Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| gimp-local-mcp epi13/gimp-local-mcp Enables controlling GIMP 3 locally through natural language, providing tools for image editing, layer management, selections, and PDB procedure invocation. Keeps all images and files on the user's machine with a local-first, secure design. | |
| MNCS Forge MCP epi13/mncs-forge An experimental MCP server for MNCS-native development and evidence control, enabling Codex to manage project authority, candidate lineage, evidence gaps, and evaluator-mode boundaries. | |
| mcp-physics-bridge epicbrain-dev/mcp-physics-bridge Connects AI agents to game engines at 60 FPS, enabling deterministic physics simulation, AI-to-rig animation synthesis, and safe sandboxed physics state control through the Model Context Protocol. | |
| ecp-mcp-server epiclabs23/ecp-mcp-server Enables conversational management of hosting account resources such as apps, domains, databases, files, PHP, SSL, and more through MCP-compatible clients. | |
| Advanced MCP Features epicweb-dev/advanced-mcp-features A workshop repository teaching advanced Model Context Protocol features for building AI-connected apps with deeper integration capabilities. | |
| EpicMe MCP epicweb-dev/epic-me-mcp An application that demonstrates the future of user interactions through natural language with LLMs, enabling user registration, authentication, and data interaction exclusively via Model Context Protocol (MCP) tools. | |
| Keytomic MCP epicx-labs/keytomic-mcp Enables AI clients to perform bounded website Quick Audits via MCP tools, covering crawlability, indexability, and metadata. | |
| epik-gh epik-agent/epik A GitHub MCP server that wraps the gh CLI to expose GitHub operations like issues, pull requests, branches, labels, repositories, CI actions, and Projects V2 as tools for MCP clients. | |
| gemini-grounding epilande/gemini-grounding An MCP server that provides real-time information access using Google Gemini's grounding capabilities, enabling search for current information, developer resources, documentation, and Reddit discussions. | |
| rig-worker epinnock/rig-worker Enables AI agents to model characters from simple shapes, rig them with automatic bone-heat weights, keyframe animations, and inspect or export watertight GLB meshes headlessly in a Cloudflare Worker. | |
| Genanki MCP Server epiphany-0312/genanki-mcp Enables automated generation of Anki flashcard decks with rich CSS templates and media assets. Provides secure deck creation with sandboxed media handling and temporary download links for .apkg files. | |
| Korean Law MCP episodic-rush/korean-law-mcp-clean An MCP server that provides Korean legal information through 10 tools, including statutes, precedents, administrative rules, and citation verification with hallucination prevention, enabling legal research and analysis via AI assistants or | |
| Korean Law MCP episodic-rush/korean-law-mcp-unclean MCP server for Korean legal research, offering access to statutes, precedents, administrative rules, citation verification, and legal analysis through 10 tools. | |
| Railway MCP Server epitaphe360/railway-mcp Enables management of Railway.app infrastructure through natural language, allowing users to deploy services, manage environment variables, monitor deployments, and configure projects directly from MCP clients like Claude. | |
| @vibecheck/mcp eplecheck/vibecheck Enables AI agents to manage git-backed website content through natural language, with tools to create, update, delete, and draft pages that are schema-validated and committed to a repository. | |
| crosstalk epode-studio/crosstalk Enables AI coding agents to communicate directly with each other across machines, with support for rooms, pairing, and encrypted messaging. | |
| garmin-connect-mcp epodivilov/garmin-connect-mcp A Model Context Protocol (MCP) server that provides comprehensive access to Garmin Connect data including sleep analytics, health metrics, activities, and training volume analysis. | |
| Korean Assembly Speech MCP epoko77-ai/korean-assembly-speech-mcp Enables search and retrieval of speech turns from Korea's National Assembly records using Korean or English natural-language queries, with citation-ready context and tools for exploring committees and meetings. | |
| Korean Bill & Debate MCP epoko77-ai/korean-bill-debate-mcp Enables exploration of Korean National Assembly data by connecting bills, committee reviews, and official records. Allows users to ask natural language questions and receive structured answers with citations to original documents. | |
| Social Media Scraper - Custom MCP Server epolyakov344/custom-mcp-server Enables AI assistants to retrieve LinkedIn, Facebook, and Instagram profile or company data and to perform Google web searches through exposed tools. It returns scraped information in JSON for easy reading in compatible clients. | |
| ESPN Fantasy Football MCP Server eponerine/espn-fantasy-football-mcp-node Enables LLMs to access and analyze ESPN fantasy football leagues through read-only MCP tools, covering rosters, scores, transactions, standings, lineup audits, and league-specific rules. | |
| Epovest epovest/mcp-server Make AIs recommend your business. Measures how AI assistants answer the questions your market asks, which sources they cite, and gives the levers to shape those answers. 43 tools on a hosted Streamable HTTP endpoint at https://mcp.epovest.c | |
| MCP Template epsilon-labs-llc/mcp-template A Cloudflare Workers-based MCP server that enables passkey-authenticated users to check server status through a secure MCP tool, with one-time registration URLs for initial setup. | |
| idf-mcp epsilonfo/idf-mcp MCP server that provides real-time RER B schedules, journey planning, and traffic info via Île-de-France Mobilités APIs. | |
