Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Social Media Scraper dimitrischristou30/custom-mcp-server Enables AI assistants to retrieve LinkedIn personal and company profiles, public Facebook and Instagram profile information, and Google web search results through RapidAPI and Serper integrations. Exposes these capabilities as MCP tools tha | |
| Stock MCP dimitrisdiaz1294/stock-mcp Enables AI agents and HTTP clients to query market data, technical indicators, fundamentals, news, filings, money flow, and code exports across A-shares, US equities, ETFs, indices, and cryptocurrencies. It exposes these capabilities as MCP | |
| Luma MCP dimitrism23023/luma-mcp Enables AI coding assistants without native vision to analyze screenshots, errors, UI designs, and documents through a unified image understanding tool backed by multiple vision model providers. Supports local files, remote URLs, Data URIs, | |
| MediaWiki MCP Server dimitrism23023/mediawiki-mcp-server Enables LLM clients to search, read, and edit pages and files across any MediaWiki wiki, with multi-wiki configuration, OAuth-secured writes, and extension packs for Semantic MediaWiki, Wikibase, Cargo, Bucket, and NeoWiki. | |
| Augments MCP Server dimitrismartins19/augments-mcp-server Enables Claude Code and other MCP clients to retrieve on-demand API signatures, prose documentation, and code examples for any npm package, providing documentation-first search, cross-version migration guides, error diagnosis, package compa | |
| Magg dimitrismendes/magg Enables LLMs to discover, add, configure, enable, disable, and aggregate other MCP servers and their tools through a unified proxy, with persistent configuration across sessions. | |
| Zettelkasten MCP Server dimitrismendes/zettelkasten-mcp Enables Claude and other MCP-compatible clients to create, link, search, explore, and synthesize atomic notes in a bidirectional knowledge graph. Supports tags, note types, semantic link types, and dual Markdown/SQLite storage for AI-assist | |
| jevmem dimitrisnunes4695/jevmem Persists decisions, rules, bugs, to-dos and dead ends from Claude Code, Cursor, Codex and Claude Desktop chats as single lines in a repo's JEVMEM.md, then surfaces the lines relevant to each new prompt in later sessions. Also checks command | |
| codebadger dimitrisogawa75661/codebadger Enables AI agents and LLMs to query codebase structure and data flow through Joern Code Property Graphs, supporting CPGQL queries, taint tracking, program slicing, and vulnerability hunting across multiple languages. | |
| cloakbrowser-mcp dimitrispasakaleris/cloakbrowser-mcp Enables Claude and other MCP clients to drive a stealth Chromium browser through 49 tools for navigation, page reading and extraction, interaction, session and fingerprint management, and debugging. | |
| gmail-mcp dimitrispasakaleris/gmail-mcp An MCP server that lets Claude read, search, send, label, and manage your Gmail through OAuth2. | |
| WhatsApp MCP Server dimitrispasakaleris/whatsapp-mcp Enables Claude to read and send WhatsApp messages, including media and call history, via a local bridge. | |
| multiCAD-mcp dimitrisserra54/multicad-mcp Enables users to control multiple CAD applications such as AutoCAD, ZWCAD, GstarCAD, and BricsCAD through MCP-compatible AI assistants for drawing, layer/block/entity management, file operations, and data export. | |
| web3-research-mcp dimitristrivedi96/web3-research-mcp Enables local, free crypto token research across CoinGecko, CoinMarketCap, DeFiLlama, and web search, producing structured reports with saved resources and progress tracking without requiring an API key. | |
| MCP Codebase Server dimitriy-tolstikov/mcp-codebase Enables AI agents to navigate and refactor a codebase through an AST index, offering project overviews, symbol and usage search, module dependency exploration, and LSP-backed operations such as rename, go-to-definition, diagnostics, and ext | |
| pipedrive-mcp dimkanarb-afk/pipedrive-mcp-server Full-featured Pipedrive MCP server for Claude Desktop, enabling natural language control over deals, leads, persons, organizations, notes, activities, pipelines, and more via 34 tools and 7 prompts. | |
