Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP Server Pagespeed enemyrr/mcp-server-pagespeed Enables AI models to analyze webpage performance using the Google PageSpeed Insights API, providing real-time performance scores and improvement suggestions. | |
| Filly Forms MCP Server eneopt/filly-forms-mcp Exposes the Filly Forms REST API as MCP tools for AI agents, enabling form type listing, record CRUD, data preview, and document upload with AI extraction. | |
| vcc-prover energywebfoundation/vcc-prover-mcp Generates and verifies zero-knowledge proofs locally for Energy Web Verified Compute, keeping private meter readings and blinding salts on the user's machine while enabling agents to submit verifiable proof packages. | |
| mcp-sandbox-server enes-sakin-dev/mcp-sandbox-server-showcase Provides an AI agent with authenticated shell and file access to a sandbox host, plus a restricted gateway for safe deploys on a production host via forced SSH commands. | |
| GCP MCP Server enesbol/gcp-mcp Enables AI assistants to interact with and manage Google Cloud Platform resources including Compute Engine, Cloud Run, Storage, BigQuery, and other GCP services through a standardized MCP interface. | |
| fal.ai MCP Server enescanguven/fal-mcp Provides access to over 600 AI models on fal.ai for generating and editing images, videos, music, and speech directly within Claude. It supports high-performance models like FLUX, Kling, and Whisper for various creative and analytical tasks | |
| FMP MCP Server enescanguven/fmp-mcp Enables Claude to access real-time stock data, financial statements, cryptocurrency information, and market data via the Financial Modeling Prep API. | |
| visual-image-search-mcp enescanguven/visual-image-search-mcp An MCP server that searches the web for images, creates a numbered contact sheet for visual selection, and downloads the chosen images with provenance metadata. Works without an API key. | |
| market-fiyatlari-mcp-server enescinr/market-fiyatlari-mcp-server Enables querying Turkish market prices, searching products, and comparing prices across different stores using the Market Fiyatı API. | |
| Twitter MCP Server enescinr/twitter-mcp An MCP server that enables Claude to interact with Twitter, allowing for posting tweets and searching Twitter content. | |
| agy-mcp eneskavas/agy-mcp Lets Claude Code use Google's Antigravity CLI (agy) to review plans or execute them in isolated git worktrees, with safety controls like secret scanning. | |
| SQLite MCP Server enesmanan/sqlite-mcp-server Provides read and write access to multiple SQLite databases through the Model Context Protocol, with safety features like parameterized queries and required WHERE clauses for destructive operations. | |
| Git MCP Server enesozturk11/git-mcp-server Enables AI assistants to inspect local Git repositories and interact with the GitHub API for reading commits, diffs, files, issues, comments, pull requests, and project boards. | |
| enterprise-knowledge-integrator enesp4rl4k/enterprise-knowledge-integrator Enables AI agents to securely search and ingest corporate documents via MCP, offering hybrid retrieval, PII sanitization, role-based access control, and citation validation. | |
| RefineDataMCP enesp4rl4k/refinedata-mcp Provides data preparation, anonymization, and processing tools for AI agents, handling big data with Polars and DuckDB. | |
| bitbucket-mcp enespolovina/bitbucket-mcp An MCP server for reviewing Bitbucket Cloud pull requests, allowing clients to read PRs, tickets, and comments and leave review comments without leaving the editor. | |
| btp-sap-odata-to-mcp-server enessefaerdogan/sap_mcp_server Enables natural-language querying and authenticated CRUD operations against SAP S/4HANA or ECC OData services through dynamic MCP tools with progressive service and entity discovery. | |
| orchestrator-mcp enesttombas/orchestrator-mcp Enables running a validated DAG of coding tasks across a pool of model workers, with independent tasks executing in parallel and dependent ones receiving upstream results. Only a pinned acceptance command's exit code 0 counts as success, wi | |
| Energi Data Service MCP enevoldsen88/energi-data-service-mcp Read-only MCP server for Energinet's public Energi Data Service. Enables dataset search, arbitrary dataset queries with filters, and CO2 emissions retrieval for DK1/DK2 without an API key. | |
| wipebot-mcp enf0/wipebot Lets assistants query World of Warcraft raid logs in natural language: why pulls wiped, how each raider performed against top players of their spec, where everyone stood, whether the raid followed its notes and cooldown plans, plus boss str | |
| antigravity-review-mcp enferlain/review-mcp AI-powered code review using Zhipu GLM. It gathers git diffs and source context to provide focused code reviews. | |
| github-stars-mcp enfernandes/github-stars-mcp An MCP server that caches your GitHub starred repositories in a local SQLite database and lets you search, list, and retrieve details about them through any MCP client (Claude Desktop, Cursor, VS Code, etc.), with automatic freshness checks | |
| Zift enforceauth/zift Open-source scanner that finds authorization logic embedded in application code. Precision-first static analysis with per-language rule packs, externalization percentage and per-finding confidence; generates OPA/Rego policy stubs. Apache 2. | |
| BlockbenchMCP enfp-dev-studio/blockbench-mcp Connects Claude AI to Blockbench through Model Context Protocol, enabling AI-assisted 3D modeling, texture creation, and block model manipulation with real-time command execution and feedback. | |
| Blender MCP Link eng-cpu-bit/blender-mcp-link Enables interactive control of Blender for 3D scene manipulation, geometry creation, material application, and viewport rendering via natural language prompts through the Model Context Protocol. | |
| proodos eng24as0059-gif/proodos x402 protocol | |
