Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Nexus Light das-l1/nexus-light Enables humans and AI agents to collaborate live on documents in a browser-based editor, with agents connecting via OAuth-enabled MCP tools for writing, commenting, memory, files, web retrieval, and backups. It can optionally integrate scho | |
| Marketic das-rebel/marketic An MCP server providing 32 marketing intelligence tools for competitive analysis, content generation, campaign management, and analytics, enabling MCP-compatible agents to execute marketing operations natively. | |
| servicenow-docs dasanjaneyuludarla/servicenowdoc-mcp MCP server for searching and reading ServiceNow documentation from a local clone, enabling keyword/regex queries and full doc retrieval without external APIs. | |
| Travel Planner MCP Server dasbalvinderdas/travel-planner-mcp-server Provides weather-aware travel planning tools that fetch 3-day forecasts and generate structured itineraries using a multi-agent orchestration system. It exposes specialized agents for weather data and trip planning to any MCP-compliant clie | |
| CropProphEU dasclown/croppropheu EU Crop Intelligence MCP Server — Yield forecasts, weather analysis, and phenology models for 15 countries. AI agent-native, multi-source intelligence (NASA POWER, Eurostat, Open-Meteo). | |
| drug-pipeline-mcp dasclown/drug-pipeline-mcp Pharmaceutical R\&D Pipeline Intelligence for AI Agents — Clinical trials, FDA approvals, drug information & publications in one MCP server. | |
| strompreis-mcp dasclown/strompreis-mcp MCP server that gives AI agents real-time German electricity price forecasts. | |
| PixelLabRat dasdarki/pixellabrat MCP server for generating style-consistent pixel art assets from PixelLab API, with project management, asset review, and an embedded Claude assistant. | |
| zapqr-mcp-starter dasecure/zapqr-mcp-starter Enables Claude, Cursor, VS Code, and other MCP clients to connect to your tools by signing in with ZapQR via passkey or phone scan, with per-person identity verified on every request. It implements OAuth 2.1 resource-server discovery, 401 c | |
| Crypto Options Desk MCP dasein108/crypto_options_desk_mcp An MCP server that gives an LLM agent a typed, audited tool surface over quant crypto-options desk analytics: gamma exposure, vanna, skew, vol surface, options flow, technicals, portfolio greeks, scenario analysis, and live positions. | |
| Cyb MCP Server dasein108/cyb-mcp An MCP server that enables AI agents to interact with the Cyber decentralized knowledge graph, allowing them to create cyberlinks between content and retrieve information from IPFS through the Cyber network. | |
| Cyberlink MCP Server dasein108/mcp-cw-graph A Model Context Protocol server for creating, updating, and querying semantic relationships (cyberlinks) on Cosmos-based blockchains through integration with Cursor IDE and Claude Desktop. | |
| start-infinity-mcp-server dasgltd/start-infinity-mcp-server Enables LLMs to manage StartInfinity boards using natural language by translating human-readable names into internal identifiers. | |
| Dedalus MCP dash-096/dedalus-mcp-python Minimal, spec-faithful Python framework for building MCP clients and servers with decorators and automatic schema inference. | |
| Face Generator MCP Server dasheck0/face-generator Generates realistic human face images that don't represent real people, offering various output shapes, configurable dimensions, and batch generation capabilities. | |
| MCP Performance Analyzer dasheng1994/mcp_analyze_quality Monitors and analyzes mobile application performance data to detect severe issues such as excessive memory usage and view count growth. Provides intelligent analysis with customizable rules and integrates seamlessly with development workflo | |
| YouTrack MCP dashingnights/youtrack-mcp A Model Context Protocol (MCP) server for YouTrack integration, providing a standardized interface for LLMs to interact with YouTrack's issue tracking, agile management, and knowledge base features. | |
| x5-mcp dashinin/x5-mcp Enables AI agents to sync X5 Club purchase history into a local SQLite database and answer questions about spending, receipts, products, categories, and price changes. | |
| go-ask-a-stranger dashw00d/go-ask-a-stranger Connects AI agents to anonymous strangers for asking and answering questions in character. | |
| pdharness dashwieland/pdharness Enables agents to build, verify, and render Pure Data instruments using a knowledge bank of verified modules and accumulated lessons. | |
| Karya dashy-e/mcp_server An MCP server that gives AI agents hands to make phone calls, send messages, and handle CRM/task workflows. It runs with a simulated provider for zero-cost testing and can switch to real providers like Twilio and ElevenLabs. | |
| whed-tools dasistaiden/mcp-web-scrapper-and-llm-extractor An MCP-native pipeline for collecting structured intelligence on higher education institutions using the WHED schema, enabling scraping, extraction, validation, and saving of profiles. | |
| Godot MCP daskoon/godot-mcp Enables AI assistants to launch a game engine editor, run and debug projects, capture console output, and manage scenes, nodes, sprites, and UIDs. | |
| Godot MCP daskoon/godot-mcp-main Enables AI assistants to launch and control the Godot editor, run projects, capture debug output, inspect project structure, and manage scenes, nodes, and UIDs through MCP tools. It provides a direct feedback loop for debugging and code gen | |
