Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| WooCommerce MCP Server duong1139/woocommerce-mcp-server Enables AI assistants to interact with WooCommerce stores through the WordPress REST API. It provides tools for managing products, orders, customers, shipping, taxes, coupons, reports, and store settings. | |
| Train in Silence duong5578/train-in-silence Enables users to describe a fine-tuning workload and receive ranked GPU cloud recommendations based on required VRAM/FLOPs, cost, and runtime across multiple providers. | |
| MCP Proxy Server duong61/mcp-proxy-server Aggregates multiple backend MCP resource servers (Stdio, SSE, and Streamable HTTP) into one unified hub, exposing their combined tools and resources through single SSE, Streamable HTTP, or Stdio endpoints with routing, authentication, and o | |
| lattice-mcp duong88652/matryoshka Enables token-efficient analysis of documents far larger than an LLM's context window by executing type-checked symbolic S-expression commands over server-side, handle-backed results instead of raw text. It also lets agents stash context in | |
| MediaWiki MCP Server duongengstrom253/mediawiki-mcp-server Enables LLM clients to read, search, compare, create, edit, move, protect, and delete wiki pages, manage files, inspect site info and history, and query extension data from NeoWiki, Semantic MediaWiki, Cargo, Bucket, and Wikibase. Supports | |
| MiniMax MCP JS duongfurukawa807/minimax-mcp-js Enables MCP-compatible clients to generate images and videos, synthesize speech, clone voices, and design custom voices through MiniMax APIs. | |
| whoop-ai-mcp duonghunt776/whoop-mcp Enables read-only access to WHOOP recovery, sleep, HRV, strain, workout, and personal health analytics from AI assistants such as Claude, Codex, and GitHub Copilot. Users can ask natural-language questions about trends, baselines, sleep deb | |
| MiniMax-Coding-Plan-MCP duongkose28/minimax-coding-plan-mcp Provides tools for AI-powered web search and image understanding, returning organic search results or analyzing images from URLs or local files based on text prompts. Integrates with MCP clients such as Claude Desktop, Cursor, and Windsurf | |
| Snippy duongkose28/snippy Enables AI assistants to discover and use tools for saving and retrieving code snippets, semantic code search, generating style guides, building wiki documentation, and orchestrating multi-agent documentation workflows. | |
| claude-android duonglkh/claude-android MCP server for Android dev workflows that exposes Gradle, Manifest, and ProGuard context to Claude, with a library of skills for tasks like AGP upgrade and R8 audit. | |
| google-meet-mcp duongnad/google-meet-mcp Enables a production-grade multimodal Google Meet copilot that captures live captions, slides, and audio into a durable local buffer, and provides an interactive dashboard, alerting, and AI-powered meeting synthesis for agents. | |
| Animal Map Vision MCP duongnad/mcp-vision Enables AI agents to visually inspect and validate 3D game maps using Gemini vision and built-in quality checks for geometry, navigation, ecology, and rendering. | |
| Pygmalion MCP duongnad/pygmalion-mcp Enables coding agents to autonomously transform 2D character turnaround sheets into rigged, animated 3D models, using Blender headless rendering and a numeric silhouette-IoU self-check loop. | |
| SYMB duongtech/symb Enables AI agents to symbolically execute binaries and solve them mathematically — unflattening OLLVM control flow, using Z3 and angr to derive exact inputs that reach target branches, tracing taint to dangerous sinks, devirtualizing byteco | |
| Earnings Call MCP dupletime-wq/earnings-call-mcp MCP server that enables searching, retrieving, and translating earnings call transcripts from MarketBeat, deployed on Cloudflare Workers. | |
| DuploCloud MCP Server duplocloud/mcp Exposes DuploCloud infrastructure management as MCP tools by dynamically discovering duploctl commands, enabling AI agents to query state and perform auditable actions. | |
