Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| dcc-mcp-illustrator dcc-mcp/dcc-mcp-illustrator MCP adapter for Adobe Illustrator enabling structured DOM inspection and editing of documents, artwork, and exports via DCC-MCP CLI. | |
| DCC-MCP Kdenlive dcc-mcp/dcc-mcp-kdenlive Enables agents to create, inspect and edit Kdenlive project files, import and relink media, query installed MLT effects/transitions, author subtitles, and run asynchronous MLT renders, plus drive the live Kdenlive editor UI. Edits always wr | |
| dcc-mcp-kicad dcc-mcp/dcc-mcp-kicad Enables trusted local AI agents to create, inspect, edit, save, reopen, and export isolated headless KiCad 9 PCB board files, including native design-rule-check reports, through typed MCP tools. Operations are bounded to native pcbnew and k | |
| dcc-mcp-liquigen dcc-mcp/dcc-mcp-liquigen Enables typed, transactional automation of LiquiGen node graphs, fixed host commands for one LiquiGen process, and validation of LiquiGen-to-Unreal export bundles. | |
| dcc-mcp-marmoset dcc-mcp/dcc-mcp-marmoset Typed DCC-MCP control for Marmoset Toolbag 4.03+ and 5.x, enabling shell-capable agents to interact with Toolbag scenes via a shared CLI and MCP gateway. | |
| dcc-mcp-marvelous-designer dcc-mcp/dcc-mcp-marvelous-designer Enables typed automation of Marvelous Designer garments via DCC-MCP, including importing ZPRJ projects, creating patterns, running simulations, and exporting to OBJ, FBX, or Alembic. | |
| dcc-mcp-obs dcc-mcp/dcc-mcp-obs Enables typed, native control of OBS Studio—scene/source discovery and recording start/stop/pause/resume with status readbacks—through a secure loopback WebSocket interface. | |
| dcc-mcp-paraview dcc-mcp/dcc-mcp-paraview Enables AI agents to drive a persistent, isolated ParaView session for scientific visualization: creating and editing spheres, clipping with planes, importing single-file VTI/VTP/VTU datasets, extracting contours, exporting verified dataset | |
| DCC-MCP PhotoCraft dcc-mcp/dcc-mcp-photocraft Exposes a typed headless editing surface for PhotoCraft documents, letting clients create, open, inspect and save RGB8 files while working with layers, masks, selections, adjustments, text, transforms, fills, previews, exports and bounded n | |
| dcc-mcp-photoshop dcc-mcp/dcc-mcp-photoshop Adobe Photoshop adapter bridging AI agents (Claude, Cursor, Copilot) to Photoshop via UXP WebSocket for document and layer management. | |
| dcc-mcp-qgis dcc-mcp/dcc-mcp-qgis Enables clients to create, query and edit QGIS projects and vector data in an isolated, new headless PyQGIS process, exporting GeoJSON/GeoPackage, saving and reopening editable QGZ bundles, and rendering PNG maps through typed MCP tools. Al | |
| dcc-mcp-renderdoc dcc-mcp/dcc-mcp-renderdoc Enables automated graphics capture and replay with RenderDoc, allowing agents to launch executables, inspect captures, and export thumbnails or timeline JSON for regression triage. | |
| dcc-mcp-shogun dcc-mcp/dcc-mcp-shogun A local-first MCP adapter for Vicon Shogun Post that provides read-only inspection of motion-capture scenes, including subject markers and trajectory queries via the official SDK. | |
| dcc-mcp-slicer dcc-mcp/dcc-mcp-slicer Enables users to create, inspect, edit, and export bounded synthetic 3D Slicer volumes, phantoms, and sphere meshes, configure cameras and orthogonal slices, and render PNG previews via MCP. It also supports native MRB scene round-tripping | |
| dcc-mcp-substance3d-designer dcc-mcp/dcc-mcp-substance3d-designer Adapter that runs an MCP server inside Substance 3D Designer, enabling tools to inspect and interact with the active designer session and its packages through natural language. | |
| dcc-mcp-substance3d-painter dcc-mcp/dcc-mcp-substance3d-painter Enables AI agents to control Substance 3D Painter, inspecting projects and exporting texture sets via a secure preset-based tool. | |
| dcc-mcp-unity dcc-mcp/dcc-mcp-unity Unity Editor adapter for the DCC MCP ecosystem, providing tools to inspect and modify Unity projects, scenes, builds, and diagnostics through a WebSocket bridge. | |
| dcc-mcp-wwise dcc-mcp/dcc-mcp-wwise Enables interaction with Audiokinetic Wwise Authoring through WAAPI, allowing project inspection, sound and music imports, event management, and audible previews. | |
| HS Code MCP Server dcd887/hs-code-mcp-server Enables AI agents to search Chinese HS commodity codes, retrieve detailed tariff and regulatory information, and calculate import taxes using 2026 import/export tariff data. | |
| minecraft-mod-mcp-server dcd887/minecraft-mcp-server Enables Minecraft modpack development by generating FTB Quests chapters and tasks, KubeJS scripts (weapons, armor, recipes), validating SNBT/config files, and providing diagnostic checks. | |
| rbw-mcp dceluis/rbw-mcp MCP server that enables AI models to securely interact with a Bitwarden password manager vault via the rbw CLI. | |
| Tasker MCP dceluis/tasker-mcp An MCP server for Android's Tasker automation app | |
| ai-security-gateway-mcp dceptev-byte/ai-security-gateway-mcp Scans prompts for PII and masks or redacts sensitive data locally before sending to an LLM, supporting multiple anonymization modes. | |
| eurostat-mcp dcerecedo/eurostat-mcp Exposes the Eurostat Statistics API, enabling LLMs to discover, explore, and retrieve official EU statistical data through search, dimension inspection, and data retrieval tools. | |
| Local File Search MCP dchatpar/mcp-file-agent Provides tools for searching and reading local files, supporting metadata filters, PDF full-text keyword search, and sandboxed file access. | |
