Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| SmartSuite MCP Server elevanaltd/smartsuite-mcp Enables interaction with SmartSuite workspace data through natural language, providing 6 tools for querying, managing records, exploring schemas, and performing operations with human-readable field names across 10+ configured table types in | |
| app.vercel.baselens-api/baselens elevatedesign/baselens Enables AI agents to query Base on-chain data such as balances, token metadata, transactions, gas, names, prices, transfers, and contract details through paid MCP tools using x402 payments. | |
| MCP Server for Odoo elevateinformatics/mcp-server-odoo Enables AI assistants to interact with Odoo ERP systems through natural language, allowing users to search, create, update, and manage business records like customers, products, and invoices across any Odoo instance. | |
| cont3xt elevend0g/cont3xt Virtual Infinite Context for Agents and LLMs - maintains a continuous rolling context window, surfacing relevant memories while respecting token budgets. | |
| ElevenLabs Agents MCP App elevenlabs/elevenlabs-agents-mcp-app Enables creating and managing ElevenLabs conversational AI agents with an interactive UI, voice selection, and configuration of agent behavior. | |
| Awesome Well Structure MCP elf004-star/awesome-well-mcp Automatically generates borehole structure diagrams from well data, supporting multiple well types and returning simplified image paths to reduce token usage. | |
| Infinigen MCP Server elfenlieds7/infinigen-mcp Enables AI assistants to generate photorealistic 3D scenes, indoor environments, and individual 3D assets procedurally using Infinigen. Supports various export formats and computer vision annotations for generated scenes. | |
| paki-curator elfresonero/paki-curator Catalogue agent for César Yagüe's silent moving-image works, intuitively crafted, never generated. Remote MCP server, no authentication. | |
| Elgato MCP Server elgatosf/elgato-mcp-server Bridges AI assistants with Elgato apps via IPC, enabling dynamic tool discovery and notification forwarding. | |
| Magento 2 Development MCP Server elgentos/magento2-dev-mcp Enables AI agents to interact with Magento 2 development environments through comprehensive tools for module management, database operations, cache control, configuration management, and system diagnostics. Supports complete development wor | |
| Morning Light Desk MCP elghaly-dev/iris-alexa Enables Alexa+ agents and other MCP hosts to analyze dry exam/card pulse text from a mock trading desk, returning structured test results, signals, problems, needs, alarms, and recommendations over Streamable HTTP. It works with an offline | |
| AIquila MCP Server elgorro/aiquila Enables AI assistants to securely read and write files, notes, tasks, bookmarks, projects, and recipes in a self-hosted Nextcloud instance. | |
| sidegig elgrekost/sidegig Enables AI agents to post, claim, answer, follow up on, and close file-based gigs through MCP tools, with the board stored as a shared folder. | |
| mcp-rag elhassane1230/mcp-rag Enables semantic search and question answering over a knowledge base using hybrid retrieval and grounded answers, all running offline with no API keys. | |
| AI Software Engineering Team - MCP Multi-Agent System elhaweet/ai-software-engineering-team-mcp-multi-agent-system Enables users to generate complete, production-ready software projects from simple ideas by coordinating 8 specialized AI agents through the Model Context Protocol. | |
| BFL MCP Server elhombrejd/bfl_mcp An MCP server that enables generating and editing high-quality images with natural language using Black Forest Labs' FLUX.1 Kontext Pro model. | |
| US Watchlist Alerts eli-alvarado/us-watchlist-alerts US stock watchlist, NYSE-aware price alerts and daily briefs over stdio MCP. Free Yahoo quotes, no API key; never places trades. | |
| ytbrain eli-xir/ytbrain MCP server for turning YouTube channels into a queryable local knowledge base. Enables BM25 search and extractive Q&A over captions with timestamped citations. | |
| wadachi eliacinti/wadachi Persistent memory for AI agents built on the LLM Wiki pattern: a plain-Markdown brain (also a valid Obsidian vault) with SQLite metadata, local semantic search via fastembed (no API keys), one-call session context with project auto-detectio | |
| legalix-engineering eliamarlaw-dotcom/legalix-engineering-mcp Connects LLMs to Israeli civil engineering databases, including the Blue Book specs, Dekel 2026 pricing, Excel BOQ parsing, and tender arbitrage for unbalanced bidding. | |
| Codex Code Review MCP eliangelap/codex-code-review-mcp Enables manual review of GitLab Merge Requests and GitHub Pull Requests, loading context, generating comment previews, and preparing commit-based fixes for unresolved threads. Every write — comments, replies, and commits — requires explicit | |
| jira-stories eliangelap/codex-jira-stories-mcp Enables Codex CLI to query Jira Cloud projects and issues, preview reviewed stories locally, and create or update Jira issues only after explicit confirmation. | |
| mcp.js eliannotes/elian-bot Enables AI clients to list, create, update, run, pause, resume, and delete scheduled shell-script jobs, pass inputs, and read job outputs and message feed entries. | |
| Onyx Documentation MCP Server elias-michaias/onyx_mcp Provides AI systems with access to Onyx programming language documentation through web crawling and intelligent search capabilities. | |
| quant-rag elias-outofsample/quant-rag Provides retrieval and analysis tools for a quantitative-finance research library, enabling whole-passage answers with verifiable citations, citation checking, entity graph exploration, and corpus inspection. | |
| ClaudeCyclingMCP elias-ramzi/claudecyclingmcp An MCP server that converts structured cycling workout specs into MyWhoosh .zwo and Garmin Connect workout files, with tools for validation, description, and rendering. It also includes skills for uploading workouts to both platforms. | |
