Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| RULER MCP dollymzn/ruler-mcp MCP server for reading, aggregating, suggesting, and applying price rules (floors) from ActiveView with a confirmation flow, designed for AI agents to analyze and adjust monetization. | |
| cache-mcp dolphin2702/cache-mcp Exposes get, set, and delete operations over a Redis/Valkey-compatible key-value store as MCP tools, with per-user key namespacing and TTL support on writes. Enables clients to cache and retrieve arbitrary string values statelessly over SSE | |
| memory-mcp dolphin2702/memory-mcp Enables LLM clients to store and retrieve per-user long-term memories in SQLite, with tools to add, search, list, get, and delete memories via MCP HTTP/SSE transports. | |
| searxng-mcp dolphin2702/searxng-mcp Enables web search through one or two SearxNG instances and retrieval of web pages, GitHub READMEs, and article text via MCP tools. | |
| echolon dolphinquant/echolon A Python backtest framework for futures research, designed from the start to be driven by LLM coding agents through an MCP server.
What's in the package:
echolon-mcp — stdio MCP server with 23 tools (strategy validation, scaffolding, indi | |
| Test FastMCP dolphinsboy/test-fast-mcp A basic MCP server built with the FastMCP framework that provides fundamental mathematical operations like addition, subtraction, multiplication, and division. It serves as a demonstration for integrating math-based tools into MCP-compatibl | |
| Market Expert MCP dolphinworld/market-expert-mcp A specialized MCP server that provides institutional-grade financial data and market research via the Finnhub API. It enables AI agents to function as equity researchers, generating professional market reports and high-fidelity analysis for | |
| auto-mcp-server dolrea77/auto-mcp-server Local MCP server for AI agents that enables Jira issue management, Confluence Wiki page creation and editing, Git commit analysis, and diagram generation. | |
| inspection-mcp dolrea77/inspection-mcp Automates visual inspection of development servers by converting natural language test sheets into Playwright scripts and executing them repeatedly. | |
| fin-law-mcp dolseom/fin-law-mcp Enables Korean tax, accounting, and finance professionals to pull statute text, delegated enforcement decrees and rules, NTS rulings, and annexes in a single lookup, and to check whether every statute or article citation in an AI draft actu | |
| gongsi-mcp dolseom/gongsi-mcp MCP server for Korean Fair Trade Commission (공정위) corporate group disclosure compliance. It assists disclosure officers with determining disclosure obligations, calculating deadlines and fines, self-checking submissions, and finding precede | |
| dolu_fivem_mcp dolutattoo/dolu_fivem_mcp Enables local FiveM development by letting an AI assistant execute JavaScript/Lua on the server or client, automate NUI interactions, capture game screenshots, manage resources, and run repeatable tests with screenshot evidence. | |
| mtg-export domainellipticlanguage/mtg-export Enables generating Magic: The Gathering proxy PDF sheets from Archidekt decks or text card lists, with configurable image size and caching. | |
| Blender Universal & Token-Efficient MCP Server domainjon/mcp-for-blender Enables AI agents to inspect and drive Blender scenes directly, either through a live editor bridge on port 8190 or automatically via headless background CLI when Blender is closed. Provides token-efficient tools for scene outlining, object | |
| Domainnameregistration.com MCP domainnameregistration/fastest-domain-name-search-mcp Enables fast, token-efficient bulk domain name search for AI agents, checking up to 1,000 domains per request to see availability statuses. | |
| open-matrix-guard domainsun/open-matrix-guard Enables AI assistants to perform marketing risk inspection, sensitive-word detection, and anti-ban rewriting suggestions for content on platforms like Goofish, Xiaohongshu, and Reddit. | |
| 12306-mcp domaintang/12306-mcp-test Enables searching 12306 railway ticket information, filtering trains, querying passing stations, and searching transfer routes through MCP. | |
| 12306-MCP-Python domaintang/local-12036-mcp Enables AI agents to query public China Railway 12306 information via MCP, including station lookup, ticket availability, transfer planning, and train route details. It does not support login, booking, or payment. | |
| pinchtab-mcp domci/pinchtab-mcp MCP server that wraps PinchTab's HTTP API for browser automation, enabling AI agents to control Chrome via actions like navigation, clicking, typing, and screenshots. | |
| ai.backskills/backskills domco685/backskills-mcp Enables watching the skills and MCP servers an agent depends on, retrieving version history and diffs, and discovering what to chain next. | |
| Magpie MCP Server domdanao/magpie-mcp-server Enables AI agents to access Magpie Payment Platform APIs for processing payments, creating checkout sessions, sending invoices, and managing payment links through natural conversation. | |
| google-cal-mcp domdomegg/google-cal-mcp MCP server for Google Calendar that enables managing calendar events, scheduling meetings, RSVPing, and checking availability through natural language. | |
| Merkl MCP Server domechn/merkl-mcp MCP server providing tools to search, get, and aggregate Merkl opportunities. Enables querying campaign data, APRs, TVL, and more through natural language. | |
| MolTalk domfico/moltalk Enables ChatGPT to answer ordinary chemistry questions by calling local RDKit tools that draw molecules inline, rotate them in 3D, and report stereochemistry, IUPAC numbering and lone pairs. Also resolves molecule names, enumerates stereois | |
