Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| clinica-mcp-server dylanbc1/dental-clinic-mcp-server Enables dental clinic staff to manage appointments, verify patient affiliation, and track accounts receivable through MCP tools, with OAuth 2.1, per-tool scopes, and human approval required for every mutation. | |
| exhibit402-mcp dylancaponi/exhibit402-mcp Enables agents to pay USDC on Base to permanently certify the current content of a public URL via dual-observer capture, and to re-verify existing certificates. | |
| Google Drive MCP Server dylancaponi/gdrive-mcp-server An actively maintained fork of the official Google Drive MCP server that enables users to search, download, and read files via the Google Drive API. It features improved OAuth token management and automatically converts Google Workspace doc | |
| ESPN Fantasy Basketball MCP Server dylancharris/espn-fantasy-basketball-mcp An MCP server that provides access to ESPN Fantasy Basketball APIs, enabling Claude and other MCP clients to fetch league teams, rosters, free agents, matchups, NBA schedules, and live draft assistant tools. | |
| aimm-mcp dylancodybrown/aimm-mcp Local MCP server for AI Model Manager that captures SQL data-model metadata and exposes it to MCP clients over stdio. | |
| openttd-mcp dylanfetch/openttd-mcp Enables an AI agent to play OpenTTD by launching a local headless game and exposing tools to inspect towns, industries, and finances, build roads and stations, buy buses and trucks, and manage routes. The agent supplies the strategy and dec | |
| Weather MCP Server dylangroos/mcp-weather An MCP server that provides weather alerts and forecasts for US locations using the National Weather Service API. | |
| mongo-mcp dylangroos/mongodb-mcp Enables CRUD operations on MongoDB databases and collections, including listing databases and collections, via MCP tools. | |
| NHL MCP Server dylangroos/nhl-mcp Provides structured access to NHL data including teams, players, standings, schedules, and statistics through the Model-Context Protocol pattern. | |
| Patchright Lite MCP Server dylangroos/patchright-mcp-lite A streamlined Model Context Protocol server that enables AI models to perform stealth browser automation using Patchright, avoiding detection by anti-bot systems while providing essential web interaction capabilities. | |
| next-ui-mcp dylanlindgren/next-ui-mcp Enables AI coding agents to build, evaluate, and validate ServiceNow Next Experience UI Framework components and projects, helping keep component code and now-ui.json manifests in sync while using live instance API metadata. | |
| Kaiza MCP Server dylanmarriner/atlas-gate-mcp Enables secure, audited file operations with LLMs by enforcing implementation plans, restricting writes to approved file scopes, and maintaining a tamper-evident audit log with stub detection. | |
| uefn-mcp dylannalex/uefn-ai-toolkit MCP server that enables AI assistants to inspect and build Fortnite maps by driving a running Unreal Editor for Fortnite instance via Python, exposing tools for spawning actors, browsing content, and executing editor operations. | |
| zendriver-mcp dylannoor/zendriver-mcp Provides undetectable browser automation for LLM agents via MCP, enabling real Chrome interaction with stealth features, DOM accessibility, and DevTools integration. | |
| GTM MCP Server dylanottinger/gtm-mcp-server A unified MCP server that connects HubSpot, Clay, Apollo, Slack, and email to enable AI agents to execute multi-step GTM workflows such as prospecting, enrichment, CRM updates, and notifications. | |
| creator-growth-intel dylanpakd-cyber/creator-growth-intel MCP server that answers questions about creator marketing, influencer pricing, and app growth using a curated corpus of operator quotes with links, and explicitly flags when evidence is thin or absent. | |
| PostgreSQL MCP Server dylanpetersenml/postgres-mcp-server Connects AI assistants to PostgreSQL databases, enabling schema inspection and SQL query execution through MCP tools. | |
| RMI Utility Transition Hub — MCP Server dylanpieper/rmi-mcp-uth Enables natural-language querying of US utility emissions, generation mix, and climate alignment data through any MCP client. | |
| bambu-cloud-mcp dylansantwani/bambu-cloud-mcp Enables remote cloud control and live LAN camera access for Bambu Lab 3D printers through 31 MCP tools. | |
| Docs Bridge dylansantwani/docs-bridge Enables agents to read, write, format, fill, and export Google Docs and Slides as the signed-in user through a real Chrome browser, without API keys or OAuth. | |
| latchkey dylansantwani/latchkey-public Enables agents to drive a headless Chrome browser that is already logged in to the user's accounts, supporting multiple accounts and safe handling of Google sessions without manual login or 2FA. | |
| OpenBrowser dylansantwani/openbrowser A zero-dependency MCP server that drives a real Chrome browser through a companion extension, enabling AI agents to automate real user sessions with trusted input events, compact accessibility-tree snapshots, and 14 tools for navigation, in | |
| obsidian-autom8 dylansumser/obsidian-autom8 Enables AI agents to remotely access and interact with Obsidian vaults via MCP, supporting note operations, tag management, graph queries, and command execution. | |
| AskDocs MCP Server dymk/askdocs-mcp Enables semantic search and retrieval of information from technical documentation PDFs using RAG-powered natural language queries with Ollama embeddings and LLMs. | |
| Warren dymyt-ry/warren Enables multi-agent and human collaboration through MCP with scoped rooms, invites, @mentions, task claims, file locks, and push delivery to Claude Code, Codex, and Cursor. Provides cross-company safety, human review, and MCP/A2A protocols | |
