Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Honcho Bridge erhuz/honcho-bridge Provides shared user memory across Codex and Claude Code with project-aware routing, keeping unrelated projects in separate workspaces via a private configuration file. | |
| postgres-schema-mcp eric-patton/postgres-schema-mcp Provides an AI agent with read-only PostgreSQL access, enabling schema browsing, foreign-key exploration, column search across tables, capped SELECT queries, and offline data dictionary export while rejecting write operations. | |
| Dot Exchange eric-price-18/dot-exchange Enables assistants to browse, search, and read public questions and answers anonymously over a stateless JSON-RPC endpoint, and to submit questions, answers, or withdraw their own posts once the user approves a platform OAuth connection. Wr | |
| BeamNG MCP eric-rolph/beamng-mcp A local, safety-gated MCP server for controlling, inspecting, extending, and testing BeamNG simulations, combining BeamNGpy with a Lua WebSocket extension and real-time perception/control. | |
| zotero-manager-mcp eric-sly/zotero-mcp-manager Enables Zotero 10 library management via MCP, allowing search, metadata retrieval, annotation and collection management, and optional write operations (notes, tags, metadata, items) through a local Streamable HTTP endpoint. | |
| zoty eric-tramel/zoty A lightweight MCP server that connects AI agents to a local Zotero library for paper management and metadata retrieval. It enables users to search titles and abstracts, browse collections, and automatically ingest papers via arXiv ID or DOI | |
| browser_mcp eric-vergo/browser_mcp Enables Claude to navigate, screenshot, read console/network, and crawl links in HTML documentation via a co-located headless Chromium and VSCode webview pane. | |
| n8n-mcp-server eric050828/n8n-mcp-server Enables LLMs to programmatically control n8n via natural language for automated workflow creation, modification, and execution management. | |
| db-fahrplan-mcp eric134422/db-fahrplan-mcp An (unofficial) MCP server for the Deutsche Bahn Timetables API — station search, planned departures, and real-time changes (delays, platform changes, cancellations) as tools for Claude and other MCP clients. | |
| mcp-ignite-server eric2xu/mcp-ignite-server Provides access to Microsoft Ignite 2025 conference data including sessions, speakers, personal schedule, and favorites via 7 MCP tools with smart caching. | |
| Genio520 ISP MCP eric612/genio520_isp_mcp Enables users to inspect and edit a local source workspace, build and deploy a Camera2 diagnostic APK through ADB, and retrieve YUV images with capture metadata. | |
| Claude MCP Job Assistant eric623/claude-mcp-job-assistant An MCP server for intelligent job search, resume-based recommendations, labor market analysis, and matching reports. | |
| recap eric8810/recap MCP server for conversation recording and review management, supporting recording, querying, and statistical analysis of conversation history with dual transport mode. | |
| Weather MCP Server eric980305/weather-mcp-server Enables real-time weather queries for 12 major Chinese cities and global cities using English names, powered by the wttr.in API with no API key required. | |
| CTS MCP Server erica1019/cts_mcp Automates Close-to-Shore methodology for Godot game development by creating tasks in Shrimp MCP from hop plans and generating interactive visualizations of signal architectures, dependencies, and project metrics. | |
| A2A MCP Server ericabouaf/a2a-mcp-server Enables LLMs to communicate with Agent-to-Agent (A2A) protocol compliant agents, providing tools for sending messages, managing tasks, and retrieving agent information. | |
| A2A Registry ericabouaf/a2a-registry Provides a unified registry for discovering and managing agents that implement the A2A (Agent-to-Agent) protocol, enabling registration, querying, and CRUD operations on agent metadata through both REST API and MCP tools. | |
| mcp-server-template ericagyemang478/mcp-server-template A production-ready MCP server template with typed tools, schema validation, tests, and Docker support, including example tools for text stats, weather, and notes. | |
| MCP Puerto Rico Sentencias ericalopezfebo/mcp-puerto-rico-investigacion-juridica Search, locate, and read Puerto Rico Supreme Court decisions and other public court documents directly from MCP clients, with strict source verification to prevent citation hallucinations. | |
| Hono Math MCP Server ericbfriday/vercel-hono-mcp-bun Enables LLMs to perform basic mathematical operations (add, subtract, multiply, divide) through a Model Context Protocol server built with Hono and deployed on Vercel. Provides type-safe calculator tools that can be accessed by any MCP-comp | |
| PDF MCP Server ericboix/mcp_test An MCP server that exposes PDF files as resources, page by page, over Streamable HTTP. | |
| limitless-ai-mcp-server ericbuess/limitless-ai-mcp-server Enables AI assistants to interact with Limitless AI Pendant recordings, search, retrieve, and analyze lifelogs via the Model Context Protocol. | |
| aifmt ericchansen/aifmt An MCP server that fixes, validates, and generates visual text content for AI coding assistants. | |
| mcp-tester ericchansen/mcp-tester Instrumented MCP server for testing client conformance to list_changed notifications, enabling verification of dynamic tool, resource, and prompt surfacing. | |
| SlimWeb Client MCP ericchen1972/slimweb-client-mcp Consumer-side MCP server for Webless storefront operations, enabling catalog browsing, product search, and order lookup via tools. | |
| SlimWeb-MCP ericchen1972/slimweb-mcp Enables AI clients to manage SlimWeb/Webless e-commerce backend operations such as products, orders, categories, promotions, and settings through a secure Remote MCP server. | |
