Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Honcho MCP Server devstroop/honcho-mcp A remote MCP server that provides AI memory and personalization tools for Honcho, enabling LLM clients like Claude Desktop to manage workspaces, peers, sessions, and conclusions via HTTP SSE. | |
| Icons MCP Server devstroop/icons-mcp Enables searching, retrieving, converting, and optimizing 200,000+ icons across 150+ libraries, with batch fetching, colored variants, SVG sprite creation, and SVGO compression. Supports single or multi-icon retrieval by keyword, category, | |
| Penpot MCP Server devstroop/penpot-mcp Enables interaction with Penpot, the open-source design platform, through tools for managing projects, files, components, design tokens, exports, comments, teams, and more. | |
| YouTrack MCP Server devstroop/youtrack-mcp Enables AI assistants to interact with JetBrains YouTrack 2025.2 for managing issues, sprints, dependencies, time tracking, and knowledge base content. Supports CRUD operations, bulk commands, analytics with Gantt charts and critical path a | |
| cpi-saper-dev-mcp devstylator/cpi-saper-dev-mcp Enables AI agents to develop SAP Cloud Integration content by editing iFlows, Groovy scripts, and XSLT locally, validating and checking them, then pushing, deploying, and testing on development tenants. It supports package and artifact insp | |
| Context Engineering MCP Platform devsully/context_engineering_mcp A platform that transforms AI development with intelligent context management, optimization, and prompt engineering, enabling developers to enhance model performance through structured context management and optimization tools. | |
| ChatGPT Apps SDK Next.js Starter devsung94/next-mcp-test A minimal starter for building OpenAI Apps SDK compatible MCP servers that support native widget rendering within ChatGPT. It demonstrates how to integrate Next.js tools and resources into the ChatGPT interface using the Model Context Proto | |
| Chrome DevTools MCP devtarlow/dsh-chrome-devtools Gives an agent a real, watchable Chrome window to open and read pages, click and type, take screenshots, and inspect console messages, network requests, and script output. It also records performance traces and runs Lighthouse audits, with | |
| GridPulse Energy devtee-dot/grid-pulse MCP server for real-time electricity prices, carbon intensity, and energy analytics across 41+ zones in Europe, Great Britain, the United States, and Australia. Query live prices, compare zones, check gas storage levels, get green scores, f | |
| laya-mcp — on-device typed decisions in ~10ms devthinker-ai/laya-mcp Laya-MLX as an MCP server (and plain-HTTP API). It answers typed decisions — choose an option / score a rubric / is this true? — on your own machine (Apple Silicon / MLX), with no cloud and ~10ms after warm-up.
Not a chatbot. No token-by-to | |
| TokenControlPlane devthinker-ai/tokencontrolplane Stop runaway agents. One gateway in front of all your agent traffic — MCP tools and LLM models — one budget, one kill switch. Sits between AI clients (Cursor, Claude Desktop, Windsurf) and remote MCP servers / OpenAI-compatible model APIs; | |
| gemini-argon devtno/argon_framework Enables Google Antigravity and MCP-compatible clients to delegate complex coding and reasoning tasks to a high-reasoning Gemini model through a persistent Chromium session, preserving Gemini Web history and audit logs. | |
| devto-mcp devto-ai/devto-mcp A work management MCP server for Claude Code that integrates with Jira Cloud to handle sprints, tickets, and project tracking via natural language. | |
| Plane MCP Server devtowsif/plane-mcp-server Enables AI agents to interact with Plane project management APIs, offering tools for managing projects, work items, cycles, modules, initiatives, and more through MCP. | |
| mcp-hsl devusvulgaris/mcp-hsl An MCP server exposing Greater Helsinki public transport data from Digitransit, enabling LLM hosts to answer live transit queries, plan journeys, and fetch stop departures via natural language. | |
