Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Hetzner Cloud MCP Server dkruyt/mcp-hetzner A Model Context Protocol server that allows language models to manage Hetzner Cloud resources through structured functions, including servers, volumes, firewalls, and SSH keys. | |
| mcp-nettools dkruyt/mcp-nettools A Model Context Protocol server that provides network diagnostics and scanning tools such as nmap, DNS lookups, whois, traceroute, and security analysis. | |
| real-estate-actual-price dksbluesky/real-estate-actual-price Enables querying Taiwan real-estate actual-price transaction data through MCP tools, including transaction search, market statistics, area listing, and data status, using a local SQLite database. | |
| EKS Log Analyzer MCP Server dksshddl/eks-log-mcp Enables AI assistants to analyze Amazon EKS node logs collected by the EKS Log Collector script. It provides tools and troubleshooting workflows for diagnosing issues with VPC CNI, kubelet, DNS, and general node connectivity. | |
| CV Writer MCP Server dkthecoder/cv-writer-mcp A research-driven MCP server that uses 20+ years of psychological research to generate scientifically-optimized CVs tailored to any job and cultural context. | |
| PPN Hub Free MCP dkurokawa/ppn-hub-free-mcp Enables keyless, read-only access to a wide range of public APIs (including weather, elevation, Japanese addresses, environment, science, and civic data) through MCP clients, with usage limits and abuse protection built in. | |
| Home Assistant MCP Server (HA-mcp) dkurti/ha-mcp Enables AI assistants to interact with Home Assistant to control smart home devices, query entity states, and manage automations using natural language. It provides over 90 tools for comprehensive system management, including dashboard conf | |
| Substack MCP Server dkyazzentwatwa/substack_mcp Provides deep, structured access to Substack publications with real-time content analysis, including sentiment analysis, readability metrics, and publishing patterns. | |
| ickyMCP dl1683/ickymcp RAG-powered document search server that enables semantic search across large collections of legal and business documents (PDF, Word, Excel, PowerPoint) using local embeddings with no API costs. | |
| Northbridge Home Ops dl88jing/northbridge-alexa-mcp Enables Alexa+ to manage household admin tasks: checking upcoming bills, verifying funding, detecting anomalies, auto-handling routine payments, and escalating only when a human decision is required. | |
| macos-screen-mcp dla-kirito/macos-screen-mcp An MCP server that lets AI assistants see your macOS desktop, capture screenshots, read browser tabs, and preview files via local macOS tools. | |
| UPC-MCP dlam12138/upc-mcp Enables AI clients to access a student's class schedule, empty classroom availability, campus card balance, extracurricular activities, library seats, and e-station guides, while keeping credentials local and requiring explicit confirmation | |
| pingfusi dlane1570/pingfusi Lets AI agents submit work to real human reviewers, receive pinned feedback and a verdict, and iterate until the result is approved. | |
| Frappe MCP dlang85787/mcp Turns a Frappe Framework app into a Streamable HTTP MCP server by letting developers register Python functions as LLM-callable tools and expose them through a Werkzeug/WSGI endpoint. Handles JSON-RPC request routing, tool registry managemen | |
| openai-usage-mcp dlaporte/openai-usage-mcp MCP server for querying OpenAI usage and cost data, including spend summaries, daily breakdowns, month-over-month comparisons, and token usage by model. | |
| LAPRAS MCP Server dlarsson4812/lapras-mcp-server Enables AI assistants to search and retrieve job listings, and to view or update profile information such as work experience, job summary, career goals, and technical skills through dedicated MCP tools. | |
| Vec Memory MCP Server dlasky/mcp-memory-vec Provides graph-based semantic memory storage and retrieval using vector embeddings and SQLite, enabling relationship creation between memories and similarity-based search through natural language. | |
| QuietBridge dlc04022006-stack/quietbridge Enables an assistant to classify returned fields, judge the current audience, and route only safe content to public speech while protected values are diverted into a short-lived, profile-bound, one-time private handoff. It also explains eac | |
| godot-mcp dleungdl/godot-dev-mcp Enables Godot development via MCP with tools to inspect project configuration, scenes, runtime state, and execute allowed test commands. | |
| cisco-ise-mcp dlhace/cisco-ise-mcp Exposes Cisco ISE ERS and MNT APIs as MCP tools for querying and managing identity, endpoints, sessions, authentication logs, and policy context. | |
| TaskFabric dlhck/task-fabric A file-based task manager operated through an MCP server, enabling agents to create, search, and manage tasks with git versioning and hybrid semantic+keyword search. | |
| Telegram MCP Server dlhellme/telegram-mcp-server A Model Context Protocol server that enables Claude to interact with Telegram channels and groups through both direct API access and web scraping methods. | |
| icloud-mcp dlife/mcp-icloud Enables secure access to iCloud Mail through tools for listing folders, searching, reading, sending, marking, and trashing messages, with confirmation required for sending and deletion. | |
| MCP Tools dlightyupgrade/mcp-tools A modular multi-server architecture providing development automation, JIRA management, and performance reporting for Claude Code. It features specialized tools for PR health analysis, code reviews, and generating comprehensive team and indi | |
| LunchMoney MCP Server dlombardi4000/lunchmoney-mcp Enables AI assistants and MCP clients to access and manage LunchMoney personal finance data, including transactions, categories, tags, budgets, accounts, recurring items, and crypto through LunchMoney's API. | |
