Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MySQL MCP Server eltonf/mysql-mcp-server Enables schema introspection and safe read-only queries on MySQL databases, supporting table/column discovery, relationship exploration, and controlled SELECT queries. | |
| PostgreSQL MCP Server eltonf/postgres-mcp-server An open-source MCP server for PostgreSQL schema introspection and guarded read-only queries. It enables MCP clients to discover schemas, tables, columns, indexes, relationships, and safe queryable data from a configured PostgreSQL database. | |
| Weather MCP Server eltonmesquita87/mcp_server_tempo Enables Claude Desktop to query real-time weather information and forecasts via the OpenWeatherMap API, with caching and history features. | |
| sendfox-mcp eltybelgium/sendfox-mcp A remote MCP server template deployable on Cloudflare Workers without authentication, allowing you to define custom tools and connect to MCP clients like Cloudflare AI Playground or Claude Desktop via SSE. | |
| MCP News Server eluc1a/mcp-news A server providing access to news articles from various categories including tech, data science, cybersecurity, and more, allowing retrieval and summarization of latest content. | |
| HIPAA Guardian MCP Server eludden35/hipaa-guardian-mcp Provides comprehensive HIPAA compliance guidance for developers building healthcare applications. Offers tools to identify PHI, understand encryption requirements, navigate business associate rules, and ensure compliance with HIPAA Security | |
| mcp-openalex elumya/openalex-mcp MCP server for the OpenAlex scholarly database, providing AI agents with tools to search and retrieve academic works, authors, and institutions via natural language queries. | |
| MCPKaliServer elusivehacker/mcpkaliserver Connects LLMs to a Kali Linux host over SSH for authorized penetration testing, exposing tools organized by pentest phases (recon, enumeration, exploitation) with scope guardrails. | |
| fernhop elusivekaze/fernhop An MCP server that lets Claude hand tasks off to OpenCode, which does the hands-on work with whatever model you configure. Claude can dispatch runs, poll progress, review changed files, interrupt sessions, and pick models through aliases. | |
| MCP Server Code Execution Mode elusznik/mcp-server-code-execution-mode Executes Python code in isolated rootless containers while proxying MCP server tools, reducing context overhead by 95%+ and enabling complex multi-tool workflows through sandboxed code execution. | |
| elvatis-mcp elvatis/elvatis-mcp MCP server for OpenClaw that enables AI clients to control smart home devices, manage memory and cron jobs, and orchestrate multiple AI sub-agents. | |
| App MCP elvinbaghele/your-supabase-mcp Enables turning an existing Supabase database and Edge Functions into an MCP server, exposing selected tables with Row Level Security and Edge Functions as tools for use in MCP clients. | |
| OmniDocs RAG elvinbayramov/omnidocs-rag Enables AI agents to index and search local files, websites, GitHub repos, and packages using hybrid retrieval with reranking, all through IDE chat. | |
| oracle-mcp-server elvincooper/oracle-mcp-server Enables MCP clients to connect to Oracle 11g databases in thick mode, supporting multiple named connections for listing tables, describing schemas, and running row-limited read-only queries. Write operations such as INSERT, UPDATE, DELETE, | |
| EvidentTrail MCP elvirus839/evidenttrail-mcp Enables AI coding agents (Claude Code, Copilot, Cursor, Windsurf) to log tool actions automatically through hooks or via the et_log_action tool, buffering them for flush to an ingestion API as SHA-256 hash-chained audit evidence linked to p | |
| Playwright MCP elvis280/playwright-mcp-render-mu5c3wmm Enables AI tools to drive a hosted headless Chromium browser over HTTP, allowing LLMs to navigate, click, type, and read web pages through accessibility snapshots. | |
| AIOps MCP elvisaryan/aiops-mcp A multi-agent MCP server that turns LLMs into an autonomous incident-response copilot, enabling rapid investigation, correlation, and remediation of production incidents. | |
| Threads Scheduler MCP elvisgoodluck/treads-mcp A local-first MCP server for reading, planning, scheduling, and publishing Meta Threads posts, with OAuth and Keychain integration. | |
| MCP Server Demo elvisleyva49/mcp-server-demo A minimal WebSocket-based MCP server implementation that enables modern tool integrations with VSCode, Claude, and other applications. | |
| gmail-mcp elvisoliveira/gmail-mcp Exposes Gmail inbox actions (list, archive, label) as MCP tools via a browser extension and local bridge, without requiring the Gmail API or OAuth. | |
| VTiger MCP Server elvmalrds/vtiger-mcp-server Enables interaction with VTiger CRM through tools for module listing, CRUD operations, querying, and searching records. | |
| netscan MCP Server elweth-sec/netscan-mcpserver MCP server that enables Claude to perform network scans using netscan, supporting discovery, remote access, Windows/AD, web, DNS, database, and network service scanners via natural language commands. | |
| Sytadel MCP Server elwinernst/sytadel-mcp-server Provides MCP tools for Sytadel identity and access management, enabling user listing, service account management, session anomaly queries, policy generation, and access reviews. | |
| cyberpanel-mcp elwizard33/cyberpanel-mcp MCP server for CyberPanel that enables AI-driven management of web hosting servers, including websites, databases, email, and more via 200+ tools. | |
| ted-mcp elxandre/ted-mcp Enables AI agents to search, count, and validate EU public-procurement notices from the Tenders Electronic Daily database through read-only, keyless queries using keyword, country, CPV, date-range, and expert-syntax filters. It can run loca | |
