Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Technitium MCP drmogie/technitium-mcp Enables Claude to read and manage a DNS server on the user's own machine through its HTTP API, covering stats, settings, zones, logs, users, ad blocking, cache flushing, and DNS records. Every call carries a safety level, so read actions ru | |
| Termix MCP drmogie/termix-mcp Enables Claude to read and manage a Termix server through its API, including health checks, hosts, credentials, and arbitrary API calls. It requires explicit confirmation for add, change, and delete operations and hides secrets from Claude. | |
| claude-usage drmuzikbpn/usage-deck Enables Claude Code sessions to check account rate-limit headroom, local token spend, and live session status, with read-only MCP tools for limits, summaries, token usage, and session listing. | |
| Unsplash MCP Server drnic/unsplash-mcp-server Enables agents to search and retrieve random Unsplash photos with ready-to-use attribution, and to track downloads, using the caller's own API key over stateless HTTP or local stdio connections. | |
| symbiont drnzy/symbiont-mcp Enables AST-aware code navigation, symbol renaming, dependency graph analysis, and architecture rule enforcement through MCP tools. | |
| BitBooth MCP drock91/bitbooth-docs Multi-chain x402 payment gateway enabling AI agents to pay per HTTP call with real on-chain settlement across 5 mainnet chains, providing 18 paid endpoints for utilities, data, and security. | |
| beyond-mcp drohi-r/beyond-mcp An MCP server for Pangolin BEYOND laser software, providing 117 tools across 20 categories for AI-driven control of laser shows via OSC, including cues, zones, brightness, BPM, and more. | |
| Companion MCP drohi-r/companion-mcp An MCP server for Bitfocus Companion that enables AI assistants to program and control Stream Deck surfaces and other Companion-connected devices. It provides 53 tools for button control, styling, page management, variable handling, and bat | |
| MADRIX MCP drohi-r/madrix-mcp Enables AI-driven control of MADRIX LED lighting software, providing over 100 tools for storage, layer, cue list, timeline, audio, output, and color management via the MADRIX Remote HTTP interface. | |
| MikroTik RouterOS MCP drohi-r/mikrotik-routeros-mcp Enables managing MikroTik RouterOS devices via natural language, with read-heavy network inspection and guarded write access across multiple routers. | |
| a-stock-data-mcp droid-q/a-stock-data-mcp MCP server adapter that exposes A-share stock data tools, prompts, and resources via FastMCP, enabling querying of stocks, K-lines, financials, sectors, and market hot spots through natural language. | |
| Shopify MCP Demo droiddevgeeks/shopify-mcp-demo Enables shopping a live Shopify store from inside ChatGPT or Claude with full catalog, cart, OTP login, saved addresses and payment via Cashfree, all without leaving the conversation. | |
| Bookmark Geni MCP Server droidnext/bookmark_geni_mcp Enables semantic search across browser bookmarks from Chrome, Firefox, Edge, Opera, and other browsers using natural language queries. Extracts and indexes bookmark content and metadata into a vector database for intelligent retrieval. | |
| MCP Documentation Server droidnext/mcp_dev_docs_server A server that provides organized documentation content for various applications using the Model Context Protocol, enabling AI assistants to access quickstart guides and code examples. | |
| DROMA MCP Server droma01/droma_mcp Enables natural language interactions with cancer pharmacogenomics data through the DROMA platform, supporting drug-omics association analysis, dataset management, molecular profile loading, and treatment response analysis across multiple r | |
| servicios-mcp dromerotrans/servicios-mcp Read-only MCP server that exposes SAP Business One Service Layer and Cisco CCWR contract search APIs for querying sales orders, delivery notes, business partners, and service contracts, without modifying data. | |
| Graph-Tools dromologue/graph-tools Provides tools for AI-powered graph analysis, including relationship extraction, adjacency matrix creation, and network centrality calculations. It enables users to perform complex structural analysis and generate interactive D3.js visualiz | |
| LogixDesigner-MCP dronedatasystems/logixdesigner-mcp MCP server wrapping the Rockwell Automation Logix Designer SDK to open ACD files, export to L5K/L5X, read rung logic, and enumerate tags and program structure via typed MCP tools, bridged from Windows to Linux via Cloudflare Tunnel. | |
| jdwp-mcp dronsv/jdwp-mcp Сonnects to live JVMs via JDWP protocol,
enabling LLM agents to autonomously debug Java applications — attach to
a running process, pause threads, set breakpoints (including conditional),
inspect stacks with auto-resolved object fields, eva | |
| Dropbox Dash MCP Server dropbox/mcp-server-dash Exposes Dropbox Dash search and file metadata via STDIO, enabling users to search across company content and fetch detailed file metadata and content. | |
| @dropdat/mcp dropdat/mcp Enables AI clients to search, retrieve, and save capsules in the user's dropdat library. | |
| droplinked MCP Extension droplinked/droplinked-mcp-extension Enables read-only discovery and verification of products across droplinked's KYB-attested merchant network via tools for inventory, merchant, and brand attestation lookups. | |
| gaio dropoutsanta/gaio Enables coding agents to onboard a brand, generate and edit prompts, launch AI-visibility runs across multiple engines in the background, and pull daily reports, trends, gaps and raw answers. It exposes brand positioning metrics such as vis | |
| uni-mcp-gateway dropoutsanta/uni-mcp-gateway A unified MCP gateway that aggregates multiple MCP servers and API plugins behind a single endpoint with authentication, rate limiting, audit logging, REST API bridge, and web dashboard. | |
