Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| touchline edenbuilds/touchline Enables evidence-led website reconstruction through a browser-first workflow that audits sites, requests approval before building, and verifies rebuilt pages against pixel and console checks. | |
| expert-factory edenismine/expert-factory Builds a queryable knowledge graph from a pack of repos, papers, and notes, and serves it to agents via MCP, enabling search, source reading, and neighbor exploration. | |
| Notion Remote MCP Server edenking0621-png/mcp Enables secure interaction with Notion through a suite of tools for searching, reading, and modifying pages and databases. It features OAuth 2.1 authentication with PKCE and encrypted token storage to provide an enterprise-ready interface f | |
| Garak-MCP edenyavin/garak-mcp MCP Server For Garak LLM Vulnerability Scanner
https://github.com/EdenYavin/Garak-MCP/blob/main/README.md | |
| OSV edenyavin/osv-mcp The server can be utilized for secure development by listing all packages' CVEs, their affected versions and their fix versions. | |
| AK Screen MCP edgajuman/akscreen-mcp Enables MCP-compatible clients to control a local video editor through authenticated stdio commands for clips, effects, text, subtitles, camera, graphics, keyframes, audio, and export. | |
| outlook-mcp edgar-kessler/outlook-mcp Enables AI assistants to read, send, and manage Outlook mail locally on Windows via COM/MAPI, without cloud APIs. | |
| serper-proxy-mcp edgaras0x4e/serper-proxy Provides Google search and web page fetching tools to MCP clients via the Serper API, enabling models to search and read pages during conversations. | |
| tika-mcp edgaras0x4e/tika-mcp An MCP server that wraps Apache Tika to extract text, metadata, and more from documents. It supports local files and optional remote URLs with SSRF protections. | |
| atiendo24-mcp-server edgarconejo/atiendo24-mcp-server MCP server that connects Claude Desktop to Atiendo24 platform, enabling management of appointments, customers, conversations, leads, analytics, and WhatsApp messaging through natural language. | |
| Longman Dictionary MCP Server edgardamasceno-dev/ldoce-mcp-server Extracts structured dictionary data from the Longman Dictionary of Contemporary English website and serves it via Model Context Protocol, enabling AI agents to access detailed word definitions, examples, and linguistic information. | |
| America's Law Graph edgardomunoznajar/america-law-graph Provides access to 529,000+ US statute sections across all 50 states and federal codes for comprehensive legal research. Supports semantic search, citation graph traversal, jurisdictional comparisons, and regulatory risk analysis through na | |
| mise-en-place edgargalvan/mise-en-place Enables LLMs to retrieve verified macronutrient data (calories, protein, carbs, fat) for real ingredients and quantities from USDA FoodData Central, with structured caveats for uncertain matches. | |
| Atril edgarperatla-create/atril-mcp Enables Claude to create, read, edit, animate, review, and export Apple Keynote presentations on macOS with configurable themes, real LaTeX equations, and scientific charts. It works on copies in a dedicated workspace, supports PDF/PPTX/ima | |
| LimeSurvey MCP Server edgarrmondragon/limesurvey-mcp A simple server that enables management of LimeSurvey surveys and responses through MCP client integration. | |
| Narad GitHub Agent edge-explorer/narad-github-agent Enables AI-powered GitHub interactions including repository analysis, code search, PR reviews, and more through the MCP protocol. | |
| te1000-mcp edge-jb/twincat-xae-mcp MCP server for Beckhoff TwinCAT XAE / TE1000 Automation Interface, enabling control of XAE Shell, TwinCAT tree manipulation, PLC operations, and build actions via natural language. | |
| Amp MCP edgeandnode/amp-mcp Provides developer-focused documentation and tools for building applications on Amp, a high-performance blockchain ETL system. Includes guides, schemas, code examples, and troubleshooting resources for querying and transforming blockchain d | |
| Otelify MCP Server edgedelta/otelify-mcp-server Guides users through instrumenting applications with OpenTelemetry and streaming telemetry data (logs, metrics, traces) to Edge Delta. | |
| five9-mcp edgedevio/five9-mcp-live Connects MCP clients such as Claude and ChatGPT to the Five9 cloud contact center, exposing read and write tools over its Configuration and Statistics APIs for campaigns, agents, skills, DNC lists, reports, and live queue metrics. It also l | |
| Edgee MCP Server edgee-ai/mcp-server-edgee Enables interaction with the Edgee API for managing organizations, projects, domains, components, users, invitations, and API tokens through the Model Context Protocol. | |
| jev-kol-mcp edgeforgelab/jev-kol-mcp Enables finding TikTok and YouTube micro-KOLs, classifying their niches, scoring campaign fit with Jev, and drafting outreach emails, with results cached locally in SQLite. | |
| MCP Geo Location Server edgego/mcp-geo-pub Integrates EdgeOne Pages Functions with large language models to retrieve and utilize user geolocation information through the Model Context Protocol (MCP). | |
| EdgeHop edgehop/edgehop Stop grepping. Start knowing. EdgeHop turns a codebase into a queryable graph and serves it over MCP — find where a symbol lives, who calls a function, the type hierarchy, and the shortest path between two symbols, resolved from the compil | |
| boardroom-agents edgemoorlf/boardroom-agents MCP server providing governed access to board meeting data, with tools to query meetings, motions, and documents, automatically applying anonymity policies before returning answers. | |
