Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| GPT Agent duclucky/gpt-agent Enables ChatGPT on Windows to securely access codebases, Git, terminals, language servers, debuggers, SQLite, local HTTP services, adaptive project memory, engineering skills, checkpoints, audit logs, and sandboxed command execution through | |
| powerbi-agent ducnguyen221/agent-data-studio MCP server enabling AI agents to directly query and manage Power BI datasets, reports, and workspaces via DAX, with built-in data security policies and support for both Power BI Desktop and Service. | |
| ollama-vision-mcp ducnm9/ollama-vision-mcp MCP server enabling LLM clients without vision capability to process images by delegating to local Ollama vision models. Supports describing images, OCR, asking questions, and processing clipboard images. | |
| Support Workflow Lab ducnmm/support-workflow-lab A local stdio MCP server that brings scattered tickets, transactions, and current policies together so a model can retrieve evidence, assess cases, and prepare reply and escalation drafts. All writes stay local and pending human review, wit | |
| Swiss Ephemeris MCP Server ducrouxolivier/swiss-ephemeris-mcp-server Provides astronomical calculations using the Swiss Ephemeris library, including planetary positions, houses, chart points, and asteroids for any date and location. | |
| Ducseo MCP ducseo777/ducseo-mcp Enables AI tools to manage a Ducseo website via its Agent API, including writing product copy, creating categories and pages, translating content, uploading media, updating SEO, and publishing drafts subject to API key permissions. | |
| local-web ductai199x/local-web-mcp Enables agents to perform local metasearch, scholarly and code/model lookups, and fetch rendered web pages or PDFs as paginated markdown, including stealth browsing and arXiv paper overviews. | |
| EOL MCP Server ducthinh993/mcp-server-endoflife Enables AI assistants to check software end-of-life dates and support status using the endoflife.date API, providing accurate information on software lifecycle, security status, and upgrade recommendations in real-time. | |
| mcp-kubernetes-server ductnn/mcp-kubernetes-server A lightweight MCP server that enables natural language interaction with Kubernetes clusters, allowing management of pods, deployments, namespaces, and cluster resources through conversational queries or API endpoints. | |
| MQL5 EA MCP Server ductri-dev/mql5-ea-mcp A local MCP server for querying MQL5 documentation, including reference, algo book, and neural networks book, with tools for search, smart query, error diagnosis, and browsing. | |
| work-tracker dud0880/work_tracker_mcp Automatically tracks AI-assisted work sessions, code changes, and commands in Claude Code or Codex CLI, and provides daily stats, weekly reports, and data export through MCP tools. | |
| HouseCheck dud8/housecheck Enables determining whether a specific product unit is affected by FDA/CPSC recalls by evaluating the unit's lot, date, and other codes against frozen recall notices, returning affected, not affected, or needed-code questions. | |
| latchkey dud8/latchkey Enables monitoring Ring camera events to learn routines and alert when an expected motion event does not occur, with support for offline fixture data. | |
| DC-COCO-MCP dudachun/dc-coco-mcp Enables AI clients to control Cocos Creator editor projects, scenes, nodes, components, assets, Prefabs, building, and diagnostics via the MCP protocol. | |
| git-finder-mcp dudckd6744/git-finder-mcp Enables natural language code search across multiple local Git repositories, allowing users to register projects, search for code, and explore file structures through Claude. | |
| episodekeep dude4511984/episodekeep Enables an AI to maintain persistent campaign and character memory across episodes and quests, including recaps, character-scoped secrets, quests, promises, and episode summaries, using a local story database. | |
| flipper-mcp-bridge dudebot/flipper-mcp-bridge An MCP server that exposes a USB-connected Flipper Zero device as tools for controlling infrared devices. It enables listing, parsing, and transmitting IR signals from saved files and built-in universal remotes. | |
| Google Sheets MCP Server dudegladiator/spreadsheet-mcp Enables to read, write, format cells, create charts, use formulas, and manage Google Sheets spreadsheets directly from Claude, Cursor, or any MCP-compatible client. | |
| Samsung Stremio Spotify MCP dudibuilds/samsung-stremio-spotify-mcp A personal viewing assistant for Samsung TV that integrates Stremio, Spotify, and optional Trakt, allowing natural language control to find, queue, and play episodes, manage playback, and control TV and Spotify. | |
| Dudoxx EverArt MCP Server dudoxx/ddx-everart-mcp Advanced EverArt Model Context Protocol server enabling text-to-image and image-to-image generation with custom resolution, format, and model selection. Supports web integration and local storage for seamless AI image creation workflows. | |
| ddx-term-mcp dudoxx/dudoxx-ai-terminal Enables AI agents to execute commands in a shared tmux session that is simultaneously visible to a human via a web-based terminal UI. | |
| Goreudam MCP Server dudqks0319-cpu/goreudam Enables MCP clients to list and compare saved Naver shopping products, update personal notes with revision checks, and retrieve saved product images, all through a local SQLite database without a cloud backend. | |
| Accessibility MCP Server duds/accessibility-mcp Provides comprehensive accessibility auditing tools for websites using axe-core, Lighthouse CLI, and WAVE API. Returns deterministic, WCAG-mapped results with selectors and DOM context for remediation. | |
| WAHA MCP Server dudu1111685/hermes_mcps Bridges the WhatsApp HTTP API with AI assistants to enable full control over messaging, chat management, and interactive workflows through 63 specialized tools. It allows users to automate WhatsApp tasks and receive real-time AI feedback di | |