| messenger duplonicus/claude-messenger Enables an MCP client assistant to send WhatsApp messages from your own number and Discord direct messages from your own bot, showing the recipient and exact text for confirmation first by default. Also provides contact search, recent chat | |
| social-reader duplonicus/claude-social-reader A local read-only MCP server that lets MCP clients such as the Claude app fetch X/Twitter posts and search, Reddit posts, threads and search, and YouTube transcripts and search. It reads through your own saved logins using a fixed set of re | |
| wsl-files duplonicus/cowork-wsl-files Enables Claude Cowork on Windows to read, write, edit, list, find, and regex-search files inside a WSL distribution over stdio, accepting Windows and Linux path spellings. Access is confined to server-fixed roots, with secrets files refused | |
| PocketBase MCP Server dupont4424/pocketbase-mcp Enables advanced database operations against PocketBase instances, including collection and schema management, record CRUD with filtering and pagination, user authentication and account creation, and database backups. It exposes these capab | |
| Teams MCP dupont7277/teams-mcp Enables AI assistants to access Microsoft Graph APIs for Microsoft Teams and organizational data, supporting messaging, search, user lookup, file handling, and chat/channel operations. | |
| DSH Crew dupuis4540/dsh-crew Enables hosts like Claude Code, Codex, Antigravity and Grok to dispatch work to DeepSeek Harness agents as native subagents with live progress, tier/effort presets, escalation, workspace guardrails and a jobs board. It also bridges multimod | |
| Snippy dupuis921/snippy Enables AI assistants to save code snippets with vector embeddings for semantic search, retrieve them by name, and generate language-specific style guides or wiki documentation. It also orchestrates multi-agent workflows that combine deep w | |
| sidewire duqixun/sidewire Enables an AI agent to drive a remote Linux machine over the LAN through a single TCP connection, exposing tools for shell commands, jobs, interactive PTYs, file read/write/search/transfer, process and service management, networking, packag | |
| mcp-chromium-cdp duquesnay/mcp-chromium-cdp MCP server for controlling Chromium/Chrome via Chrome DevTools Protocol. Supports cross-platform automation, auto-launch, and automatic reconnection. | |
| Obsidian MCP Server (TypeScript) duquesnay/obsidian-mcp-ts A high-performance TypeScript server that enables interaction with Obsidian vaults through the Local REST API community plugin. It provides comprehensive tool discovery, intelligent resource caching, and unified access to both markdown note | |
| mcp-micromanage durable-technology/mcp-micromanage-your-agent Controls coding agents by enforcing structured implementation plans with PRs and commits as work units, requiring user review at each commit checkpoint to prevent agents from going off track. Includes a visualization dashboard for tracking | |
| ofaudio-mcp duragonyama/ofaudio-mcp An agent-first MCP server for generating and transforming audio (music, speech, sound effects) via ElevenLabs and Mureka, providing tools for transcription, voice cloning, and multi-speaker dialogue. | |
| fix-my-comments-mcp duraisamy-gokul/fix-my-comments-mcp MCP server that exposes code review tasks from the Fix My Comments VS Code extension to AI agents, enabling them to list, retrieve, reply to, and update task statuses. | |
| ClickHouse Trace-Activity MCP Server duranta19/activity-tacker-mcp Tracks a user's activity by trace ID from application logs stored in ClickHouse. Provides tools for log timeline, trace summaries, and search across services. | |
| Claude Chrome MCP durapensa/claude-chrome-mcp Enables MCP clients like Claude Desktop to automate and interact with claude.ai via a Chrome extension and WebSocket relay. | |
| stellar-memory duraznito16/stellar-memory Provides a persistent memory layer for Stellar and Soroban projects, scanning repositories to create a knowledge graph of contracts, storage, and on-chain state. Exposes this memory to AI agents via MCP, enabling project overview, search, a | |
