Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| arcane edition-x/arcane Provides persistent, searchable memory and knowledge capture for AI-assisted development, enabling agents to retain decisions, bugs, and patterns across sessions and projects. | |
| LeadsClean MCP Server edition/leadsclean Sales Intelligence · B2B Lead Extraction
An MCP (Model Context Protocol) server that gives AI agents structured B2B lead intelligence extracted directly from company websites. Point it at any URL and get back a clean JSON object — company s | |
| IndoAds Prompt MCP edivianika/indoads-prompt-mcp A retrieval-first prompt engine for commercial advertising that curates, ranks, and composes visual ad prompts for image generation models like GPT Image, Midjourney, and Flux without generating images itself. | |
| Lyrion MCP Server edk4971/lyrion-mcp Enables LLMs to control a Lyrion Music Server (LMS/Squeezebox) for playback, search, library browsing, and player management. | |
| Minecraft Recipe MCP Server edk4971/minecraft-mcp Enables retrieval of Minecraft crafting recipes for a specified item, returning matching recipe data. | |
| Ratatoskr-mcp edk4971/ratatoskr-mcp An MCP server that exposes a single tool to retrieve Wikipedia articles from local multistream dump files, offering fast offline access with redirect following and fuzzy matching. | |
| DeFi Trading Agent MCP Server edkdev/defi-trading-mcp Transforms AI assistants into autonomous crypto trading agents with real-time market analysis, portfolio management, and trade execution across 17+ blockchains. | |
| hyperliquid-mcp edkdev/hyperliquid-mcp Enables AI assistants to securely trade on Hyperliquid perpetual exchange, including order placement, position management, market data retrieval, and vault operations via natural language. | |
| MetaTrader5 MCP Server edkdev/mt5-forex-mcp Enables trading on MetaTrader5 platform via MCP, including account management, order placement, market data, technical indicators, and signal tools. | |
| Quote Collection MCP-Server edkeric/mcp-quote-server Enables users to collect, categorize, search, and delete personal quotes using tags, with support for batch importing, case-insensitive search, and optional tag-filtered random quote retrieval. | |
| Up Bank MCP Server edkranz/up-mcp An MCP wrapper for Up Bank's API that allows Claude and other MCP-enabled clients to manage accounts, transactions, categories, tags, and webhooks from Up Bank. | |
| Haven League edlee01/haven-league Enables human coaches to train AI agents to play Monopoly, with MCP tools for game actions, match hosting, and AI commentary. | |
| AIVectorMemory edlineas/aivectormemory MCP server that provides cross-session persistent memory for AI coding assistants using local vector database and semantic search, enabling automatic recall of project context, issues, and tasks. | |
| mcp-api-bridge edlovesjava/mcp-api-bridge An MCP server that translates natural-language queries into structured catalog searches using Amazon Bedrock, enabling MCP clients to query existing in-house APIs. | |
| DeskMCP edmen12/deskmcp Open-source Windows MCP policy gateway that gives ChatGPT controlled access to local files and terminal sessions with workspace-scoped permissions, guarded writes, session-owned processes, and audit logging. | |
| Modular RAG MCP Server edmendz/modular-rag-mcp-server A pluggable, observable modular RAG framework that exposes query knowledge hub, list collections, and get document summary tools via MCP, enabling AI assistants to perform hybrid search and document retrieval with reranking. | |
| codebase-bridge-mcp edmmy/codebase-bridge-mcp A read-only MCP server that lets a Claude chat explore your local repository and answer questions about it, returning synthesized answers with file:line references. | |
| fb-marketplace-mcp edmond0511/fb-marketplace-mcp Enables users to search Facebook Marketplace, vet sellers, flag scams, check comparable prices, and prepare listings while stopping before publish. Currently a work in progress, with only a ping tool functional. | |
| PR-Description Skill edmoura/pr-description-skill MCP server that generates structured pull request descriptions from Jira tickets and git diffs, with secret scanning, clarification questions, and optional publishing via GitHub CLI. | |
| imap-mcp edmundlimboen/imap-mcp Bridges one or more IMAP mailboxes over Streamable HTTP so AI agents can list folders and accounts, read and search messages, and set or clear read flags. Optionally sends plain-text mail via SMTP with an automatic Sent-folder copy, but sen | |
| draw.io MCP Server edoardopareti/mcp-drawio Enables creating, importing and incrementally editing draw.io diagrams through structured tools that manage nodes, edges and groups, then render validated .drawio files. It keeps diagram state across turns, supports automatic layout and und | |
| MCP Server with External Tools edogola4/mcp Enables AI models to access external services including weather data, file system operations, and SQLite database interactions through a standardized JSON-RPC interface. Features production-ready architecture with security, rate limiting, a | |
| Sweet MCP Server edomiyas888/swee_mcp Stateless HTTP MCP server enabling QuickBooks integration through CLI commands, company management, and field definitions. | |
| Brain edonzo/brain An MCP server that provides persistent, outcome-grounded long-term memory for Claude Code, with Bayesian confidence tracking and background consolidation cycles. | |
| shell-mcp edorosh/shell-mcp Runs shell commands inside an existing microsandbox sandbox rather than on the Windows host, tracking the working directory and translating paths between the host project folder and the sandbox mount. Exposes tools for foreground or backgro | |
