Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MetaTrader5 MCP Server emerzon/mtdata-mcp Enables access to MetaTrader5 market data and trading functionality, including real-time quotes, historical OHLCV data, tick data, symbol information, and technical indicators for forex and other trading instruments. | |
| MCP Ollama Server emgeee/mcp-ollama MCP Ollama server integrates Ollama models with MCP clients, allowing users to list models, get detailed information, and interact with them through questions. | |
| Headless Obsidian MCP emguide/headless-obsidian-mcp A headless MCP server for interacting with Obsidian vaults, enabling AI assistants to search, read, edit, and manage notes and their structure without a GUI. | |
| ArxivSearcher MCP Server emi-dm/arxiv-mcp An MCP server that enables intelligent searching, filtering, and exporting of Software Engineering papers on arXiv with tools for querying by keywords, authors, analyzing trends, and finding related research. | |
| PubMed MCP Server emi-dm/pubmed-mcp Enables searching and retrieving detailed information from PubMed articles using the NCBI Entrez API. Supports configurable search parameters including title/abstract filtering and keyword expansion to find relevant scientific publications. | |
| MultiZen emi308/multizen-browser Enables AI agents and human operators to drive isolated, persistent browser profiles with their own cookies, fingerprints, and proxies. Exposes tools for profile lifecycle, navigation, clicking, typing, extraction, screenshots, JavaScript e | |
| Sonicmatch emi91198/sonic-match-mcp An MCP server that ingests local clips or URLs and analyzes their footage — mood, energy, speech, scenes, and BPM — to return ranked, license-safe royalty-free or Creative Commons BGM matches with attribution printed per track. It also deli | |
| mcp emichael72/agents Exposes an OpenAI-compatible /v1/responses endpoint so a model can answer prompts by discovering and running a shared folder of sandboxed tools — shell commands, file editing, pull requests, persistent notes, time, sysinfo and Doxygen check | |
| melrōse musical expression player emicklei/melrose interactive programming of melodies, producing MIDI | |
| bongocat-mcp emicyx/bongocat-mcp Unifies multiple BongoCat desktop pets into MCP tools, enabling LLM clients to control cat animations, typing, expressions, and chat bubbles via a consistent interface. Supports embedded, CDP, and Mver drivers with auto-detection and a loca | |
| Web3 Research MCP emidejager76597/web3-research-mcp Enables comprehensive local cryptocurrency token research across sources like CoinGecko, CoinMarketCap, DeFiLlama, and web search, with structured reporting and resource management. No API key is required. | |
| Pokémon Champions MCP Server emieeel/poke-mcp-tool Provides accurate competitive Pokémon information for Pokémon Champions, including damage calculation, type effectiveness, Pokémon data, and regulation legality checks. | |
| OutreachPilot MCP Server emielmadonna/outreachpilotmcp Enables AI agents to automate sales outreach, research leads, and manage campaigns directly in OutreachPilot via natural language commands. | |
| mcp-grok-executor emigrete/mcp-grok-executor An MCP server that turns Grok CLI into the execution agent for Claude Code, implementing an orchestrated execute-verify-autofix loop for autonomous development tasks. | |
| Train in Silence emikok/train-in-silence Enables users to describe an LLM fine-tuning workload and automatically estimate VRAM/FLOPs to recommend the cheapest, fastest, and balanced GPU options across multiple cloud providers. It supports natural-language requests through MCP, ret | |
| Forma MCP Server emil28092005/forma-engine Enables AI assistants to create and edit 3D scenes, geometry, scripts, and builds in the Forma engine, with changes reflected live in the editor. | |
| Imagen emil28092005/imagen MCP server for generating pixel-art sprites with transparent backgrounds using any diffusers-compatible text-to-image model. | |
| Jedox MCP Server emilabd247/work-jedox-mcp-server Local MCP server for the Jedox OLAP platform enabling LLM clients to interact with Jedox databases, dimensions, cubes, cells, and rules via natural language. | |
| nemlig-mcp emilbm/nemlig-mcp Enables grocery shopping at Nemlig.com via MCP, including product searches, basket management, and session-based authentication. | |
| colab-autopilot emile-andre/colab-autopilot Enables AI agents to autonomously manage Google Colab GPU sessions, submit and monitor training jobs, and debug/fix issues via an encrypted tunnel without requiring a browser tab. | |
| paper-trader-mcp emile-fortier/paper-trader-mcp A simulation-only MCP server for recording US-equity order intents and estimating outcomes from historical Alpaca NBBO quotes, without placing live orders. | |
| fskintra-mcp emilhorlyck/fskintra-mcp Lets AI agents log in as a parent to ForældreIntra (SkoleIntra) and read news, messages, weekly plans, homework, documents, photos, contacts, and sign-ups as callable MCP tools. The server is read-only unless write tools are explicitly enab | |
| hermes-dsh-bridge emilia-awa/hermes-dsh-bridge Enables external MCP clients to drive DeepSeek Harness agents for real coding tasks, providing tools for task execution and queueing, session management, sandboxed file access, preset switching, and usage statistics. | |
| totem-mcp emiliano-go/totem Enables engineering agents to maintain persistent knowledge across sessions by storing decisions, invariants, gotchas, and rejected ideas, with staleness detection, conflict detection, full-text search, and structured context assembly. | |
| MCP Relay Server emiliobool/mcp-relay This server allows integration with Discord, enabling message exchanges between Claude and a Discord channel using prompts and notifications. | |
| Windows-MCP emilioejus/windows-mcp An MCP server designed for managing files and folders specifically on the Windows Desktop. It enables users to perform file operations like deletion while implementing security measures to prevent path traversal outside the Desktop director | |
