Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| outlook-mcp derechovirtual/outlook-mcp MCP server providing full control over Outlook.com, Hotmail, Live, or Microsoft 365 email via Microsoft Graph API, enabling reading, searching, sending, and managing messages and folders securely. | |
| ultramsg-mcp derechovirtual/ultramsg-mcp MCP server for UltraMsg WhatsApp API that enables sending and reading messages (text, images, documents, audio, voice notes, video, stickers, locations, contacts, reactions) and managing instance, chats, contacts, and groups through natural | |
| Google Forms MCP derek-suwho/google-forms-mcp Enables AI assistants to create, refine, publish, and update native Google Forms through natural-language conversation, using versioned SQLite drafts, targeted patches, and explicit confirmation before any Google API call. Supports multi-us | |
| bluex-mcp derek-wong213/bluex-mcp MCP server for live X/Twitter and web search, driven by your locally logged-in Grok CLI and leveraging your X Premium or SuperGrok subscription quota. | |
| ExcelForge derek2000139/excel_vba_mcp A Windows-based MCP server that enables AI assistants to manage Excel files through the desktop application, supporting workbook operations, data manipulation, and formula validation. It features robust safety tools including snapshot-based | |
| fal derekalia/fal MCP server for interacting with fal.ai models and services. Uses the latest streaming MCP support. | |
| fal.ai MCP Server derekalia/fal-mcp-ts Enables discovery, search, generation, and management of AI models via fal.ai, allowing Claude Desktop and other MCP clients to interact with fal.ai services. | |
| Timeline MCP Server derekalia/timeline-mcp Enables AI assistants to manage scheduled social media posts and content automation across multiple platforms (X/Twitter, Reddit, LinkedIn, Instagram, TikTok, YouTube). Supports organizing campaigns into tracks, scheduling posts with natura | |
| zenhub-mcp derekbar90/zenhub-mcp Provides full access to the ZenHub GraphQL API. Enables project management operations like creating issues, epics, workspaces, and sprints through natural language. | |
| sitecore-mcp-server derekdevops/sitecore-mcp-server An MCP server that provides AI agents with direct read/write access to Sitecore CMS through 100+ tools across Item Service, GraphQL, and PowerShell APIs. | |
| BossZhipin MCP Server derekdong-star/mcp-boss Enables interaction with the Boss直聘 recruitment platform to search for jobs and send automated greetings to recruiters. It features automatic QR code login and security verification using Playwright for seamless session management. | |
| m365-audit-mcp derekgallardo01/m365-audit-mcp Exposes Microsoft 365 privacy/compliance audit checks as MCP tools, enabling natural language queries about tenant configuration, orphaned documents, Conditional Access policies, DLP policies, and Copilot usage. | |
| AppMCP derekhutchinson/appmcp AppMCP enables AI agents to build and publish self-contained HTML apps that query live data via a secure, read-only SQL proxy, with Azure AD authentication and role-based access. | |
| derekhuynen-mcp-server derekhuynen/derekhuynen-mcp-server Exposes Derek Huynen's professional profile to MCP-aware AI clients, providing tools to retrieve profile, skills, experience, and projects, and resources like profile summary and resume. | |
| Polymarket MCP Server derekkucera/polymarket-mcp-server Enable Claude to autonomously trade, analyze, and manage positions on Polymarket with 45 comprehensive tools, real-time WebSocket monitoring, and enterprise-grade safety features. | |
| mcp-kb-server dereknguyen269/mcp-kb-server A Model Context Protocol server providing persistent memory, knowledge base, and project summary capabilities with automatic project detection and an interactive dashboard. | |
| lifeup-mcp derekprovance/lifeup-mcp Enables Claude to interact with LifeUp Cloud API on your local network for task management, achievements, and user information. Supports 20 tools including creating, editing, and querying tasks, achievements, and shop items. | |
| Fantasy Football MCP Server derekrbreese/fantasy-football-mcp-public AI-powered Yahoo Fantasy Football assistant for lineup optimization, draft strategy, and league management with player enhancement and multi-league support. | |
| tactile-terrain derekriemer/bold_tactile_explore Enables users to turn map areas into 3D-printable tactile models, with tools for resolving areas, building and editing models, reading models as text, validating printability, and generating calibration plates. | |
| PGS Catalog MCP derekslinz/pgs-catalog-mcp Enables querying the EMBL-EBI catalog of published polygenic scores through read-only tools that search scores, traits, publications, performance metrics, sample sets, cohorts, and releases, and that trace GWAS studies and resolve ontology | |
| mlx-mcp-server deresolution20/mlx-mcp-server Bridges Claude Code and Claude Desktop to a locally-running LLM, optimized for MLX LM on Apple Silicon with support for any OpenAI-compatible backend. | |
| Synology_MCP derhary/synology_mcp Enables interaction with Synology NAS services including DSM, File Station, Calendar, Note Station, Contacts, Chat, Download Station, and Container Manager through a modular MCP interface with configurable safety modes. | |
| cortex-memory derick1129/cortex-memory Provides AI coding agents with a hybrid cognitive memory engine that reduces token usage, prevents amnesia, detects repetitive error loops, and retrieves relevant code context through MCP. | |
| Bitrix24 MCP Server deriglazoff/bitrix24-mcp-ci-setup Enables Claude to connect to a Bitrix24 portal through an incoming webhook and manage CRM records, tasks, disk files, calendar events, chat messages, business processes, and more via natural language. | |
| BCB Payment Methods MCP Server derikfernandes/bcb-meios-pagamento-mcp_2 Enables access to Brazil's Central Bank (BCB) Open Data API for payment methods, allowing queries about PIX, card transactions, ATM terminals, interchange rates, and other payment statistics through natural language. | |