| Telegram MCP Agent dudu1111685/telegram-mcp Enables AI assistants to operate as remote workers through Telegram, creating an interactive loop where the AI can receive commands, execute tasks, and report back continuously via a Telegram bot and group chat. | |
| p4-history dudujuju828/p4-history-mcp Enables AI agents to checkpoint, diff, search, branch, merge, and restore intermediate states of pending Perforce changelists without submitting them. Each snapshot is stored as a local Git commit outside the Perforce workspace, so agents c | |
| slack-mcp-server dudztroyer/slack-mcp-server Enables AI assistants to interact with Slack workspaces, including listing channels, posting messages, replying to threads, adding reactions, and retrieving user information. | |
| ubuntu-insights duelist2021jp/mcp-ubuntu-insights Provides Ubuntu system information (CPU, memory, disk, network, services, processes) to Bob via natural language queries. | |
| duelon-mcp duelon-gg/duelon-mcp Enables MCP clients to inspect public arena state, feed, leaderboard, rules, and guard charter; register a wallet; and send locally signed persuasion attempts to a defending agent to try to win a USDC pot. Read operations require no key, wh | |
| Orchestration MCP dufangshi/orchestration-mcp A TypeScript MCP server for launching, tracking, and managing external coding-agent runs across local and remote backends like Codex and Claude Code. It allows top-level agents to orchestrate subagents through tools for spawning tasks, poll | |
| injectscan duffey234/injectscan MCP server that scores text, web pages and MCP tool definitions for prompt injection and tool poisoning. | |
| PkgGuard duffey234/pkgguard Enables AI coding agents to scan dependency manifests or package lists against OSV.dev for known vulnerabilities and confirmed-malicious packages, returning severity, CVSS and fixed versions while keeping manifests local. Runs as a hosted o | |
| webread duffey234/webread MCP server that turns any public web page into clean Markdown, respecting robots.txt. | |
| youraitools duffey234/youraitools PayGuard MCP server (stdio) with payment-safety tools for AI agents. | |
| py-unifi-mcp duganth/py-unifi-mcp Enables local UniFi Network inspection and management through MCP, providing typed read-only inventory of sites, devices, clients, and networks, with preview-first, explicitly confirmed device rename and LED locate operations. | |
| py-ynab-mcp duganth/py-ynab-mcp A Model Context Protocol server for YNAB (You Need A Budget). Enables users to query budgets, accounts, categories, transactions, and more, as well as create, update, and delete transactions and manage scheduled transactions from any MCP cl | |
| Video Intelligence MCP dugbotek/video-intelligence-mcp Enables AI clients like Codex, Claude Code, and Kimi Code to analyze public video URLs by downloading media, uploading it to Gemini, and returning timestamped production breakdowns covering shots, visual design, animation, motion, narration | |
| codeskeleton dugd/codeskeleton Enables AI agents to efficiently read Python code by first providing file skeletons then fetching only needed implementations, reducing noise and cost. | |
| Canvas MCP duggsha/canvas-mcp Enables MCP-compatible assistants to read Canvas course information—including courses, assignments, syllabi, modules, pages, and announcements—through a local read-only server. | |
| duggai-messages duggsha/whatsapp-mcp Local-first WhatsApp and iMessage memory for AI coding agents. It provides MCP tools to search messages, get recent context, summarize relationships, draft replies, and view unreplied threads. | |
| ms_fabric_mcp duggurd/ms_fabric_mcp Enables LLMs to query and explore schemas in Microsoft Fabric lakehouses, warehouses, and SQL databases using natural language, with tools for executing read-only SQL queries and searching tables, columns, and query patterns. | |
| Patent Research MCP dugonzal/patent-research-mcp An MCP server for patent research and enterprise architecture pattern extraction. | |
| Scout duguobao812718-wq/scout Enables AI agents to perform comprehensive search across 27 search engines including web, academic, code, community, package managers, video, images, podcasts, and maps, with multi-modal support, caching, and security features. | |
| huly-mcp dugynoo/huly-mcp Complete MCP server for Huly project management with 209 tools across 23 categories — issues, projects, tasks, comments, documents, cards, channels, calendar, time tracking, test management, processes, custom fields, attachments, leads and | |
| tushare-mcp-http duhanjun/tushare-mcp A MCP server that provides HTTP-based access to Tushare financial data, enabling AI assistants to query stocks, indices, funds, and more. | |
| xcsc-tushare-mcp duhanjun/xcsc-tushare-mcp A FastMCP-based MCP server that provides AI assistants with access to XCSC Tushare financial data APIs, supporting stdio and HTTP transport for stocks, indices, funds, and more. | |
| Gradescop duhaolei43-source/gradescope-mcp Enables students to locally archive and read their own course assignments, deadlines, original and graded PDFs, rubric feedback, comments, and submission history through a read-only MCP connection. Supports course and assignment summaries, | |
| Instagram MCP Server duhlink/instagram-server-next-mcp A server that allows fetching Instagram posts using Chrome's existing login session via Model Context Protocol (MCP). | |
| Volterra Knowledge Engine duhman/volterra-knowledge-engine A read-only Model Context Protocol server that exposes a semantic knowledge base to AI agents via 27 tools. It enables querying of documents and data integrated from sources like Notion, SharePoint, HubSpot, and Slack. | |
| qcc-mcp-legal-oauth duhu2000/qcc-mcp-legal-oauth Enables one-click OAuth authorization to access Qichacha legal data (regulations and judicial cases) via MCP within DeepSeek Harness, with automatic token refresh and dynamic server mounting. |
46,301–46,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.