| World Cup Stats MCP devvdpatel/worldcup-stats-mcp Enables querying FIFA World Cup player and team statistics for 2010, 2014, 2018, and 2022 through natural language, providing tools for top scorers, player comparisons, team summaries, and more via a Claude-powered CLI. | |
| Athena MCP devvgwardo/athena-mcp An MCP server that provides a reasoning sidekick for tool-using agents with a single 'think' tool for tackling complex problems. It allows agents to consult powerful reasoning models like Claude Opus or GPT-5 only when needed, keeping costs | |
| Brain MCP devvgwardo/brain-mcp Enables inter-session communication and coordination for multiple Claude Code instances through a shared SQLite database. Supports real-time messaging, shared state management, and resource locking to facilitate parallel development workflo | |
| hermes-pen-bridge devvgwardo/hermes-pen-bridge A hybrid MCP server that proxies Pencil's native design tools and adds utilities for .pen file management, enabling design token extraction, layer trees, diffs, and batch export. | |
| Kanban MCP Server devvvvvx/kanban Enables AI assistants such as Claude Desktop and Cursor to inspect backlogs, plan sprints, and manage projects through eight tools for listing, searching, creating, updating, and deleting tickets plus project summaries. Changes made by agen | |
| SEM-G Secure Enterprise MCP Gateway devwidsiddxx/sem-g-secure-enterprise-mcp-gateway- A zero-trust gateway for securely brokering interactions between AI models and internal tools via the Model Context Protocol, with DLP, prompt injection defense, and LLM-as-a-Judge. | |
| safent-ads devwspito/safent-ads-mcp Enables self-hosted Google Ads and Meta Ads management through MCP, with human approval, hard spending limits, and audited writes; agents like Claude Code or Codex can connect to ad accounts while the server controls all credential access a | |
| devx-lax-mcp devx-agent/lax-mcp Exposes the Kognai LAX registry as tools for searching agents, retrieving offers and jobs, listing jobs, and submitting agent-only job submissions via MCP. | |
| openlocal devxv3/openlocal A zero-dependency MCP and agent tool server for small local models that provides a measured, deterministic tool-calling interface with file, web, shell, and calculation tools. | |
| mockscreenshots-mcp devyeshtandon/mockscreenshots-mcp Compose fake chat conversations and receive deep links to a pre-filled generator for preview, parody, and design mockups. | |
| apple-debug-mcp devyhan/apple-debug-mcp Enables multiple AI agent sessions to share a single Mac's Apple Simulator pool through one shared daemon that tracks leases and auto-dispatches freed simulators to the next waiting caller. It provides simulator UI automation, app lifecycle | |
| ms-graph-mcp devyhan/ms-graph-mcp Enables AI assistants to securely access your own Microsoft 365 data—Outlook mail and calendar, OneDrive, SharePoint, Teams chat, To Do, Planner, Entra ID, and Intune—through Microsoft Graph with delegated permissions. | |
| redmine-mcp devyhan/redmine-mcp Connects AI assistants to a Redmine instance over the Redmine REST API, enabling issue, project, user, time-tracking, wiki, file, search, and saved-query operations. Sign-in uses browser-based OAuth 2.0 with PKCE (or an API key for older se | |
| Xcode MCP Server devyhan/xcode-mcp A Model Context Protocol server that provides tools for Xcode-related operations, making it easier to work with iOS project management, building, testing, archiving, and deploying apps to both simulators and physical devices. | |
| alpool devyonghunt/alpool Enables teachers to access curriculum-based educational curation and teacher-created Spaces through a remote MCP server and unauthenticated public API. | |
| mcp-servicos-pt devyssonsc/mcp-servicos-pt Enables querying Portuguese weather forecasts from IPMA, with tools to list localities and retrieve temperature and weather predictions. | |
| Inboxbridge devzapataa/inboxbridge-mcp Enables Claude to query and read across multiple Gmail accounts simultaneously through one connector, searching with Gmail syntax, fetching full threads, and creating drafts without ever sending. It also supports scheduled routines that sca | |
