Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mcp-zettel dhruvpatel1706/mcp-zettel An MCP server that provides Claude and other MCP clients with persistent memory through a Zettelkasten knowledge base of interconnected markdown notes. It enables LLMs to create, search, link, and reference atomic notes across sessions with | |
| Safe WhatsApp MCP dhruvratra/safe-whatsapp-mcp A local MCP server that enables an agent to read personal WhatsApp messages, prepare replies, and send them only after user confirmation. | |
| Salesforce MCP Server dhruvshekhawat504-eng/mcp-server- Enables lead management and permission set operations on Salesforce through the MCP protocol. | |
| Obsidian MCP Learning System dhruvvenkat/obsidian-mcp A local MCP server that transforms an Obsidian vault into a structured learning interface through tools for concept extraction and gap analysis. It enables AI agents to generate study plans and align note-taking with implementation projects | |
| IDA MCP dhsgud/ida-mcp-93 Enables AI agents to inspect, reverse engineer, decompile, and operate on binaries through IDA Pro, including headless and GUI sessions, over stdio or Streamable HTTP. | |
| household-account-book dht-net/household-account-book Provides AI agents with a headless personal accounting system via REST API and MCP stdio, enabling account management, transaction recording, transfers, and reporting without a GUI. | |
| TabWeave MCP dhtfish-98/tabweave Connects to an already-running Chrome/Chromium instance over CDP and exposes 75 browser-automation tools over newline-delimited MCP JSON-RPC on stdin/stdout, covering navigation, forms, keyboard/mouse input, screenshots, cookies, storage, t | |
| outlook-mcp-server dhtim135/outlook-mcp-server A lightweight MCP server for personal Microsoft Outlook/Hotmail accounts, enabling email search, reading, attachment management, and folder operations via Microsoft Graph API with OAuth device-code flow. | |
| AegisReader Security MCP Server dhugster/testmcp A government-oriented MCP server implementing security controls for AegisReader development with features including task management, security analysis, and secure operations functionality. | |
| Research Deposition MCP dhuzard/research-deposition-mcp Enables agentic research workflows to prepare scholarly deposits with deterministic validation, file manifests, and package digests, and to create/update Zenodo drafts, while requiring operator-signed approval before publication. | |
| CorelDRAW Live MCP dhxg/dhg-cdr-mcp Enables AI clients such as Claude Desktop, Claude Code, Cursor, and VS Code to drive a local CorelDRAW instance through natural language via its COM API, covering batch image search and PowerClip placement, batch data/sign board production, | |
| nano-mcp dhyabi2/nano-mcp-public Enables AI agents to hold Nano (XNO) and pay per API call through a public node, providing wallet operations and pay-per-call tool access. | |
| nano-wallet dhyabi2/nano-wallet-xno Enables offline Nano (XNO) address validation with checksum checks, wallet creation, account derivation, and message signing via MCP, with no network calls. | |
| RouteMCP dhyanagni2001-commits/routemcp Exposes a capability-aware model router as MCP tools so hosts can inspect routing decisions, execute routed completions with validation and fallback, and list model capabilities over Streamable HTTP. | |
| plr-mcp di-omics/plr-mcp A Model Context Protocol server for PyLabRobot that exposes liquid handler, plate reader, thermocycler, and heater-shaker as MCP tools. It ships in simulation mode by default, allowing end-to-end testing without hardware. | |
| Godot MCP Gateway di404/godot-mcp-gateway A local control plane that lets multiple AI coding agents share one Godot editor through independent MCP sessions, with ordered writes, playtest access, and LSP routing. | |
| MCP Codebase RAG Server di5rupt0r/codebase-rag Provides semantic vector search over local codebases via MCP, enabling hybrid search (dense + sparse + RRF) for any MCP client like GitHub Copilot or Claude Desktop. | |