| DIMO MCP Server dimo-network/mcp-dimo Enables AI assistants to access vehicle data from the DIMO Network, including querying telemetry, executing vehicle commands (lock/unlock, charging), decoding VINs, minting vehicle NFTs, and creating verifiable credentials. | |
| Uptrace MCP Server dimonb/uptrace-mcp An MCP server for the Uptrace observability platform that enables querying traces, spans, logs, and metrics through natural language. It provides tools for error analysis, service discovery, and trace visualization within MCP-compatible cli | |
| MCP Weather Server dimonets/mcp-weather-server Provides comprehensive weather information including current conditions, 7-day forecasts, and air quality data for any city worldwide using the Open-Meteo API. Features real-time weather data, hourly forecasts, sunrise/sunset times, and Eur | |
| mcp-browser-testing-server dimonz23/mcp-browser-testing-server Enables AI agents and MCP hosts to drive a persistent headless Chromium browser through Playwright, navigating pages, mapping visible fields and actions, clicking, typing, scrolling, and capturing screenshots via stdio tool calls. It also p | |
| Raspberry Pi SSH MCP Controller dimoxe/rpi-mcp-controller Enables local management of Raspberry Pi devices over SSH from VS Code, including status checks, remote file reads, systemd service inspection and control, command execution, and power actions with explicit opt-in security safeguards. | |
| Clarity MCP Server dimple2626/clarity-mcp-server- Enables Claude to query Microsoft Clarity analytics remotely via HTTP, with bearer token authentication and caching to manage API quotas. | |
| context-harness dimqsh/context-harness Enables coding agents to run budgeted tests and checks under a countdown with a stop rule, shape long logs into concise failure summaries, and guard pre-existing test files against silent assertion rewrites. It also delivers relevance-filte | |
| Legal Info MCP Server dimwebdev/legal_info_mcp_server A modular MCP server providing structured, methodology-driven prompt endpoints for rapid legal/compliance landscape mapping, gap discovery, and risk prioritization across privacy, IP, AI governance, security, consumer, and disclosure domain | |
| kitchen-co-mcp dimy-osman/kitchen-co-mcp Enables AI agents to interact with Kitchen.co via the Model Context Protocol, supporting tasks, boards, conversations, files, and more through secure profile-based authentication. | |
| Custom GitLab MCP Server din-djarin2/custom-gitlab Provides integration with GitLab repositories to manage files, issues, merge requests, and branches through the Model Context Protocol. This implementation includes specific fixes for schema validation issues found in standard GitLab MCP se | |
| keywarden dinakar-s/keywarden Enables AI agents to make authenticated API calls and run commands with secrets injected, while keeping credentials completely hidden from the model, with policy enforcement, grants, and audit logging. | |
| mcp-thumbapi dinalllll/thumbapi-mcp-server It generates blogpost images, thumbnails, social post images just from the title. | |
| mcp-rag-tools dinamain/mcp-rag-tools Enables MCP-compatible clients to retrieve relevant document chunks and fact-check generated answers against context, classifying them as fully supported, partially supported, or unsupported. | |
| mcp-javamelody dinamexoft/mcp-javamelody Enables read-only access to JavaMelody monitoring data from one or more Java web applications, covering HTTP/SQL/Spring counters, JVM and thread snapshots, and database reports. Users can query several configured microservices from a single | |
| sticky-notes dinammahfouz/mcp-server-demo Enables an LLM to keep a persistent scratchpad by adding and reading notes, retrieving the latest note as context, and generating summaries through MCP. | |
| BestReads MCP Server dinasaur404/bestreads-mcp-server Enables personalized book recommendations by managing reading profiles and preferences, with tools to add genres, authors, and track books, then get AI-powered suggestions. | |
| Inoreader MCP Server dindicoelho/inoreader-mcp Enables intelligent RSS feed management and analysis through Inoreader integration. Supports reading articles, search, bulk operations, and AI-powered content analysis including summarization, trend analysis, and sentiment analysis. | |
