Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Weather-server MCP Server daunload/-mcp- A TypeScript-based MCP server that provides weather information through resources and tools, allowing users to access current weather data and forecast predictions for different cities. | |
| WOOFi Pro MCP Server daunteeth/woofi-pro-mcp Provides a suite of 40 comprehensive trading tools for managing WOOFi Pro and Orderly Network integrations through natural language. It enables users to execute orders, track positions, and manage assets across MCP-compatible platforms like | |
| SSO MCP Server dauquangthanh/sso-mcp-server Provides Azure Entra ID authenticated access to organizational development resources including checklists, process documentation, and workflows with dual-mode authentication support. | |
| Agent voice call MCP daure/voice-call Enables MCP agents to ring a user on their Linux desktop, connect a native OpenAI Realtime assistant for spoken discussion, and return call status or transcripts. It also lets the assistant perform read-only lookups in a fixed document dire | |
| SkyFi MCP Server davaakhatan/skyfi-mcp Enables AI agents to interact with SkyFi's geospatial data services for ordering satellite imagery, searching data catalogs, checking pricing and feasibility, and monitoring areas of interest. | |
| sefaria-api-mcp davad00/sefaria-api-mcp Enables AI agents to access and interact with the Sefaria database of Jewish texts, including retrieval, search, and related content. | |
| Energy Prediction MCP Server davad122/tfm Enables AI-powered analysis and prediction of household energy consumption through machine learning models, providing historical consumption breakdowns, price queries from Spanish electricity markets, and personalized energy optimization re | |
| Hugging Face Hub Semantic Search MCP davanstrien/hub-semantic-search-mcp An unofficial MCP server that provides semantic search capabilities for Hugging Face models and datasets, enabling Claude and other MCP-compatible clients to search, discover, and explore the Hugging Face ecosystem using natural language qu | |
| E*TRADE MCP Server davdunc/mcp_etrade Enables comprehensive E\*TRADE integration with OAuth authentication, account management, risk calculations, watch lists, and trading operations. Includes built-in risk management guardrails, portfolio tracking, market data access, and trad | |
| google-workspace-mcp dave-nguyen-pm/google-workplace-mcp MCP server enabling Cursor to interact with Google Workspace services including Gmail, Calendar, Drive, Docs, Sheets, Slides, Chat, and People via natural language. | |
| mcp-dynamics-365 dave-palt/mcp-dynamics-365 Enables AI agents to perform CRUD operations, query data, fetch schemas, and execute custom operations on Microsoft Dynamics 365 CRM entities. | |
| Jokes MCP Server dave4522/mcp- This server provides access to various categories of jokes, including developer-themed and Chuck Norris jokes, via the Model Context Protocol. It allows developers to integrate humor-focused tools into AI agents within GitHub Copilot and Mi | |
| tally-aiagent dave8172/tally-aiagent Enables AI agents to safely write to Tally Prime by refusing unrecognized names and verifying each voucher by reading it back from Tally. | |
| Twining MCP Server daveangulo/twining-mcp Provides agent coordination for Claude Code through a shared blackboard, decision tracking with rationale, and local semantic search over git-trackable JSONL files. It enables users to assemble tailored context packages and manage a lightwe | |
| predictioncouncil-mcp daveb1392/predictioncouncil-mcp Enables searching and running an AI council (Grok, Claude, GPT, Gemini) on Polymarket events to produce structured verdicts from any MCP client. | |
| Bullet MCP davebream/bullet-mcp MCP server for the Bullet API, enabling management of tasks, notes, and events through natural language across various MCP clients. | |
| architecture-mcp davedat-110105/architecture-mcp Enables a browser agent to inspect, rank, preview, evaluate, and validate transformer layer pruning proposals, while ensuring only a person can commit removals. | |
| Expo MCP Server davedev42/expo-mcp Enables automated testing and development of Expo/React Native apps through session-based Expo dev server management and Maestro UI automation tools for tapping, text input, screenshots, and flow execution. | |
| tauri-plugin-mcp davedev42/tauri-plugin-mcp Enables AI assistants to automate and test Tauri desktop applications through the Model Context Protocol. It provides tools for app management, UI interaction, and state inspection across multiple platforms without requiring CDP dependencie | |
| Toast MCP Server daveed716/toast-mcp Enables AI assistants to query live Toast POS data and generate sales, labor, and cash reports while answering restaurant operations questions, all in a read-only manner. | |
| freecad-mcp daveedge1/freecad-mcp Enables to control FreeCAD from Claude Desktop through MCP, allowing CAD operations like creating and editing objects, taking screenshots, and executing Python code. | |
| MCP-Server-for-CFD davefan-nchc/mcp-server-for-cfd Provides aerodynamic analysis tools through MCP, enabling geometry generation, meshing, CFD solving, and visualization for 2D airfoils. | |
| glfi davefmurray/gfli-google-flights Enables AI assistants to search Google Flights for trips, filter for Starlink-equipped flights, enforce connection rules, compare fare premiums, and manage saved search presets through MCP tools. | |
| rekordbox-mcp davehenke/rekordbox-mcp MCP server for rekordbox DJ database access. Provides read-only querying of tracks, playlists, and DJ session history from encrypted rekordbox SQLite databases using pyrekordbox. | |
