Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Mercury MCP dragonkhoi/mercury-mcp Simple MCP server that interfaces with the Mercury API, allowing you to talk to your Mercury banking data from any MCP client like Cursor or Claude Desktop. | |
| mixpanel dragonkhoi/mixpanel-mcp Connect to your Mixpanel data. Query events, retention, and funnel data from Mixpanel analytics. | |
| Ramp MCP dragonkhoi/ramp-mcp An MCP server that connects to the Ramp API, allowing users to interact with their Ramp financial data through natural language using MCP clients like Cursor or Claude Desktop. | |
| biocanvas dragonkillerlaw/biocanvas-studio A local stdio server that lets AI agents search 59 bundled scientific illustration assets, create and edit figure projects through validated, revision-checked operation batches, and export editable SVG, draw.io, or .biocanvas files with att | |
| MCP-Undetected-Chromedriver dragons96/mcp-undetected-chromedriver An MCP service that automates Chrome browser control while bypassing anti-bot detection mechanisms, enabling web scraping, testing and automation on sites with sophisticated bot protection. | |
| AtlasForge-WebProxy dragonshadows1978/atlasforge-webproxy Enables AI agents to search the web, fetch pages, and download images through a self-hosted proxy with Brave search, caching, and SSRF protection. | |
| grok-mcp dragonshock/cli-agent-mcp MCP server that exposes grok-ask and grok-workflow tools, enabling Claude Code to delegate to Grok for consult/worker tasks and run adversarial multi-agent workflow panels. | |
| Alloy MCP dragonworx/alloy-mcp Bonds AI agents to your existing Chrome profile with 73 tools for tabs, DOM, input, screenshots, network, and more, leveraging live sessions and extensions for authenticated, no-setup browser automation. | |
| conductor-figma dragoon0x/conductor A design-intelligent MCP server for Figma with 201 tools across 17 categories, featuring built-in design rules like 8px grid, type scales, semantic colors, accessibility checks, and component defaults. | |
| agent-mcp dragosboca/agent-mcp An MCP facade server that aggregates multiple downstream MCP servers and exposes them as high-level tools, using autonomous agents to handle natural-language instructions and complex multi-step operations. | |
| booking-mcp-app dragoscocs/booking-mcp-app Exposes court-availability data as a read-only panel rendered in MCP hosts (Claude Desktop, VS Code, test host) via a UI resource. | |
| axiom dragoscv/axiom Enables coding agents to compile change plans into canonical, content-addressed manifests, run whole-set checks, and apply writes through a hash-gated two-phase commit with rollback and optional attestation. | |
| Amiqus MCP server dragosh29/amiqus-mcp Enables Claude, ChatGPT and other MCP clients to read an Amiqus ID account—clients, onboarding records and steps, check results, templates, case status counts and webhooks—and, when writes are enabled, create records. | |
| Appointedd MCP Server dragosh29/appointedd-mcp Enables MCP clients to search availability, read services, resources, bookings and customers, and, when writes are enabled, reserve slots, create or cancel bookings, and add or update customers. | |
| AppyWay MCP server dragosh29/appyway-mcp Enables MCP clients to query the AppyWay API for UK kerbside parking rules and prices, on-street bays, lines and car parks, controlled zones, local authorities and reference data. All lookups are read-only, covering parking quotes for a tim | |
| Bookwhen MCP server dragosh29/bookwhen-mcp Lets Claude, ChatGPT and other MCP clients read a Bookwhen account's public booking data, including events (classes, courses, workshops), ticket types with availability and cost, locations, class passes, leaders and attachments. It is read- | |
| Breww MCP server dragosh29/breww-mcp Lets MCP clients read a brewery's products, stock levels, production batches, trade customers, orders/invoices and deliveries, and — when writes are enabled — create draft sales orders. It defaults to read-only, redacts contact details and | |
| Carebit MCP server dragosh29/carebit-mcp Enables Claude, ChatGPT and other MCP clients to read practice-management data including organization, clinicians, diaries, availability, bookings, patients, invoices, payments, staff tasks, services, and locations, and optionally create st | |