| Secure Reports MCP dindin-abdulloh/mcp-secure-reports Lets an AI agent list reports, start and poll exports, and look up insurance claims from a legacy system that has no API, with each server process serving only the tools and report types its role permits. Every tool call is written to an ap | |
| Feishu MCP Server dinehq/feishu-mcp Enables Claude to read and interact with Feishu (Lark) documents, spreadsheets, and multi-dimensional tables. It provides tools for extracting content and metadata from various Feishu resources through secure OAuth or tenant-level authentic | |
| DB & Calculator MCP Server dinek-k/mcp-server-example-1 A Model Context Protocol server providing tools for SQLite database operations (query, add, update, delete users) and mathematical calculations including basic arithmetic, expression evaluation, and statistical analysis. | |
| AI Studio MCP Server dinesh-dlanzer/ai-studio Enables AI agents to create and manage video projects, write story and brief, convert, estimate costs, propose paid actions, run approved proposals, discard and restore assets. | |
| mcp-divineapi-docs dinesh-gahlot/mcp-divineapi-docs Serves the already-public developer documentation for the DivineAPI REST API, enabling search, endpoint lookup, and example responses without authentication. | |
| mcp-indian-astrology dinesh-gahlot/mcp-indian-astrology Enables AI assistants to access Indian Vedic astrology services including Panchang, Kundli, matchmaking, and festivals through natural language. | |
| PagerDuty MCP Server dinesh-it/pagerduty-mcp-server Enables AI agents to interact with PagerDuty services, incidents, schedules, and on-call management through natural language. | |
| Health & Fitness Coach MCP dinesh-satram/fitness_coach_mcp A comprehensive AI-powered fitness tracking application that enables AI tools to interact intelligently with user fitness data, providing personalized workout plans, nutrition tracking, and progress analysis through natural language. | |
| mcp-file-roots-demo dinesh36/mcp-file-roots-demo Enables interactive chat with AI models via Anthropic API, with controlled file system access to specified directories and video conversion capabilities. | |
| mcp-server-competitor-content dinesh7wd/mcp-server-competitor-content Enables competitor content analysis by scraping pages, extracting keywords, identifying content gaps, comparing headings, scoring readability and quality, checking SERP features, and clustering competitors. | |
| mcp-server-geo-optimizer dinesh7wd/mcp-server-geo-optimizer Enables AI agents to compute optimized routes, geocode locations, generate distance matrices, cluster points, check boundaries, and manipulate GeoJSON through MCP tools. | |
| Weather Agent MCP Server dineshkumar-ponnusamy/mcp-server Enables users to get current weather information for any city using the OpenWeatherMap API. Returns formatted weather data including temperature, humidity, and weather description through natural language queries. | |
| Heygen MCP Server dineshkumar181094/heygen-mcp This MCP server enables any MCP client to generate avatars and videos using the HeyGen API, with tools for managing credits, voices, and avatar video generation. | |
| NewsPulse MCP dineshrajdhanapathydd/newspulse-mcp A custom MCP server that aggregates live tech news from RSS feeds, providing tools for searching, summarizing, bookmarking, and generating daily digests, with optional AI summarization via Amazon Bedrock. | |
| reinvent2026-mcp dineshrajdhanapathydd/reinvent2026-mcp Enables searching and exploring the AWS re:Invent 2026 session catalog by keyword or natural-language meaning, along with venue travel estimates and official AWS event links. | |
| bear-mcp dineshs99/bear-mcp An MCP server that gives AI assistants read and write access to Bear notes on macOS. | |
| Dev.to Blog Publisher MCP Server dineshv0311/devto-mcp-server Enables publishing markdown blog posts directly to Dev.to as drafts or live articles through a single MCP tool, with support for tags, series, canonical URL, and cover image. |
44,751–44,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.