Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Securities Analysis druce/mcp A Python-based FastMCP server that provides financial tools for securities analysis, including market data, news, fundamental/technical analysis, and visualization capabilities that can be consumed by any MCP-aware client. | |
| Document360 MCP Server druellan/document360-mcp Enables access to Document360 knowledge base content through simple GET operations. Allows searching, browsing categories, and reading articles from Document360 projects using natural language. | |
| Fathom-Simple-MCP druellan/fathom-simple-mcp A Model Context Protocol (MCP) server for accessing Fathom AI API endpoints (meetings, recordings, transcripts, summaries, teams, team members) via GET operations. | |
| LLMDotfiles MCP Server druellan/llmdotfiles-mcp A Model Context Protocol server that scans and exposes AI-related dotfiles and configuration files to LLM agents, helping them understand project context and guidelines. | |
| llms-mcp druellan/llms-mcp An MCP server that exposes the llms.txt file and its referenced local or external resources from a project root to provide context for AI models. It automatically parses documentation links and URLs to make them accessible as additional MCP | |
| Productive Simple MCP druellan/productive-simple-mcp A Model Context Protocol (MCP) server for accessing Productive.io API endpoints (projects, tasks, comments, todos), tailored for read-only operations, providing streamlined access to essential data while minimizing token consumption | |
| king-soopers-mcp druhayes/king-soopers-mcp Enables LLM clients to find King Soopers stores, search products with live store pricing, build a shopping list, and push it to your King Soopers cart via the Kroger Developer API. It maintains a local shadow cart for review before syncing, | |
| Druling MCP Server druling/mcp-server A platform for building and managing MCP servers and REST APIs, enabling AI integrations with services like Gmail and Google Drive. | |
| drumfire-proxmox-mcp drumfire01/drumfire-proxmox-mcp Enables managing a Proxmox cluster through natural language chat, including VM/container inventory, power control, configuration changes, cloning, snapshots, network/firewall visibility, and running commands or writing files inside guests. | |
| firefly-iii-mcp drumfire01/firefly-iii-mcp Deploy a Firefly III MCP server on Cloudflare Workers to let AI assistants interact with your Firefly III personal finance data, including accounts, transactions, budgets, and reports, with configurable tool presets. | |
| drumfire-proxmox-mcp drumfire01/proxmox-mcp Enables Claude to manage a Proxmox cluster through chat: inventory, power control, configuration changes, VM/container creation and cloning, snapshots, network/firewall/cluster visibility, guest command execution, and file writes via the QE | |
| secops-agent-triage drummer475-94/secops-agent-triage Enables AI agents to perform security alert triage by ingesting raw logs, extracting IOCs, querying threat intelligence sources, and generating structured NIST/MITRE assessments with reasoning traces. | |
| JobNimbus MCP Server drummouse/jobnimbus-mcp Connects Claude to your JobNimbus account via API, enabling management of contacts, jobs, notes, and other CRM entities through natural language. | |
| Unsplash Smart MCP Server drumnation/unsplash-smart-mcp-server Enables AI agents to search, recommend, and deliver professional stock photos from Unsplash with intelligent context awareness and automatic attribution management. | |
| NetlifyMCPServer drunkonjava/netlifymcpserver A basic example of developing and running serverless Model Context Protocol (MCP) using Netlify Functions, enabling AI agents to interact with your services via a standardized API. | |
| rapid7-docs-mcp drunkrhin0/rapid7-docs-mcp A self-hostable MCP server that enables searching and reading Rapid7 documentation, blog posts, and resources through six tools, with optional authentication and Docker support. | |
| opentoonz-mcp drunktrader/opentoonz_mcp Provides structured, safety-first access to OpenToonz workspaces for inspecting project and scene metadata, validating resources, discovering levels, rendering previews and scenes, and converting levels through native OpenToonz binaries. | |
| Pulsar Edit MCP Server drunnells/pulsar-edit-mcp-server Enables LLMs to interact with and control the Pulsar text editor through a variety of file and text manipulation commands. It allows for tasks like code editing, context retrieval, and project navigation using either a built-in chat panel o | |
| radare2-mcp drvcvt/radare2-mcp Provides 85 tools for binary analysis including static analysis, disassembly, decompilation, ESIL emulation, live debugging, vulnerability scanning, and exploit development through structured JSON responses over the Model Context Protocol. | |
| kaspa-script-mcp drvelvetfog/kaspa-script-mcp Provides MCP tools to disassemble Kaspa scripts, estimate compute costs, explain txscript errors, and look up opcodes. | |
| Discord MCP Server drvova/discord-mcp Enables comprehensive Discord bot management and server operations through MCP, including channel management, message handling, member moderation, role management, and voice operations. Provides secure Discord API integration with built-in | |
| pi-motion-studio drvova/pi-motion-studio MCP server for CSS spring animations, bounce easing, cubic-bezier visualizations, and Motion code search. | |
| FAERS MCP Server drvvek/faers_mcp Enables querying the openFDA drug adverse event database for pharmacovigilance work-ups: case searches, counts and demographic/outcome breakdowns, disproportionality measures (ROR/PRR with Mantel-Haenszel adjustment), and empirical Bayes (M | |
| sierra-mcp-bridge drwatts77/sierra-mcp-bridge Enables MCP clients to read Sierra Chart study outputs, chart discovery, and study metadata/history via read-only tools over Streamable HTTP or stdio. | |