| jina-mcp-server daskoon/mcp Enables access to reader, embeddings, and reranker APIs for URL-to-markdown extraction, web/arXiv/SSRN/image search, screenshot capture, PDF figure/table/equation extraction, and relevance sorting or semantic deduplication. Supports paralle | |
| openusd-mcp daslabhq/openusd-mcp Enables AI assistants to read, inspect, and manipulate OpenUSD 3D scenes, including scene graph traversal, property querying, mesh export, and variant switching. | |
| RefBase MCP dasmonkey/refbase-mcp MCP server that enables AI assistants in IDEs to interact with RefBase webapp for managing conversations, bugs, features, and project context via natural language. | |
| steps-mcp dassader/steps-mcp Task planning and execution MCP server with durable SQLite storage and a browser UI for reviewing plans and following progress. | |
| Freshrelease MCP Server dasscoax/freshrelease_mcp Enables AI models to interact with Freshrelease project management platform through API integration. Supports creating and retrieving projects and tasks, managing status categories, and automating project operations through natural language | |
| dassian-adt dassianinc/dassian-adt MCP server for SAP ABAP development via the ADT API. Connect AI assistants to your SAP system — read, write, test, and deploy ABAP code without SAP GUI. | |
| strudel-console dastjead/strudel-console Enables music composition and playback using Strudel patterns in the terminal. Supports multi-track editing, effects, rendering to WAV, and AI-assisted composition via genre presets. | |
| Code Review Assistant dasunmihiranga/code-review-assistant-mcp An MCP server that automates code review by providing syntax checking, code explanation, and improvement suggestions using a multi-agent system. | |
| code-context-mcp daswort/code-context-mcp A pipeline that segments source code into chunks, generates embeddings, and stores them in ChromaDB. It provides semantic context to AI coding assistants via the Model Context Protocol. | |
| Rally MCP Server data-engineering-mcp/rally-mcp-server Enables AI assistants to retrieve Rally work items by FormattedID using HTTP Basic Authentication. | |
| fabric-model-reader-mcp data-goblin/fabric-model-reader-mcp MCP server for reading and analyzing Fabric semantic models. Supports getting model definitions and executing DAX queries against Power BI datasets. | |
| Fabric Report MCP data-goblin/fabric-report-mcp MCP server for managing Microsoft Fabric Reports with lifecycle management, filtering, and content manipulation. | |
| Fabric Workspace Reader MCP data-goblin/fabric-workspace-reader-mcp MCP server for exploring Microsoft Fabric and Power BI workspaces. It provides tools to list workspaces and get detailed contents of a workspace. | |
| faker-server data-mindset/faker-mcp-server-docker Provides tools for generating fake data using Faker.js, including person, lorem, internet, and more, with support for multiple locales and customizable options. | |
| MCP Server Chart data-mindset/mcp-server-chart Enables generation of 25+ types of charts and data visualizations using AntV, including bar charts, line charts, maps, mind maps, and specialized diagrams like fishbone and sankey charts. Supports both statistical charts and geographic visu | |
| QuickChart MCP Server data-mindset/quickchart-mcp Enables generation of various chart types (bar, line, pie, radar, etc.) using QuickChart.io service. Supports creating chart URLs and downloading chart images locally with customizable Chart.js configurations. | |
| proof-print-dialog data-mission/proof-print-dialog Enables programmatic document proofing for print, with real ink coverage measurement and waste page detection, letting agents decide what to print before any sheet is produced. | |
| thegraph-mcp data-nexus-web3/thegraph-mcp An MCP server that powers AI agents with indexed blockchain data from The Graph. | |
| mcp-data-tools data-scrape/mcp-data-tools MCP server for structured web data access, enabling local-market research and lead-list enrichment by returning business names, locations, ratings, and review signals from concrete queries. | |
| KeywordsPeopleUse MCP Server data-skunks/kpu-mcp A Model Context Protocol server implementation that integrates with KeywordsPeopleUse for accessing keyword research features including People Also Ask questions, Google Autocomplete suggestions, Reddit/Quora questions, and semantic keyword | |
| himalaya-mcp data-wise/himalaya-mcp Privacy-first email MCP server wrapping the himalaya CLI, providing 22 tools, 6 prompts, and 3 resources for email management with multi-account support. | |
| cdp-sniffer data338/cdp-sniffer Captures Chrome DevTools Protocol messages, UI events, and web traffic into a local SQLite database, enabling querying and analysis via CLI or MCP tools. | |
| Vaikora Guard MCP data443/vaikora-guard-mcp Enforces deterministic policies on AI agent tool calls, evaluating actions against compliance modules (SOC 2, HIPAA, GDPR, etc.) and returning ALLOW, BLOCK, or CONSTRAIN decisions with an audit trail. | |
| keel-core dataanalysis2023/keel-core Local-first personal cognitive engine that provides MCP tools for managing relationships, conversations, agenda, and memory, powered by Ollama. | |
| 네이버 API MCP 서버 dataartai/naver-api-mcp 이 MCP 서버는 네이버 쇼핑인사이트 API와 검색 API를 통합하여 카테고리 및 키워드 트렌드를 조회하고 블로그, 쇼핑, 지식iN, 백과사전 검색을 수행할 수 있게 해줍니다. | |
| Databar MCP Server databar-ai/databar-mcp-server Enables AI assistants to interact with Databar.ai's data enrichment API, allowing discovery, configuration, and execution of data enrichments across hundreds of providers using natural language. |
42,451–42,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.