| MGO — Multi-chain Gas Optimizer dlrjsdl200-byte/mgo-mcp-server Compare real-time gas prices across up to 9 EVM chains and get the cheapest-chain recommendation. Pay-per-call via x402 (USDC on Base). No API key. | |
| dlt dlt-hub/dlt-mcp Enables large language models to retrieve up-to-date and correct information about dlt pipelines, datasets, and schemas, improving AI-assisted development. | |
| dltHub-AI-workbench dlt-hub/dlthub-ai-harness It gives Claude Code, Cursor, and Codex structured workflows and an MCP
server for building data pipelines with dlt - covering REST API ingestion,
transformations, data quality, and exploration. | |
| Household Disruption Recovery MCP Server dltpgml1112/household-disruption-recovery Enables an agent to ingest a school late-start or closure notice, determine which family commitments it breaks, build a constraint-checked recovery plan, apply it only after a parent approves, and read back every change to confirm the famil | |
| Bybit Server dlwjdtn535/mcp-bybit-server Interact seamlessly with the Bybit API to fetch market data, manage your account, and execute trades. Leverage powerful tools to enhance your trading experience and automate your strategies effortlessly. If you wish to use an API key restri | |
| mcp-chrome-server dlwjdtn535/mcp-chrome-server Enables browser automation, including navigation, form filling, login with CAPTCHA handling, and element manipulation, using a Chrome-based MCP server. | |
| StoreYog dlyog/storeyog Enables a shared store inventory platform where owners and customers query and manage products, check stock, run POS checkout, and approve simulated restocks through authenticated MCP tools backed by a shared SQLite database. Tool calls are | |
| capcut-mcp dlyrr/capcut-mcp An MCP server that reads and builds CapCut projects locally, enabling natural language queries about project contents, missing media, and creation of new edits including beat-synced cuts. | |
| surge-mcp-server dlyzzt/surge-mcp-server Enables natural language control of Surge proxy, including toggling features, managing policies, requests, DNS, and device settings via the Surge HTTP API. | |
| Youtube2Text dm-nosov/youtube2text A powerful text extraction service that converts YouTube video content into clean, timestampless transcripts for content analysis, research, and processing workflows. | |
| MCP:1C-DevTools dm-tupikov/onec-devtools Enables 1C:Enterprise development with 74 tools for static analysis, code audit, query validation, EPF verification, and configuration management using local XML exports without a running database. | |
| NetGram dm1tryg/netgram Enables AI agents to scoped, permissioned access to Telegram chats with per-chat read/write levels and human approval for sending messages. | |
| seafile-vault-mcp dm7500/seafile-vault-mcp A self-hosted MCP server that provides read/write access to a Seafile library, enabling file operations and full-text search for a personal knowledge vault. | |
| chalktalk dmalament-wheelsup/chalktalk Enables querying composite NFL questions by requiring explicit definitions for ambiguous terms, rejecting unresolved ones and grounding answers in chosen definitions. | |
| mcp-hs4 dmanfx/mcp-hs4 MCP server for controlling HomeSeer HS4 with safe, auditable, and guarded write operations. | |
| mcp-xtream dmarkey/mcp-xtream Enables AI assistants to search an Xtream Codes IPTV provider's TV guide, past and upcoming, and download catchup programmes in the background, naming them for Jellyfin or Plex libraries. Also handles subscription status, download tracking | |
| rip-ie-mcp dmarkey/rip-ie-mcp Search and browse Irish death notices from RIP.ie with tools for searching death notices, getting full details, and listing counties. | |
| capacitor-stack dmarmijosa/mcp-server-konsta-react MCP server for building React + Capacitor + Tailwind + Konsta applications, providing tools for UI snippets, plugin management, and stack recommendations. | |
| ASCII Art & Unicode Diagrams MCP Server dmarsters/ascii-art-mcp Enables creation of text-based visual elements including bordered boxes with shading, formatted tables, and diagrams using Unicode box drawing characters and ASCII art palettes for terminal output, documentation, and chat interfaces. | |
| Author Style "-esque" MCP Server dmarsters/author-style-mcp Provides a catalog of curated author writing styles and tools to blend or analyze them across eight dimensions for text and image prompt generation. It enables users to apply structured literary patterns through deterministic style modeling | |
| Brassiere Aesthetics MCP Server dmarsters/brassiere-aesthetics-mcp MCP server implementing visual vocabulary and structural parameters for brassiere/lingerie design. Maps professional design taxonomy to image-generation-ready specifications with zero LLM cost for composition. | |
| Constellation Composition MCP Server dmarsters/constellation-composition-mcp Translates astronomical constellation patterns and mythological metadata into deterministic compositional parameters for AI image generation. It allows users to search constellations by theme and map star patterns to precise canvas focal po | |
| Frasurbane MCP Server dmarsters/frasurbane-mcp Provides tools for analyzing and generating content in the Frasurbane aesthetic through a structured taxonomy of typography, color palettes, and photography parameters. It enables users to enhance image-gen prompts and evaluate compositiona | |
| heraldic-blazonry-mcp dmarsters/heraldic-blazonry-mcp Translates heraldic blazon descriptions into structured visual parameters for image generation, leveraging 900 years of heraldic compositional rules. | |
| Magazine Photography MCP dmarsters/magazine-photography-mcp A visual vocabulary server that translates specific magazine aesthetics and photography styles into locked parameters for consistent, era-authentic image generation. It enables users to apply publication-style color grading, lighting, and c |
45,101–45,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.