Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| churn-mcp-server eklavya20/churn-mcp-server Enables MCP-aware clients to call the churn-prediction API's predict_churn and check_model_health tools directly, proxying to the existing churn-api service over HTTP. | |
| db-mcp eklemen/db-mcp Read-only PostgreSQL database MCP server for safely exploring schema, tables, relationships, and sample data without modification. | |
| deploy-mcp-eklps eklps/deploy-mcp-server Allows AI assistants to deploy static frontend directories to Surge.sh via a single command, without requiring local Surge installation. | |
| Customer Support MCP Server ekluvtech/customersupport Enables AI-powered customer support with real-time access to CRM, ticketing, and communication tools via MCP, supporting context-aware conversations and automated actions. | |
| smart-search ekmungi/smart-search A local-first MCP server that enables semantic search over PDF and DOCX documents using structure-aware parsing and vector storage. It allows users to query their local knowledge base through Claude Code without cloud dependencies or GPU re | |
| omega-mcp-server ekoelogan/omega-mcp-server MCP server that exposes 108+ omega-cli OSINT tools for reconnaissance, web analysis, threat intelligence, and reporting, enabling AI assistants to perform comprehensive open-source intelligence tasks. | |
| mcp-sqlserver ekoeryanto/mssql-mcp Enables interaction with Microsoft SQL Server by executing queries, statements, and stored procedures, as well as retrieving schema metadata through the Model Context Protocol. | |
| mcp-os-notifications ekomac/mcp-os-notifications An MCP server that lets LLM agents dispatch native OS notifications when a task finishes. It supports cross-platform desktop notifications, task tokens for updates, mobile bridges, and quiet hours. | |
| sync-hub ekonum/sync-hub Centralizes verbatim local AI conversation history into a SQLite database and exposes it via an MCP server, enabling tools like Claude Code and Codex to retrieve exact context from other tools. | |
| AWS Security Analyzer ekrmcakir/aws-security-mcp An MCP server for automated AWS security scanning. It detects over-privileged IAM roles and S3 Public Access Block misconfigurations, enabling least-privilege enforcement through tools like list_iam_roles, analyze_iam_policy, and analyze_s3 | |
| MS 365-21V MCP Server ekrylov65069/ms-365-21v-mcp-server Enables MCP-capable AI clients to access and manage a user's 21Vianet Microsoft 365 mail, calendar, OneDrive, SharePoint, Teams, contacts, org users, and search through Microsoft Graph China, while respecting delegated permissions, confirma | |
| xcodeinstrumentmcp eksdev007/xcodeinstrumentmcp Local-first CLI and MCP server for turning Xcode Instruments artifacts into bounded, agent-sized evidence, with support for analyses like Time Profiler, Allocations, Network, and more. | |
| Ghidra MCP Server eksisle/mcp4ghidra Bridges Ghidra's reverse engineering capabilities with AI tools through 179 specialized tools for automated binary analysis and documentation. It supports full read/write access for function decompilation, renaming, and cross-binary documen | |
| pocketledger ektamishra4321/pocketledger MCP server for personal finance management. Enables natural language expense logging, budgeting, recurring charge detection, and statement import with deterministic local calculations. | |
| lifesaver-mcp ekufta0530/frame-shop Enables pulling SSRS Work Order List reports from Lifesaver Software as structured data via an MCP tool that accepts date ranges and returns parsed rows. | |
| Better Playwright MCP ekuznetski/better-playwright-mcp Token-efficient browser automation MCP server using Playwright, with getOutline and searchSnapshot to save ~95% tokens compared to full snapshots. | |
| Ekwo OS — open source accounting ekwo-ai/ekwo-os Double-entry books an agent keeps as the user, on your own Postgres or Supabase: invoices, VAT returns, bank reconciliation, financial statements and 130 country packs. | |
| ABC Vision MCP ekyo0224/abc-vision-mcp Exposes a production badminton video-analysis engine as agent tools, recording branch decisions and refusing uncertain analyses. | |
| Discord MCP Server el-el-san/discord-mcp Enables interaction with Discord channels through a bot, allowing users to send messages and files, retrieve messages with advanced filtering, and download attachments of any type. | |
| AI Video Generator MCP Server el-el-san/fal-mcp-server Model Context Protocol server that enables generating videos from text prompts and/or images using AI models (Luma Ray2 Flash and Kling v1.6 Pro) with configurable parameters like aspect ratio, resolution, and duration. | |
| Vidu MCP Server el-el-san/vidu-mcp-server A server that enables generating videos from static images using Vidu's AI models, with features for image-to-video conversion, task monitoring, and image uploading. | |
| eco2mix-mcp el-pedrito/eco2mix-mcp Connects to real-time French power grid data (carbon intensity, consumption, generation mix) to make Kiro carbon-aware, enabling it to defer heavy jobs when the grid is dirty. | |
| Clockify Timer MCP Server el3mentdev/clockify-mcp Enables starting and stopping Clockify timers, checking the currently running timer, and viewing recent time entries via Claude. | |
| Roblox Studio MCP el4cteo/rbx-studio-mcp Enables AI agents to inspect, create, edit, debug, and playtest projects inside the Roblox editor via 29 lean tools, with push-based SSE transport, editor-safe script edits, and batched undoable writes. | |
| roblox-devforum-mcp el4cteo/roblox-devforum-mcp Give your AI coding agent the Roblox DevForum and official creator docs — check if a bug is already known, read the accepted answer, and verify APIs before writing Luau. | |
| roblox-logics-mcp el4cteo/roblox-logics-mcp Gives AI assistants sourced, up-to-date Roblox game-development knowledge: engine changes, pitfalls and libraries, each linked to DevForum, Creator Docs or GitHub. Free edition: 50 logics. Full hosted edition (600+): brickwise.dev | |
