Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| vault-kv-mcp elisjetmax/mcp-vault-hashicorp A read-only MCP server that provides tools to read, list, and inspect secrets from HashiCorp Vault's KV secrets engine (versions 1 and 2) using a Vault token. | |
| youtube-music-mcp elisonsz/youtube-music-mcp Enables searching YouTube Music and managing playlists through read and confirmation-gated write tools over STDIO. Supports identity checks, song search, playlist listing/retrieval, and previewed playlist creation, track addition, and exact | |
| claude-host elitespec/claude-host Deploy Claude-generated websites to EliteSpec hosting in one tool call. deploy_site / update_site / list_sites tools give the model a live URL on elitespec.co.nz seconds after writing HTML/CSS/JS. | |
| comfy-ae-video-factory-mcp eliveral/codex-mcp-comfy-ae-video-factory-mcp Enables AI video automation pipeline: ComfyUI image-to-video, FFmpeg processing, After Effects template rendering, review, and multi-platform publishing preparation. | |
| Jira MCP Server eliya-56/mcp-jira Enables AI assistants to manage Jira issues with full CRUD, transitions, linking, commenting, and file attachments via the Jira REST API v3. | |
| Subindex MCP Server eliyahuai/mcp-server-subindex Generates, validates, and updates structured research tables by synthesizing multiple AI queries, enabling AI agents to autonomously drive research workflows. | |
| A11y Expert MCP elizabeth1979/a11y-expert-mcp An accessibility expert MCP server that provides AI coding assistants with real-time access to WAI-ARIA patterns, code review, contrast checking, and WCAG guidance for writing accessible code from the start. | |
| AEE MCP Server elizabeth1979/accessibility-engine Enables AI-first accessibility testing by investigating pages, explaining findings, and applying fixes via natural language, integrated with Playwright tests and local or cloud AI models. | |
| io.github.freema/openclaw-mcp elizabethjeong/openclaw-mcp Enables MCP clients such as Claude.ai and Claude Desktop to securely connect to self-hosted OpenClaw gateways, chat with assistants, check gateway health, list configured instances, and manage long-running tasks across multiple instances. | |
| multiCAD-mcp elizabethk72437/multicad-mcp Enables AI assistants to control CAD applications like AutoCAD, ZWCAD, GstarCAD, and BricsCAD through natural language or direct tool calls. Supports drawing, layer and entity management, block operations, data export, and file handling via | |
| prom-evidence-mcp elizabethpammi/prom-evidence-mcp An evidence-first Prometheus MCP server that lets AI agents query production telemetry with detailed receipts including exact PromQL, timing, series count, and explicit warnings for empty, high-cardinality, or unreliable data. | |
| Excalidraw Architect MCP elizabethshukla/excalidraw-architect-mcp Enables users to generate and revise 25 types of hand-drawn Excalidraw diagrams—including architecture, flowcharts, sequence, ER, Gantt, and charts—from natural-language specs without managing coordinates. It can also persist architecture a | |
| MCP-Discord elizabethshukla/mcp-discord Enables AI assistants to interact with Discord by logging in a bot and managing servers, channels, roles, members, messages, forum posts, reactions, and webhooks. | |
| SF Tennis Court Booking via Cloudflare MCP Server elizabethsiegle/rec-us-mcp-server Automates tennis court bookings on San Francisco Recreation websites using browser automation, with tools to check availability, initiate booking with SMS verification, and complete bookings. | |
| Remote MCP Server Authless elizabethsiegle/remote-mcp-server-authless-andor A remote MCP server deployable on Cloudflare Workers without authentication, providing tools for website scraping and content extraction using Cloudflare's Browser Rendering and AI. | |
| remote-mcp-server-authless-gif-search elizabethsiegle/remote-mcp-server-authless-gif-search A remote MCP server deployed on Cloudflare Workers that returns gifs based on input queries without authentication. | |
| Remote MCP Server (Authless) elizabethsiegle/remote-mcp-server-authless-rickroll A Cloudflare Workers-based MCP server that enables AI tools without requiring authentication, allowing connection from Claude Desktop or the Cloudflare AI Playground. | |
| Remote MCP Server for Cloudflare elizabethsiegle/remote-mcp-server-authless-rootlyai A deployable Model Context Protocol server on Cloudflare Workers that runs without authentication requirements, allowing integration with AI models through the Cloudflare AI Playground or Claude Desktop. | |
| Remote MCP Server for Website Analysis elizabethsiegle/remote-mcp-server-authless-scrape-and-analyze-website An authless Cloudflare Workers server that provides tools to scrape, analyze, and answer questions about websites using Cloudflare's Browser Rendering and AI capabilities. | |
| Things MCP Server elizagarate/things-mcp Enables Claude to interact with Things 3 task management, allowing creation, analysis, and management of tasks, projects, and tags via natural language. | |
| Indico MCP Server elizavetara/cern-indico-mcp Provides access to CERN Indico public events, enabling search, retrieval of event details, and listing of upcoming events through natural language. | |
| mcp-emailjs eliziomartins/mcp-emailjs An MCP server for EmailJS that enables AI agents to send emails, validate configurations, and query email history through natural language. | |
| zoho-mail-mcp eljay179-consulting/zoho-mail-mcp MCP server for human-reviewed Zoho Mail inbox triage. It uses a two-pass proposal/execution model to propose actions (move, archive, mark-read) without touching the inbox until a human approves, and treats email content as untrusted data to | |
| inventree-mcp-plugin eljefedelrodeodeljefe/inventree-mcp-plugin MCP server plugin for InvenTree, enabling AI assistants to interact with inventory data such as parts, stock, locations, orders, and BOMs. | |