| Citizen Space MCP server dragosh29/citizenspace-mcp Enables MCP clients to search public Citizen Space consultations and, with a Data API key, read activities, survey structures, responses, users, workspaces, and mailing lists from a Citizen Space site. | |
| Dezrez Rezi MCP server dragosh29/dezrez-mcp It enables MCP clients such as Claude and ChatGPT to read an estate agency's Dezrez Rezi CRM data, including properties and their timelines, people, groups, and offers. It is read-only and applies privacy redactions by default. | |
| Edays MCP server dragosh29/edays-mcp Enables MCP clients to read users, absences, absence types, entitlement balances, rotas, public holidays and groups from an absence management system, and optionally book, update or delete absences. | |
| Engaging Networks MCP server dragosh29/engagingnetworks-mcp Enables MCP clients such as Claude and ChatGPT to browse an Engaging Networks account: campaign pages, supporter records, transaction and recurring-gift history, supporter fields and questions, and marketing automation statistics. When writ | |
| Gecko Engage MCP Server dragosh29/geckoengage-mcp Lets Claude, ChatGPT and other MCP clients read events and their sessions, attendances (bookings), forms, form responses, contacts, labels and campaigns from a Gecko student recruitment CRM, and, when writes are enabled, register a contact | |
| Glasscubes MCP server dragosh29/glasscubes-mcp Lets AI assistants connect securely to a professional-services client portal to review workspaces, outstanding document requests, tasks, file and folder metadata, members, and calendar events, plus optionally create tasks and update their s | |
| JustGo MCP server dragosh29/justgo-mcp Enables Claude, ChatGPT and other MCP clients to look up members, their memberships and credentials, events and event bookings, and clubs and other organisations in a sports membership platform, and, when writes are enabled, to change the d | |
| Line-Up MCP server dragosh29/lineup-mcp Enables MCP clients such as Claude and ChatGPT to read events, performances, seating, packages, visits, transactions, and organisation context from a ticketing channel, and, when writes are enabled, create and release reservations. | |
| NewZapp MCP server dragosh29/newzapp-mcp Enables Claude, ChatGPT and other MCP clients to read NewZapp account details, campaign reports, open heatmaps, contact groups and contact counts, and to search contacts with personal data withheld by default; when writes are enabled, it ca | |
| Pitchup.com MCP server dragosh29/pitchup-mcp Enables MCP clients such as Claude and ChatGPT to read a campsite's supplier account data from the Pitchup.com API — campsites, pitch types, pitches, charge types, prices and stay rules, allocation, extras and arrivals and bookings. When wr | |
| Plannr MCP Server dragosh29/plannr-mcp Enables Claude, ChatGPT and other MCP clients to read a financial adviser's CRM data—clients, households, reviews due, tasks, cases, plans and notes—and, when writes are enabled, create tasks and notes. | |
| sheepCRM MCP Server dragosh29/sheepcrm-mcp Enables Claude, ChatGPT and other MCP clients to search a membership database's people and organisations, read a contact's summary and membership history, list events with ticket types and attendance lists, read invoices, and find and count | |
| Signable MCP server dragosh29/signable-mcp Lets Claude, ChatGPT and other MCP clients read envelopes, templates, contacts and users from a Signable e-signature account, and optionally send, remind, cancel and expire envelopes. | |
| SmartSurvey MCP server dragosh29/smartsurvey-mcp Lets Claude, ChatGPT and other MCP clients read a SmartSurvey account's surveys, survey designs, responses, exports and folders, and — when writes are enabled — open or close a survey or send an existing invitation to one named recipient. I | |
| Spoke Dispatch MCP server dragosh29/spoke-mcp Lets MCP clients read a delivery route planning and driver dispatch team's plans, stops, routes, drivers, depots, and optimization operations, and when writes are enabled, create plans, import stops, optimize routes, and distribute them. | |