| Lumen Bridge diabetic0/lumen-bridge Enables MCP clients and external AI supervisors to oversee and steer native Codex sessions through a thin local stdio bridge. It exposes eleven codex_* supervisory tools for tasks such as listing threads, starting turns, observing progress, | |
| xmemory diadems666/xmemory Enables AI assistants to store, retrieve, and manage persistent memories locally via an MCP server with hybrid vector and keyword search, plus tools for memory CRUD, search, backup, and import. | |
| MCP MariaDB Server diae-louali/mcp Enables AI assistants to interact with MariaDB databases through standard SQL operations and advanced vector/embedding-based search. Supports database management, schema inspection, and semantic document storage and retrieval with multiple | |
| diag2md-mcp diag2md/diag2md-mcp Enables AI coding agents to discover, convert, and synchronize Draw.io C4 and UML diagrams into Mermaid Markdown, providing architectural context and guardrails during chat sessions. | |
| FlowState by DialectForge dialectforge/flowstate Local-first shared memory that several AI apps can use at once, with every change recording which app, model and machine made it. | |
| HyperNatt Terminal diallouberesearch/hypernatt-terminal Enables AI agents to query liquidation radar for seven tokens, inspect recorded BTC/ETH order book depth with wall history and aggressor flow, and request Li.Fi cross-chain swap routes that agents sign themselves. | |
| Reddit MCP Server dialog-tools/reddit-research-mcp Enables comprehensive Reddit research through a three-layer architecture that discovers relevant communities, provides operation guidance, and executes multi-subreddit content fetching with proper citations. Supports searching, post fetchin | |
| browser-mcp diamond-it-615/browser-mcp An MCP server that allows users to interact with their browser through natural language commands, enabling actions like getting page content as markdown, modifying page styles, and searching browser history. | |
| Vibechemy diamondalchemy/vibechemy An MCP server for orchestrating a fleet of CLI coding agents in isolated git worktrees. It exposes tools for spawning workers, sending instructions, reviewing diffs, and merging changes, with full terminal visibility. | |
| Claude Sandbox for VS Code diamondlightsource/claude-sandbox-vscode Enables a sandboxed Claude Code session to see editor selections, review proposed edits as VS Code diffs, and read workspace diagnostics through an MCP-over-WebSocket IDE bridge. | |
| API Integration MCP Server dianakrog/mcpworkshop Connects external APIs like Open-Meteo and AgroMonitoring to your development environment through URI-like requests, allowing access to live data directly in MCP-compatible tools. | |
| MCP REST API Tester diananicolas/mcp-rest-api Enables testing, debugging, and interacting with REST API endpoints from MCP clients such as Claude and Cline, with support for multiple HTTP methods, authentication, custom headers, response size limits, and SSL verification. | |
| Siri Shortcuts MCP Server diananicolas/mcp-server-siri-shortcuts Enables LLMs to list, open, and run shortcuts from the macOS Shortcuts app, with dynamically generated tools for each available shortcut and optional input passing. | |
| Clinical MCP Server dianapopovici/clinical-mcp-server A governed, audited Model Context Protocol server that provides AI agents with secure, read-only access to a clinical knowledge base through least-privilege tools, policy validation, and append-only audit logging. | |
| tradingview-chart-mcp dianar40739/tradingview-chart-mcp Enables fetching TradingView chart images for any ticker and interval using Selenium, with browser pooling for concurrent performance. | |
| Vibe Coder MCP Server dianawilson721/vibe-coder-mcp Equips MCP-compatible AI assistants with software development tools for research, codebase mapping, context curation, PRD/user-story/task generation, full-stack scaffolding, and multi-step workflow execution. | |
| Fuzzy-Semantic-Audit-MCP diandiandia/fuzzy-semantic-audit-mcp A high-precision logical vulnerability auditing tool that uses MCP and CodeGraph for automated 0-day discovery and verification in multi-language codebases. | |
