Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mcp-infra derwolk/mcp-infra An MCP server that provides tools for filesystem, database, web, system, and shell operations, along with resources and prompts via SSE transport. | |
| CVE-Search MCP Server derya879/cve-search_mcp Enables querying the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, list recent CVEs with CAPEC/CWE/CPE expansions, and inspect database update status. | |
| Kingdee MCP Server deryabeck12/kingdeemcp Enables Claude, Cursor, and other MCP-compatible AI assistants to query and operate Kingdee Cloud Star ERP through natural language, using the official WebAPI with username/password authentication. Covers purchasing, sales, inventory, produ | |
| Codex Control Plane MCP deryad7971/codex-control-plane-mcp Turns Codex Desktop and codex-app-server into a durable asynchronous worker that MCP clients can submit long-running tasks and Plan Mode workflows to, receiving an operationId or workflowId immediately instead of holding a call open for hou | |
| Meta Ads MCP Server deryagauthier126/meta-mcp Enables users to manage advertising accounts, campaigns, ad sets, creatives, audiences, reporting, and batch workflows on Meta's Marketing API through a Streamable HTTP endpoint secured by app-issued JWTs and Meta OAuth. | |
| Recall deryawulff577/recall Gives Claude and other AI agents persistent cross-session memory by storing decisions, coding patterns, and knowledge in a Redis/Valkey instance or a managed cloud backend, then retrieving relevant context automatically. Memories survive se | |
| gemini-video-mcp deryuyu/gemini-video-mcp Enables MCP clients like Claude to analyze public YouTube videos by asking questions grounded in both audio and visuals through the Google Gemini API. | |
| SKILL.state MCP Runtime derzkiyboomchik/skill-state-mcp-server Enables long-horizon AI agents to replace append-only conversation history with a formal, bounded state tuple, supporting state initialization, step execution with transactional rollback, observation injection, and session inspection. | |
| groundwork des-sleigh/groundwork Enables AI agents to perform grounded web research with injection resistance, claim verification, and cost-aware routing through MCP tools like web_search, fetch_url, extract_claims, and check_grounding. | |
| QML-MCP des137/qml-mcp Enables quantum machine learning operations using Qiskit, including executing quantum circuits, computing quantum kernels, training variational quantum classifiers, and evaluating quantum ML models. | |
| mcp-jenkins desai00945/mcp-jenkins Enables AI language models to securely interact with Jenkins through the Model Context Protocol, exposing tools for jobs, builds, nodes, queues, views, plugins, artifacts, and Groovy scripts. | |
| Kingdee MCP Server desai36792/kingdeemcp Enables Claude, Cursor, and other AI assistants to query and operate Kingdee Cloud Star ERP in natural language, covering purchasing, sales, inventory, production, cost, assets, and financial reporting. It exposes 87 tools for reading docum | |
| Sonicmatch desai36792/sonic-match-mcp Watches video footage or URLs to detect mood, energy, speech, and scene cuts, then returns ranked license-safe BGM shortlists with licensing and attribution printed on every row. Also produces 12–20s hook windows, beat-snapped cut suggestio | |
| FHIR MCP Server desai42382/fhir-mcp-server Enables LLM-based agents and MCP-compatible clients to perform full CRUD operations on FHIR resources, plus AI-powered document ingestion, semantic search, and LOINC terminology lookup. Users can query and manipulate clinical data using nat | |
| ADB Screenshot MCP Server desamtralized/adb-mcp A Model Context Protocol server that enables remote management of Android devices over WiFi, including taking screenshots, listing connected devices, and retrieving device information. | |
| OFIMA Celulares MCP Server desarrolladormicelu/ghlmcp Enables real-time queries of cellphone inventory and trade-in pricing by model name. | |
| SyncOFIMA desarrolladormicelu/mcpofima MCP server for querying OFIMA data replicated to Supabase, providing tools to list tables, describe schemas, query data, count rows, and run custom SQL. | |
| Airtable MCP Server desarrollo032/airtable-mcp Enables AI-powered interaction with Airtable bases, supporting CRUD operations, schema management, webhooks, and natural language queries through the MCP protocol. | |
| Whagons MCP desarso/whagons-mcp Enables read-only access to Whagons tasks and workspace information from MCP clients, with tools for listing workspaces, searching tasks, reading task details and comments, and resolving status and priority names. | |
| Universal MCP Server Java desckars/mcp-server A universal Model Context Protocol server in Java, enabling interaction with multiple LLMs (OpenAI, Gemini, Hugging Face) and databases (MongoDB) through a modular Spring Boot architecture. | |
| MCP CWP Server descomplicar-marketing-e-tecnologia/mcp-cwp-server Enables management of CentOS Web Panel hosting accounts, SSL certificates, FTP users, MySQL databases, and packages through natural language commands via the Model Context Protocol. | |
| mcp-perfex-crm descomplicar-marketing-e-tecnologia/mcp-perfex-crm High-performance MCP server for Perfex CRM that provides direct MySQL access for managing customers, invoices, leads, projects, and more, with 10-100x faster performance than REST API. | |
| mcp-perfex-crm descomplicar-marketing-e-tecnologia/mcp-perfex-crm-sql High-performance MCP server providing direct MySQL access to Perfex CRM, enabling fast and secure management of customers, invoices, projects, and more via natural language. | |
| mcp-whatsms descomplicar-marketing-e-tecnologia/mcp-whatsms Enterprise-grade WhatSMS integration for Claude AI providing 173 tools for SMS, WhatsApp, OTP, contacts, and device management. | |
| mcp-whatsms-admin descomplicar-marketing-e-tecnologia/mcp-whatsms-admin Enterprise-grade administration of the WhatSMS platform via MCP, providing 25 specialized tools for managing users, roles, packages, subscriptions, transactions, vouchers, API keys, and system operations. | |