| Gemini Spark MCP Local Bridge dominceaseberos/lynx_mcp A local MCP server that enables Gemini Spark to safely access and work with files in a user-selected workspace via authenticated HTTPS tunnel, with sandboxing, policy enforcement, and audit logging. | |
| Minimal Node.js MCP Server dominhnanhh2009/mcp A stateless MCP server for filesystem operations, command execution, and computation, designed for use with llama.cpp WebUI. | |
| readrba-mcp dominic-behrens/readrba-mcp A local MCP server for public Reserve Bank of Australia data, exposing six read-only tools backed by the R package readrba. | |
| bpmn dominic-bruehwiler/bpmn-mcp-editor Enables AI agents to create, edit, validate, and auto-layout Camunda 7 BPMN diagrams through semantic tools — adding elements, connecting flows, and patching models under revision-checked locks — while changes stay in sync with a shared bro | |
| web-speed-agent dominic-pi-sunyer/web-speed-agent The MCP for the Web Speed Agent SDK that enables post-auth agents. | |
| Web Speed dominic-pi-sunyer/web-speed-mcpb Enables Claude Desktop to access the hosted Web Speed API through MCP, requiring only an API key for setup. | |
| web-speed-oss dominic-pi-sunyer/web-speed-oss Reducing token usage by 70% with a deterministic mapping engine. Also links in with the Web Speed Agent SDK and MCP for post-auth agents. | |
| langfuse-mcp dominic-righthere/langfuse-mcp MCP server for Langfuse that lets Claude Code create projects, manage API keys, and query traces without touching the web UI. Designed to work with a self-hosted Langfuse v3 stack running locally via Docker Compose. | |
| roku-debug-mcp dominick253/roku-debug-mcp Provides AI agents with Roku BrightScript debugging tools, including log reading, scene graph inspection, breakpoint management, variable inspection, and execution control. | |
| violet-fhir dominickadlich/violet-fhir Exposes a FHIR endpoint as deterministic read-only tools, providing a context layer for retrieving clinical data from FHIR servers. | |
| agentKimi dominiclynchwoodlands-ui/agentkimi MCP server that runs Kimi K2.7-code as an autonomous coding agent inside a bubblewrap-sandboxed git worktree, returning git diffs of changes for review. | |
| LLM Panel dominiclynchwoodlands-ui/llm-panel A small MCP server that lets Claude (or any MCP client) ask other models what they think. | |
| carddav-mcp dominik1001/carddav-mcp A CardDAV MCP server that exposes contacts and address books as tools for AI assistants. | |
| imap-mcp dominik1001/imap-mcp An MCP server that exposes IMAP operations as tools for AI assistants, enabling them to connect to IMAP-compatible email servers. It currently allows users to create email drafts directly in their mail server's drafts folder using natural l | |
| savage_mcp dominikduda/savage_mcp Lets MCP-compatible AI clients open whitelisted URLs in Chrome through Savage Scraper, reusing a dedicated tab and returning simplified page HTML. | |
| mcp-plugin-gateway dominikocsofszki/mcp-plugin-gateway Enables users to discover installed FastMCP plugins, mount them on an aggregate MCP server, and generate a matching command-line interface from the same tool schemas. | |
| mcp-for-metabase dominikpollok/mcp-for-metabase A safety-gated Python MCP server for Metabase that lets MCP clients and agents inspect Metabase, run governed queries, and create or maintain dashboards, cards/questions, collections, snippets, permissions, and other Metabase assets through | |
| clinic-mcp dominikstefanski/clinic-mcp A reference MCP server for clinic scheduling and intake, demonstrating production patterns like tenant isolation, idempotent writes, and structured errors using synthetic data. | |
| spec-builder-mcp dominique-boerner/spec-builder-mcp An MCP server that helps AI assistants plan and document software features using a structured Software Design Document (SDD) approach, storing documents locally under .docs/features/. | |
| Screenshot Website Fast dominique110/mcp-screenshot-website-fast Enables capturing fresh webpage screenshots and screencasts through MCP, including full-page tiling into 1072x1072 chunks for AI vision processing, element-specific captures, and saving as PNG or animated WebP files. | |
| Glance dominique45694/glance An MCP server that gives Claude Code a real browser, letting it navigate pages, click and type, capture inline screenshots, and read accessibility snapshots. It also runs multi-step JSON test scenarios with assertions, visual regression com | |
| Vectorize MCP Server dominique726/vectorize-mcp-server This server enables vector search and document retrieval, text extraction and chunking into Markdown, and private deep research from configured pipelines. | |
| Indian Stock Market MCP Server dominiquefernandes146/nse-bse-indian-stock-market-data-mcp Gives AI assistants live, structured NSE and BSE market data across 8,200+ listed Indian stocks through 55 tools covering quotes, financials, a 326-ratio screener, technical indicators, FII/DII flows, option chains and IV, filings, IPOs and | |
| FRED MCP Server dominiqueh558/fred-mcp-server Enables users to browse, search, and retrieve over 800,000 economic time series, including GDP, unemployment, inflation, and interest rates, with transformations, date ranges, and pagination. | |
| Email MCP Server dominiquejang/email-mcp Enables AI assistants to read, search, send, reply, forward, schedule, organize, and analyze email across multiple IMAP/SMTP accounts, with drafts, provider-aware labels, real-time inbox watching, verification-code capture, and calendar ext | |
| Basecamp MCP Server dominiquekilic2370/basecamp-mcp-server Enables MCP-capable clients such as Codex, Cursor, and Claude Desktop to read and manage Basecamp 3 projects, todos, message boards, campfires, card tables, inbox forwards, documents, uploads, comments, events, webhooks, and search through |
45,401–45,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.