Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Instagram MCP Server emmatorres5381/ig-mcp Enables AI applications to interact with Instagram Business accounts through the Instagram Graph API, exposing profile details, media feeds, engagement insights, and content publishing. It also supports direct message conversations and anal | |
| mdgraph emmd474/mdgraph Provides MCP tools to scan and navigate markdown repositories, offering graph-based overview, document reading, context retrieval, and orphan detection. | |
| Linear MCP Server emmett-deen/linear-mcp-server A Model Context Protocol server implementation that enables AI assistants to interact with Linear project management systems, allowing them to create, retrieve, and modify data related to issues, projects, teams, and users. | |
| fl-mcp-2026 emmggew-svg/fl-mcp-2026 Enables Claude Desktop to drive FL Studio 2025 and 2026 through natural language, diagnosing and repairing mixes, configuring plugins, writing notes and chords in any scale, exporting arrangements to MIDI, and analyzing audio for tempo, key | |
| Gemini MCP emmron/gemini-mcp An AI-powered Model Context Protocol server for Claude Code that provides code intelligence tools including codebase analysis, task management, component generation, and deployment configuration. | |
| t3code-mcp emmsixx/t3code-mcp Enables external agents to list T3 environments and projects, start coding threads, monitor progress, send follow-up instructions, and interrupt running turns via MCP. | |
| Webasyst MCP Server emmy-design/webasyst-mcp Enables AI-assisted development for Webasyst framework projects, including creating and managing apps, plugins, themes, and configurations through natural language commands. | |
| faxin-mcp emnllawlab/faxin-mcp Enables AI clients to directly search Chinese legal resources — laws, regulations, case rules, outline concepts, and similar cases — from the Faxin platform, using a user's own Faxin account for authentication. | |
| emoji-wisp-cli emoji-wisp/emoji-wisp-mcp Bridges MCP-stdio clients to a remote emoji service, enabling emoji search, details, random picks, Emoji Kitchen mashups, and LLM-powered recommendations and replacement suggestions. | |
| godot-mcp emojiiii/godot-mcp A safe, standards-compliant Model Context Protocol server for the Godot Engine editor. It lets an AI client read a Godot project, author scenes/nodes/scripts, run the game and read diagnostics. | |
| hello-world-mcp emokhtareg/mcp-hello-world- A minimal MCP server that provides a single 'hello' tool returning 'Hello, world!'. | |
| governed-mcp emory-usc/governor-mcp Enables AI agents to query a read-only data surface through typed tools, enforcing caller-specific row access, field masking, and withheld-row disclosure so they can retrieve entitled information without writes or silent data leakage. | |
| Governor SQL MCP emory-usc/governor-sql-mcp Enables AI agents to safely query SQL databases through read-only tools for describing entities, reading records, and aggregating records, with view-based access and fail-closed per-user row-level security. | |
| peopleforce-mcp empatdevelopment/peopleforce-mcp Enables Claude, Cursor, and other MCP clients to query PeopleForce HRIS data (employees, time-off, recruitment) via 27 read-only tools. | |
| OfficeRnD MCP Server empathdesign/officernd_mcp Enables AI clients to interact with OfficeRnD coworking space management platform via natural language, exposing 130+ tools for CRUD operations and business logic. | |
| Mobile Next MCP empathyslainlovers/mcp A Model Context Protocol server that enables scalable mobile automation for iOS and Android through a platform-agnostic interface, allowing LLMs to interact with mobile applications via accessibility snapshots or screenshot-based inputs. | |
| MCP Empe Server empe-io/mcp-server Enables users to manage self-sovereign identity credentials by creating schemas, issuing verifiable credentials, generating verification QR codes, and checking verification status via the Empe SSI ecosystem. | |
| NovaMCP emper23/novamcp Enables ChatGPT to connect to Roblox Studio through MCP so its tools can help create, edit, and inspect game content from chat. It also provides a local dashboard for connection status, pairing, optional desktop control, audit logs, and dia | |
| PcGöz emperorbug46/pcgoz Lets Claude see and operate the Windows desktop. Combines the UI Automation tree, screenshots with numbered boxes and real mouse/keyboard input in one shared element reference space. Safety built in: input lock, on-screen notice, password a | |
| KinKeep emperormk01/kinkeep Enables older adults and family carers to coordinate daily elder-care by voice, including checking schedules, logging medications, setting reminders, and reviewing visit notes through Alexa+. | |
| pov empezarcero/pov Enables LLM agents to capture screenshots, control mouse/keyboard, and manage windows on desktop platforms, primarily Windows, via an MCP server. | |
| LuaProtect MCP Server empfi/luaprotect-mcp Enables AI assistants to execute and inspect Luau/Lua code inside a live Roblox game session, including running scripts and retrieving game and player information through LuaProtect's API. | |
| MCP OAuth2.1 with AWS Cognito Example empires-security/mcp-oauth2-aws-cognito Demonstrates how to secure an MCP server with OAuth 2.1 using AWS Cognito, with support for dynamic client registration and client ID metadata documents. | |
| reddit-mcp emptymind4/reddit-mcp MCP server for interacting with Reddit via OAuth, with tiered tools for reading, writing, and moderation actions. | |
| testcase-generator-mcp emptyrabbit/testcase-generator-mcp 基于Model Context Protocol (MCP) 的测试用例生成服务，让AI助手根据上下文自动生成Markdown格式的测试用例，并可导出为Xmind思维导图。 | |
| AIoT MCP Server emqx/aiot-mcp-server A Model Context Protocol server for AI agents to discover and control IoT devices through MQTT, using the AIoT Agent Network Protocol for device registration and communication. | |