| engain-mcp engaindev/engain-mcp Enables programmatic Reddit growth campaign management via the Engain API, including task scheduling, upvote/downvote orders, opportunity discovery, and account management. | |
| RMGS MCP Server engalar/siemens_graph_studio_mcp_server Enables intelligent SPARQL query execution, ontology management, and graphmart construction for Altair Graph Studio, accessible from AI coding assistants like GitHub Copilot and Claude Code. | |
| Rasmio MCP Server engboustani/rasmio-mcp Provides access to the Rasmio API for searching and retrieving detailed information about Iranian companies and individuals. It enables users to look up registration details, addresses, and legal status using national IDs or general search | |
| islamweb-mcp engdawood/islamweb-mcp Enables fetching and extracting content from islamweb.net's digital library, including crawling Arabic dictionaries and searching definitions through MCP tools. | |
| telegram-api-mcp engdawood/telegram-mcp-worker Enables MCP clients to call all 185 Telegram Bot API methods over stateless Streamable HTTP at /mcp, including rich messages, meta-mode, Zod validation, rate limiting, and retries. It runs as a Cloudflare Worker, supporting Bot API operatio | |
| HR Leave Management MCP Server enggvaij/mcpserver-hrleave-management Enables managing employee leave requests (apply, view, list leaves) through Claude desktop using natural language. | |
| AI Handoff MCP enghamzaabojarad/ai-handoff-mcp Enables AI coding agents from any vendor to resume a task from the exact stopping point without model calls, re-reading old sessions, or re-exploring the code, by merging host hooks, agent checkpoints, and Git deltas into one compact brief. | |
| qlik-lineage-mcp engicaro/qlik-lineage-mcp A read-only MCP server that exposes data-file lineage analyses for Qlik Cloud tenants, enabling identification of unused columns and ghost files to reduce storage costs. | |
| Blueprint MCP engincankaya/blueprint Provides AI coding agents with durable architecture memory for repositories by generating structured project maps of responsibilities, relationships, and risks. | |
| CB-Ads-MCP engineer566/cb-ads-mcp Enables unified management of Amazon Ads, Google Shopping, Meta, TikTok, and Shopify data, integrated with cross-border e-commerce workflows such as product selection, inventory, profit, and feed optimization. | |
| Antigravity ROS 2 Robotics Plugin engineerabdullahbinzafar/antigravity-robotics-plugin Enables AI agents to inspect and safely control ROS 2 topics, nodes, parameters, PID loops, LiDAR maps, trajectories, and robot fleets through guarded tools, plus a real-time dashboard with emergency-stop controls. | |
| Principia Robotica engineerabdullahbinzafar/principia-robotica World-first unified MCP gateway + Control Barrier Function (CBF-QP) safety engine for agentic robotics, enabling LLMs to control physical robots with mathematically proven safety. | |
| ros2-mcp-server engineerabdullahbinzafar/ros2-mcp-server Connects AI agents like Claude to live ROS2 robots, enabling natural language interaction for diagnostics, parameter tuning, and control with safety sandboxing. | |
| rostra engineereddev/rostra Enables durable, evidence-backed deliberation and Decision CI by running multi-stage model protocols with detached worker processes, persistent jobs, and SQLite-stored decisions, evidence, outcomes, and quality metrics. | |
| spec-to-linear engineering-alpina/spec-to-linear Enables agentic co-authoring of feature specs, decomposition into architecture-validated tickets, and idempotent syncing to Linear as projects with epics, sub-issues, and dependencies. | |
| python-mcp-server engineering-with-ai/python-mcp-server A Model Context Protocol server that enables AI agents to query a Graphiti knowledge graph and pgvector document store for evidence-backed responses via hybrid search and RAG. | |
| Minimal MCP engineers-hub-ltd-in-house-project/minimal-mcp A basic educational MCP server that provides simple tools for mathematical calculations, text manipulation, and time retrieval. Designed for learning MCP implementation patterns and development purposes. | |
| Obsidian MCP Server engineers-hub-ltd-in-house-project/obsidian-mcp-server Allows AI models to interact with Obsidian notes through the Local REST API, enabling creation, reading, updating, searching of notes, and Git-based automatic backups. | |
| Claude Code MCP Server engineers-hub-ltd-in-house-project/slack-claude-code-integration Wraps Claude Code as a server using the Model Context Protocol (MCP), allowing teams to interact with Claude Code through a Slack bot interface. | |
| Panaya MCP Server engineersonal/panaya-mcp-sonal Exposes Panaya REST APIs as MCP tools for managing entities like projects, requirements, tests, defects, releases, cycles, and business processes. Enables Claude or any MCP client to perform CRUD operations on Panaya data via natural langua | |
| Pytest MCP Server enginsacan/mcppytestimplementation Enables AI assistants to run and analyze pytest tests for desktop applications through interactive commands. Supports test execution, filtering, result analysis, and debugging for comprehensive test automation workflows. | |
| Surfline MCP Server englishar/surfline-mcp-server Enables access to comprehensive surf forecasts from Surfline including current conditions, swell analysis, forecaster insights, tides, and timing information for Santa Cruz surf spots. Provides detailed 8-hour forecasts with expert observat | |
| edutube-mcp engmohammeda/edutube-mcp Enables users to convert YouTube playlists and videos into structured lessons, analyses, frames, and quizzes using Google Gemini, with automatic model rotation and extraction from both audio and visuals. | |
| sap-adt-mcp engoetz/sap-adt-mcp Enables AI assistants to work with SAP ABAP systems through the ADT REST API, supporting repository search, source code read/write, activation, syntax checks, and transport request management. |
48,101–48,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.