| silenthand edosulai/silenthand-cua Enables local macOS computer use by letting agents click, type, and inspect accessibility trees without stealing focus, through an unofficial host for OpenAI Computer Use. | |
| MCP Platform Framework edouard-legoupil/mcp-platform-framework A framework for building MCP servers with built-in enterprise capabilities such as authentication, authorization, telemetry, audit logging, and data classification, allowing domain developers to focus on business logic while maintaining gov | |
| UNHCR Open Data Gateway MCP edouard-legoupil/unhcr-opendata-gateway-mcp Provides a unified interface to access UNHCR's open data across statistics, RDF, and IATI MCP servers, enabling aggregated queries, cross-domain analytics, and dataset discovery. | |
| Zotero MCP Server edouardarmit/zotero_mcp Enables read-only search and analysis of your local Zotero library, including full-text PDF retrieval with OCR fallback, annotations, and cross-item comparison for synthesis. | |
| Nutrition MCP edp8489/nutrition-tracker-mcp Enables calorie and macronutrient tracking by letting users search foods, build recipes, compute macros, and log meals through an MCP server, with all nutrition calculations performed server-side. | |
| ISO Agents edpauce/iso-agents Drafts ISO management-system documents clause by clause for Annex SL standards (ISO 9001, 14001, 45001, 37001), grounding each deliverable on the client's existing Word documents. Produces high-fidelity .docx output with colour change track | |
| iwatch-mcp edplayerone/iwatch-mcp Enables real-time Apple Watch heart rate monitoring via MCP tools, reading data from macOS HealthKit. | |
| riverside-mcp-server edpreble/riverside-mcp-server MCP server for the Riverside Business API v3, enabling management of recordings, exports, webinars, timeline exports, and more through natural language in MCP clients. | |
| ntfy-mcp edqe14/ntfy-mcp MCP server for sending notifications to ntfy.sh or self-hosted ntfy instances. | |
| MasterGo Magic MCP edramas/mastergo-magic-mcp Connects AI models with MasterGo design tools to retrieve and process DSL data from design files, enabling AI-powered design analysis and manipulation. | |
| Readwise Reader MCP Server edricgsh/readwise-reader-mcp Enables Claude to interact with the Readwise Reader API, allowing for saving, listing, updating, and deleting documents with complete metadata and content access through natural language. | |
| MCP Jira Server edrich13/mcp-jira-server An MCP server for interacting with self-hosted Jira instances using Personal Access Token (PAT) authentication. It enables users to perform CRUD operations on issues, search with JQL, manage comments, and list projects through the Jira REST | |
| elasticsearch-investigation-mcp edrient17/elasticsearch-investigation-mcp Read-only MCP server that converts Elasticsearch logs into citable evidence for AI agents, offering deterministic log summarization and search tools. | |
| zabbix-investigation-mcp edrient17/zabbix-investigation-mcp Read-only MCP server that provides Zabbix monitoring data to AI agents, enabling investigation of hosts, metrics, incidents, and triggers with deterministic aggregation. | |
| OneNote MCP edripper/onenote-mcp Enables Claude to sign in with a Microsoft account and read, write, search, create, move, and organize notebooks, section groups, sections, and pages, including drawing Mermaid or SVG diagrams rendered into notes. It also fetches embedded i | |
| lifeos edrisranjbar/lifeos Self-hosted life OS (habits, SMART goals, Kanban tasks, finances, notes). A stdio MCP server that works with your real data through a token-protected API, with no database access and destructive tools marked. | |
| mealie-mcp eds3028/mealie-mcp Exposes Mealie recipe manager as LLM-callable tools for searching recipes, managing meal plans, and editing shopping lists. | |
| Legalis MCP Server edsonsousa/legalis-mcp MCP server for Legalis, a Brazilian legal document AI that enables attorneys to manage cases, generate legal documents, search legislation, and more via natural language. | |
| Enma Daio edsorel75019/enma-daio Enables AI assistants to learn file organization rules, propose destinations for content, and manage those rules through MCP stdio tools, without writing files itself. | |
| unifilar-fv edu3250/unifilar-fv Enables Claude to validate photovoltaic system specifications and deterministically generate single-line diagrams with IEC 60617 symbols, exporting to DXF/PNG headlessly or to live AutoCAD 2027 for DWG and PDF output. | |
| Cambio Uruguay MCP eduair94/cambio-uruguay Read-only tools for published currency buy and sell quotes from more than 40 Uruguayan exchange houses and banks, rate comparisons, conversion, historical data, and economic news. Open-source TypeScript server with stdio and remote HTTP tra | |
| max-channel-mcp eduard256/max-channel-mcp Enables AI assistants to publish and manage content in MAX messenger channels, including text, photos, videos, audio, documents, location pins, buttons, edits, and pins. | |
| mcp-openai-images-audio eduard256/mcp-openai-images-audio Exposes OpenAI's gpt-image-2 and gpt-image-1.5 to Claude Code as a single tool for generating, editing, or composing images with automatic model selection. | |
| MQTT MCP Server eduard256/mqtt-mcp-server Connects AI assistants to MQTT brokers for smart home automation and IoT device control, enabling topic discovery, sensor reading, command sending, and event monitoring. | |
| Ozon MCP Server eduard256/shopper-mcp MCP server for Ozon marketplace that enables AI assistants to search products, get detailed information, prices, and delivery info from Ozon.ru. |
47,001–47,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.