jotify Moment MCP Server daocatt/jotify-moment-mcp Enables AI agents to interact with Jotify Moment for publishing photo/text posts, uploading media, retrieving recent posts, and validating API tokens through natural language. | |
| codex-project-context daodaobing/codex-project-context Provides project-aware context for coding agents by selecting relevant AGENTS.md, docs, module paths, and decision records based on task, reducing redundant context loading via MCP stdio. | |
| remote-mcp-server-authless daodaocoming/remote-mcp-server-authless Deploy a remote MCP server on Cloudflare Workers without authentication, enabling custom tools and connection from AI Playground or Claude Desktop via a proxy. | |
| Lens Protocol MCP Server daoleno/lens-mcp Enables AI tools to interact with the Lens Protocol decentralized social network ecosystem. Supports fetching profiles, posts, followers, searching content, and accessing social graph data through standardized MCP interfaces. | |
| cody-mcp daolmedo/cody-mcp Enables MCP-capable clients to search team knowledge, browse an integration catalog, and get sourced product answers through deterministic, offline tools. | |
| Leave MCP Server daomengkj/leave_mcp Enables LLM clients to handle leave applications by providing tools for initialization, organization selection, leave day calculation, attachment checks, uploads, and submission, with built-in business validation and environment switching. | |
| GreenCodeMCP daoudiamir/greencodemcp An MCP server that detects energy anti-patterns in Python code, retrieves optimization examples, suggests refactoring, validates correctness, and benchmarks resource gains, integrating with VS Code, Cursor, and Windsurf. | |
| WHU MCP Server daoxiang0520/whu-mcp 武汉大学校园服务 MCP 服务器，提供图书馆座位、课表、成绩、考试、天气等工具，通过 SSE 协议供 Claude Code 远程调用。 | |
| LingQ Progress MCP dapazwl2/lingq-progress-mcp A read-only MCP server that lets ChatGPT inspect your LingQ progress without exposing your password. It exposes tools for listing languages, checking progress capabilities, and retrieving progress summaries and charts. | |
| checkpj-mcp-server dapdevsoftware/checkpj-mcp Provides tools to look up Brazilian companies by CNPJ, search companies, get risk scores, and validate CNPJ using the CheckPJ API. | |
| ibkr-mcp-server dapdevsoftware/ibkr-mcp-server MCP server for Interactive Brokers that exposes portfolio data, market quotes, trading, and analysis to any MCP-compatible AI client, with support for EU investors and safety-gated trading. | |
| GAIIA Expert Proxy (MCP Server) dapooleygmailcom/gaiia-mcp-server MCP server for high-fidelity code audits, refactoring, and architectural analysis using specialized Proxy Experts. | |
| flashlearn-mcp dapperauteur/flashlearn-mcp An MCP server for the FlashLearnAI public API that enables AI-powered flashcard deck generation, browsing sets, SM-2 spaced-repetition study sessions, and API usage tracking through natural language. | |
| dapper-mcp-wp dapperdevapps/dapper-mcp-wp Enables Claude to read context, create, and edit pages on WordPress sites via the REST API using Application Passwords. | |
| Cloudflare Remote MCP Server (Authless) dar-k99/remote-mcp-server-planning Deploy a remote MCP server on Cloudflare Workers without authentication. Customize tools in the init() method and connect to Claude Desktop or Cloudflare AI Playground. | |
| Remote MCP Server (Authless) dar-k99/validate-order-mcp-2 A remote MCP server template for Cloudflare Workers without authentication, supporting SSE connections and customizable tools. | |
| DuckDB Eurostat MCP Server dar4datascience/duckdb-eurostat-mcp Enables querying Eurostat data using natural language, powered by DuckDB for optimized performance. | |
| Formula 1 MCP Server darakhsh1999/f1-mcp-server Provides easy access to Formula 1 data including championship standings, event info, season calendars, track visualizations, session results, and driver/constructor info via FastF1 and OpenF1 API. | |
| r2-copilot darallium/r2-copilot A radare2 MCP server for binary analysis and reverse engineering, enabling AI agents to interact with radare2 through natural language or structured commands for tasks like static analysis, debugging, and patching. | |
| Darbot Deepmind MCP Server darbotlabs/darbot-deepmind-mcp Provides advanced AI reasoning capabilities through step-by-step thinking framework, enabling complex problem-solving with dynamic thought revision, multi-path reasoning, and adaptive planning for sophisticated analysis tasks. | |
| Genesys Cloud Function Data Actions MCP darbyje/genesys-function-data-actions-mcp Enables developers to manage Genesys Cloud Function Data Actions through natural language in Cursor, including validating, building, planning, and applying function deployments while enforcing safety controls like plan-before-apply and read | |
| refero-design-mcp darcas/refero-design-mcp Enables assistants to discover, search, and extract real design systems — palettes, type scales, spacing, surfaces, and do/don't guidance — from the public style pages of styles.refero.design. It reports index coverage with every search and | |
| Once Upon YOUR Child MCP server darcy0408/once-upon-your-child-mcp Enables Alexa+ and other voice agents to tell personalized, feelings-aware bedtime stories using a child's saved hero profile, with interactive choices, timed wind-down stories, and optional MP3 narration. | |
| DarcyAIMCPServer darcycui/darcyaimcpserver A Python-based MCP server that predicts tomorrow's weather. It can be used remotely via uvx or locally with uv. | |