| design-os-migration-mcp dchavezp/design-os-migrator-mcp Bridges Design OS exported component packages into target projects, handling migrations across different CSS, component, and icon libraries. | |
| svm402-mcp dchu3/svm402-mcp An MCP server that provides AI agents with Solana token analysis from svm402.com, handling x402 USDC payments automatically. | |
| x402-agent-mcp dchu3/x402-agent-mcp MCP server that enables AI agents to search, describe, and fetch x402 endpoints on Base or Solana, with automatic USDC micropayments. | |
| Miro MCP server dchuhin/miro-mcp-server Enables interaction with Miro boards via MCP tools, supporting listing items, creating stickies, frames, shapes, connectors, and manipulating mind maps. | |
| Yandex Tracker MCP Server dchuhin/tracker-mcp-server Exposes Yandex Tracker's REST API v3 as tools for LLM clients, enabling issue management and queue operations via natural language. | |
| metaeditor5-mcp dchumari/metaeditor5-mcp Enables AI to create and manage MQL5 source files, compile them via MetaEditor's CLI, and run historical backtests through MetaTrader 5's Strategy Tester within a sandboxed MQL5 folder. | |
| DefectDojo MCP Server dcianciulli/defectdojo-mcp-server A Model Context Protocol (MCP) server that provides comprehensive access to DefectDojo vulnerability management platform. | |
| DarwinRelay dcierra/darwinrelay Enables MCP agents to control macOS natively with shell, PTY, background Chrome automation, and Accessibility-based desktop control. | |
| my-mcp-server dcjames-park/my-mcp-server A TypeScript MCP server boilerplate deployable to Vercel, offering tools for image generation, weather, geocoding, and more. | |
| ilac-mcp dckaratas/ilac-mcp Enables AI assistants to search Türkiye's TİTCK-licensed human drug lists, find generic equivalents, and check licence and e-prescription status, including weekly changes. | |
| phi-guard-mcp dcl632/phi-guard-mcp MCP server and CLI for detecting, redacting, and auditing PHI in medical text before it is sent to AI agents, with tools for scan, redact, audit, and validate operations. | |
| windows-gui-mcp dcl632/windows-gui-mcp Enables AI coding agents to automate Windows desktop applications through semantic UI Automation instead of brittle coordinate clicks, with tools for discovering windows, finding controls by stable identifiers, and verifying actions. | |
| stashcat-api-mcp dclausen01/stashcat-api-mcp MCP server for the Stashcat messenger API. Enables AI assistants to read and send messages, manage channels, conversations, files, polls, and more. | |
| deepseek-vision-mcp dclddb/deepseek-vision-mcp Provides vision capabilities to text-only LLMs by acting as a cloud vision adapter layer, enabling image understanding and OCR text extraction through a single MCP tool. | |
| ArchiScribe MCP Server dclnbrght/archiscribe-mcp Retrieves architectural information from ArchiMate models, enabling AI coding assistants to access architectural context during the software development lifecycle. Supports search and retrieval of views and elements in markdown, JSON, or YA | |
| dso2d15-mcp dcmcshan/dso2d15-mcp MCP server for controlling Hantek DSO2D15 and other DSO2000-family oscilloscopes via USB and SCPI, enabling waveform acquisition, measurements, and screen captures. | |
| monarch-mcp2-obot dcode/monarch-mcp2-obot Enables self-hosting a single-tenant MCP server that exposes Monarch Money tools for managing accounts, transactions, budgets, investments, and more, with automatic login and MFA support for obot deployments. | |
| MayaMCP dcoes/mayamcp Enables AI assistants to control Autodesk Maya through natural language for scene creation, modeling, material assignment, and object manipulation. | |
| excel-live-mac dcol3/excel-live-mac Live Excel MCP server for macOS that interacts with running Excel instances in real time via AppleScript, enabling instant read/write, formula support, and VBA macro execution. | |
| etsy-mcp-server dcoll/etsy-mcp-server A full-featured MCP server for the Etsy Open API v3 that enables managing an Etsy shop, including listings, inventory, images, digital files, and orders, through Claude or any MCP-compatible client. | |
| BloodyAD MCP dcollaoa/bloodyad_mcp Enables Active Directory enumeration and abuse operations through the bloodyAD tool. Supports LDAP queries, user/group management, DNS operations, and security testing directly from AI assistants. | |
| Swagger MCP Server dcolley/swagger-mcp A server that enables interaction with any API that has a Swagger/OpenAPI specification through Model Context Protocol (MCP), automatically generating tools from API endpoints and supporting multiple authentication methods. | |
| cogmem dcondrey/cogmem Self-improving, verifiable memory for AI coding agents. Learns how you work, stops repeating mistakes, models each project, recalls the right lesson at the right moment. Every memory is signed and tamper-evident. Local-first. | |
| MCP Drift State Tracker dcosnet/mcp-drift-state-tracker MCP server that scans multi-language codebases to detect stubs, missing imports, and structural incompleteness, assigning drift scores to quantify LLM context erosion. | |
| Market Inspector dcosodev/market-inspector Multi-asset market intelligence MCP server that monitors cryptocurrency movements, equity data, and ECB foreign-exchange reference rates to produce structured market briefs using Gemini. |
43,051–43,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.