Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Environment & Installation Manager devlimelabs/mcp-env-manager-mcp A unified control center for managing MCP servers, providing tooling for environment variable management, profile-based configurations, and local package installation automation. | |
| MCP Troubleshooter devlimelabs/mcp-troubleshooter-mcp A specialized diagnostic framework that enables AI models to self-diagnose and fix MCP-related issues by analyzing logs, validating configurations, testing connections, and implementing solutions. | |
| Meilisearch MCP Server devlimelabs/meilisearch-ts-mcp Enables AI assistants to interact with Meilisearch via the Model Context Protocol, allowing comprehensive index, document, and search management through a standardized interface. | |
| MCP Strapi Server devlitus/mcp-strapi Enables CRUD operations, content management, and media handling for any Strapi content type through standardized tools. Supports internationalization, schema management, and works with Strapi v5's API. | |
| ephemeral-reasoning-mcp devllama/containerized-reasoning-mcp Provides an MCP server that decomposes complex problems into ordered, isolated reasoning contexts, yielding compressed summaries before discarding intermediate steps. Enables sequential or parallel step execution with optional verification | |
| sequential-reasoning-mcp devllama/sequential-reasoning-mcp Enables MCP clients to offload sub-problems to fresh, isolated contexts via sampling, offering plan, think_aside, and run_plan tools for sequential reasoning without cluttering the main conversation with verbose intermediate steps. | |
| WhaTap MXQL CLI devload/whatap-mxql-cli Enables querying WhaTap monitoring data using MXQL (Metrics Query Language) through Claude Code, providing project management, secure authentication, and natural language to MXQL query translation capabilities. | |
| Quaestio MCP Server devlucaslourenco/quaestio-mcp MCP server for analyzing, solving, and verifying exam questions, with tools for consensus, verification, and structured auditable results. | |
| RPG Maker MZ MCP Server devmagary/mcp-maker Enables AI agents to directly manipulate RPG Maker MZ projects through natural language commands, allowing creation and modification of game assets like items, weapons, enemies, maps, and plugins without manually editing game files. | |
| LocalVoiceMode devman57/voiceblitz-mcp A local voice interface providing high-performance speech recognition and natural text-to-speech with voice cloning capabilities. It enables AI assistants to speak, listen, and engage in character-based voice conversations through integrate | |
| guardian-mcp devmango1128/guardian-mcp Enables AI coding agents to avoid irreversible mistakes by intercepting risky deletions, overwrites, and commands before execution, applying path, pattern, and blast-radius safeguards with quarantine backups. | |
| Memo MCP Server devmaster-x/mcp A filesystem-backed MCP server with REST API for AI tool integration and project workflow tracking. Zero database required. | |
| Universal Memory MCP Server devminions/universal-memory-mcp A portable MCP server providing a shared intelligent memory system for any MCP-compatible AI tool, enabling storage, retrieval, extraction, and governance of memories across sessions. | |
| HRMS MCP Server devmitul17/hrms-mcp-server A template MCP server built with mcp-framework that provides a foundation for building custom tools. Currently includes example tool implementations that can be extended for HR management system integrations. | |
| idnow-mcp-server devmohith/idnow-mcp-server An MCP server that lets LLM agents operate the IDnow Trust Platform sandbox to list verification flows, create sessions, check sessions, and get session details. | |
| contextsliver devmuneeb/contextsliver An MCP server that indexes codebases into a local graph and provides on-demand context retrieval for AI coding agents, reducing token usage by tracking session history and delivering only relevant code subgraphs. | |
| InvoiceX-Ray devnarayanu/mcp-nitro An MCP server for detecting Trade-Based Money Laundering (TBML) in Indian trade finance, cross-referencing invoices against commodity benchmarks, customs records, and regulatory timelines to identify over/under-invoicing, phantom shipments, | |
