Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| YouTube MCP Server engr-israrullah/claudecode_mcp Enables searching and retrieving video transcripts, metadata, channel info, playlists, comments, trending videos, engagement analytics, chapters, SponsorBlock clean transcripts, and most-replayed heatmaps. | |
| Vestige engr-rabbi/rea-vestige Enables compatible AI coding agents to inspect authorized software artifacts, analyze JavaScript/TypeScript and native binaries, optionally perform Ghidra decompilation, and produce verifiable evidence-linked technical reports. | |
| noapi-google-search-mcp engram-ae/noapi-google-search-mcp An MCP server that gives local LLMs access to Google search, live feeds, YouTube transcriptions, OCR, and more — all without API keys, using headless Chromium and open-source models. | |
| engram-mcp engramai-dev/engram-mcp MCP plugin that connects Cursor, Claude, and other hosts to an Engram workspace for searching and citing indexed GitHub and Notion content. | |
| engramia engramia/engramia The memory operations platform for production AI agents — eval-weighted recall, multi-evaluator consensus, GDPR Art. 17/20 governance, multi-tenant RBAC, and audit logging built in. | |
| Engraphy engraphylabs/engraphy Enables AI agents to maintain a self-hosted typed knowledge graph on Postgres and pgvector over MCP, with deduplicating writes, hybrid retrieval, and database-enforced isolation. | |
| Facebook MCP Server engrdeveloper/mcp Enables posting text messages to Facebook business pages through MCP. Supports OAuth authentication and manual connection methods for managing Facebook page content. | |
| mcp-local-prompt-server engrtipusultan/mcp-local-prompt-server An MCP server that dynamically registers prompt templates from local files and serves them to clients with the assistant role. | |
| mcp-s3-server engrzulqarnain/mcp_s3_server MCP server enabling AI models to list S3 buckets, objects, and download files securely. | |
| Fortnox MCP engshort/fortnox-mcp Enables users to work with Fortnox from an AI assistant to understand financial results, costs and liquidity, manage receipts and bookkeeping proposals, prepare invoices, track payments, and handle multiple companies with self-hosting. Manu | |
| slop-guard engstrom81787/slop-guard Enables agents to analyze prose for formulaic AI writing patterns and return scores, band labels, violations, and improvement advice. Supports checking inline text or files through MCP tools without external LLM or API calls. | |
| Tentahead MCP enharper/tentahead-mcp Connects to the Tentahead API to facilitate campsite searching and group trip planning for Illinois state parks. It provides live availability, weather forecasts, safety alerts, and EV charging data to streamline outdoor adventure planning. | |
| GCP MCP eniayomi/gcp-mcp A Model Context Protocol server that enables AI assistants like Claude to interact with Google Cloud Platform environments through natural language, allowing users to query and manage GCP resources during conversations. | |
| enigma-memory enigma-memory/enigma-cortex-enterprise Enables AI assistants to keep and retrieve private context locally, with verifiable receipts and optional Solana anchoring for public proofs. | |
| Enigma MCP Server enigma-memory/enigma-memory Offers MCP tools for managing a local AI memory vault, including remembering, searching, context packing, deletion, and verification of receipts. | |
| opencode-webmcp enihcam/opencode-webmcp Bridges OpenCode to Chromium's WebMCP API, exposing WebMCP tools from a webpage as standard MCP tools for any MCP client. | |
| ScamShield eniolagalileo-expert/scamshield-alexa Enables Alexa+ and other MCP-capable assistants to voice-check suspicious messages, links, and phone numbers, with guided call interviews, official-source verification, and plain-language scam briefings. | |
| YaparAI Enterprise MCP Server enis1998/yaparai-enterprise-mcp Enables AI assistants to manage social media accounts and CRM operations, including posting, analytics, inbox management, and customer management. | |
| hafiza enisaltun/claudemorememory Enables Claude Code to read and write local Markdown notes and to query a knowledge graph built from those notes and scanned code projects. Everything runs on localhost with no API key or installation of external services. | |
| Reddit MCP Server enisze/reddit-mcp Enables read-only access to Reddit for searching posts within specific subreddits using OAuth2 authentication. It allows users to search by query and sort results by relevance, popularity, or date. | |
| simdeploy-mcp enivaldocs/simdeploy Analyzes projects to select the lowest-cost architecture, deploys with health checks, and returns a public URL. | |
| developer-presence-mcp enjoykumawat/developer-presence-mcp Enables querying GitHub repos and stats, and managing DEV.to articles (list, create, update) through natural language. | |
| literature-evidence-mcp enjoymoon-busdriver/literature-evidence-mcp Enables users to create frozen, auditable snapshots of selected Markdown or text-layer PDFs and perform read-only, verifiable local searches with SQLite FTS5/BM25, preserving source hashes, schemas, and page/line anchors. | |
| bbrab-icons-mcp enjoytime1101-spec/bbrab-unified-icons Enables auditing UI for icon accessibility, suggesting icons based on action semantics, rendering constrained inline SVGs, and reading the full icon policy via MCP tools. | |
| MCP Confluence Server enjoyzl/mcp-server-confluence-ts Enables interaction with Confluence to manage spaces, pages, and comments with support for Markdown conversion and CQL-based search. It includes advanced features for exporting Confluence content to structured Markdown files and provides op | |
