Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Mock Server ejajmahmud/mcp-mock-server Enables developers to run spec-driven, deterministic mock tool interactions for agent integration testing and CI, including fixture-based JSON-RPC responses, call assertions, and error injection without live backends or network access. | |
| MCP Mux ejajmahmud/mcp-mux Enables AI clients to connect to multiple downstream MCP servers through one stdio connection, routing tool calls by prefix to reduce separate configurations and process sprawl. | |
| n8n MCP Server ejajmahmud/n8n-integration-n8n-mcp-server Provides AI assistants with full access to manage n8n workflows, executions, credentials, and pipeline building via the Model Context Protocol. | |
| n8n-MCP ejajmahmud/n8n-node-n8n-mcp-test A Model Context Protocol server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. | |
| sprrint ejasmuhamed/sprrint-cli Enables agents to manage projects, tasks, sprints, the Black Hole, comments, invites, and workspace settings through the Sprrint API using natural language or tool calls. | |
| SystemPrompt MCP Server ejb503/systemprompt-mcp-core This TypeScript-based server implements a simple notes system, allowing users to create and manage text notes and generate summaries, showcasing core MCP concepts. | |
| Systemprompt MCP Gmail Server ejb503/systemprompt-mcp-gmail Enables users to manage Gmail accounts using AI agent-assisted operations via an MCP protocol, supporting email search, reading, deletion, and sending with a voice-powered interface. | |
| systemprompt-mcp-interview ejb503/systemprompt-mcp-interview A specialized Model Context Protocol (MCP) server that enables AI-powered interview roleplay scenarios for practice with realistic conversational feedback. | |
| SystemPrompt MCP Notion Server ejb503/systemprompt-mcp-notion A high-performance MCP server that integrates Notion into AI workflows, enabling interaction with Notion pages, databases, and comments through a standardized protocol. | |
| systemprompt-mcp-reddit ejb503/systemprompt-mcp-reddit A specialized MCP server that enables AI agents to interact with Reddit, including reading posts, creating content, and managing subreddit configurations. | |
| SystemPrompt MCP TaskChecker ejb503/systemprompt-mcp-taskchecker Enterprise-grade MCP server for intelligent task management with 0-100 evaluation scoring, session-based workflow tracking, and real-time status monitoring for AI assistants. | |
| superposition-mcp ejentum/superposition-mcp Provides a deterministic, keyless two-pole terrain map from an agent's task framings to counter premature collapse in reasoning, working offline or via API. | |
| Vulpes Spotify MCP Server ejfox/vulpes-spotify-mcp A Model Context Protocol server that enables AI assistants like Claude to interact with Spotify, allowing them to search for tracks, control playback, and manage playlists. | |
| Brutalist MCP ejmockler/brutalist-mcp Multi-perspective code analysis using Claude Code, Codex, and Antigravity CLI agents to provide direct, honest technical feedback on code, architecture, and ideas. | |
| uabc ejobs-it/uabc Enables AI agents and MCP clients to safely control the user's real Chrome browser, using shared tabs with per-site approvals, credential-field protection, a kill switch, and an activity log. | |
| mcp-starter ejoliet/mcp-starter A minimal MCP server demonstrating tools, resources, and prompts for managing notes, with a simple notes app that supports adding, listing, deleting notes and summarizing them. | |
| Azure ML MCP Server ejones18/azureml-mcp-fun Deploys an MCP server on Azure Container Apps that exposes Azure ML managed online endpoints as tools, enabling AI agents like Azure AI Foundry to invoke machine learning models via natural language. | |
| Entra ID On-Behalf-Of MCP ejorgensen22/entra-id-obo-mcp Enables MCP clients to exchange an MCP-audience token for a Microsoft Graph token and call Graph as the signed-in user, with tools for identity verification and recent mail access. | |
| Local Brain MCP ejsinfuego/memory-mcp A local MCP server for AI assistants to store and retrieve personal memories on disk, with optional semantic search using embeddings. | |
| figma-comments-mcp ejun-9/figma-comments-mcp An MCP server that lets Claude read Figma file comments directly, with tools to list comment threads scoped to a frame or file and render images of pinned nodes. | |
| openfda-mcp-server ek-nath/openfda-mcp-server Enables LLMs to search FDA drug labels and adverse event data via the OpenFDA API, supporting natural language queries for drug safety information. | |
| beli-mcp-plus ek30gold/beli-mcp-plus Enables search, reviews, photos, bookmarks, and local drafts through the Beli API. | |
| Eka MCP Server eka-care/eka_mcp_server Provides access to Indian healthcare knowledge bases including 500,000+ branded drugs and 180+ treatment protocols from authoritative institutions like ICMR, enabling AI responses grounded in verified medical information specific to the Ind | |
| Last.app MCP Remote Bridge ekaibide/mcp An HTTP server that exposes Last.app's MCP as a remote endpoint for Claude Desktop, allowing connection without installing plugins or requiring Cowork. | |
| Dune Analytics MCP Server ekailabs/dune-mcp-server A Model Context Protocol server that connects AI agents to Dune Analytics data, providing access to DEX metrics, EigenLayer statistics, and Solana token balances through structured tools. | |
| lightfast-mcp ekakit/lightfast-mcp Production-ready MCP server implementations for creative applications, enabling control of Blender and other tools through the Model Context Protocol. | |
