Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| HeroUI MCP Server dreamguxiang/heroui-mcp-cloudflare Provides AI assistants with access to HeroUI component library documentation, enabling them to list components, retrieve detailed API references, and explore customization options for building React applications. | |
| swagger-openapi-mcp dreamhuan/swagger-openapi-mcp Enables AI to scan and query local OpenAPI/Swagger documentation, listing API groups and endpoints, and generating TypeScript type definitions for specific endpoints. | |
| Datadog MCP Server dreamiurg/datadog-mcp A comprehensive read-only MCP server for Datadog, providing 117 tools to query logs, APM, metrics, monitors, dashboards, SLOs, and more, with zero write capabilities for safe AI integration. | |
| Mountaineers MCP Server dreamiurg/mountaineers-mcp Enables AI assistants to search and browse mountaineers.org for activities, courses, trip reports, and routes, and optionally access authenticated user data such as upcoming activities, badges, and member profiles. | |
| tilda-edit-mcp dreamkeeper/tilda-edit-mcp Enables reading and editing Tilda pages, including blocks, rows, visibility, and publishing drafts, authenticated via a local Firefox session without any API key or token. | |
| mcp-dreamlaunchers-in dreamlaunchersin/web-dream DREAM LAUNCHERS INTERIORS PRIVATE LIMITED | |
| agda-mcp dreamlinuxer/agda-mcp MCP server for Agda, providing type checking, go-to-definition, case splitting, auto proof search, and more directly from Claude Code or any MCP client. | |
| Graphiti MCP Server dreamnear/graphiti-mcp A framework for building and querying temporally-aware knowledge graphs that allows AI assistants to interact with graph capabilities through the Model Context Protocol. | |
| UIPin MCP Server dreamnight16/bugshot Run at http://127.0.0.1:3846 to provide AI tools (Claude Code, Cursor, etc.) with live UI annotations, screenshots, and structured context via JSON-RPC + SSE. | |
| DiskWise dreamofxm/diskwise Read-only disk analysis and reversible cleanup for macOS 13 and later. Scans the Mac and shows what is actually taking space, then moves only the items you approve to the Trash — no rm -rf, and every operation is undoable. | |
| code-explainer dreamperday/codex-code-explainer Enables users to read code with selection-based floating explanations, file-purpose summaries, interactive code mind maps, and source navigation, available as an independent web app or Codex plugin. It supports local-only reading workflows, | |
| ComfyPilot dreamrec/comfypilot An MCP server that bridges AI agents with ComfyUI for automated workflow building, execution, monitoring, and output routing. | |
| TDPilot dreamrec/tdpilot An MCP server for TouchDesigner that lets AI agents inspect, build, wire, optimize, and stabilize live TD networks with 106 tools, plus a technique memory system for reusable patterns. | |
| MOEX1-mcp dreamscurator/moex1-mcp Enables access to Moscow Exchange market data, including quotes, order books, candles, trades, and trading calendar, through ISS+ WebSocket and ISS REST APIs. | |
| MCP App Proxyfier dreamshaded/mcp-apps-data-proxyfier MCP server delivering interactive MCP Apps UI for Megamarket shopping, enabling search, product details, cart, and checkout through native interfaces within the chat. | |
| Dreamshot MCP Server dreamshot-io/mcp-server Enables AI image and video generation using Dreamshot's API, supporting tools like image editing, video creation, and enhancement directly from MCP-compatible clients. | |
| vision-mcp dreamskyali2026-boop/vision_mcp Enables text-only AI agents to delegate image understanding and OCR to OpenAI-compatible vision models via a see tool that accepts local paths or URLs. Supports automatic failover across multiple configured endpoints and guards against cred | |
| browseros-mcp dreamsxin/browser-control-mcp Standalone browser automation MCP server supporting both BrowserOS and standard Chrome. Enables 16 MCP tools for browser control including navigation, interaction, and content extraction. | |
| TypeScript MCP Server Boilerplate dreamwithrua/mcp-setting-all-server A boilerplate project for quickly developing Model Context Protocol (MCP) servers using TypeScript SDK, with examples of tools (calculator, greeting) and resources (server info). | |
| CableSizeCalculatorMCP drefetr/asnzscablesizecalculatormcp Enables offline AC cable sizing and verification by evaluating current capacity, voltage drop, derating, earth-fault loop impedance, and short-circuit thermal withstand against bundled or operator-supplied reference data. It also produces c | |
| publicsofttools-mcp drejazahmed/publicsofttools-mcp 14 utility tools via the PublicSoftTools API: QR code generation, PDF compress/merge/split/convert/unlock, cryptographic hashing (MD5/SHA-1/SHA-256/SHA-512), UUID generation, base64 encode/decode, secure password generation, IP geolocation, | |
| CAiD MCP Server dreliq9/caid-mcp Enables AI agents to perform validated 3D CAD modeling using CAiD and OpenCASCADE, with tools for creating, modifying, querying, and exporting 3D shapes. | |
| R2-D2 dreliq9/r2-d2 An MCP server for Star Wars Unlimited that provides card search, deck building, format validation, meta analysis, and two-player game simulation through Claude or any MCP-compatible client. | |
| lark-mcp dremaker/lark-mcp Enables AI assistants to interact with Feishu/Lark Open Platform APIs for tasks like document processing, chat management, and calendar scheduling. | |
| Dremio MCP Server dremio/dremio-mcp Enables LLMs to interact with Dremio data platforms for querying, analyzing data patterns, and exploring metadata through natural language, with support for both local and production Kubernetes deployments. | |