| sharepoint-online-mcp dyn36/sharepoint-online-mcp Zero-config MCP server for SharePoint Online that enables managing sites, pages, navigation, and branding via natural language, with automatic device code authentication and no Azure registration required. | |
| Dynamic Mockups dynamic-mockups/mcp Enables AI assistants to generate product mockups by integrating with the Dynamic Mockups API. Supports browsing mockup catalogs, creating single or batch renders with design assets, and managing PSD templates. | |
| HubSpot MCP Server dynamic/hubspot-mcp Enables management of HubSpot CRM entities including contacts, companies, deals, and pipelines through natural language. It provides comprehensive tools for listing, searching, creating, and updating records with support for OAuth 2.0 authe | |
| Self-Hosted EdgeOne Pages MCP dynamicdevilop/self-hosted-pages-mcp Enables AI assistants to deploy and manage static websites via EdgeOne Pages, with one-click deploy and API support. | |
| pocketbase-mcp-server dynamicendpoints/advanced-pocketbase-mcp-server A comprehensive MCP server that provides sophisticated tools for interacting with PocketBase databases. This server enables advanced database operations, schema management, and data manipulation through the Model Context Protocol (MCP). | |
| BOD-25-01-CSA-Microsoft-Policy-MCP dynamicendpoints/automated-bod-25-01-cisa-microsoft-policies-mcp This MCP server implements VariousPolicies according to CSA BOD 25-01 requirements for Microsoft 365 cloud services | |
| Cloudflare to GitHub Backup MCP Server dynamicendpoints/cloudflare-github-backup-mcp An MCP server that automates the backup of Cloudflare projects to a GitHub repository, providing a systematic way to preserve Cloudflare configurations and assets. | |
| Document Extractor MCP Server dynamicendpoints/documentation-mcp-using-pocketbase Extracts and stores documentation content from Microsoft Learn and GitHub URLs into PocketBase with full-text search, metadata preservation, and automatic collection management for easy retrieval and organization. | |
| ESPN MCP Server dynamicendpoints/espn-mcp Provides comprehensive access to ESPN's sports APIs for live scores, team information, news, and statistics across NFL, NBA, MLB, NHL, college sports, and major soccer leagues with advanced filtering and real-time updates. | |
| Etsy MCP Server dynamicendpoints/etsy-mcp Enables seamless integration with Etsy's marketplace API v3 to search listings, manage shop inventory, create and update products, optimize SEO, and access seller resources with OAuth support for authenticated operations. | |
| FantasyPros MCP Server dynamicendpoints/fantasy-pros-mcp Provides access to FantasyPros API for retrieving sports data including news, player information, consensus rankings, and projections across NFL, MLB, NBA, and NHL. | |
| Huntress-MCP-Server dynamicendpoints/huntress-mcp-server MCP server for Huntress API integration | |
| Microsoft 365 Bookings MCP Server dynamicendpoints/m365-bookings-mcp Enables interaction with Microsoft Bookings through the Microsoft Graph API to manage businesses, staff members, services, and appointments. | |
| MESH Vulnerability Scanner dynamicendpoints/mesh-scanner Scans MESH by Viscount systems for default credential vulnerabilities, performs security assessments, and generates compliance reports for authorized penetration testing and security research purposes. | |
| Netlify MCP Server dynamicendpoints/netlify-mcp-server This is an MCP server that can be used with Netlify | |
| Palo Alto Device Server dynamicendpoints/paloalto-device-server Enables management of Palo Alto firewalls through their REST API, including system information retrieval, PAN-OS upgrades, HA firewall management via Panorama, content updates, and certificate management. | |
| PayPal MCP dynamicendpoints/paypal-mcp This is an MCP server to manage PayPal | |
| supabase-mcp dynamicendpoints/supabase-mcp An MCP server that provides tools for interacting with Supabase databases, storage, and edge functions. | |
| D365 F&O MCP Server dynamics365ninja/d365fo-mcp-server Enables AI-assisted X++ development for Dynamics 365 Finance and Operations by pre-indexing the entire codebase and providing 54 specialized tools for metadata lookup, code generation, and best practice validation. | |
| MCP Server for Snowflake dynamike/snowflake-mcp-server Enables read-only querying of Snowflake databases through Claude, supporting multiple authentication methods and SQL operations like SELECT, SHOW, DESCRIBE. | |
| ai-remote dynamite-bud/ai-remote Vision-capable MCP server for controlling Amazon Fire TV through Home Assistant, providing screenshot-guided observation, remote commands, and app/URI actions via authenticated REST calls. | |
| neoforge-docs dynastxu/mcp-neoforge-docs Enables local, offline BM25 search and retrieval of NeoForge documentation through MCP tools, including section/doc access, API symbol lookup, page listing, and cross-version comparison. | |
| noita-data dynastxu/mcp-noita-data Enables read-only MCP access to an unpacked game data directory, supporting directory listing, paginated text/XML reading, content search, translation lookup, and retrieval of spell/entity definitions without executing Lua or computing deri | |
| Drivo MCP dynaz/drivo-mcp Enables MCP clients such as Claude, ChatGPT and Cursor to securely search and retrieve vehicles, customers, leads, deals, payments and service history, and to create leads, bookings and service appointments on the Drivo dealer business plat | |
| Simple MCP Server dyneth02/mcp-client-server-project-using-nodejs Enables AI tools to query context from a local JSON data source via stdio, demonstrating the Model Context Protocol. |
46,601–46,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.