Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Mem·Sum docgotham/memsum Mem·Sum is a shared memory workspace for small groups accessible via AI assistants, enabling agents to read, draft, and publish atomic updates to a shared workspace with version control and security. | |
| sqlite-readonly-mcp dochaocn/sqlite-readonly-mcp A read-only SQLite MCP server for remote Linux deployment that provides secure database querying via SELECT statements and table listing. It uses Bearer Token authentication and returns JSON results through Streamable HTTP, designed to run | |
| Community Research MCP dochatty/community-research-mcp Searches real developer solutions from Stack Overflow, Reddit, GitHub issues, and forums to find battle-tested fixes and workarounds for specific programming problems. Bypasses AI guessing by finding actual community discussions where devel | |
| Context Manager MCP Server docherty/contextmgr-mcp A server implementation of the Model Context Protocol (MCP) for managing development workflow with features like project management, task tracking, and QA review support. | |
| time-mcp dochertydev/time-mcp Lightweight MCP server providing system time tools (current time, date, datetime, time components, unix timestamp) for LLM applications. | |
| Alby Bitcoin Payments MCP Server docker-hackerxbt68/mcp Enables Bitcoin Lightning wallet integration with LLMs through Nostr Wallet Connect (NWC). Supports lightning payments, LNURL operations, and L402 authentication for AI-powered bitcoin transactions. | |
| RollDev MCP Server dockergiant/rolldev-mcp-server An MCP server for RollDev and Magento 2 development environments that enables LLMs to manage project environments, execute SQL queries, and run PHP or Magento CLI commands. It supports automated project initialization, Composer integration, | |
| agentguard dockfixlabs/agentguard Enables scanning of AI agent code for security vulnerabilities such as prompt injection, tool abuse, and data exfiltration, directly from MCP-compatible clients like Claude Code. | |
| Reverse Engineering MCP dockfixlabs/reverse-engineering-mcp Exposes 18 typed tools that drive real static-analysis engines (Ghidra, apktool, WABT, TShark, evmole, Rizin) over a single MCP endpoint to decompile binaries, audit APKs, scan EVM contracts, inspect WebAssembly, firmware, SQLite, and pcap | |
| Doclea MCP docleaai/doclea-mcp Provides persistent memory for AI coding assistants, storing and retrieving architectural decisions, patterns, and solutions across sessions using semantic search, while also offering git integration for commit messages and code expertise m | |
| Docmost MCP docmost-mcp/docmost Enables an assistant to connect to a self-hosted wiki, respecting existing permissions, to search, read, create, update, list, move, and copy pages, list spaces, and work with comments and attachments. | |
| docnova-mcp docnova-ai/docnova-mcp MCP server for e-invoice platforms. Enables natural language querying of invoices, partners, company data, and financial reports. | |
| Repository Analyzer MCP Server docnr/repo-analyzer-mcp Provides tools for analyzing code repositories, including structure, dependencies, and git history, with special support for Nostr-related projects. | |
| Council Network connector docrohit/council-network-connect A local stdio MCP server that lets an independently operated agent participate in Council Network using its own model and a persistent identity surviving restarts. It exposes read-only tools by default for rules, feed, threads and agents, w | |
| docsbook-mcp docsbook-io/docsbook-mcp A proxy MCP server that provides access to ~40 tools for managing a Docsbook workspace, including branding, navigation, SEO/GEO/AEO, AI chat system prompt, translations, analytics, webhooks, and the doc source-of-truth graph via any MCP cli | |
| vitals docstream-oficial/vitals Exposes personal health data (recovery, sleep, strain, etc.) as MCP tools for AI agents to query and analyze. | |
| Docswrite MCP docswrite/docswrite-mcp Generated content to Google Docs to WordPress while preserving formatting and structure for a streamlined content workflow. | |
| MCP Worktree Voting Server doctacon/mcp-worktree-workflows Enables parallel implementation of tasks using git worktrees, allowing you to create multiple variants of a solution, evaluate them side-by-side, and select the best one. | |
| inngest-cloud-mcp doctone/inngest-cloud-mcp MCP server for the Inngest Cloud REST API to inspect functions, runs, and events in production from Claude Code, Cursor, or any MCP client. | |
| image-gen-mcp doctor-pan-code/image-gen-mcp Enables LLMs to generate images via MCP by calling AI models from providers like SiliconFlow, OpenAI, or custom APIs, with tools for image generation and model listing. | |
| @flexpa/mcp-fhir doctorcare/mcp-fhir Enables interaction with FHIR servers to access, search, and manage FHIR resources, including appointment scheduling and cancellation. | |
| membrain doctording123/dsh-membrain-lite Enables chatbots to persist, recall, and gradually forget conversational memories through five-way weighted retrieval, with tools for remembering facts, querying relevant memories, generating wake-up briefs, running decay ticks, and inspect | |
| okf-mcp doctormacky/okf-mcp Enables AI agents to consume, validate, search, and author Open Knowledge Format v0.2 Markdown bundles locally, with optional multi-bundle federation, graph navigation, provenance inspection, and proposal-based updates. | |
| @docujson/mcp docujson/mcp Connects AI assistants to DocuJSON for PDF generation, template management, and API operations via natural language. It enables tasks like creating invoices, managing templates, and viewing usage stats through MCP-compatible tools. | |
| DocumentPro MCP documentpro/documentpro-mcp Extract structured, schema-typed data from invoices, purchase orders, receipts, and tax forms, and classify documents into custom label sets — via a hosted MCP server. Free tier included. | |