| jira-helper drormu1/mcp-jira MCP server providing tools to read and write Jira Cloud issues, including a bridge to GitHub commits for tracing issues to code. | |
| PRAETOR-MCP drosadocastro-bit/praetor_mcp_bicameral Provides a local synthetic MCP stdio service for querying maintenance evidence and preparing human-review-gated advisory packets, with deterministic governance, evidence boundary tracing, and Agent K integrity scoring to separate retrieved | |
| mcptube-vision drose276/mcptube Enables MCP clients such as Claude and Copilot to ingest YouTube videos into a persistent, compounding wiki knowledge base by combining transcripts with scene-change vision analysis, then answer natural-language questions by searching the c | |
| Instagram DM MCP server droux083/instagram_dm_mcp Enables sending Instagram direct messages and media, listing and searching chats/messages, downloading shared media, and retrieving user, follower, story, and post information from an Instagram account. | |
| sumo-mcp droyad/sumo-mcp Enables searching Sumo Logic logs using the search_logs tool, with support for query parameters such as time range and maximum results. | |
| DROYD MCP Server droyd-ai/droyd-mcp-server Enables interaction with the DROYD AI trading agent API for cryptocurrency research, project discovery, and market screening. Users can manage watchlists, chat with AI agents, and execute trades directly through MCP-compatible clients. | |
| bsm-mcp drpapaya17/bedrock-server-manager-mcp Enables AI assistants to manage Minecraft Bedrock Dedicated Servers through natural language by automatically binding to an instance's OpenAPI endpoints for lifecycle control, command execution, backups, allowlists, and resource monitoring. | |
| dRPC Agent Skills drpcorg/drpc-agent-skills Blockchain RPC via DRPC. Exposes eth_call, eth_getBalance, gas
estimation, and other JSON-RPC methods as MCP tools across 100+ blockchains | |
| openevidence-tools drpwchen/openevidence-tools Enables clinical question answering via OpenEvidence with citation verification, including tools to ask questions, retrieve results, and follow up, plus an integrated skill to check citations against primary sources. | |
| yuntu-mcp-server drq112112hjx/yuntu-mcp-server Enables LLM chat with routing and failover, balance checking, and model listing via MCP. | |
| MCP Academic Editor drquandary/mcp-academic-editor A sophisticated academic manuscript revision system that provides surgical, line-anchored editing tools through MCP, designed for precise manuscript revisions while maintaining word count and semantic integrity. | |
| Loom Transcript MCP Server drrichardchambers/loom-remote-mcp-server-authless Extracts transcripts, titles, descriptions, and comments from Loom videos. | |
| BlenderMCP drrodingo-del/blender-mcp Connects Blender to Claude AI through the Model Context Protocol, enabling AI-assisted 3D modeling, scene creation, object manipulation, and material control. Supports downloading assets from Poly Haven and generating 3D models through Hype | |
| openhab-semantic-mcp drrsatzteil/openhab-semantic-mcp Enables semantic control and monitoring of openHAB smart home items through natural language, supporting commands, queries, and time-based monitoring tasks. | |
| Webustler drruin/webustler Enables clean, LLM-ready markdown extraction from any URL with automatic anti-bot bypass. | |
| kpi-mcp-spike drrycc0625/kpi-mcp-spike Minimal MCP server that exposes a ping tool for Copilot Studio connectivity testing. | |
| AI Job Application Agent MCP Server drschmerz/ai-job-application-agent Exposes the agent's tools over the Model Context Protocol, enabling LLMs to track applications, generate cover letters, and process emails. | |
| slmn-mcp drscotthawley/slmn Exposes a collection of developer utilities (notebook editing, remote job management, GPU checking, etc.) as MCP tools via a single server. | |
| gpb-mcp drseedon/gpb-mcp Enables AI agents to read threads and feeds, search, post new threads, reply to existing ones, and check their own stats on the API-only Get Posting Board, wrapping the required HTTP calls into ready-to-use MCP tools. | |
| MCP WebSearch drseedon/mcp-websearch An MCP server for Claude Code that provides web search via Perplexity Sonar and image generation through OpenRouter, with cost-aware tool design and budget controls. | |
| SDW_Search drsfm/sdw_search-mcp-server A provider-neutral Web Search MCP server and CLI that combines live search, scholarly discovery, verified PDF downloads, URL normalization, multi-provider ranking, secure page fetching, caching, and citation-ready research evidence. | |
| Task.md Utilities MCP Server drskippy/task.md-utilities Enables AI assistants to manage tasks in a kanban board organized as markdown files, with operations to create, update, delete, move tasks, manage lanes, and get statistics. | |
| copilot-status-mcp drsmile444/copilot-status-mcp MCP server to check GitHub Copilot quota, rate-limit status, and reset times from any MCP client. | |
| Weather MCP Server drsullivan13/weather-server An MCP server with integrated ATXP micropayment functionality that requires USDC payments for each AI tool call execution. | |
| KHU Notebook Research Assistant drtagkim/khunotebooklmmcp An MCP server that interfaces with Google NotebookLM to enable autonomous academic research and systematic knowledge management. It allows users to perform deep web searches and automatically generate study artifacts like research reports, | |
| helius-forensics-mcp drtiibiird/helius-forensics-mcp Enables Solana wallet forensics via MCP, including tracing funds, identifying entities, scoring risk, and comparing wallets using Helius APIs. |
46,051–46,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.