| StaffSavvy MCP Server dragosh29/staffsavvy-mcp Lets MCP clients such as Claude and ChatGPT read a rota and time-and-attendance account, exposing venues, groups, shifts, absences and absence types, time entries, venue events and staff names through read-only tools that never return pay d | |
| Stampede MCP server dragosh29/stampede-mcp Lets MCP clients such as Claude and ChatGPT read a hospitality guest CRM: the venues in an organisation, guest profiles with their tags and orders, deals, and which guest owns a Wi-Fi device. When writes are explicitly enabled it can also a | |
| Swiftaid MCP server dragosh29/swiftaid-mcp Lets MCP clients work with the Swiftaid Gift Aid API from a donation platform's side: checking API health and credentials, a charity's on-boarding status and Gift Aid claims, a donor's authorisation, and the declaration behind a donation. W | |
| TicketSource MCP server dragosh29/ticketsource-mcp Enables MCP clients like Claude and ChatGPT to query and manage TicketSource box office data, including events, performances, bookings, customers, and seats, through natural language. | |
| Timesheet Portal MCP server dragosh29/timesheetportal-mcp Enables MCP clients such as Claude and ChatGPT to read a Timesheet Portal account, including timesheet time and cost reports, invoices, leave bookings and balances, projects or jobs, clients, users and cost centres, across both the Standard | |
| WorkMobile MCP server dragosh29/workmobile-mcp Lets MCP clients such as Claude and ChatGPT read a WorkMobile account's jobs, job types, forms, submitted form records, approvals and mobile users, and, when writes are enabled, create and allocate jobs and approve or reject records. | |
| addTaskManager MCP Server dragosroua/addtaskmanager-mcp-server Integrates with the addTaskManager iOS/macOS app to manage tasks, projects, and ideas through the ADD (Assess-Decide-Do) framework. Enforces realm-based restrictions where users can create/edit content in Assess, assign contexts/dates in De | |
| Amazon MCP Server drahmad89/amazon-mcp Enables interaction with Amazon services through AI assistants, allowing users to search products, manage their cart, view order history, and place orders using natural language. | |
| python-runner drahoxx/python-mcp Execute Python code via subprocess with timeout and error handling, returning stdout, stderr, and exit code. | |
| ai-to-agent-jev-mcp draiagent/ai-to-agent-jev-mcp Enables Claude Code agents to perform structured decision-making through TypeSafe Jev, supporting yes/no checks, route selection, scoring, and batched multi-question judgments with confidence values. | |
| funasr-zh-tw-mcp draiagent/funasr-zh-tw-mcp Provides on-device Chinese speech recognition with traditional Chinese (Taiwan) output via MCP server, HTTP API, and CLI, ensuring privacy by processing audio locally without uploading to cloud services. | |
| Common Database MCP Server drainney-jrt/jdbc-mcp-server Enables safe exploration and querying of multiple databases (PostgreSQL, MySQL, SQLite, DB2) with read-only defaults, connection pooling, and parameterized queries for SQL injection prevention. | |
| telegram-mcp draiqw/telegram-mcp Provides full access to a personal Telegram account via MTProto, enabling MCP clients to read chats, send messages, manage media, and more. | |
| tg-mcp draiqw/tg-mcp An MCP server that gives AI agents full access to a personal Telegram account via MTProto, enabling chat reading, history search, messaging, media handling, and automations. | |
| smart-figma-mcp drake-yuan/smart-figma-mcp Enables mapping Figma designs to a project's own component library — shadcn/ui, antd, mui, or Astryx — by resolving variants against authoritative component contracts instead of guessing. It compiles Figma nodes into code and then determini | |
| memory-mcp drakejin/memory-mcp Manages an agent's long-term memories as versioned markdown files with searchable SQLite indexes, supporting lifecycle states, conflict-gated recall, revision, and explicit forgetting without automatic deletion. | |
| MCP Server Demo drakoxw/mcp-server A Model Context Protocol server implementation that can be run directly or through Docker, enabling AI assistants to interact with external systems through the MCP standard. |
45,851–45,900 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.