| BCI-MCP Server enkhbold470/bci-mcp A framework that integrates Brain-Computer Interface technology with the Model Context Protocol to enable real-time neural signal processing and AI-powered interactions for healthcare, accessibility, and research applications. | |
| GitHub v3 REST API MCP Server enkhbold470/github-mcp-codeglide Enables interaction with the GitHub v3 REST API, providing tools to access and manage GitHub data, repositories, users, and more through natural language commands. | |
| Inky MCP Server enkhbold470/inky-mcp-server MCP server that connects Cursor IDE to Inky backend, enabling users to list and filter personalized coding rules stored in Pinecone. | |
| Instagram MCP Server enkhbold470/instagram-mcp Enables interaction with Instagram API functionality through a FastMCP-based server. Provides type-safe access to Instagram features with comprehensive error handling and multiple authentication methods. | |
| Canvas MCP Server enkhbold470/mcp-server-canvas Enables programmatic interaction with the Canvas LMS API through the Model Context Protocol. It currently supports listing courses with enrollment type filtering and provides interactive help prompts for tool usage. | |
| unegui-mn MCP Server enkhbold470/unegui.mn-mcp MCP server for Mongolia's largest online classifieds platform unegui.mn, enabling AI assistants to search and retrieve listings for cars, real estate, electronics, jobs, and more with detailed information, primarily in Mongolian while suppo | |
| zangia enkhbold470/zangia-mcp-ai MCP server for searching and managing zangia.mn job listings, including CV matching (ATS) and salary benchmarks. | |
| buddy enki-run/buddy Agent-first knowledge graph MCP server that provides 25 tools for managing a knowledge graph with nodes and edges, plus a human-readable dashboard for LLMs and AI agents. | |
| Fortran Companion MCP Server enkieng/fortran-mcp Enables AI models to write, format, compile, lint, and structure modern Fortran code using best practices and industry design patterns. | |
| Break Anything enkihq/break-anything Connects AI coding agents to security tooling so they can inspect authorized code, dependencies, container images, and infrastructure, confirm exploitability, and receive evidence-backed remediation plans. | |
| Visualize enkind/better-response Enables agents to present replies as interactive, validated UI trees rendered as MCP Apps—such as checklists and data grids—without requiring another LLM call. | |
| Napkin enkind/napkin Enables agents to present an interactive drawing canvas to users, allowing them to sketch and send drawings back into the conversation as images. | |
| Enkrypt AI MCP Server enkryptai/enkryptai-mcp-server Integrates AI safety analysis, red-teaming, and prompt auditing directly into MCP-compatible clients like Claude Desktop and Cursor IDE, allowing real-time analysis of prompts and detection of jailbreak attempts. | |
| Enkrypt AI Secure MCP Gateway enkryptai/secure-mcp-gateway A proxy server that sits between MCP clients and servers, providing authentication, tool discovery, caching, and guardrail enforcement to protect MCP servers from malicious inputs. | |
| EODHD MCP Server enlavan/eodhd_mcp_server Enables access to financial market data including EOD, intraday, fundamentals, news, and more via 75 read-only MCP tools. | |
| Sharpwave enlightened-republic/xanima An MCP server providing long-term memory for AI agents with forgetting curves, consolidation, and graph-based retrieval. | |
| Laya Serve MCP enlotec/laya-serve Enables clients to submit typed System One decisions against the Laya model and check service readiness over stdio or HTTP SSE, with the same configuration, validation, and API-key protection as the REST API. | |
| SyntaxRAG (SYNRAG) enmanuelreynoso23/synrag Enables AI coding agents to search indexed local codebases through AST-aware chunks with BM25 retrieval and CPU reranking, returning whole functions, classes and types instead of arbitrary token windows. It also exposes file outlines, depen | |
| mcp-flowise enmasuamkf/mcp-flowise Exposes local Flowise chatflows as MCP tools, enabling listing and running chatflows from any MCP client. | |
| mcp-realmak ennioferreirab/realmak-plugin Enables analysts to search public procurement data, inspect ConLicitação opportunities and contracts, and query the Galeed knowledge base through read-only tools inside Claude. | |
| Tideline agent Memory ennisaaaaaaaa-stack/tideline-memory A long-term memory system built for AI Agents. Agent wakes up already knowing who he is, not querying "who am I?" every session. Every turn calling back accurate memory context. Achieving accurate memory hits while also preventing memory fr | |
| Azure DevOps MCP Proxy ennuiii/azuremcpproxy Enables interaction with Azure DevOps through Personal Access Token authentication. Supports work item management, wiki operations, project/repository listing, and build pipeline access through natural language. | |
| Azure DevOps MCP Server with PAT Authentication ennuiii/devopsmcppat Enables interaction with Azure DevOps services through Personal Access Token authentication. Provides 75 tools for managing work items, builds, repositories, pull requests, and other DevOps operations via both CLI and HTTP API interfaces. | |
| Google Analytics Data API MCP Server eno-graph/mcp-server-google-analytics Provides an interface to access Google Analytics Data API through Model Context Protocol (MCP), allowing users to retrieve reports and realtime data from Google Analytics 4 properties. | |
| hh-apply-agent-mcp eno004731-cpu/browser-control-mcp Local MCP server for safe automation of job application responses on hh.ru using the user's Chrome session. |
48,151–48,200 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.