| mcp-server eljijuna/mcp-server A thin TypeScript MCP server that exposes engineering tools (Bitbucket, Jira, Confluence, ArgoCD) to MCP-compatible editors via a single API key per developer, delegating all service interactions to an internal backend. | |
| gemini-embedding-2-mcp-server elkalowkey885/gemini-embedding-2-mcp-server A local MCP server that indexes files in a directory using Gemini Embedding 2, enabling AI agents to perform semantic search over local documents. | |
| elkassabgidata elkassabgi/elkassabgidata-mcp Provides AI assistants with direct access to economic statistics, high-frequency US equity bars, and patent/innovation measures, enabling search, metadata retrieval, and data download through MCP tools. | |
| ComfyMCP Local elkay182/comfymcp-local Local-first MCP server for controlling a loopback ComfyUI instance from same-machine or authenticated LAN clients. | |
| sap-hana-mcp elkhn/sap-hana-mcp An MCP server for SAP HANA that enables listing tables, columns, running SQL queries, and looking up SAP table descriptions, all through natural language via AI assistants. | |
| revit-mcp-hardened elkhouryrafik-boop/revit-mcp-hardened Hardened MCP server for Autodesk Revit enabling LLMs to inspect and manipulate Revit models via pyRevit, with token authentication and capability profiles. | |
| openclaw-mcp elkimek/openclaw-mcp Enables Claude Code to communicate with an OpenClaw bot via Matrix, allowing you to send messages and read replies using natural language. | |
| linkbit-mcp elkinegor/linkbit-mcp Enables users to shorten links, bulk create URLs, generate QR codes, manage and disable links, and retrieve click analytics from MCP clients like Claude, ChatGPT, Cursor, and n8n. | |
| GymTimer MCP Server elkno/gymtimer-mcp-server Enables AI assistants to access and modify a user's real GymTimer workout and nutrition data stored in private iCloud, allowing natural-language queries about training history and the creation of workout templates and meal plans. | |
| context-bridge elkraps/context-bridge-mcp Provides LLMs with secure, read-only access to local documentation by scanning directories, extracting content from PDF, DOCX, Markdown, and text files, and performing keyword searches. | |
| Motion MCP Server ellarosaaudc/motion-mcp-server Enables natural-language management of Motion tasks, projects, workspaces, schedules, comments, custom fields, recurring tasks, statuses, and users via the Motion API. | |
| Dot RVC Bridge ellazhangca/dot-rvc-bridge Enables compatible local MCP hosts to inspect and control a local RVC voice-conversion engine, including listing and selecting models, setting pitch and index ratio, starting or pausing playback, and toggling original-voice bypass. | |
| septa-mcp ellbur/septa-claude-connector Enables Claude to answer SEPTA Regional Rail timetable and real-time questions, including next trains, station departures, train positions and delays, and service alerts, with loose station-name matching. | |
| devcrumb ellemsoft/devcrumb Provides AI coding tools with a shared knowledge base of real-world fixes and gotchas, verified by usage, to stop debugging errors others already solved. | |
| secretary-mcp ellen-11/secretary-mcp Enables main agents to delegate memory retrieval, web research, and multi-step tasks to internal sub-agents, returning concise conclusions while keeping detailed tool calls and raw content out of the main context. | |
| Model Context Protocol (MCP) Server ellenfel/model-context-protocol A basic Python implementation of a Model Context Protocol server for educational purposes, using FastAPI and WebSockets. | |
| Notion MCP Server ellenrocha1/notion-mcp Enables AI assistants to search Notion pages, create database entries, and append checklist tasks directly via natural language. | |
| coinspot-mcp ellermanj/coinspot-mcp Enables MCP clients to access CoinSpot Australia market data and account operations, including prices, order books, balances, order history, and optional guarded trading or withdrawal tools. | |
| iRacing MCP Server ellettie/iracing-mcp-server Enables AI assistants to access real-time iRacing telemetry, race information, camera control, pit operations, and replay features through the MCP protocol. | |
| AbletonMCP elleural/ableton-mcp Enables AI agents and MCP clients to drive Ableton Live 12 end to end, from setting tempo and building instruments through writing MIDI, arranging, mixing, bouncing and mastering. Adds real-time rendering plus loudness and spectral analysis | |
| QQ Channel Data Collector elleys/mcp Enables automated collection and downloading of multimedia content (images, GIFs, videos) from QQ channels. Features efficient video scraping, incremental updates, and intelligent fallback mechanisms for comprehensive media harvesting. | |
| confluence-dc-mcp ellgree/confluence-dc-mcp Enables interacting with a self-hosted Confluence Data Center instance to search pages using CQL, retrieve pages and children, and create or update page content via the Confluence REST API. | |
| gitlab-mcp ellgree/gitlab-mcp MCP server for interacting with GitLab API, supporting both self-hosted instances and gitlab.com. Provides tools for managing issues, merge requests, code review, pipelines, milestones, releases, search, and file access. | |
| jira-mcp ellgree/jira-mcp Enables local MCP-based interaction with Jira Cloud, offering tools for issues, comments, transitions, worklogs, attachments, and user lookups while addressing gaps like attachment downloads, mention notifications, and multi-step status tra | |
| mailbox-mcp ellgree/mailbox-mcp MCP server for inter-agent mailbox communication using file-based mailboxes in .claude directories. | |
| teams-outlook-mcp ellgree/teams-outlook-mcp Enables interaction with Microsoft Teams and Outlook through the Graph API, with available tools determined by the access token's granted scopes. |
47,651–47,700 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.