| seamcheck-mcp dardameiz/seamcheck Enables AI assistants to analyze a Django + JavaScript project's code wiring, report connected, unresolved, unused, and uncertain findings, explain symbols with evidence, and record triage decisions over stdin/stdout without network. | |
| fcpxml-mcp-server daredev256/fcp-mcp-server The first MCP server for Final Cut Pro. 53 tools that parse, edit, and generate FCPXML timelines via natural language. Health checks, flash frame detection, chapter markers, rough cuts, NLE export. 912 tests, MIT licensed. | |
| lft-reader dareen-to/lft-reader-mcp Enables AI assistants to read COVID-19 lateral flow test results from photographs by calling a deployed computer-vision pipeline, returning verdicts like positive or negative with confidence. | |
| contentstack-mcp darekrossman/contentstack-mcp An MCP server for interacting with Contentstack's Content Management API | |
| fluxlora-mcp darekrossman/fluxlora-mcp An MCP server that lets users and autonomous agents generate high-quality images in a chosen artistic style by automatically discovering and applying open-source LoRA models. | |
| godot-mcp-extended daremau/godot-mcp-extended Enables AI agents to interact with the Godot game engine by launching the editor, running projects, capturing debug output, inspecting and editing scenes, running tests, and observing runtime behavior for an iterative game-making loop. | |
| PR Viewer MCP Server darenkeck-dev/devflow-mcp Enables PR review workflows by launching a diff visualizer against a git repo and returning 'accepted' or 'rejected' based on user decision. | |
| Czech Vinted Selling MCP daria-o1/vinted-mcp Enables local-first viewing of a Vinted wardrobe and preparation of new listings from text and photos, with optional one-shot publishing after explicit terminal approval. | |
| Scribe MCP dariakroshka/scribe-mcp Transcribes audio/video files, generates summaries and structured knowledge items, and supports Notion integration and chat-based interaction. Works as a standalone CLI, Notion integration, or MCP server tool for agent ecosystems. | |
| Habit Tracker MCP Server darialissi/litestar-habittracker Enables users to analyze their habits over a specified period and receive weekly reviews through natural language prompts. | |
| BlindWhaleFarmer MCP Server darianliu23/dsh-stardew-blind-whale-farmer It exposes text-based Stardew Valley state and game-action tools over a local MCP endpoint, enabling an MCP client's AI to play the game—moving, farming, fishing, shopping, mining, and sleeping—without screenshots or a vision model. | |
| AppLovin MCP Server dariastupakova-svg/applovin-mcp-server MCP server for managing AppLovin/Axon campaigns, including reporting, creative uploads, and campaign operations. | |
| forge3d darin-ziloy/forge3d-ai Enables AI agents to build models, import assets, animate scenes, render images, and save versioned projects through validated MCP tools backed by headless Blender, with a live browser viewer for inspection. | |
| Inbox MCP darinkishore/inbox-mcp Transform your inbox into an intelligent, LLM-powered assistant that manages, organizes, and streamlines email using conversational language. Compatible with Gmail, Outlook, iCloud, Yahoo, and IMAP services through Nylas v3 API. | |
| AI Work Market (AWM) darioandyoshi-tech/ai-work-market Settlement rails for AI labor — USDC escrow on Base Mainnet, 1% protocol fee, designed for autonomous agents.
10 MCP tools covering the full escrow lifecycle:
* Quoting calldata for create-intent, submit-proof, release-funds (broadcast ga | |
| redlib-mcp dariocotti/redlib-mcp Lets AI agents read public Reddit posts, comments, search results, and user activity through a self-hosted, loopback-only Redlib instance, keeping all traffic off reddit.com with no login or tracking. Provides four read-only tools for searc | |
| Remote Radar MCP darioknezovic/remote-radar-mcp Enables searching official public job APIs for remote developer roles, with normalized results, deduplication and filters for keywords, tags, region and posting date. Also lets users save listings and track application progress through stat | |
| Video Watcher MCP Server darischen/video-watcher-mcp MCP server exposing claude-video functionality for claude.ai web UI via HTTP+SSE, enabling video watching and analysis from claude.ai. | |
| celery-flower-mcp darius1223/celery-flower-mcp This MCP server provides AI assistants with full control over Celery task queues by exposing all Celery Flower REST API endpoints as tools. It enables monitoring workers, managing tasks, inspecting queues, and controlling worker pools in re | |
| cc-codemod darjss/cc-codemod Enables Claude Code to run JavaScript scripts that call its existing tools as async functions, fanning out calls, filtering nested outputs, and returning only concise results while preserving permission checks and limited session state. | |
| DeviceLens MCP dark-hunt3r1/device-lens-mcp A local, detection-first Windows MCP server that groups Device Manager interfaces into physical devices, provides explanations, and enables read-only inspection and update auditing without modifying any devices or drivers. | |
| steam-library-mcp dark-hunt3r1/steam-library-mcp Provides Steam library intelligence including ownership, store briefs, deals, discovery, wishlist updates, co-op planning, achievements, and optional local actions. | |
| GhidraMCP dark-night0/ghidramcp ghidraMCP is an MCP server that allows LLMs to autonomously reverse engineer applications by exposing core Ghidra functionality as tools for MCP clients. |
42,301–42,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.