| EMQX Cloud MCP emqx/emqx-cloud-mcp-server Enables AI agents to manage EMQX Cloud through separate Platform and Deployment API connections, covering project and deployment lifecycle, MQTT client, subscription and metric inspection, built-in authentication users and ACL rules, banned | |
| Sparkplug MCP Server emqx/uns-demo Enables natural language interaction with industrial IoT devices using Sparkplug B, allowing users to query real-time data, analyze historical metrics, and monitor device status. | |
| Google Ads MCP Server emr-unternehmensberatung-gmbh/google-ads-mcp Enables LLMs and AI agents to query the Google Ads API, inspect account data and resource metadata, and access reporting-related discovery resources through configurable MCP tools. | |
| aria-service-desk-assistant emran-automation-techlead/aria-service-desk-assistant Enables AI assistants to search internal knowledge bases, create Confluence articles, file Jira tickets, and look up Okta users, with guardrails and streaming support. | |
| Yolfi MCP Server emre08189/yolfi-agent Enables AI coding agents to add stablecoin checkout, payment links, payment status checks, webhook verification, and webhook-based entitlement logic to applications. It also provides tools for workspace registration, settlement and webhook | |
| FHIR MCP Server emre21692/fhir-mcp-server Enables LLM-based agents and MCP-compatible clients to interact with a FHIR-compliant backend for full CRUD operations on FHIR resources, document ingestion, semantic search, LOINC terminology lookup, and synthetic data generation through n | |
| Trackfusion MCP Server emre6943/trackfusionmcp Enables AI assistants to manage Trackfusion projects and tasks, including listing, creating, updating, and filtering tasks. | |
| pubmed-mcp-server emrefurukawa96/pubmed-mcp-server Enables searching PubMed and Europe PMC, fetching article metadata and full text through PMC, Europe PMC, or Unpaywall, formatting citations in several styles, resolving identifiers and partial references, and grounding queries in MeSH voca | |
| mcp-shodan emreguo/mcp-shodan Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Exposes eleven read-only tools covering IP host details, device search with facets | |
| mcp-coatcheck emrehangorgec/mcp-coatcheck A zero-dependency stdio proxy that wraps any MCP server so slow tool calls are moved to the background instead of hitting client timeouts, handing back a task or job id immediately. Callers then collect the finished result later through Tas | |
| NameChecker MCP Server emrekb/namechecker-mcp Enables AI assistants to perform real-time domain name availability checks and validate domain syntax according to RFC standards. It supports both stdio and SSE transports to bridge the gap between AI models and domain registration services | |
| flompt emrenowak21186/flompt Enables users to decompose raw prompts into structured blocks, compile edited blocks into Claude-optimized XML prompts, and list available block types directly from Claude Code conversations. | |
| CVE-Search MCP Server emreowens/cve-search_mcp Enables users to browse vendors and their associated products, look up vulnerabilities by vendor/product or specific CVE ID, retrieve the latest CVEs with CAPEC, CWE and CPE expansions, and inspect current database information and update ti | |
| ictihat-mcp emreseb/yargtai-mcp Gives any AI assistant Turkish-law skills: semantic case-law search with verified citations, petition (dilekçe) drafting in text, Word, and UYAP .udf formats, and sourced hearing preparation. Citations are resolved and verified so nonexiste | |
| EDGAR MCP emresoykan/edgar-mcp MCP server for SEC EDGAR data, providing company search, financial statements, XBRL concepts/frames, filings, Form 4 insider trades, and 13F filings via User-Agent authentication. | |
| turkiye-energy-mcp emresoykan/turkiye-energy-mcp An MCP server that provides verified official Turkish electricity system data (from TEİAŞ and EÜAŞ) via tools for querying generation, installed capacity, demand, and import/export, enabling natural language access to energy statistics. | |
| anycubic-slicer-mcp emretekir/anycubic-slicer-mcp Enables AI agents to control Anycubic Slicer Next without its GUI by listing presets, slicing models, reading print-time and filament estimates, and rendering toolpath previews. | |
| prespec emretheus/prespec An MCP server that provides curated test cases and behavior specifications for common software features, enabling AI coding agents to define acceptance criteria before writing code. | |
| yzturkey-mcp emreturkmencom/yzturkey-mcp Enables local AI agents to autonomously manage video channels and series, generate AI videos, search archives, and monitor rendering pipelines on yzturkey.com. | |
| swagger-mcp emreycolakoglu/swagger-mcp A read-only MCP server for navigating OpenAPI / Swagger specifications, enabling agents to search endpoints, retrieve parameters and schemas, and inspect authentication without loading the full spec into context. | |
| TaskForge emreycolakoglu/taskforge MCP server that enables AI agents to manage tasks, boards, lists, and comments on a Kanban-style project management system through JSON-RPC methods. | |
| azure-latency-mcp emrgcl/azure-region-advisor Measures TCP connection latency to Azure blob storage endpoints across regions, enabling AI-assisted region selection for optimal performance. | |
| Bring Fast emrgim/bring-fast A multi-user grocery MCP server and dashboard for UAE stores such as Carrefour, Grandiose, Waitrose, and Spinneys, enabling secure OAuth-based sign-in via Grok while keeping each user's supermarket logins and data private. | |
| MCP3 emrgim/ma3mcp Enables users to control grandMA3 consoles through official OSC /cmd commands, with an admin UI for IP scanning, object/action permissions, chat integration, and MCP stdio access. |
48,001–48,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.