| Codexless diane767/codexless Lets ChatGPT drive a reviewed set of local tools — project file and Git work, bounded terminal commands, Chrome/Edge browsing, and live Excel control — directly from an ordinary chat session. Reuses the existing local Codex environment and | |
| Siri Shortcuts MCP Server dianehussein083/mcp-server-siri-shortcuts Enables LLMs to list, open, and run macOS Shortcuts app shortcuts, including dynamically generated tools for each available shortcut, with optional text or file input. | |
| Taskade MCP Server dianek10/mcp Enables AI assistants and IDEs to connect with Taskade workspaces, projects, tasks, AI agents, automations, and files through natural language, using either a hosted OAuth server or a local stdio package. | |
| Gemini SuperClaude MCP Server dianel555/gemini-superclaude-mcp-server Enhances Gemini CLI with SuperClaude Framework v4.0.9, providing 22 specialized commands, 14 domain-expert agents, and integration with 6 MCP servers for development, analysis, and automation. | |
| Paper Search MCP dianel555/paper-search-mcp-nodejs Enables searching and downloading academic papers from 14 platforms including arXiv, PubMed, Google Scholar, Web of Science, Springer, and Sci-Hub with unified data format and intelligent rate limiting. | |
| Excalidraw Architect MCP dianemoon9743/excalidraw-architect-mcp Enables AI coding assistants to generate and revise hand-drawn Excalidraw diagrams across 25 types, including architecture, flowcharts, sequence diagrams, Gantt charts, and charts, with automatic layout, styling, and offline SVG/PNG export. | |
| loci-mcp dianenicolas196/loci Enables AI agents and MCP hosts to search a locally indexed second brain built from scattered notes, docs, PDFs, and chat exports, returning hybrid vector-plus-keyword results with section-level citations rather than whole files. | |
| Apple Music dianenilsson7081/applemusic-mcp Enables MCP clients to search and manage playlists, library, catalog, discovery, playback, and the Up Next queue across macOS, Windows, and Linux. | |
| PocketBase MCP Server dianereeves/pocketbase-mcp Enables advanced database operations, schema management, record CRUD, relationship expansion, pagination, user authentication, and database backups for PocketBase instances through the Model Context Protocol. | |
| read-website-fast dianereeves77632/mcp-read-website-fast Enables AI agents and LLM pipelines to fetch and crawl webpages, strip extraneous content, and convert them into clean, link-preserving Markdown for fast, token-efficient scraping. | |
| SerpApi MCP Server dianeson730/serpapi-mcp Enables querying Google, Bing, Yahoo, DuckDuckGo, YouTube, eBay and many other search engines for real-time results, weather, stock data and more, returning structured JSON or token-efficient Markdown. It also exposes per-engine parameter s | |
| read-website-fast dianetorres628/mcp-read-website-fast Enables AI agents and MCP clients to fetch webpages and crawl sites, converting them into clean, token-efficient Markdown with preserved links, caching, and polite crawling. | |
| OPTIMADE MCP Server dianfengxiaobo/optimade-mcp-server Enables natural language querying of OPTIMADE-compatible material databases like Materials Project and Materials Cloud via the Model Context Protocol. It provides tools for linting query filters, discovering database providers, and accessin | |
| SQLite Memory diankes/mcp-sqlite-memory Enables coding agents to query and modify a SQLite database through twelve SQL-based tools, with safety enforced server-side via statement policies, protected tables, result caps, and snapshots. It also provides an append-only, hash-chained | |
| shadcn-registry-sync-mcp dianramdhani/shadcn-registry-sync-mcp Automates shadcn/ui registry maintenance by scanning your project, detecting components and dependencies, and generating a production-ready registry.json with a single AI command. | |
| mining-rights-daily-agent dianyxx/02-mining-rights-daily-agent Generates structured Chinese Markdown briefs on mining topics by orchestrating three MCP tools for news, resource data, and price information. |
44,451–44,500 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.