| Questrade MCP Server drwheelicus/questrade-mcp-server Enables querying portfolio data, positions, balances, quotes, price history, orders, and account activity through the Questrade API. | |
| Dev Tools MCP Server drx-1877/dev-tools-mcp A TypeScript MCP server example providing basic developer tools: hello world greeting, arithmetic calculator, and file information retrieval. | |
| figma-mcp-server drx-1877/figma-mcp-tools Enables developers to extract and organize Figma design files, including complete node data (tree structure and images) for AI understanding and code generation. | |
| pentool-mcp-server drxops/pentool-mcp-server A self-contained stdio JSON-RPC 2.0 server that brings AI capabilities to any MCP client, primarily for Pentool, enabling tasks like picking checks, bypassing WAF, and finding non-obvious endpoints. | |
| dryad-rag-mcp dryadai/dryad-rag-mcp Exposes a RAG document-search API as MCP tools (rag_health, rag_ingest, rag_query), enabling agents to index and search markdown documents with cited results through natural language. | |
| windows-desktop drydraft/pi-cu-mcp Enables an agent to discover, observe, and operate visible Windows applications using UI Automation, screenshots, and foreground-validated input control through a local stdio connection. | |
| MS-MCP drye1109/ms-mcp Enables MCP clients to execute Materials Studio modeling and computation tasks via MaterialsScript runtime, with a local Dashboard for monitoring. | |
| MCP Telegram dryeab/mcp-telegram MCP Server for Telegram | |
| Frida MCP Server dryfryce/frida-mcp A comprehensive MCP server that exposes Frida's dynamic instrumentation toolkit to AI agents for process management, script injection, and memory operations. It provides over 50 tools to interact with local and mobile devices, enabling adva | |
| Planner MCP Server drylikov/planner A server for creating and managing plans with steps, enabling users to break down complex tasks into manageable steps and track progress. | |
| line-bot-mcp-server dryrh68kkm-beep/line-bot-win-mcp Enables AI agents to control a LINE Official Account via the Messaging API, including sending text and flex messages, broadcasting, retrieving user profiles and follower IDs, and managing rich menus. | |
| shop drzed-13/test-mcp-db Enables read-only interaction with an online store's SQLite database over MCP stdio, including table listing, schema inspection, safe read-only SQL execution, and sales analytics. It rejects mutating SQL operations to keep data intact. | |
| Curupira drzln/curupira Enables AI assistants to debug frontend applications by providing direct access to browser DevTools, React state, DOM inspection, and runtime debugging capabilities. Bridges the gap between AI and complex web applications for autonomous deb | |
| AI Test Pilot drzymek92/ai-test-pilot An MCP server that generates, runs, and triages tests by introspecting Python modules or web pages, using structured LLM outputs for scenario generation and failure analysis. | |
| DVMCP — Damn Vulnerable MCP ds-ac-poc/pt-clm__damn-vulnerable-mcp-server An intentionally vulnerable MCP server for security training, simulating a fictional company with 28 vulnerable tools and 38 challenges to learn AI agent attack and defense. | |
| MCP Server for NPM Package Info ds-ac-poc/pt-esign__mcp-server-npm-goof Provides a tool to fetch npm package information via MCP. Enables AI agents to retrieve structured package details using the getNpmPackageInfo tool. | |
| mcp-notes-server ds-gordeevjic/mcp-notes-server Enables users to create, retrieve, update, delete, and list notes through an MCP server, with persistent JSON storage and atomic writes. | |
| Complete Google Ads API v21 MCP Server ds-web1/google-ads-mcp-complete Complete Google Ads API v21 MCP server with 40+ fully implemented tools for campaign, ad group, keyword, extension, and portfolio bidding management, enabling AI assistants to create, optimize, and manage Google Ads campaigns through natura | |
| GitHub MCP Server ds231/mcp-server Enables GitHub repository and issue management through the Model Context Protocol, supporting retrieval of repo details, issue listing, creation, and commenting. | |
| dvmcp ds8282/mcp-range Serves as an intentionally vulnerable training target that exposes eight planted MCP vulnerability challenges—tool poisoning, rug pulls, path traversal, SSRF, command injection, missing auth, prompt-injection chains, and secrets exposure—ea | |
| AlphaVantage MCP Server dsaad68/remote-mcp-azure-function Enables AI agents to access financial data and perform analysis by exposing AlphaVantage API endpoints as MCP tools, including company overview, income statement, balance sheet, cash flow, and earnings reports. | |
| DateTime MCP Server dsado88/datetime-mcp A simple MCP server that provides accurate date and time information to Claude models, ensuring they always use the correct current date and time when creating time-sensitive content. | |
| DocuMCP dsado88/documcp A document management system with MCP integration, enabling Claude Desktop to upload, search, and access documents via natural language. | |
| game-dev-resource-mcp dsaewkfiush03-debug/game-dev-resource-mcp License-aware game development resource discovery MCP server. Helps AI coding agents find reusable game assets with commercial-use filtering, license classification, and attribution generation. | |
| Remote MCP Server on Cloudflare dsaf123/mcp-assistant Enables deploying a remote Model Context Protocol (MCP) server on Cloudflare Workers with OAuth authentication, allowing tools to be exposed and called from MCP clients like Claude Desktop. | |
| Confluence MCP Server dsazz/mcp-confluence Enables integration with Atlassian Confluence to browse spaces, search content using CQL, and manage pages directly from MCP-compatible applications. It automatically converts Confluence storage formats into markdown for seamless interactio |
46,101–46,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.