| mcp-Docuplete docuplete/mcp-server Docuplete automates document completion for businesses — PDF templates, client interview forms, and e-signatures in one platform. The MCP server lets you drive the entire workflow from a conversation: find your document packages, start a cl | |
| docuprox-mcp docuprox/docuprox-mcp Enables AI clients like Claude to process documents (invoices, passports, etc.) via the DocuProx API, with tools for submitting jobs, checking status, and retrieving results. | |
| ZS (Zobr Script) docxi-org/zobr-script A cognitive scripting language for structured reasoning with LLMs. 12 built-in operations (survey, ground, assert, doubt, contrast, synthesize, etc.) for guiding AI through dialectical analysis, impact assessment, and other thinking pattern | |
| Google Scholar MCP Server docxmxm/google-scholar-mcp-functional Enables academic research through Google Scholar by searching for papers, finding author publications, discovering recent research, and identifying highly cited works through web scraping with natural language queries. | |
| daf-jev docxology/daf-jev Enables natural-language interaction with TypeSafe's Jev decision API, supporting mixed question calls, batch evaluation, model listing, and confidence or composite-score gates over stdio. | |
| Device Log MCP Server dodangnguyen96/mcp-server Enables retrieval of simulated device logs (activation, LAN, WLAN) and Kafka status for testing purposes by querying with device serial numbers. | |
| clewwiki dodecaidr/clewwiki Enables humans and AI coding agents to collaboratively write to a shared knowledge base with conflict-safe claims, code-anchored staleness detection, and synchronized human/agent documentation via MCP and REST. | |
| MemForge dodo-labs-ai/mem-forge Gives AI agents a shared, cited memory of team knowledge built from docs, tickets, chat and confirmed decisions, exposing search, memory retrieval and source lookup over MCP. Agents can recall relevant conventions and evidence, and save new | |
| devPartner dodo-x/devmcp A self-evolving MCP server that aggregates tools, supports cross-AI dialogue, and enables self-upgrade and hot-reload during conversations. | |
| pump-mcp dodo1653/pump-mcp Enables AI assistants to watch live Solana token launches, research coins, devs and wallets, and optionally buy, sell, claim creator fees or launch tokens from chat. All data is read straight from on-chain pump.fun events and bonding curves | |
| wandpad-etsy-mcp dodonic/wandpad-etsy-mcp Enables Claude to read shop data, listings, inventory, and orders from the WandPad Etsy shop using the official Etsy API v3, with optional write capabilities for listings when explicitly enabled and confirmed. | |
| Dodo Payments dodopayments/dodopayments-typescript The Dodo Payments MCP Server integrates with agentic frameworks to provide a lightweight, serverless-compatible interface for AI-driven payment operations like billing, subscriptions, and customer management. It enables autonomous agents to | |
| brave-search-mcp dodou/brave-search-mcp Enables Brave Search via MCP, deployed on Railway for seamless integration with AI agents. | |
| bertron-mcp doe-bridge/bertron-mcp MCP server providing access to the BERtron API for aggregating genomic and environmental data from multiple BER data sources, enabling geospatial search and health checks. | |
| homelab-mcp-hub doemefu/homelab-mcp-hub Enables MCP clients such as Claude to connect as a custom connector and read mail and calendar data from the doemefu homelab over a remote Streamable HTTP endpoint, authorized by OAuth tokens validated offline against the auth-service JWKS. | |
| ROS 2 Workspace Inspector MCP doer0312/ros2-workspace-mcp Provides static analysis of ROS 2 workspaces, enabling inspection of packages, dependencies, interfaces, launch files, and robot descriptions without running ROS 2. | |
| agent-voice doer1296/agent-voice-mcp-minus Enables AI coding assistants to verbally announce task progress and events through local text-to-speech, with cloud synthesis via Volcano Engine or Edge TTS, scene-based voice settings, and a Windows SAPI fallback so announcements continue | |
| EvHenter MCP doffpett/evhenter-mcp An event aggregation platform that enables users to search, retrieve, and create event data using a Sanity.io backend. It provides specialized tools for managing event details, locations, categories, and venues through the Model Context Pro | |
| subagent-cockpit-mcp dofunc/subagent-cockpit-mcp Lets any MCP client hand work to external coding agents from multiple vendors over the Agent Client Protocol, running them in parallel with approvals, questions, session snapshots and a read-only web monitor. | |
| boss-katana-mcp dogakocak/boss-katana-mcp Enables AI coding agents to shape BOSS KATANA Gen 3 amplifier tones from natural-language descriptions, moving the knobs live inside BOSS TONE STUDIO over USB. Agents can read the current patch, set amp and effect parameters in one call, an | |
| Agent Search MCP dogan37239/agent-search-mcp Enables AI agents to run English and Chinese web searches without any API key, returning compact multi-source evidence with provenance and preserving provider failures in the response. It also caps adapter attempts, elapsed time, and respon | |
| Bibverify dogan50/bibverify Enables AI assistants to verify bibliographic existence and metadata consistency, convert DOI/PMID/PMCID/arXiv identifiers to BibTeX, and check .bib files against multiple sources without destructive edits. | |
| Frappe MCP dogan966/mcp Enables Frappe Framework apps to function as Streamable HTTP MCP servers, exposing registered tools through a WSGI-compatible endpoint for MCP clients. | |
| WealthGuard MCP doganaybalaban/finance-mcp A Model Context Protocol server that connects Claude to your Google Sheets for personal finance tracking, analysis, and reporting — all through natural language. | |
| After Effects MCP Server dogauto/after-effects-mcp Enables controlling Adobe After Effects from an MCP client through a bridge panel running inside AE. Supports composition and layer automation, effect and preset application, keyframing, markers, and audio waveform analysis for generating m |
45,301–45,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.