| Talk to Figma MCP edgen-design/edgen-figma-to-code-mcp An MCP server that integrates AI agents with Figma, enabling reading and programmatic modification of designs. | |
| EdgePress MCP Server edgepress-cc/mcp-edgepress Lets any MCP-capable AI agent call a hosted EdgePress site's REST API to browse and manage CMS content or store data, using a personal access token whose role and read-only flag decide what the agent can do. Supports Streamable HTTP at /api | |
| LXD MCP Server edgeseek/lxd-mcp Enables AI assistants to manage LXD containers and virtual machines through a standardized MCP interface for lifecycle management, image operations, and server monitoring. | |
| invox-mcp edgetive/invox-mcp Hosted MCP server that enables AI assistants to manage clients, invoices, and expenses via the Invox API, supporting actions like drafting, sending, cancelling, and marking invoices as paid, as well as logging expenses and updating client i | |
| Colorado DWR MCP Server edgeworthhitbox/dwr-mcp-server Provides access to Colorado Division of Water Resources data including surface water stations, streamflow time series, water rights, well permits, and administrative calls through the DWR REST API. | |
| PentQuiver MCP Server edglz/pentquiver Enables AI assistants to search and resolve over 2,800 security commands with argument templates, allowing natural language interaction with a comprehensive command library for penetration testing. | |
| claude-multi-peer edhiblemeer/claude-multi-peer Lets Claude Code instances discover each other and exchange messages instantly across projects, with persistent peer IDs and automatic message rotation. | |
| 3GPP MCP Server edhijlu/3gpp-mcp-server Enables AI assistants to access and search 3GPP telecommunications specifications through direct integration with the TSpec-LLM dataset. Provides real-time specification content, implementation requirements, and multi-spec comparisons for 3 | |
| tv-debug-mcp ediand11/tv-debug-mcp MCP server for semi-manual QA test execution on real Smart TVs (Tizen/webOS) and local Chrome via Chrome DevTools Protocol, enabling remote control, state inspection, and profiling. | |
| Void MCP Filesystem Server edibletuber/mcp-server A secure, sandboxed MCP server that provides Void Editor with safe filesystem access, enabling AI to create, read, modify, and delete files with comprehensive security controls. | |
| businessmap-mcp edicarloslds/businessmap-mcp Model Context Protocol server for BusinessMap (Kanbanize) integration. Provides comprehensive access to BusinessMap's project management features including workspaces, boards, cards, subtasks, parent-child relationships, outcomes, custom fi | |
| FileX edicius2002/filex A local-first MCP server for universal file conversion across 12 categories, with built-in verification that what it outputs is actually what was requested. | |
| Powerline edidionga/powerline Enables conversational home power management by providing real-time solar, battery, and grid status, plus forecasts to answer questions like whether you can run an appliance. It supports Victron and Growatt inverters, remembers household ap | |
| broll-mcp edigeh/broll-mcp Enables agents to search the Internet Archive for public-domain b-roll, visually inspect scenes via keyframe images, and extract frame-accurate verified clips. Every extracted clip is saved with a provenance record capturing source, license | |
| typelatch edimka/typelatch Local API evidence for TypeScript coding agents. | |
| glasscast edint386/glasscast Enables voice-controlled mirroring of a computer screen to Qwen AI glasses S1 by starting, stopping, and checking cast sessions while serving grayscale JPEG frames over a public HTTPS endpoint. It provides MCP tools for cast control while t | |
| glassreader edint386/qwenglass-reader Enables users to browse a TXT novel library, open books, jump chapters, and check reading progress through MCP tools, while rendered page images support temple-swipe page turning on Qwen AI glasses. | |
| sql-mcp edintwi/sql-mcp Enables running parameterized SQL queries against a PostgreSQL database via an MCP tool. | |
| RelayForge MCP ediooutros500-spec/relayforge-mcp Gives MCP-compatible AI clients a controlled bridge to local files, processes, search, and document utilities, including reading/writing and moving files, text block editing, directory listing, content search, starting and managing terminal | |
| mcp-template edison-watch/custom-mcps A batteries-included Python template that ships a shared service registry as a CLI, MCP server, and HTTP API, enabling rapid development of MCP tools like the included Gmail skill. | |
| open-edison edison-watch/open-edison Deterministic agentic data firewall that secures, monitors, and controls AI agent interactions with data and software via MCP, preventing data leaks. | |
| Orenyl edison-zhou-nc/orenyl MCP server providing agent memory with deterministic deletion guarantees, enabling compliant event storage, context retrieval, and audit-proof data management. | |
| Lenny's Wisdom MCP Server edisoncruz/lennys-wisdom-mcp Provides structured access to actionable insights, frameworks, and leadership advice curated from episodes of Lenny's Podcast. It enables users to search for specific product management situations, compare guest perspectives, and browse a c | |
| roascan-mcp edisonroaa-code/roascan Enables AI agents to perform local CPU OCR on scanned PDFs and images, generating searchable PDFs or structured Markdown and inspecting PDFs through four validated tools. | |
| chakudya-mcp-server-cloudflare edisontaimu9-ui/chakudya-mcp-server-cloudflare Enables MCP clients to access Chakudya Nutrition Registry data through a stateless Streamable HTTP transport, with bearer token or OAuth authentication. |
46,951–47,000 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.