| memory-garden drephantom/memory-garden Enables read-only cognitive retrospect over Obsidian notes, surfacing stance changes, verifying claims with citable evidence, and avoiding unfounded causal stories via hybrid retrieval and eight read-only MCP tools. | |
| wq-brain-mcp-server drephantom/wq-brain-mcp-server Enables LLM agents to safely perform WorldQuant BRAIN research tasks such as account status checks, dataset/field/operator discovery, recent alpha retrieval, candidate writing, and guarded multi-simulation runs, while deliberately excluding | |
| GoWA MCP Server dresar/gowanew Enables AI agents and tools to send and manage WhatsApp messages, media, statuses, and scheduled sends across multiple linked devices. | |
| qwispr dressedinblack5/qwispr Enables MCP clients to analyze call graphs, run Grover-ranked code searches, generate boundary test cases, get refactoring suggestions, and inspect quantum backends through stdio JSON-RPC tools. | |
| mdisbetter MCP server dresseurmonster2-oss/mdisbetter-mcp Enables agents to convert local files across 162 input formats and 3649 proven conversions, using two tools to list supported formats and convert files with clear error reporting. | |
| crypto_mcp dresspd/crypto_mcp Provides cryptocurrency market data (prices, symbols) and a gated demo trading flow via MCP tools, with safety defaults like dry-run and confirmation gates. | |
| NetOps MCP Server drew-1618/netops-mcp Enables LLM clients to run structured, bottom-up network diagnostics across OSI Layers 1–3, including Wi-Fi telemetry, ping checks, and runbook-based remediation. | |
| Buildkite MCP Server drew-goddyn/buildkite-mcp Enables interaction with Buildkite CI/CD to list organizations, pipelines, builds, jobs, and logs, as well as retry jobs. | |
| Revenue Intelligence MCP Server drew6050/revenue-intel-mcp Provides ML-powered revenue intelligence for sales and customer success teams, enabling lead scoring, churn risk detection, and conversion predictions with explainable feature attribution and production monitoring capabilities. | |
| MCP-data-inclusion drewano/france-gpt MCP server that exposes French public APIs (Data Inclusion, Légifrance, La Bonne Alternance) as tools for LLMs, enabling social, legal, and employment assistance. | |
| Noverload MCP Server drewautomates/noverload-mcp Connects your Noverload saved content library to AI assistants, enabling search, access, and management of saved YouTube videos, articles, PDFs, and other content. Features advanced search modes, action item tracking, and goals management t | |
| GSC MCP Server drewbeechler/gsc-mcp-server A Model Context Protocol server that provides read-only access to Google Search Console data, enabling natural language queries about SEO performance, rankings, and indexing status. | |
| NetDocuments MCP Server drewbloom/nd-mcp-test Enables users to search and fetch NetDocuments files through OAuth authentication. Binary files are automatically converted to plaintext for AI model consumption. | |
| astro-mcp drewcyber/astro-mcp High-precision astrology tools for LLM agents, including natal charts, transits, progressions, synastry, and more, backed by Swiss Ephemeris. | |
| Recast MCP drewdawson2027/recast-mcp Enables AI assistants to fetch clean text from any URL and repurpose it into platform-ready social media content for LinkedIn, Twitter, Reddit, and newsletters. It provides specialized tools for content extraction and structured prompt temp | |
| HG GTM Tools MCP drewgilbert-lab/mcp-connections Enables HG Insights GTM teams to draft and manage outreach, research accounts, look up customer support data, and access CRM, Pylon, Jira, Weflow, and knowledge base tools through Claude Desktop. | |
| Devpipe MCP Server drewkhoury/devpipe-mcp Enables AI assistants to interact with devpipe, a local pipeline runner, allowing them to list tasks, run pipelines, validate configurations, debug failures, analyze security findings, and generate CI/CD configs through natural language. | |
| AI Cloud Memory drewmauldin/ai-cloud-memory Enables AI clients to access a shared, authenticated memory and project management system with durable storage, task tracking, roadmaps, and semantic search, deployed on Cloudflare. | |
| coras-mcp drewnja/coras-mcp Enables creating CORAS risk and threat diagrams from natural-language descriptions, producing .dgx files that the SINTEF Threat Modelling Tool opens natively, including layout, validation, and rendering. | |
| Firewalla MCP Server drewrad8/mcps Enables interaction with Firewalla network security devices for network monitoring, device management, traffic analysis, and security rule configuration through MCP tools. | |
| PruneTool MCP Server drewraw/prunetool-mcp-terminal--cli Enables AI agents to access a codebase context, select relevant files, and route queries to the appropriate AI model based on complexity, all through an MCP interface. | |
| dtrack-mcp drewrukin/dtrack-mcp MCP server that connects Claude to Dependency-Track for natural language vulnerability triage, analysis, and management. | |
| llm-code-security-review-mcp drewrukin/llm-code-security-review-mcp MCP server that guides LLM security reviews step-by-step, tracking progress and ensuring all assigned source code is read before completing each plan step. | |
| ruff-mcp-server drewsonne/ruff-mcp-server An MCP server that integrates Ruff linting, formatting, and code analysis tools with advanced logging and configuration options for AI coding assistants. | |
| findymail-mcp drewster93/findymail-mcp Wraps the Findymail API to enable email finding, verification, and enrichment through natural language, including contact management and company search. |
45,951–46,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.