| x-mcp el4cteo/x-mcp Enables AI agents to interact with X (Twitter) through 10 grouped tools and 69 actions, covering reading and searching posts, publishing threads, uploading media, managing Lists, sending DMs, and viewing images and video frames. Includes re | |
| Baloosearch MCP Server el95149/baloosearch-mcp Enables AI assistants to search for files and content across the file system using KDE's baloosearch tool. Provides semantic search capabilities with configurable parameters like file type, directory, and result limits. | |
| rapid7-mcp-server el95149/rapid7-mcp-server Enables querying Rapid7 InsightIDR logs using natural language through AI assistants, with support for time filtering, logset selection, and LEQL queries. | |
| mcp-oraclefusion elabbarw/mcp-oraclefusion Read-only access to Oracle Fusion Cloud ERP data via natural language queries, with support for accounts payable, procurement, general ledger, and more. | |
| mcp-streamable-http-bridge elad-bar/mcp-streamable-http-bridge Bridges stdio Model Context Protocol (MCP) servers to MCP Streamable HTTP behind a single gateway, enabling multi-tenant, multi-user deployment with per-tenant environment variables via HTTP headers. | |
| Azure DevOps MCP Server elad-health/azure-devops-mcp A read-only MCP server connecting AI assistants to Azure DevOps Server (on-premises) for browsing projects, repos, builds, work items, releases, pipelines, and test results. | |
| remote-mcp-server-authless elad-lab-web/remote-mcp-server-authless Enables deploying a stateless remote MCP server on Cloudflare Workers without authentication, supporting custom tools and compatibility with legacy MCP clients. | |
| File Search MCP elad12390/file-search-mcp Enables blazingly fast file and content searching in large codebases using ripgrep, with intelligent filtering, fuzzy finding, and directory tree visualization while respecting .gitignore and avoiding common bloat directories. | |
| notification-mcp elad12390/notification-mcp An MCP server that lets AI assistants send spoken audio notifications using high-quality AI voices, so you don't have to stare at the screen waiting for long tasks to finish. | |
| Sentry MCP Server elad12390/sentry-mcp Enables searching and analyzing Sentry issues, events, and traces via natural language, providing tools for error investigation and distributed tracing. | |
| Web Research Assistant elad12390/web-research-assistant Comprehensive web research toolkit with 13 tools for searching (via SearXNG), crawling, package discovery, GitHub metrics, error translation, API documentation lookup, data extraction, technology comparison, and service status checking. | |
| buyme-mcp-vercel eladkishon/buyme-mcp Remote MCP server for searching Israeli businesses that accept BuyMe gift cards, with tools for filtering businesses by category, region, and price. | |
| ytscholar elahe-z/ytscholar Enables building a local, searchable knowledge base from YouTube videos, with research, transcript retrieval, and timestamped citations. | |
| vm-codex-mcp-bridge elainadesne/remote-workspace-mcp Enables MCP clients to read only explicitly allowlisted Linux project files and selected Codex conversation turns. It supports listing projects and files, reading UTF-8 files, bounded text search, and paged reading of authorized conversatio | |
| companion-memory elaine-wang-cui/companion-memory Provides an MCP memory system for AI personas with fading strengths, automatic recall, session handoff notes, isolated multi-persona stores, peer messaging, and a browsable star atlas. Runs on Cloudflare Workers and connects to any MCP clie | |
| annotate-mcp elainemhr/annotate-mcp MCP server that opens a browser and adds a comment/pencil overlay to every page, letting you annotate live sites and send the marks to your coding agent. | |
| @cyanheads/pubmed-mcp-server elambert2560/pubmed-mcp-server Enables searching PubMed, PubMed Central, and Europe PMC and fetching article metadata, full text, citations, related works, MeSH terms, and identifier conversions. Runs over STDIO or Streamable HTTP and exposes 11 tools, a database info re | |
| MCP RAG Agent elandy/mcp-ai-backend A local-first AI backend that combines Model Context Protocol, Retrieval-Augmented Generation, and an agent runtime to answer questions from a private knowledge base. | |
| Elastic Security MCP App elastic/example-mcp-app-security Brings interactive blue-team security operations into AI hosts, enabling alert triage, attack discovery, case management, detection rules, threat hunting, and sample data generation with rich inline UIs. | |
| Semantic Code Search MCP Server elastic/semantic-code-search-mcp-server Provides AI coding agents with structured access to indexed codebases via semantic search, symbol analysis, and file reading tools. | |
| GoldenGate MCP Server elbachir-salik/goldengate-mcp A production-grade MCP server that exposes real-time banking data replicated via Oracle GoldenGate CDC as structured tools for AI agents, enabling read, score, and write operations on customer, account, transaction, and alert data. | |
| Glitchrupt MCP Server elbee19/glitchrupt A local MCP server that lets agents check status, list and play sound cues, and register, inspect, or resolve approval waits, giving macOS users a brief desktop jolt when attention is needed. | |
| Spotify MCP Server elbeldu/mi-spotify-mcp Enables AI assistants to control Spotify playback, search the catalog, and manage playlists and liked songs through natural language. Supports reading currently playing tracks, queues and devices, plus play, pause, skip, queueing, volume co | |
| Database Tools for Claude AI elber-code/database-tools MCP server that allows Claude AI to interact directly with MySQL databases, enabling query execution and table information retrieval through natural language. |
47,401–47,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.