| Jokes MCP Server durgam58/mcp Enables users to fetch jokes from various categories including Chuck Norris jokes and Dad jokes through a standardized MCP interface. Provides integration with Microsoft Copilot Studio and GitHub Copilot for AI-powered humor delivery. | |
| MCP Server with LangChain and AI Tools durgeshmca/mcpserverpocdemo A multi-tool AI assistant system that uses Model Context Protocol to connect language models with various tools, including math calculations and weather information. | |
| sshrew duriantaco/sshrew Enables Claude to read files and run allowlisted commands on any Linux machine that can dial out, without inbound SSH or port forwarding. | |
| wsl-rwx-7 duringyl/wsl-rwx-7 Enables AI agents on Windows to read, write, copy, move, and delete files inside WSL distributions, run shell commands in a login shell, and convert between Windows and Linux path styles. Commands are piped to bash -s via stdin so quotes, $ | |
| BQ Agent Gateway durjoi/bq_agent_gateway Enables safe, read-only interaction with Google BigQuery through Claude, with layered guardrails preventing dangerous or expensive queries. Exposes tools for listing datasets, tables, estimating costs, and running queries. | |
| Kali MCP Server durkdiggler/kali-mcp-server Enables LLMs to execute Kali Linux security tools like nmap, sqlmap, and hydra in a secure, sandboxed environment. Provides both MCP and HTTP API interfaces for penetration testing and security assessment tasks. | |
| Kali MCP Server durkdiggler/kalimcp Enables LLMs to execute common security testing tools like nmap, sqlmap, hydra, and metasploit through a secure Docker container. Provides controlled access to penetration testing utilities with configurable timeouts and tool discovery capa | |
| devin-subagents duro02/devin-subagents Enables lifecycle management of Devin ACP sessions as subagents over MCP, supporting parallel dispatch, blocking coordination, mid-flight steering, permission adjudication, and crash-resilient session persistence. | |
| Dashboard MCP durov-os/dashboard-mcp Enables AI agents to create and manage customizable dashboards with text, list, stats, progress, and chart widgets, accessible via a read-only web viewer and JSON API. | |
| vault-server-MCP durov-os/vault-server-mcp Remote MCP server for Obsidian vault access, giving Claude read/search/archive access to markdown notes via OAuth 2.1 + PKCE auth. | |
| Practice Fusion MCP Server durvester/mcp-scheduler-bot Enables interaction with Practice Fusion EHR through 19 healthcare tools for patient management, appointment scheduling, insurance verification, and document handling. Supports both local and remote access with OAuth2 authentication and str | |
| obsidian-mcp-server dusanmilic/obsidian-mcp-server MCP server that provides natural language access to an Obsidian vault, enabling reading, searching, listing, and creating notes. | |
| RiskPilot dushaorighthere/riskpilot Enables AI hosts to propose crypto trades that are checked by a deterministic risk engine, returning LONG, SHORT, or NO_TRADE decisions with refusals and an auditable paper-fill trail. | |
| Google Workspace MCP Server duskydaydreamer/mcp-server-1 Exposes standardized tools for AI agents to interact with Google Workspace (Gmail and Google Docs) via the MCP protocol. | |
| Multi-Agent Council Review dustdustpy/multi-agent-council Orchestrates multiple LLM agents to perform parallel code review, then synthesizes and votes on suggestions to rank improvements by consensus. | |
| wechat-mcp dustin573/wechat-mcp An MCP server that lets an LLM read and drive the macOS WeChat client through the Accessibility API, without reverse-engineering or injected code. It supports listing chats, opening conversations, reading messages, sending actions, and savi | |
| youtube-music-mcp dustinbarnes/youtube-music-mcp An MCP server for managing YouTube Music playlists via Claude. Add and remove songs, create playlists, and ask Claude to suggest music — all through conversation. | |
| eesti.ai events MCP server dustinest/eesti_ee_ai_mcp A read-only MCP server that exposes Estonian eesti.ai events (workshops and meetups) via search, upcoming, and single event tools, wrapping the vportal.ee search API. |
46,401–46,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.