| blindqa devzonayed/blindqa Enables AI coding agents to drive a real browser like a person — crawling every page and role, running real user journeys, and auditing controls a DOM-based test misses — so UI, accessibility and permission bugs are found and only the scree | |
| Mochi devzonayed/mochi Browser automation MCP server with persistent memory for AI assistants, enabling automated web testing and workflow replay with self-healing selectors. | |
| reddit-mcp-mod devzspy/reddit-mcp-mod Enables Reddit moderation through tool-based access: reading, posting, mod queue management, user management, and report handling. | |
| Where's My DB? dewalt-1/wheres-my-db A Claude skill + MCP server that tells you how Deutsche Bahn delays will affect your trip — not just whether your train is late. | |
| Arbitrum MCP Server dewanshparashar/arbitrum-mcp Enables monitoring and interaction with Arbitrum Nitro nodes and chains through natural language queries. Supports comprehensive chain health monitoring, batch posting tracking, gas price analysis, and node operations across all Arbitrum ne | |
| nexus-mcp-server dewenkings/nexus-mcp-server Enables AI agents to query OKX public market data, including tickers, klines, order books, and trading pairs via MCP tools. | |
| Greenfinger MCP Server dewgod07-a11y/greenfinger-mcp Enables plant disease diagnosis and identification, plant recommendations, garden layout design, pot management, and care scheduling with reminders, integrating with Kakao services. | |
| Pathfinder dewhush/pathfinder-mcp Wraps the recon CLIs security researchers already use (subfinder, httpx, nmap, ffuf, nuclei) into a single MCP server so an LLM agent can plan and execute reconnaissance itself — passive subdomain/DNS/wayback discovery, active port scanning | |
| ashby-mcp dewierwan/ashby-mcp MCP server for Ashby ATS that enables AI agents to review candidates, read application details, and write evaluation notes through the Model Context Protocol. | |
| 1c-audit dewil/1c-audit Enables read-only exploration and diagnostics of a live 1C:Enterprise 8.3 database through the platform's COM connector, without extensions or web publication. Exposes four tools — query, list_metadata, describe, and row_counts — so an agen | |
| docs-mcp-server dewmink/docs-mcp-server MCP server that exposes one or more documentation folders (Markdown, MDX, TXT) to AI agents, enabling listing, reading, and searching of documentation files. | |
| okx-trade-mcp dex-original/okx-agent-trade-kit Enables AI assistants to interact with OKX cryptocurrency exchange, providing tools for market data, trading, account management, and more through the Model Context Protocol. | |
| Pyjo-MCP dex4er/pyjo-mcp Enables Model Context Protocol server and client interactions with Pyjoyment according to the 2026-07-28 specification revision. | |
| Godot MCP Server Ultimate Edition dex865378/dex865378-mcp-godot-63-herramientas Advanced MCP server for Godot 4.6+ with 63 professional tools, enabling AI-assisted game development with backup/rollback, deep script validation, and project health diagnostics. | |
| fpl-mcp dexhamter/fpl-mcp An MCP server that equips AI assistants with 33 tools for Fantasy Premier League analytics, including fixtures, squad management, live scores, transfers, captaincy, and price movements, using async access to official FPL endpoints with TTL | |
| kaggle-mcp dexhunter/kaggle-mcp A Model Context Protocol server that provides tools to interact with Kaggle APIs, enabling dataset search, competition submissions, and account management. | |
| Dexio dexio-wiki/openclaw-plugin Gives agents a shared wiki they can search, read, list, write, edit and append to over MCP, automatically surfacing the best-matching pages before each turn. Writes happen only when the agent chooses to file something, so pages stay readabl | |
| lloom dexloom/lloom Enables agents to connect to an lloom hub and coordinate through private messages, public posts, and semantically routed broadcasts, while also supporting agent discovery, mailbox management, and message reporting. |
44,201–44,250 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.