Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mcp-server eastonjeff/mcp-server Enables read-only access to a PostgreSQL database, allowing users to inspect schema, generate SQL from natural language, and execute read-only queries via MCP. | |
| Cardano Unified MCP Server easy1staking-com/cardano-unified-mcp-server An MCP server that provides AI assistants with searchable access to Cardano ecosystem documentation, SDKs, smart contract languages, governance, scaling, and developer standards from a single endpoint. | |
| Keynote-MCP easychen/keynote-mcp A Model Context Protocol server that enables AI assistants to control Apple Keynote presentations through AppleScript automation, supporting comprehensive slide creation, management, and content operations. | |
| easydeploy-ai-mcp easydeploy-ai/easydeploy-ai-mcp A Model Context Protocol (MCP) server that exposes the EasyDeploy public REST API as tools for Claude, Cursor, Claude Code, and other MCP clients. | |
| dsh-safety easygame921/dsh-safety An MCP server that audits DeepSeek Harness (DSH) plugins for security threats using static and dynamic analysis. It enables automatic safety reviews of community plugins before installation, detecting risks like credential theft and prompt | |
| blackduck-polaris-mcp-server easygoingcoder/blackduck-polaris-mcp-server An MCP server for Black Duck Polaris that enables AI coding assistants to trigger scans, manage findings, generate reports, and handle policies across SAST, SCA, and DAST tools. | |
| YouTube Search & Download MCP Server easyhak/youtube-search-mcp Enables searching, retrieving metadata, and downloading YouTube videos or audio without requiring an API key. It utilizes yt-dlp to support media retrieval and playlist management within MCP-compliant clients like Claude and Cursor. | |
| easyhire-jobs easyhireme/mcp Read-only MCP server for the public EasyHire job board. Enables searching job openings, retrieving full postings, filtering by criteria, and listing countries with open roles. | |
| autostock-lite easyhunjune/autostock-lite Enables AI tools to read-only query Korean listed companies’ disclosures, financial statements, shareholder information, and filing documents via OpenDART, with optional Toss Securities market data when configured. | |
| doc-copiloto easyindustry/local-docs-copilot Enables MCP clients to locally search, retrieve, and summarize project documentation using Ollama models, without cloud usage, while managing requests through a queue and optional model prewarming. | |
| @ezquill/mcp-server easymodeonly/ezquill-mcp-server Enables an AI agent to read a writer's manuscript, story world, and timeline from ezQuill with the writer's consent and within allowed permissions. | |
| easy-slack-mcp easynet-world/7159-easy-slack-mcp Enables AI assistants like Cursor and Claude Desktop to interact with Slack workspaces, allowing message sending, channel reading, user management, and file operations through natural language. | |
| @easynodexyz/mcp-x402 easynodexyz/mcp-x402 MCP server enabling AI agents to purchase VPS and blockchain node products using USDC on Base via Easy Node's x402 API. | |
| elevenlabs-agents-mcp-server easyonthesauce/elevenlabs-agents-mcp MCP server that lets Claude place outbound telephone calls via ElevenLabs Agents over a SIP trunk and report the outcome including status, success evaluation, summary, and transcript. | |
| MCP Family Kiosk Display easyonthesauce/mcpdisplay An MCP server that provides LLM-controlled kiosk display tools for family management, supporting animated scenes with text, images, and videos. It enables real-time updates via WebSocket and offers high-level tools for calendars, chores, me | |
| EasyQuote MCP Server easyquotes/easyquotes Enables AI agents to access real-time and historical stock market data for A-shares, Hong Kong, US, and global markets, including quotes, K-lines, fund flows, fundamentals, and board data, via a Python SDK and MCP protocol. | |
| EasySend easysend-co/easysend-claude-plugin EasySend MCP server lets AI assistants upload, download and share files instantly. No API key or authentication needed. Upload any file type up to 1GB, get a shareable link. Tools: upload_file, upload_multiple_files, get_bundle, download_fi | |
