Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| task-manager ethereal-ctrl/task-mcp-server Enables LLMs to manage tasks in a local SQLite database, with tools for creating, listing, updating, and deleting tasks. | |
| OPNsense MCP ethereal-jay/opnsense-mcp Enables remote agents to securely read firewall and NAT rules, inspect routing tables and logs, and execute safety-gated mutation plans through a bearer-authenticated MCP endpoint. | |
| Pterodactyl MCP Server ethereal-jay/pterodactyl-mcp Enables managing Pterodactyl Game Panel servers via Client and Application APIs, including power actions, files, databases, backups, schedules, and administrative operations. | |
| realtime-currency-exchange-mcp ethereal-jay/realtime-currency-exchange-mcp Enables real-time currency exchange rate lookup, conversion, historical rates, and currency catalog using the free Frankfurter API, no API key required. | |
| op-injection-scanner ethereum-optimism/op-injection-scanner An MCP server for prompt injection boundary enforcement that scans URL content using a tiered LLM model strategy. | |
| ETHID MCP Server ethereumfollowprotocol/ethid-mcp Provides comprehensive access to the Ethereum Follow Protocol (EFP) API, enabling social graph queries, follower/following management, ENS resolution, and profile data retrieval for Ethereum addresses and ENS names. | |
| Meetings MCP Server ethereumfollowprotocol/google-services-mcp Provides read-only access to Google Drive meeting transcripts and Google Calendar events, enabling AI assistants to search, analyze, and retrieve meeting insights. | |
| GitHub Team Management MCP Server ethereumfollowprotocol/team-mcp Enables comprehensive GitHub project management automation including creating/managing issues, updating project boards, assigning team members, and analyzing repository activity across organizations through OAuth-authenticated AI assistants | |
| EtherGPT etherman-os/ethergpt A secure MCP server that gives ChatGPT access to local terminal, files, and background processes, and lets it discover, manage, and call any registered MCP server on the machine. | |
| Swarm MCP ethersphere/swarm-mcp MCP server for Ethereum Swarm decentralized storage. Provides 12 tools for uploading and downloading data and files, managing postage stamp batches, and working with Swarm feeds — all via the Bee API. Works with the public Swarm gateway or | |
| Bangumi MCP etherwindy/bangumi-mcp Enables searching and retrieving information about anime, manga, and related content via the Bangumi API. | |
| Video MCP Server ethnn-b/vidmcp Bridges Claude and video content by extracting keyframes and transcribing audio, enabling Claude to analyze video files. | |
| Caduceus Memory MCP ethos-zero/caduceus-memory-mcp A local shared-memory MCP server for Claude, Codex, Hermes, and other MCP-aware agents, providing a durable memory layer with Markdown files and SQLite fact store. | |
| Mneme Memory MCP ethos-zero/mneme-memory-mcp A local-first shared memory layer for MCP-aware agents like Claude, Codex, and Hermes, enabling persistent memory across chats and clients via Markdown files and SQLite FTS. | |
| EvidenceForge ethos6/evidenceforge Enables read-only, allowlisted-root scanning and deterministic comparison of binary and application artifacts, producing JSON/HTML evidence reports without executing the targets. | |
| FreeFlight ethos6/free-flight-api Enables AI assistants to ask what aircraft are flying near a location, track a specific flight's live position, route, aircraft details and photo, and surface emergency-squawking or military aircraft. It exposes four tools (flights_near, tr | |
| jobsearch ethos6/free-job-search-api Lets AI agents search ranked job listings from company career pages, job boards and the web using plain-language requirements or CV text, with optional location and result limits. It also exposes the available job sources so agents can see | |
| freeocr MCP Server ethos6/free-ocr-api Lets AI assistants and editors read documents on the local machine, turning PDFs, scans, invoices, receipts and bank statements into structured fields, line items and entities over stdio. Runs fully self-hosted with no cloud calls or API ke | |
| FreeSearch MCP Server ethos6/free-search-api Gives AI assistants keyless web search, news search, and full-page reading tools by querying multiple engines in parallel and returning merged results. It can run locally over stdio or remotely over HTTP for Claude, Cursor, and other agents | |
| SpectraProbe MCP server ethos6/spectraprobe Enables MCP-compatible clients and agents to drive SpectraProbe's static analysis engine over stdio, exposing twelve tools for probing targets, inspecting metadata, strings, dependencies, symbols, imports, resources and JavaScript, searchin | |
| mcp-mempool ethosen/mcp-mempool MCP server for querying live Bitcoin data from mempool.space, including recommended fees, mempool stats, blocks, transactions, addresses, and price. No API key required. | |
| PBXMCP ethycs/pbxmcp Enables LLM agents to communicate with each other by placing and answering calls via a telephone exchange, with routing, hop budget, and call recording. | |
| Publish Control ethyusuf/publish-control Enables AI coding assistants to run pre-publish security and code-quality scans across 17 categories, generate a 0–100 security score and Markdown report, quickly check critical vulnerabilities, and receive fix/refactor suggestions by findi | |
| shipsafe-mcp ethyusuf/shipsafe Enables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results. | |
| Memory MCP etiennebbeaulac/memory-mcp Gives AI coding agents persistent, evolving knowledge about a codebase, enabling them to store and retrieve observations about architecture, conventions, gotchas, and recent work context. | |
| Multi-Workspace MCP Server etiennebbeaulac/workspace-mcp Enables AI coding agents to access and manage multiple configured workspace repositories from a single session, eliminating context loss when working across companion repos. | |