| Brreg MCP Server davehylde/brreg-mcp-server Enables interaction with the Norwegian Business Registry (Brønnøysundregistrene) API to search and retrieve detailed information about Norwegian companies, subunits, roles, organization forms, municipalities, and NACE industry codes. | |
| design-review davekim917/design-artifact-loop This MCP server renders UI design artifacts headlessly, runs deterministic linters, and manages stateful design review loops with an independent vision critic. | |
| Chat On Steroids davenguyen2608/astraforge-desktop Gives ChatGPT hands-on control of a local machine: reading, patching and executing code in approved project folders, running real interactive processes, managing plans and worker sub-chats, and driving the browser or desktop through user-gr | |
| google-keep-mcp davenicoll/google-keep-mcp Enables AI-powered management of Google Keep notes, including search, create, update, delete, archive, and label operations. | |
| PostcardAI MCP Server daveosterjr/postcardai-mcp Enables AI assistants to create, design, and send physical postcards directly through the PostcardAI platform. It provides comprehensive tools for managing contacts, generating postcard designs from prompts, and tracking mailing delivery me | |
| Salesforce Object MCP Server davep-gh/sfobjectmcp Enables AI agents to explore Salesforce metadata by parsing object and field definitions, reducing hallucination when working with Salesforce repositories. | |
| ngmcp davep/ngmcp Enables AI agents to query and browse Norton Guide database files, providing tools for reading entries, searching, and navigating menus. | |
| Apple Health MCP daveremy/apple-health-mcp Enables users to query Apple Health metrics, workouts, and trends from CSV files exported via the Health Auto Export app. It allows MCP clients to analyze health data such as heart rate, sleep stages, and activity levels directly from local | |
| TradingView MCP daveshelly3/trading-view-mcp Provides TradingView-style market analysis with OHLCV candles, 19 technical indicators, a screener, and a backtester using public Yahoo Finance data without API keys. | |
| nudge davesleal/nudge An MCP server that connects AI assistants like Claude to your todo app, enabling natural, friendly reminders and task management without a server to run. | |
| Etsy Ops MCP davetheprofessor/etsy-ops-mcp A confirmation-gated MCP server for Etsy Open API v3 listing inspection and title/tag updates. | |
| WordPress Ops MCP davetheprofessor/wordpress-ops-mcp Enables interaction with WordPress sites through the WordPress REST API, supporting content management and post operations with safety confirmations. | |
| frontend-review-mcp davetorbeck/frontend-review-mcp Enables visual review of UI edits by comparing before and after screenshots, returning whether the edit satisfies the request. | |
| Tiong Creative assistant davettt/assistant-mcp Enables an AI assistant on macOS to read and update data in supported desktop apps such as Due Again and Gift Keeper while those apps are open and assistant access is enabled. | |
| idml-engine davevwatkins/idml-engine Headless InDesign document composition via MCP: parse IDML templates, convert content to ICML stories, and compose complete newspaper IDML files conversationally. | |
| platform-mcp-stub daveynotfound/platform-mcp-stub Demonstrates agent-native platform onboarding with human-in-the-loop API key provisioning, plus live usage and rate-limit queries via Anthropic Admin APIs. | |
| Tika MCP Server daveyproctor/tika-mcp Extracts text and metadata from various file formats (PDF, DOCX, images with OCR) using Apache Tika, enabling AI assistants to understand file contents. | |
| MPilot davezfr/mpilot Unified MCP server for media acquisition, subtitle automation, and agent-run media workflows, enabling downloads via Prowlarr/qBittorrent and subtitle translation/sidecar creation. | |
| mcp-server-brasil davi713albano-coder/mcp-server-brasil Provides tools to query Brazilian CNPJ (company registration), CEP (postal codes), and currency exchange rates (USD and EUR) through an MCP server. | |
| COTI MCP Server davibauer/coti-mcp Enables AI applications to interact with the COTI blockchain for private token operations, supporting account management, private ERC20/ERC721 tokens, and secure transactions using Multi-Party Computation (MPC) technology. | |
| TikTok MCP davibauer/tiktok-mcp Integrates TikTok video analysis into Claude AI via TikNeuron, enabling users to retrieve subtitles, analyze content for virality factors, and extract video details including engagement metrics and metadata. | |
| Yabot Jobs MCP server davicho01/yabot.jobs-mcp Enables MCP clients to search and apply to jobs, evaluate resumes, and upload tailored resumes and cover letters using the user's Yabot Jobs account. | |
| GeoNode MCP davicustodio/mcp-geonode-api MCP server for GeoNode 4.x and 5.x, enabling search, management, and configuration of GeoNode resources through the REST API. | |
| figma-local-bridge david-buck/figma-local-bridge A local-only MCP bridge that connects an MCP client to an open Figma file via a Figma plugin, enabling direct document editing, inspection, export, and audit without using the Figma REST API. | |
| xero-mcp david-buck/xero-mcp A local MCP server for Xero that lets you search contacts, list and fetch invoices, and create draft invoices. It includes guardrails to prevent approving, sending, or deleting invoices. | |
| browser-devtools-mcp david-chinese-wei/cdp-browser-mcp Lets an AI assistant inspect a running Google Chrome or Microsoft Edge browser over the Chrome DevTools Protocol, reading console output, network traffic, DOM snapshots, errors, performance metrics, storage, and screenshots. It also support |
42,601–42,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.