| descope-mcp-server descope-sample-apps/descope-mcp-server-stdio Interact with Descope's Management APIs to manage users, audit, and more. | |
| patent-api describug/patent-api-mcp Enables Claude Desktop and Claude Code to query Korean KIPRIS Plus and European EPO OPS patent data for bibliographic details, family members, legal status, claims, descriptions, abstracts, and search results using each user's own free API | |
| devin-mcp desertaxle/devin-mcp MCP server for creating, monitoring, and managing Devin AI sessions. | |
| Domain Tools MCP Server deshabhishek007/domain-tools-mcp-server A Model Context Protocol server that provides comprehensive domain analysis capabilities including WHOIS lookups, DNS record queries, and DNS health checking. | |
| calllens-mcp desharajudeepthi/calllens-v1 Enables LLM clients to answer identity-aware questions about customer calls using a multi-tenant B2B call analytics platform with role-based access. | |
| Twilio Agent Payments MCP Server deshartman/twilio-agent-payments-mcp-server An MCP server that enables secure, PCI-compliant payment processing during voice calls via Twilio API, providing asynchronous callbacks and guided workflow for agent-assisted payments. | |
| Twilio Messaging MCP Server deshartman/twilio-messaging-mcp-server An MCP (Model Context Protocol) server that lets users send SMS messages through Twilio API directly from Claude Desktop via natural language commands. | |
| alliotools-mcp designbyfahad/alliotools-mcp A privacy-first MCP server with 176+ local utilities including calculators, converters, developer tools, text utilities, and date/time tools. | |
| searxng-mcp-bridge designcomputer/searxng-mcp-bridge A minimal MCP server that exposes a private SearXNG instance as a search tool over streamable-HTTP, enabling web search from the llama.cpp WebUI or any compatible MCP client. | |
| mcp-ikaos-story designfever/mcp-ikaos-story Enables creating and modifying iKAOS Story prototype content, including reading context, saving content with optimistic revision control, and managing images, through a stdio MCP server that talks to the authenticated iKAOS Story API. | |
| MCP Medium Server designly1/mcp-medium Enables AI assistants to publish posts to Medium with support for drafts, tags, canonical URLs, and follower notifications. Supports various publishing statuses and SEO optimization features. | |
| MCPMem designly1/mcpmem Enables AI assistants to store and retrieve memories with semantic search capabilities using vector embeddings. Provides persistent memory storage with SQLite backend for context retention across conversations. | |
| mcp-stock-notion-ai designtheclutch/mcp-stock-notion-ai MCP server that fetches stock market data, stores it in PostgreSQL, and pushes selected results to Notion. | |
| content-mcp designtogetherr/content-mcp Lets a content team edit a GitHub-hosted website's Markdown pages and blog posts through Claude, with each change validated and committed to a staging branch. Editors can preview, publish live, or discard changes, while code checks block ed | |
| Spaces Context Bridge designxdevelop/spaces-context-bridge Self-hosted, single-owner MCP relay that lets an agent client queue requests for an authorized ChatGPT worker to look up context from permitted sources, apply bounded edits to a specific Page, or save a selected transcript as a new Page. Re | |
| Marrow desikai-lab/marrow Marrow is an MCP server that solves agent amnesia. It gives coding agents persistent task tracking, versioned docs, and semantic search over your actual source code (via a tree-sitter powered background indexer) — so a new session, or a dif | |
| Daniel LightRAG MCP Server desimpkins/daniel-lightrag-mcp A comprehensive MCP server that provides full integration with LightRAG API, offering 22 tools across document management, querying, knowledge graph operations, and system management. | |
| desirecore-cdp-mcp desirecore-agent/desirecore-cdp-mcp Enables external agents like ChatGPT and Codex to discover and control local DesireCore instances through MCP, including status, screenshots, window listings, CDP queries, and optional high-privilege control. | |
| Desk3 MCP Server desk3/cryptocurrency-mcp-server Cryptocurrency MCP Server! Free! This powerful tool is designed for blockchain enthusiasts, providing comprehensive, real-time cryptocurrency information at your fingertips. Whether you're an experienced trader or just starting your journey | |
| 1c-formsserver desko77/1c-formsserver MCP server for generating, validating, converting, and searching managed 1C:Enterprise forms in three formats: Configurator, Managed, and EDT. | |
| 1c-templates-mcp desko77/1c-templates-mcp MCP server for semantic search of 1C (BSL) code templates with 2262+ community templates, CRUD web interface, and ChromaDB + embeddings for meaning-based search. | |
| Fitbit Google Health MCP deslabpro-max/fitbit-google-health-mcp Enables AI assistants to read Fitbit/Google Health data (steps, sleep, heart rate, SpO2, workouts) and log weight, food, water, and exercises via natural language, self-hosted on Cloudflare Workers. | |
| openai-images-mcp deslabpro-max/openai-images-mcp Enables generating and editing images with OpenAI's gpt-image-2 directly from Claude or ChatGPT, including uploads, masks, composition, listing, deletion, and spend tracking through a self-hosted Cloudflare Workers connector. | |
| MCP Server for Splunk deslicer/mcp-for-splunk Enables AI agents to interact seamlessly with Splunk environments through 20+ tools for search, analytics, data discovery, administration, and health monitoring. Features AI-powered troubleshooting workflows and supports multiple Splunk ins | |
| harmonyos-dev-mcp deslord319/harmonyos-dev-mcp Enables HarmonyOS device discovery, app build and deployment, UI automation, E2E inspection, and log validation through MCP tools. |
43,801–43,850 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.