| cc-delegate etiennelescot/cc-delegate Delegates heavy development tasks from a supervisor to an autonomous worker on a cheaper model via MCP, with isolated git worktrees and provider-agnostic support. | |
| Chakra MCP Server etnalabs/mcp-server Enables natural language queries and management of databases and subscribed data shares through Anthropic's Model Context Protocol. | |
| Ollama MCP Server etnlbck/ollama-mcp Enables interaction with locally running Ollama models through chat, generation, and model management operations. Supports listing, downloading, and deleting models while maintaining conversation history for interactive sessions. | |
| Firefly III MCP Server etnperlong/firefly-iii-mcp Enables AI assistants to manage Firefly III personal finance accounts and transactions through the Model Context Protocol. | |
| ARC-DRAW etosin/arc-draw Enables AI agents to draw SAP BTP solution diagrams on a live draw.io canvas from plain-language descriptions, using 111 built-in SAP BTP icons and the official SAP BTP Solution Diagram grammar. It auto-loads a drawing constitution and expo | |
| insight-blueprint etoyama/insight-blueprint A Python MCP server for hypothesis-driven data analysis, managing analysis designs, data catalogs, and review workflows through Claude Code or any MCP-compatible client. | |
| data-gov-il-mcp etpenkyqzw/data-gov-il-mcp Enables MCP-compatible clients to discover and query Israeli Government Open Data from data.gov.il, including datasets, resources, tags, organizations, and tabular records through the official CKAN API. It provides tools, resources, prompts | |
| CVE-Search MCP Server etpjfstszv/cve-search_mcp Enables users to query a vulnerability database for vendors, products, vulnerabilities by product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and database update information. | |
| Adobe Journey Optimizer Content API MCP server etrakselis/ajo_content_mcp Enables interaction with Adobe Journey Optimizer content through the Content API, supporting sandbox configuration and secure credential management. | |
| Intel NPU Tools MCP Server etreby/intel-npu-tools Enables MCP clients to leverage the Intel Arrow Lake NPU for local speech transcription, screenshot OCR, private semantic search, and hardware diagnostics, all processed locally. | |
| AgentQL MCP Server etrivedi25301/agentql-mcp Enables agents and developers to extract structured data from web pages by providing a URL and a prompt describing the desired data and fields. It exposes this extraction capability as an MCP tool for compatible clients. | |
| multiCAD-mcp etrivedi25301/multicad-mcp Enables AI assistants such as Claude for Desktop or Cursor to control CAD applications including AutoCAD, ZWCAD, GstarCAD, and BricsCAD through natural-language and unified tool calls for drawing, layers, blocks, entities, files, and export | |
| stratagent etrkk5/stratagent Enables coding environments to discover and inspect GitHub-hosted agent skills and sub-agent definitions, review provenance, policy findings, and dry-run plans, and access read-only configuration analysis while installation approval remains | |
| Taiwan Book Metadata Resolver etrnya/google-books-tw-mcp Enables AI clients to look up Taiwanese Traditional Chinese publications from Google Books with automatic ISBN dash cleaning and checksum validation, ISBN-10 to ISBN-13 conversion, and high-resolution https cover resolution. Returns a norma | |
| Prometheus MCP etruong42/prometheus-mcp A proof-of-concept Prometheus MCP server, which likely enables Claude AI to interact with Prometheus monitoring systems through the Model Context Protocol. | |
| board etschmia/diskussionsboard Enables AI clients to participate in moderated discussion boards with humans and other models, supporting reading threads, posting, passing, and updating status via MCP tools. | |
| urai-router etside/urai-router Enables MCP clients to chat through multiple LLM API keys with automatic rotation and failover, discover free and available models, inspect key health and routing, refresh catalogues, ensure a local proxy, and generate OpenCode/Kiro/skill c | |
| SEV — Company Discovery from SEC Filings etsquareai/sev-mcp Ask a research question; in seconds get ranked companies, vetted 10-K/10-Q passages and financials. | |
| Browserose MCP ettomarett/browserose-mcp MCP server for AI agents to control Google Chrome via Playwright with full iframe support, enabling end-to-end browser automation including navigation, interaction within iframes, and diagnostic tools. | |
| IBKR MCP Server ettore-pedemonti/ibkr-mcp-server Enables AI agents to query and trade through Interactive Brokers using 38 tools for order placement and management with risk checks, account and position data, market and historical data, and options analytics. Includes diagnostics and conf | |
| google-maps-mcp-server ettysekhon/google-maps-mcp-server Production-ready MCP server for Google Maps Platform APIs, providing 11 tools for directions, places, geocoding, traffic, and road data to empower AI agents with location intelligence. | |
| garmin-connect-mcp etweisberg/garmin-connect-mcp An MCP server for Garmin Connect that provides access to fitness activities, health statistics, and sleep data by routing requests through a headless browser to bypass API restrictions. It enables users to query detailed metrics like heart | |
| MLB Stats MCP Server etweisberg/mlb-mcp Provides access to comprehensive MLB baseball statistics through the MLB Stats API, pybaseball library, Statcast data, FanGraphs, and Baseball Reference, including support for generating matplotlib visualizations. | |
| gemini-bridge-mcp euamobi4582/gemini-bridge-mcp MCP server for Google Gemini that does not require an API key, combining a CLI backend for Q\&A, research, and analysis with a web UI backend for image and video generation. |
48,801–48,850 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.