| Ardour Ultra MCP elias02345/ardour-ultra-mcp Enables MCP agents to inspect and precisely edit a running Ardour session — tracks, buses, groups, mixer, transport, regions, internal MIDI, plugins, routing and automation — through the DAW's Lua APIs with optional native OSC, plus offline | |
| Financial Modeling Prep MCP Server elias2956/financial-modeling-prep-mcp-server Exposes 250+ financial data tools across 24 categories to AI assistants, covering stocks, ETFs, crypto, forex, commodities, economics, company fundamentals, financial statements, technical indicators, and SEC filings. Supports dynamic tools | |
| LinkedIn MCP Server eliasbiondo/linkedin-mcp-server Enables searching and scraping of LinkedIn for structured data on people, companies, and job listings. It allows AI clients to retrieve detailed profiles, experience, and activity sections using browser automation. | |
| Reddit MCP Server eliasbiondo/reddit-mcp-server Provides AI assistants with access to Reddit data for searching, browsing subreddits, and retrieving post details or user activity without requiring API keys. It enables tools to fetch content, nested comment trees, and public user feeds di | |
| samsung-reminder-mcp eliasblume/samsung-reminder-desktop Enables reading and writing Samsung Reminder data locally, providing tools to list, create, update, delete, and manage reminders and categories via Samsung Cloud. | |
| AKIMCP eliasm4084/aki-mcp-sv Exposes an OAuth-gated MCP endpoint that lets web-based AI clients work directly on a local machine through 38 governed tools covering files, shell commands, search, Git, SQLite, browser automation, DevTools, background tasks, localhost ser | |
| Claude IPC MCP eliasogawa0768/claude-ipc-mcp Enables different AI assistants to register identities and exchange persistent messages across platforms and sessions using natural language commands. | |
| Claude Memory MCP Server eliasonadvising/claude-memory-mcp Enables persistent memory for Claude Code sessions by recording observations and building knowledge graphs for cross-session learning and domain knowledge management. | |
| applemusic-mcp eliaspetit/applemusic-mcp Gives MCP clients control of Apple Music playlists, library, catalog, discovery, playback, and the Up Next queue, using four interchangeable engines that run on macOS, Windows, and Linux. Requires only a Mac or an Apple Music subscription, | |
| CamoFox MCP eliasrorato392/camofox-mcp Enables MCP-compatible AI agents to control an anti-detection browser for navigation, interaction, search, extraction, downloads, session reuse, and multi-tab or batch workflows over stdio or HTTP. | |
| SCP — Selective Context Protocol eliasstepanik/scp MCP-compatible proxy hub that intelligently filters tool responses to stay within LLM context window budgets.
SCP sits between your LLM client and MCP servers, treating context as a budget, not a dump. Every token must earn its place throu | |
| Pingfusi eliastokugawa/pingfusi Enables AI coding agents to call real human reviewers for mid-task feedback, publishing work artifacts so reviewers can pin issues and return verdicts that guide iterative revisions until approval. | |
| Sierra Chart MCP eliasupernova/sierra-chart-mcp Enables MCP clients to observe and inspect Sierra Chart chartbooks, charts, studies, drawings, and data, read diagnostics, and apply validated configuration changes via a local bridge, without any order execution or trading features. | |
| Stock Trade MCP Server eliasv89072/stock-trade-finance-api Enables programmatic access to Tiingo financial data including stock prices, news, forex, fundamentals, dividends, and splits. Allows users to query and retrieve these financial datasets through the MCP protocol. | |
| MCP of MCPs eliavamar/mcp-of-mcps A meta-server that aggregates multiple MCP servers into a single interface, reducing token usage by 98%+ through progressive tool discovery and direct code execution that processes data between tools without consuming context window space. | |
| MyDramaList MCP elibonk/mydramalist-mcp Enables authorized clients to search and read titles, people, feeds, reviews, and account data for a single configured account, and to perform permitted writes such as managing watchlists, custom lists, reviews, comments, posts, and profile | |
| Yandex Tracker MCP elicad-keyns/yandextrackermcp Enables AI agents to manage Yandex Tracker tasks with tools for creating, reading, updating, and transitioning issues via a Streamable HTTP endpoint. | |
| Telegram Delivery MCP elicad-keyns/yandextrackertelegrammcp MCP server for delivering Yandex Tracker artifacts to Telegram via a bot service. It works in conjunction with YandexTrackerMCP to send summarized reports and verify delivery. | |
| elid-wine-mcp elid-wine/elid-wine-mcp Enables AI assistants to identify wines from text, retrieve detailed vintage fact sheets, and search observed Swiss-market shop prices, all with read-only MCP tools. | |
| Rocket.Chat MCP Server elieworkspace/rocketchat-mcp Enables interaction with Rocket.Chat instances through MCP protocol. Allows users to manage chat operations and integrate with Rocket.Chat servers using natural language commands. | |
| MCP Calculator Streamable HTTP eliezerraj/mcp-calculator-streamable-http Provides basic arithmetic calculation tools through an HTTP-accessible MCP server. Supports mathematical operations like addition with streamable responses for integration with MCP clients. | |
| Langfuse MCP Server elifalmeida/langfuse-mcp Enables AI agents and MCP clients to debug and observe LLM applications by querying traces, sessions, exceptions, prompts, datasets, scores, and metrics. Supports local stdio/HTTP access, selective tool loading, and read-only operation for | |
| tis-mcp elifalmeida/train-in-silence Turns a plain-language description of an LLM fine-tuning job into ranked hardware picks by estimating the required VRAM and FLOPs, then comparing live pricing across a dozen GPU clouds. Returns the cheapest, fastest, and most balanced confi | |
| mcp-openapi-demo elifbeyzatok00/mcp-openapi-demo MCP server for the Petstore API enabling LLMs to find pets by status via function calling. |
47,551–47,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.