| playwright-vsource devnazir/playwright-vsource Enables users to fetch a page's raw HTML as a real browser would, render it view-source style with line numbers and highlighted matches, and capture proof screenshots. Also returns matched line numbers and text so findings can be cited with | |
| unsubly devndesigner6/unsubly MCP server with 12 tools enabling AI agents (Claude, ChatGPT) to manage Algorand-based subscriptions, including locking funds in vaults and automated payments. | |
| RAG In A Box MCP Server devnexsler/rag-in-a-box Enables any MCP-compatible AI assistant to search, filter, and retrieve information from a local document collection using a hybrid search pipeline with vector, BM25, reranking, and LLM enrichment. | |
| Tic-Tac-Toe MCP Server devniel/tic-tac-toe-claude-code Enables two Claude Code sessions to play tic-tac-toe against each other by providing tools to join a game, view the board, and make moves, with turn notifications pushed over channels. | |
| Garmin MCP for macOS devnjw/garmin-mcp Provides local, Keychain-secured access to all 26 Garmin Connect Personal API GET endpoints plus 8 summary tools. Enables users to query sleep, HRV, Body Battery, activities, profile, weight, and other connected health data through their ow | |
| jev devnolife/copilot-jev Enables AI agents to make fast, low-cost, typed decisions via a TypeSafe System One, providing routing, scoring, approval, and escalation through tools such as ask, choice, score, and noul. | |
| Devnors Data MCP Server devnorsai/devnors-data-mcp Enables MCP clients to discover capabilities and call legal, enterprise, content, and express APIs using a Devnors Data API Key. | |
| Bridge Agent MCP devnrich/bridgeagentmcp Enables AI clients to securely control trusted devices and perform filesystem, terminal, process, and document operations through a self-hosted remote service. | |
| MCP SSH Session devnullvoid/mcp-ssh-session Enables AI agents to establish and manage persistent SSH connections to remote hosts for executing commands. Supports SSH config files, multi-host management, and automatic reconnection with thread-safe concurrent operations. | |
| mcp-ssh-tmux devnullvoid/mcp-ssh-tmux A high-performance MCP server that manages persistent SSH sessions via a local tmux instance, enabling command execution, file transfer, and session monitoring for AI agents. | |
| aapanel-mcp devochkaskustikom/aapanel-mcp Enables AI CLI agents to operate an aaPanel (btPanel fork) hosting panel through its signature-authenticated HTTP API, exposing 57 described operations covering websites, databases, SSL certificates, backups, and system status plus resource | |
| ddex-ern-382-mcp devochkaskustikom/ddex-ern-382-mcp Enables MCP-capable clients to look up DDEX ERN 3.8.2 structure, element and attribute semantics, documented child sequences, AVS values, and step-by-step composition guides. It also performs offline XSD validation of ERN XML and package ch | |
| canary-mcp devon-clarkk/canary-mcp A visual canary that detects context rot and silent model degradation in long agent conversations by embedding externally verified checkpoints and self-reported status into each response. | |
| MotionMCP devondragon/motionmcp This MCP server bridges Motion's API with LLMs like Claude and ChatGPT via the Model Context Protocol, so you can manage tasks, search projects, check your schedule, and more — all through natural conversation. | |
| Todoist MCP Server devongroff/todoist-mcp An MCP server that integrates with the Todoist REST API v2 to enable AI assistants to manage tasks, projects, sections, comments, and labels. It supports comprehensive operations including batch task creation, history tracking for completed | |
| TON Blockchain MCP devonmojito/ton-blockchain-mcp A Model Context Protocol server that enables natural language interaction with the TON blockchain, allowing users to perform queries for balances, analyze trading patterns, detect hot trends, and conduct forensic investigations on blockchai | |