| Quant Framework MCP Server epsom700/quant_framework An extensible framework that exposes quantitative research functions and financial data connectors, such as FRED, via an MCP server. It enables users to perform complex financial modelling, data retrieval, and autonomous research loops with | |
| s3-mcp epyklab/s3-mcp MCP server for AWS S3 and compatible object stores, enabling LLM clients to browse buckets and fetch objects. | |
| ot5-mcp-server epyur/ot5-mcp-server MCP server providing tools to extract text from PDF, Word, and Excel documents and perform read-only PostgreSQL searches, returning structured JSON results. | |
| sbe-agent epyur/sbe-agent Enables users to chat with an LLM agent that creates and reads Word, Excel, PDF, and JSON files, and accesses databases (letters, documents, LIMS) according to user permissions. | |
| Fizzy MCP Server eq-kuldeep/fizzy-mcp Integrates Fizzy with MCP clients for automated ticket resolution, card management, commenting, and task tracking. | |
| telegram-bot-mcp eqba1/telegram-bot-mcp Lets Claude manage a Telegram channel through the Bot API, including tracking subscriber growth and publishing, editing, pinning, or deleting posts. | |
| SimpleSQL MCP Server eqooid/simplesql-mcp Multi-database SQL operations MCP server that enables CRUD, table creation, and data seeding for MySQL, PostgreSQL, and SQLite through natural language. | |
| codex-image equallogic/codex-image-mcp Enables generating images directly from Claude Code using the ChatGPT subscription's built-in Codex CLI and gpt-image-2, with no API key or separate credits. | |
| nagios-mcp equilibrise/nagios-mcp MCP server for Nagios Core that enables querying host and service status, alerts, configuration, and other monitoring data through CGI binaries. | |
| Living Stack MCP — Retired Beta Listing equinoxaifinance-rgb/living-stack-mcp Retired snapshot of the former 15-tool Apache-2.0 beta. Use Living Stack Community for the free seven-tool proof edition; Complete Local is the paid runtime with memory, recovery, signed traces, release verification, and multi-agent workflo | |
| fich-mcp equisdo/fich-mcp Local read-only MCP server for e-FICH (Moodle FICH-UNL) enabling course content, announcements, calendar events, and PDF search via MCP clients. | |
| eq-mcp-gateway equityquotient/eq-mcp-gateway A remote MCP server that lets MCP clients self-register over OAuth 2.1 and call read-only tools for organization identity, place and region browsing, dashboards, metrics, and ranking, forwarding the caller's own Auth0 token so each service | |
| KinKeeper er-s-an/kinkeeper Enables a simulated Alexa+ care companion to capture daily check-ins, recall longitudinal care-journal history, assess risk, create local family-inbox cards, schedule follow-ups, and produce weekly digests through MCP tools. | |
| show-dont-tell er-s-an/show-dont-tell Enables interactive trip planning and booking through MCP Apps cards, with constraint-based scoring, cross-session memory, and a two-phase booking flow that requires explicit confirmation before charging. | |
| tldraw-offline-mcp er1chi/tldraw-mcp Enables remote agents to control tldraw Desktop's Canvas API, manage documents, scripts, assets, and take screenshots. | |
| code-graph-rag-mcp er77/code-graph-rag-mcp A powerful Model Context Protocol server that creates intelligent graph representations of your codebase with comprehensive semantic analysis capabilities, supporting 11 languages and 26 MCP methods. | |
| mcp-spec-comments erabu-yasumune/mcp-spec-comments A comment-based spec-driven development MCP server that facilitates workflows from requirements creation to implementation via AI, using @spec-impl markers. | |
| image-video-mcp eracom-technologies/image-video-mcp An MCP server that enables generating images via OpenAI and images/videos via Google Gemini (including Veo video generation), saving outputs to local asset folders. It integrates with Claude Code and any MCP client using your own API keys. | |
| Call DK MCP eragonht1/call-dk-mcp MCP server providing an interactive GUI for users to input prompts and images, with integrated Google Gemini prompt optimization for AI-assisted development. | |
| Simple Memory MCP eragonht1/simple-memory-mcp Enables AI assistants to store and retrieve persistent memories with a web management interface. Supports creating, searching, and managing memories through natural language commands or a visual web dashboard. | |
| Nextcloud CalDAV MCP Server eragooon/nextcloud_calendar_todo_mcp An MCP server that lets Claude create calendar events and tasks in Nextcloud via CalDAV. | |
| Emlog MCP Server eraincc/emlog-mcp Enables AI assistants to interact with Emlog blog systems through a standardized Model Context Protocol interface, supporting content management operations like creating/updating articles, managing comments, uploading files, and accessing b | |
| hazi-hinam erakauf1/hazi-hinam Enables AI assistants to search the catalog, manage a cart and usual orders, find delivery slots, and handle favorites, shopping lists, past orders, and item remarks through the store's API, with login and payment left to the user on the we | |
| Origin MCP erannave/originlab-mcp Enables AI clients to drive a running OriginLab Origin instance, allowing LabTalk scripting, worksheet read/write, and project management. | |
| snowflake eranrh86/snowflake-mcp-starter Enables read-only Snowflake database queries through MCP, allowing safe SELECT, SHOW, DESCRIBE, WITH, and EXPLAIN operations via natural language tools with lazy connection setup. | |
| Mogut — App Store Growth MCP erayendes/app-store-growth-mcp Mogut — open-source, read-only MCP server for Apple App Store ASO and growth intelligence: keyword research, competitor analysis, review mining, pricing, localization, and reports. |
48,301–48,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.