| Xynaptic MCP ericchengech/xynaptic-catalog Xynaptic MCP server: 200+ pay-per-call data & AI services for agents — crypto, French company registry, US/EU securities, banking, health, energy, rail, plus a Developer Kit (code review, tests, security audits). USDC via x402, no API key. | |
| GauntletCI-MCP ericcogen/gauntletci-mcp MCP server that integrates GauntletCI to analyze behavioral change risk in commits, providing findings as text, JSON, or SARIF reports for AI assistants. | |
| DevLog ericd21/devlog Enables developers to maintain a local engineering journal, log work manually or from git history, and let AI assistants query, summarize, and draft standup updates, changelogs, and retro notes. | |
| 2CaptchaMCP ericfor/2captchamcp Integrates with 2Captcha to solve various CAPTCHA types (image, reCAPTCHA, hCaptcha, etc.) for AI agents via MCP. | |
| MCP Bitcoin CLI ericgrill/mcp-bitcoin-cli Enables interaction with Bitcoin's blockchain through Claude to embed and read data using OP_RETURN, create timestamps, deploy BRC-20 tokens, and store documents up to 100KB on-chain. | |
| Civic Data MCP Server ericgrill/mcp-civic-data Provides access to 7 free government and open data APIs including NOAA weather, US Census demographics, NASA imagery, World Bank economics, Data.gov, and EU Open Data through 22 specialized tools, with most requiring no API keys. | |
| MCP-IPFS ericgrill/mcp-ipfs A Model Context Protocol server that enables Claude to interact directly with IPFS for content-addressed storage, peer-to-peer networking, and decentralized data management. | |
| MCP Predictive Market ericgrill/mcp-predictive-market Aggregates prediction market data from 5 major platforms (Manifold, Polymarket, Metaculus, PredictIt, Kalshi), enabling users to search markets, compare odds across platforms, detect arbitrage opportunities, and track predictions through na | |
| loci-mcp ericgutierrez66792/loci Enables AI agents and MCP hosts to query a local hybrid vector and BM25 index over scattered notes, docs, and chat logs, returning section-level citations for grounded answers. | |
| free-design-registry erichon0410-png/21st-spec-mcp Enables agents to search a fully local catalog of 21st-style shadcn components via full-text search, inspect individual records, generate reusable build prompts, retrieve install steps, and fetch design tokens for aesthetic keywords. Runs e | |
| PROSPERO-MCP erichuang777777/prospero-mcp MCP server for querying PROSPERO registered protocols, enabling search, retrieval, and registration workflow management. | |
| Android Mobile MCP erichung9060/android-mobile-mcp Enables AI agents to interact with Android devices through UI manipulation, screen capture, touch gestures, text input, and app management via ADB. Provides comprehensive mobile automation capabilities including element detection, navigatio | |
| Hyperion V2 ericklrm89-jpg/hyperion Universal MCP server that enables any LLM agent (Claude, Cursor, Cline) to control a real Chrome browser with 5 perception engines, resilient heartbeat, and real-time vision streaming. | |
| calibre-manager ericknavarro/calibre-manager-mcp An MCP server to manage and organize a Calibre ebook library, enabling metadata editing, search, conversion, and more through AI assistants. | |
| Roblox Studio MCP Server erickow/robloxui-cli Enables AI tools to read the Roblox Studio game tree, edit scripts, insert models, and run playtests via the Studio MCP interface. | |
| Multimodal MCP erickpxd/multimodal-mcp Enables semantic image search using CLIP embeddings and visual question answering through MCP tools, allowing natural language interaction with images. | |
| simple-vision-mcp erickstryck/simple-vision-mcp A lightweight MCP server for image analysis using any OpenAI-compatible API endpoint, enabling AI agents to analyze images via a single tool. | |
| Google Calendar - No deletion erickva/google-workspace-mcp-server-no-calendar-deletetion Forked from https://github.com/epaproditus/google-workspace-mcp-server
The deletion and updates on Google Calendar were removed since there were no scope to prevent deletion whilst maintaining creation capabilities. | |
| voice-mcp-server erickvs/voice-mcp-server Enables AI agents to speak and listen in real-time with interruption handling, using local ML models and hot-swappable adapters. | |
| Erick Wendel Contributions MCP erickwendel/erickwendel-contributions-mcp A Model Context Protocol server that enables AI agents to query Erick Wendel's talks, blog posts, and videos across different platforms using natural language. | |
| No.JS MCP Server erickxavier/nojs-mcp Provides AI assistants with deep knowledge of the No.JS framework, including documentation for over 80 directives and 32 built-in filters. It enables tools for template validation, component scaffolding, and quick reference access to the fr | |
| nannylane-mcp ericlewis/nannylane-mcp Unofficial Bun-based MCP server and TypeScript SDK for authenticated Nanny Lane dashboard data, enabling reading dashboard data, searching public nanny listings, inspecting messages, and preparing messages. | |
| widget-studio ericlewis/widget-studio-mcp MCP server that lets agents create, display, and export rich UI widgets (cards, dashboards, charts, forms) inline in conversations, with interactive iframe support in MCP Apps hosts and PNG image fallback for other clients. | |
| mcp-context ericlimabr/mcp-context Local MCP server that provides semantic search (RAG) over code repositories, enabling AI clients like Claude and Gemini to access project context without manual re-upload. |
48,401–48,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.