| easyshell easyshell-ai/easyshell Model Context Protocol server for EasyShell: manage hosts, execute scripts, orchestrate multi-host tasks, schedule AI inspections, and access infrastructure operations from AI assistants. | |
| AIX MCP Server easyzoom/aix-mcp-server An extensible MCP server with a plugin system, proxy forwarding, web dashboard, and service registry for managing MCP tools and services. | |
| notes-box eatcodesleeprepeatteg/mcp-snippetbox Enables adding, getting, and listing notes through MCP, with state persisted to a JSON file in the home directory. | |
| Stochastic Process Analyzer eatenbywo1ves/mcp-server-analytic Advanced server for simulating financial models and stochastic processes, offering tools for generating simulations, calculating financial metrics, and visualizing results with interactive components. | |
| openmontage-mcp eaterofsouls/openmontage-mcp Enables AI agents to run headless creative production workflows by turning declarative CreativeSpec documents into validated media deliverables through MCP tools, durable workers, and provider adapters. | |
| bayma eaucoin/bayma Provides durable, checkpointed REPL sessions for Bun, Python, C#, and Rust, enabling agents to execute code and retrieve structured results over MCP. | |
| 1Panel MCP Server eaveluo/1panel-mcp Enables AI agents to manage server infrastructure through the 1Panel API, including Docker containers, databases, and system monitoring. It provides tools for website management, file operations, and application deployment via natural langu | |
| MCP Gherkin Server eax/testai-mcp-server Programmatically generates and saves Gherkin feature files using the Model Context Protocol (MCP), making it easy to integrate with other applications. | |
| Cloud Custodian MCP eazy-ops/cloud-custodian-mcp Generates, validates, and manages Cloud Custodian policies across AWS, GCP, and Azure using natural language prompts. | |
| borrowback eazyhood/borrowback Enables a guided gear-loan workflow by resolving ambiguous item names and finding return windows that fit both parties' schedules. | |
| EasyTopic MCP Server eb-con-gmbh/easytopic-mcp-server Allows Claude Code agents to pull tasks from an EasyTopic Kanban board, automate planning, commenting, approval, implementation, and closing of topics. | |
| JMeter MCP Server ebadahmed10/jmeter-mcp Enables the execution and analysis of JMeter performance tests through MCP-compatible clients. It provides tools for running tests in non-GUI mode, identifying performance bottlenecks, and generating comprehensive insights and visualization | |
| Wikidata MCP Server ebaenamar/wikidata-mcp-mirror Connects LLMs to Wikidata's structured knowledge base using a hybrid architecture that optimizes for both fast entity searches and complex relational queries. It provides tools for entity and property retrieval, metadata lookups, and direct | |
| MCP Memory Server ebailey78/mcp-memory A Model Context Protocol server for Claude Desktop that provides structured memory management across chat sessions, allowing Claude to maintain context and build a knowledge base within project directories. | |
| codex-mcp-system ebald/codex-mcp-system Enables MCP clients to generate and edit images through Codex's built-in image generation using a ChatGPT login, returning final files with metadata and optional inline previews. | |
| MCP Energy Server ebarros23/mcp-energy Provides access to comprehensive U.S. and international energy data from the EIA API, including electricity, natural gas, petroleum, coal, renewables, CO2 emissions, and energy forecasts. | |
| pfSense MCP Server ebba08962/pfsense-mcp-server Enables managing a pfSense firewall through natural language—creating rules, configuring VPNs, DNS, DHCP, NAT, and running diagnostics—with safety guardrails, confirmation on destructive actions, and config revision backups for rollback. | |