| MCP Gateway devops-autotools/devops-project-mcp-gateway A TypeScript gateway that aggregates multiple MCP servers into a single endpoint, enabling AI agents to access tools from many backends through one connection. | |
| MCP Connector Lint devops-gm88/mcp-connector-lint Provides three read-only tools that check an MCP connector's manifest, tool annotations, and directory listing draft against the Claude Connectors Directory requirements before submission. Each call returns a deterministic report of sorted | |
| mcp-validation-server devops-gm88/mcp-validation-server Enables a language model to run four deterministic data checks it cannot argue with — column-contract validation with an explicit quarantine list, arithmetic reconciliation of opening/movements/closing, distinct entity counting against row | |
| DevOps MCP Hub devops-rajput-addi/nexusai-project- An AI-powered MCP server unifying Jira, GitHub, and Confluence integrations, enabling sprint health analysis, smart issue creation, and release notes generation via natural language. | |
| AI Backend MCP Server devops-represent/mcp-server-workshop Enables AI clients to use custom tools, maintain memory, and follow structured prompts, built with TypeScript MCP SDK and deployable to Cloudflare. | |
| DevOps MCP devops-vesi/devops-mcp An MCP server designed to retrieve DevOps skills, code standards, and SAP Fiori documentation templates from a GitHub repository. It allows users to list available resources and fetch specific best practices to integrate directly into their | |
| Microsoft Advertising MCP Connector devopsbrandmirchi/bingmcpv1 Enables Claude.ai users to connect multiple Microsoft Advertising accounts and securely query customers, accounts, campaigns, ad groups, ads, keywords, and performance reports through MCP. | |
| GA4 Analytics MCP devopsbrandmirchi/ga4mcpserver Enables querying Google Analytics 4 properties through natural language, supporting historical and real-time reports, metadata discovery, and property listing via a Vercel-deployed MCP server. | |
| GA4 Analytics MCP V2 devopsbrandmirchi/ga4mcpv2 Multi-operator Google Analytics 4 connector for Claude.ai Custom Connectors, hosted on Google Cloud Run, enabling authenticated GA4 reporting, property selection, and metadata queries via MCP tools. | |
| GA4 Analytics MCP V3 devopsbrandmirchi/ga4mcpv3 Enables multiple independent Google OAuth connections for querying GA4 properties, with secure credential routing and operator isolation. | |
| gconnect-mcp-all-v1 devopsbrandmirchi/gmcpallv1 Enables connecting Claude.ai to Google Analytics and Google Ads through a unified MCP server, with per-operator Google account connections, read-only Ads REST v25 access, and a shared resolver for multiple Google product APIs. | |
| GA4 MCP Server devopsbrandmirchi/googlemcpserver Enables querying Google Analytics 4 data through natural language, including running reports, comparing periods, and exploring realtime metrics across multi-tenant properties with OAuth-based authentication. | |
| Meta MCP Connector devopsbrandmirchi/meta-mcp-connector Enables natural-language querying of Meta/Facebook Ads data via the Graph API, including ad accounts, campaigns, ad sets, spend, and performance metrics. | |
| Reddit Ads MCP Connector devopsbrandmirchi/reddit-mcp-connector Enables natural-language interaction with the Reddit Ads API v3, allowing users to list ad accounts, campaigns, ad groups, and ads, fetch performance reports, and manage conversion pixels without needing endpoint paths or ad account IDs. | |
| WhatConverts MCP Connector devopsbrandmirchi/whatconverts-mcp-connector Enables natural-language queries and management of WhatConverts leads, accounts, profiles, and attribution data through MCP tools. | |
| @aiotic/mcp devopscompanynl/aiotic-mcp Enables coding assistants to search the AIOTIC Integrator Guide and pull endpoint contracts, OpenAPI schemas, payload examples, and status lifecycles for integrating purchase-order processing with an ERP. Optionally connects to a local test | |
| Wazuh MCP Server devopsfixes-com/wazuh-mcp-server Enables AI assistants to query Wazuh security alerts, investigate hosts, detect brute-force attempts, and generate security summaries by connecting to a Wazuh manager. |
44,101–44,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.