| unsada-mcp emiliogiordano/unsada-mcp Enables agents to read a Moodle-based virtual classroom’s courses, notes, forums, assignments, grades, and calendar, and to download course files locally while keeping the classroom read-only. | |
| poa-bus-mcp emiliosheinz/poa-bus-mcp Access bus stops, routes, and real-time information for Porto Alegre's public transportation system. | |
| iRacing Data MCP Server emiliosp/iracing-data-mcp-server Provides seamless access to iRacing's racing simulation data, enabling AI assistants to retrieve driver profiles, career statistics, and team information. It features automatic authentication and tools for real-time driver lookups and seaso | |
| mem-persistence emiliotorrens/mem-persistence Persistent memory MCP server that stores and retrieves memories in Markdown files, enabling shared context across multiple AI agents with hybrid search and deduplication. | |
| Personal Health Data (community) emilniclashofseth/personal-health-data-mcp Enables read-only access to your own Withings health data through a personal developer app, exposing body measurements, blood pressure, daily activity, sleep summaries, and linked devices for natural-language queries. | |
| mcp-polish-data emilpinski/mcp-polish-data MCP server providing AI assistants access to Polish public registries (KRS, CEIDG) and statistical data (GUS BDL) for querying companies, sole proprietorships, and regional statistics. | |
| go-planning-mcp emilsoleymani/go-planning-mcp Enables LLMs to plan trips, check schedules, query live departures, and access 17 tools for GO Transit data via natural language. | |
| ttc-mcp emilsoleymani/ttc-mcp A Model Context Protocol server for Toronto Transit Commission (TTC) that exposes subway, streetcar, and bus schedules, real-time arrivals, vehicle positions, and service alerts, plus multi-modal trip planning. | |
| Cold Email & Outreach MCP Server emily397/ai-outreach-mcp Enables AI agents to draft evidence-grounded cold-email openers, A/B variants, personalized LinkedIn DMs, and SEO content-gap plans for sales and marketing outreach. | |
| Dev AI Ecosystem MCP emily397/dev-ai-ecosystem-mcp Provides AI agents with 6 tools for searching Hugging Face models, GitHub trending repos, analyzing GitHub repositories, fetching dev.to articles, Show HN launches, and Product Hunt daily launches. Built for dev tooling research and AI ecos | |
| fetchcraft-mcp emily397/fetchcraft-mcp Enables B2B research by finding verified work emails, extracting contacts, detecting tech stacks, and profiling DNS and SaaS, all through a suite of MCP tools. | |
| recruiting-jobs-mcp emily397/recruiting-jobs-mcp Enables AI agents to pull live job listings from major ATS platforms (Greenhouse, Lever, Ashby, Workable), Hacker News hiring threads, and detect hiring signals on company career pages. | |
| Sales Signals MCP Server emily397/sales-signals-mcp Give your AI agent 4 sales-timing tools: detect funding events, buying-signal hires, competitor pricing changes, and buying-intent Reddit posts. Know when to reach out, not just who. | |
| techstack-detective-mcp emily397/techstack-detective-mcp Provides AI agents with tools to detect Shopify apps, WordPress plugins, DNS/email/SaaS footprint, and estimate SaaS spend for competitive intelligence and vendor research. | |
| AutoCAD MCP Pro emily4468/autocad-mcp Enables AI agents to create, edit, inspect, and validate CAD drawings through a single typed tool contract that runs either against live AutoCAD on Windows via COM or headlessly anywhere via ezdxf, with no AutoCAD install required. It cover | |
| OneDrive MCP Server emilychimbobit/bit-onedrivemcp Connects Claude with OneDrive via Microsoft Graph API to list, search, create, move, copy, and share files. | |
| HubSpot MCP Server emilydavis519/mcp-hubspot Enables AI assistants to interact with HubSpot CRM data, including contacts, companies, engagement activity, and conversation threads, with built-in vector storage and caching for semantic search and improved response times. | |
| read-website-fast emilyf56546/mcp-read-website-fast Fetches web content locally, removes clutter, and converts pages to clean Markdown for efficient LLM consumption, with optional crawling and caching. | |
| Houtini LM emilyg61627/houtini-lm Enables Claude Code and other MCP clients to offload bounded tasks to a local or cloud LLM (LM Studio, Ollama, vLLM, LiteLLM, OpenRouter, DeepSeek, Groq, Cerebras, OpenAI) so files are read and drafted outside the orchestrator's context win | |
| Canvas MCP Server emilykorkmaz/mcp-canvas-lms Enables students, instructors, and account administrators to interact with Canvas LMS APIs for courses, assignments, submissions, grades, discussions, files, users, reports, and account administration workflows. | |
| Agent Search MCP emilylambert431/agent-search-mcp Enables free-first English and Chinese web search through zero-key sources with optional credentialed providers, returning compact multi-source evidence, visible provider failures, and bounded request/evidence budgets. | |
| MCP Proxy Server emilytakahashi/mcp-proxy-server Aggregates multiple backend MCP resource servers (Stdio, SSE, and Streamable HTTP) into a single unified endpoint exposed over SSE, Streamable HTTP, or Stdio. Enables routing of tool calls, resource access, and per-tool enable/disable or re | |
| Database MCP Server emilythahuman/database-mcp Enables AI assistants to interact with PostgreSQL and Supabase databases through natural language. Supports secure database operations including queries, migrations, and schema management with user-provided credentials. | |
| PostgreSQL MCP Server (Cloudflare Worker) emilythahuman/postgres-mcp-server A Model Context Protocol server deployed on Cloudflare Workers that enables interaction with PostgreSQL databases. It allows AI clients like Claude and Cursor to execute database operations via a remote SSE connection. |
47,901–47,950 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.