| knowledge-base-server ebba57/knowledge-base-server Enables AI agents to share a persistent, self-improving memory by ingesting, classifying, synthesizing, and retrieving knowledge from sources like Obsidian vaults, code, and transcripts through MCP and REST APIs. Provides token-optimized, t | |
| MiniMax Coding Plan MCP ebba70004/minimax-coding-plan-mcp Enables MCP clients such as Claude Desktop, Cursor, and Windsurf to run web searches and analyze images through AI based on text prompts, returning structured results or extracted image insights. It exposes the web_search and understand_ima | |
| MCP-Discord ebbamartinez001/mcp-discord Enables AI assistants to interact with the Discord platform by managing servers, channels, roles, forum posts, messages, reactions, and webhooks through a Discord bot. | |
| Excalidraw Architect MCP ebbaoh3787/excalidraw-architect-mcp Enables AI coding tools to generate, revise, and export 25 types of auto-laid-out, hand-drawn Excalidraw diagrams from structured specs, with optional persistent architecture knowledge graph querying and linting. It runs fully offline witho | |
| Sonicmatch ebbap512/sonic-match-mcp Watches video footage or URLs to analyze mood, pace, speech, and scene cuts, then returns a shortlist of license-safe BGM tracks with license and attribution text, a 12–20s hook window, and an ffmpeg ducking/mix spec. Runs locally via stdio | |
| Magg ebbaramirez63343/magg This MCP server enables LLMs to discover, add, configure, and manage other MCP servers, aggregating their tools under unified prefixes and persisting configurations across sessions. It also supports dynamic reloading, health checks, kits, a | |
| agent-reader ebbfijsf/agent-reader An MCP server that enables AI agents to instantly convert Markdown into beautiful, ready-to-deliver Word, PDF, HTML with sidebars, and Slideshow documents, bridging the "last mile" of AI content generation. | |
| archer-router-mcp ebenezer-isaac/archer-router-mcp Enables LLM/MCP clients to read and, when explicitly allowed, modify TP-Link Archer AX53 router settings directly over the LAN using the router's own web protocol, without a browser or cloud account. It is read-first, write-gated, and locko | |
| tplink-easysmart-mcp ebenezer-isaac/tplink-easysmart-mcp Lets an MCP client read port, statistics, VLAN and PoE status from TP-Link Easy Smart switches and, when explicitly gated, power-cycle a wedged PoE camera over the LAN without opening the switch's web UI. It talks the switch's HTML/cgi prot | |
| vigi-nvr-mcp ebenezer-isaac/vigi-nvr-mcp Enables AI agents and MCP clients to talk directly to a local TP-Link VIGI NVR over its JSON API, reading device, camera, storage, and recording data, managing channels, and exporting footage as clips or snapshots over RTSP. Every mutating | |
| Apple Calendar MCP Server ebenpaul/apple-calendar-mcp Provides native integration with Apple Calendar on macOS via EventKit, enabling CRUD operations on calendar events and calendars through a standardized MCP interface. | |
| groove-mcp ebenpaul/groovehq-mcp Enables management of customer support tickets, contacts, agents, and knowledge base articles through the Groove HQ GraphQL API. | |
| Hyrox Coach MCP ebertoburgos/hyrox-coach-mcp Turns your own wearable data into coaching for hybrid fitness races by exposing readiness, running coach plans, fitness trends and training summaries as tools an agent can query. Keeps your data read-only at the provider and lets you log th | |
| nfl-mcp ebhattad/nfl-mcp An MCP server that provides access to over 12 years of NFL play-by-play data through a local DuckDB database. It enables users to query player performance, team statistics, and situational efficiency metrics like EPA and WPA using natural l | |
| remindctl-mcp ebi-yade/remindctl-mcp MCP server for Apple Reminders via remindctl. Enables MCP-compatible AI assistants to read and write Apple Reminders through the standard Model Context Protocol. | |
| @achi/drive-mcp ebielimited/drive-mcp MCP server that lets AI agents access the user's Achi workspace (Drive files, Properties, Mail, Agent notes) with one token, enabling file operations, search, property management, and more. |
46,751–46,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.