| marrow elxmaj/marrow Enables coding agents to access structured product context (decisions, goals, evidence) from meetings and tools, ensuring they build from actual product decisions. | |
| mcp-file-manager elyasbromand/mcp-file-manager Enables local file management through natural language interactions using the Gemini API, with tools for listing, reading, writing, deleting, and updating files. | |
| Codex Bridge elyin/codex-bridge Enables AI coding assistants to interact with OpenAI's Codex AI through the official CLI. Provides direct integration for code analysis, file review, and batch processing with zero API costs. | |
| gemini-bridge elyin/gemini-bridge A lightweight MCP server bridging AI agents to Google's Gemini AI via official CLI | |
| split-bill-mcp elyor-sh/split-bill-mcp Enables AI agents to manage SplitBill bills and friends through natural language: create bills from receipts, list and filter bills, update payment statuses, search users, and view dashboard stats. | |
| claude-slack-channel elys0912/claude-slack-channel Relays Slack direct messages into a locally running Claude Code session over MCP, so users can talk to their local agent from Slack. Replies, reactions, and execution-permission approvals (buttons or yes/no replies) are all handled inside S | |
| Inari MCP for Firefox elys0912/inarimcp Enables an MCP client such as Claude Code to read and operate your real, everyday Firefox profile — reading pages, clicking, typing, navigating, switching tabs and taking screenshots — with per-action human approval and masking of password, | |
| 出图台 elysia07291207/image-booth-mcp Enables any MCP-capable agent to generate images in the cloud without a GPU, local models, or downloads, using the user's own API key for providers such as DashScope's Wan/Qwen image models and Volcano Ark's Seedream. It can list which chan | |
| DeepBridge elysia1066/deepbridge Enables Codex to delegate tasks to DeepSeek Harness through A2A/ACP, with reusable conversation contexts and a local dashboard for task status. | |
| fgiscs-history-mcp elysosss/fgiscs-history-mcp MCP server that exposes the version history of Russian construction-pricing open data (ФГИС ЦС), enabling queries about dataset versions, salary changes, and republished-but-unchanged exports. | |
| Elytra Security MCP Server elytrasec/mcp Enables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE. | |
| Discord MCP Server elyxlz/discord-mcp Enables LLMs to read messages, discover channels, send messages, and monitor Discord communities using web scraping without requiring bot permissions or API tokens. | |
| Microsoft MCP elyxlz/microsoft-mcp A powerful MCP server that enables AI assistants to interact with Microsoft Graph API for managing Outlook emails, Calendar events, OneDrive files, and Contacts through natural language commands. | |
| VkusVill MCP Server elzehorn/vv_mcp MCP server for VkusVill grocery store, enabling product search, details retrieval, and cart link creation. | |
| todo-mcp-server em-deesha/todo-app-mcp-integration-with-gemini-cli Enables Gemini CLI and other AI assistants to manage todos (create, read, update, delete, filter) through natural language commands via the Model Context Protocol. | |
| mcp-inicio-ia em4nu3i69dll/mcp-inicio-ia Enables clients to index and search reviewed Markdown and text documents with SQLite FTS5, read sources and prompts, manage explicit notes, and query a local Ollama assistant that uses permitted tools. | |
| uniswap_prices ema-0/uniswap_prices Zero-auth MCP server that reads Uniswap V1/V2/V3 reserves directly on-chain | |
| Remote MCP Server on Cloudflare emaa-f/remote-mcp-server Enables deploying and running a Model Context Protocol (MCP) server on Cloudflare Workers with built-in OAuth authentication. It allows users to host and access tools remotely via Server-Sent Events (SSE) transport from clients like Claude | |
| omp emaaa-io/omp-mcp-emaaa Enables MCP clients like Claude Code, Codex, and others to offload bounded background tasks (e.g., repository scans, reviews, batch work) to smaller models configured in OMP, while the parent agent retains context and decision-making. | |
| cosmos-mcp emacuvillier/cosmos-mcp MCP server exposing public NASA APIs (APOD, Mars rover photos, near-Earth objects, Earth imagery) with tools, a resource, and a prompt, providing visual Markdown responses and a Spanish-language space briefing skill. | |
| desktop-control-mcp emadaljumah-camel/desktop-control-mcp MCP server for Windows desktop automation. It provides mouse, keyboard, screen capture, and AI-driven UI element detection via OmniParser. | |
| mare-browser-mcp emadklenka/mare_browser_mcp A lean, LLM-first browser automation MCP server that gives Claude (or any MCP client) a real Chromium browser to navigate, interact with, and debug web apps. | |
| Slnmap emahmoudnabil/slnmap A semantic map of your .NET solution for AI coding agents. Analyzes a solution with Roslyn into a queryable code graph exposing 11 read-only tools (find_symbol, impact_analysis, find_implementations, etc.) over MCP. 100% local, no telemetry | |
| @emailalias/mcp emailalias/emailalias-mcp Enables natural language management of email aliases via EmailAlias.io API, including create, update, delete, and monitoring tasks. | |
| emailit-mcp emailit/emailit-mcp Official Emailit MCP server: send transactional email and manage domains, contacts, audiences, templates, suppressions, webhooks, and API keys with an Emailit API key, over stdio or HTTP. |
47,801–47,850 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.