| WhatsApp MCP Server ekaksher/whatsapp-mcp A Python-based MCP server that automates WhatsApp Web using Playwright to manage chats and messages. It enables users to list conversations, send messages, and retrieve history through a local browser automation interface. | |
| sleeper-fantasy-mcp ekam-mann/sleeper-fantasy-mcp- An MCP server that provides league-accurate fantasy football advice by scoring projections against your Sleeper league's actual scoring settings and roster shape, answering draft, trade, waiver, and lineup questions. | |
| model-cost-mcp ekamal22/model-cost-mcp Enables AI agents to list, compare, and estimate exact costs for image, video, audio, and 3D generation models, including per-image, per-second, and per-run pricing with recoverable errors. | |
| ekaone/mcp-tools MCP server providing data masking tools for credit card numbers and email addresses, enabling privacy protection through natural language commands. | |
| Agent Harness Kit MCP Server ekaterina7515/agent-harness-kit Enables AI coding providers to run structured multi-agent workflows through MCP, including tracked tasks, document specs, handoffs, health gates, and audit evidence. | |
| BOSS 直聘 MCP Server ekaterinadavis83/boss-zhipin-mcp Automates the recruiter-side hiring pipeline on the BOSS Zhipin platform, enabling batch multi-keyword candidate search, resume screenshot capture, filtering and scoring, share-link extraction, greetings, and Markdown report export through | |
| FlowLens MCP Server ekaterinag8486/flowlens-mcp-server Enables coding agents to inspect recorded browser flows with user actions, network, console, storage, DOM events, and screen recordings, so they can debug issues and perform regression testing without reproducing them. | |
| ScrapeGraph MCP Server ekaterinagarnier47115/scrapegraph-mcp Enables MCP clients to perform AI-powered web scraping, extraction, search, crawling, schema generation, and scheduled monitor management through local or hosted integration. | |
| Kingdee MCP Server ekaterinaiyer55/kingdeemcp Enables AI assistants such as Claude, Cursor, and Windsurf to query and operate Kingdee Cloud Star ERP using natural language. It exposes 87 tools across purchasing, sales, inventory, financial reporting, production, cost, assets, and appro | |
| simple-reddit-mcp ekatiyar/simple-reddit-mcp A read-only Reddit MCP server that fetches threads, comments, and subreddits from the Arctic Shift archive over HTTP, requiring no Reddit account or API key. | |
| mcp-drone-agent ekb-dev-ai/mcp-drone-agent Enables natural language control of a simulated drone for search missions, with tools for takeoff, movement, scanning, and landing via MCP. | |
| Docker Build MCP Server ekdh600/build-mcp A TypeScript server that fully implements the Model Context Protocol (MCP) standard, providing API access to Docker CLI operations like build, run, stop, and image management through compatible AI clients. | |
| Personal Cronometer MCP ekelly95/cronometer-personal-mcp Enables MCP clients like Codex and Claude Code to securely read and manage a personal Cronometer account, including food logs, nutrient summaries with missing-data awareness, food search, biometrics, and export analysis. | |
| document-index-mcp ekelly95/document-index-mcp Indexes local documents (PDF, Word, Markdown, text) into a SQLite database for AI agents to search and retrieve bounded, source-located passages. Runs fully locally with optional OCR, preserving privacy. | |
| MCP News Server ekfaktldk11/mcp-news-server Fetches, summarizes, and translates news headlines and articles using the News API and OpenAI. It enables users to browse top stories and receive high-quality Korean translations of global news content. | |
| buildin-mcp ekho/buildin-mcp Enables LLMs to interact with Buildin.ai workspaces, providing tools to manage pages, databases, blocks, search, users, and convert Markdown content. | |
| Uber External Ads API MCP Server ekim197/hackathon_mcp Enables users to manage Uber advertising campaigns through natural language by providing access to Uber's External Ads API. Supports campaign creation, retrieval, updating, and deletion with comprehensive filtering and configuration options | |
| agentbus ekinertac/agentbus Enables coding agents on the same machine to discover each other as named peers and exchange messages across sessions, bridging MCP-based clients and Claude Code without a daemon. | |
| izan.io ekingunoncu/izan.io Turns your Chrome browser into an MCP server, allowing AI clients to control browser actions like clicking, typing, navigating, and data extraction through custom JavaScript tools. | |
| browser-ai-rag ekiyo55/browser-ai-rag Enables browser-based AI services to connect through remote MCP for internal document search, email checking and replies, timecard, sales/project, schedule/task, and operations tasks. It supports multiple AI clients via compatible remote MC | |
| EKKE University Assistant MCP ekke-edu/mcp Enables read-only search across EKKE course repositories, GitHub Discussions, and official university pages, returning source links and dates where available. Supports Hungarian-English query expansion and configurable response labels witho | |
| Arena Bridge ekkkcz/arena-bridge Enables web AI agents to operate local projects through MCP, with real-time display of the actual model name and thinking effort. | |
| MCP Server for CAD eklavvyaaaaa/mcp-server-for-eyeshot-cad Translates natural language commands into structured geometric operations for a simulated CAD engine using LLMs. It enables users to create shapes, modify dimensions, and perform 3D operations like extrusion through the Model Context Protoc | |
| dsh-agent-mcp eklavya-san/dsh-agent-mcp Enables zero-cost autonomous coding and dual-agent verification by connecting AI IDEs to DeepSeek Harness and local or free model backends. |
47,351–47,400 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.