| opengym-conector derikkruger/opengym-conector Enables users to plan, log, and analyze workouts conversationally through Claude or ChatGPT, with all changes recorded via the official openGym API and synced across their devices. | |
| penr-oz MCP Server derinworks/penr-oz-mcp-server A FastMCP-based server that provides secure sandboxed filesystem operations, API integration tools, and curated reasoning prompts for analysis and productivity tasks. | |
| 263 Mail Codex MCP deritness/263-mail-codex-windows Enables Codex to search locally cached enterprise email by Chinese keywords, folder, and date range, read original messages and attachment lists, and incrementally refresh from the mail server for near-real-time results. It is read-only and | |
| mtuci-mcp derived-functor/mtuci-mcp MCP-сервер для личного кабинета МТУСИ, позволяющий получать данные студента, посещаемость по предметам и расписание занятий на заданную дату. Аутентификация выполняется с помощью логина и пароля студента через переменные окружения. | |
| ypt-mcp derived-functor/ypt-mcp Enables access to a study tracker's daily logs, rankings, study groups, and study timer through MCP over stdio. | |
| open-brain-web-gateway derivedbetter/open-brain-oauth-ui Provides OAuth-protected remote access to an existing Open Brain, forwarding approved tool calls from Gemini Spark and Perplexity web clients without altering the upstream system. | |
| watchcheck derkcc/watchcheck Enables AI assistants to read live macOS processes and identify monitoring software, including Chinese enterprise EDR/DLP/MDM tools, through a read-only MCP server. | |
| Atlassian Trello MCP derlegatlabienus/trello-desktop-mcp MCP server for Trello that enables comprehensive management of boards, cards, lists, labels, checklists, attachments, members, custom fields, and search through natural language. | |
| GIMP MCP derleiti/gimp-mcp Enables AI agents to perform structured, semantic artwork editing in GIMP 3 through session-based tools for layers, selections, text, transforms, non-destructive filters, previews, and image export, backed by snapshot undo/redo and XCF-pers | |
| payanagent dernif/payanagent The open marketplace for the agent economy — Buy any of 24,000+ live x402 services with USDC on Base. | |
| Jina AI Remote MCP Server deroino/jina-mcp Provides access to Jina AI's Reader, Embeddings, and Reranker APIs with tools for web scraping, web/image/academic search, content extraction, screenshot capture, document reranking, and semantic deduplication. | |
| TestRail MCP Server derrbal/testrail-mcp Enables AI assistants to interact with TestRail test management systems through comprehensive API integration. Supports retrieving and updating test cases, projects, suites, runs, and results, plus adding attachments and managing test data | |
| Derrick App derrickapporg/derrick-mcp The Derrick MCP server provides AI assistants with access to Derrick's B2B enrichment capabilities. It allows retrieval of company and contact information, lead enrichment, prospecting automation, and workflow execution directly through the | |
| nvd-mcp derrickjudge/nvd-mcp An MCP server that brings NIST National Vulnerability Database (NVD) intelligence directly into Claude, enabling CVE lookup, product search, and prioritized risk assessment via natural language. | |
| MCP Toolshed derricksh43/mcp-toolshed Enables agents to securely discover and invoke a centrally governed catalog of tools from distributed internal and external providers, with policy enforcement, quotas, inspection, and audit controls. | |
| PostgreSQL MCP Server derricksiawor/mav-postgresql-mcp-server Provides comprehensive PostgreSQL database access with 36 tools for querying, managing schemas, JSONB operations, and database administration. Includes security features like query validation, rate limiting, SSL/TLS support, and optional wr | |
| Obsidian MCP Server derrikjb/obsidian_mcp Integrates with the Obsidian Local REST API to enable reading, creating, editing, and searching notes within an Obsidian vault. It supports advanced operations like Dataview queries and partial file updates through both stdio and HTTP trans | |
| BookStack MCP Server derron-knox/bookstack-mcp-server Enables AI assistants to manage BookStack knowledge bases with tools for creating, reading, updating, and deleting pages, books, and shelves, as well as searching content. | |
| iphone-control derrors/iphone-control Let AI agents operate a real USB-connected iPhone from Linux — no Mac, no jailbreak, no paid developer account. Screenshots, taps, swipes, text input, element tree and app control via WebDriverAgent, with CoreDevice HID fallback. | |
| iPhone Control MCP Server derrors/iphone-control-toolkit Enables AI agents to see and operate a real USB-connected iPhone from a Linux Docker host — taking screenshots with region zoom, reading the element tree, tapping, swiping, long-pressing, typing text, pressing hardware buttons, listing/laun | |
| asi-mcp deruke/asi-mcp AI-powered Attack Surface Intelligence server that exposes industry-standard penetration testing tools via MCP, enabling AI agents to perform comprehensive security assessments. | |
| TMDB MCP Server dervish666/tmdb-mcp-server Provides integration with The Movie Database (TMDB) API for searching movies, TV shows, and people, accessing detailed information, and discovering popular and trending content. Enables AI assistants to access comprehensive movie and televi | |
| Reference MCP Server derwarre/mcp-reference-server A demo MCP server for validating security scanning capabilities, featuring intentional security anti-patterns such as email exfiltration, SSRF, and hardcoded fake secrets. | |
| sieve derwells/sieve Enables coding agents to rank repository files, functions, and web search results using Jev-based probabilistic scoring, returning locations and confidence scores for the agent to review. | |
| Cascabel Ship-it derwinruiz/cascabel-ship-mcp Enables users to create simulated shipments through Claude or ChatGPT by gathering item and route details, quoting landed costs, confirming checkout, and tracking parcels, while all prices, carriers, labels, and tracking events are mock-onl |
43,751–43,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.