Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| gmail-mcp eubin-create/gmail-mcp A Cloudflare Workers-based MCP server that connects Gmail to AI assistants, enabling search, read, send, reply-all, forward, and management of messages, drafts, labels, and threads across multiple Google accounts simultaneously. | |
| flat-mcp eubrunodiego/flat-mcp Enables Claude to list, read, edit, restore, export, and create Flat.io sheet music through the Flat REST API using a personal access token, with every edit saved as a new revision that can be undone. Includes dry-run previews, MusicXML mea | |
| Euclid-MCP euclid-bg/euclid-mcp MCP server for logical reasoning that turns facts into formal proofs using a deterministic inference engine with Prolog. | |
| Euclid euclidtools/euclid AI agents hallucinate math. Euclid fixes that. Connect once and give your agent 10 deterministic tools: arithmetic, unit conversion, statistics, datetime, finance, regex, color, encoding, validation, and geospatial. Same input, same output, | |
| mcp-eu-ai-act eucomplyhub/mcp-eu-ai-act MCP server for EU AI Act compliance classification with multi-jurisdiction overlay across 8 frameworks (NIST AI RMF, ISO 42001, GDPR, HIPAA, Colorado SB 24-205). Provides deterministic risk classifier (quick_risk_class) and Claude-powered A | |
| GXGuard eudavalos/genexus-ia-x10 Connects a GeneXus knowledge base and curated official documentation to MCP-compatible AI assistants, enabling governed read/search, call-graph and impact analysis, versioned plans with rollback, draft generation, SDK probes, and official-k | |
| site-host eugene-plexus/site-host Enables a machine to expose its registered folders and locally added tools to remote callers over MCP, deciding each request against local policy with default-deny access, per-person tool grants, pre-approval for anything not marked read-on | |
| DatahubMCP eugene-ych/datahubmcp Enables Claude to query MySQL databases and access Google Workspace (Sheets, Forms, Drive) for education program management, with built-in templates for data analysis and report generation. | |
| mac-apps-launcher eugenechen0514/mac-apps-launcher fork from https://github.com/JoshuaRileyDev/mac-apps-launcher | |
| MegaPad eugenefinch/mechapad-cli Enables users to run queries across multiple AI models in parallel, comparing latency, token speed, and cost, and to integrate this multi-model racing and code review capability into Claude Code, Cursor, and Codex CLI. | |
| MCP Discord Agent Communication eugeneistrach/mcp-discord-agent-comm An MCP server that enables AI agents to send notifications and request user input via Discord during long-running tasks. It allows users to remotely interact with their AI assistants and provide feedback through the Discord messaging platfo | |
| mcp-loader eugeneistrach/mcp-loader Enables to create MCP tools by simply placing .ts or .js files in a folder, with hot reload and TypeScript support. | |
| CloudWatch Log Analyst MCP eugeneoh04/cloudwatch-mcp Enables LLMs to autonomously query AWS CloudWatch Logs and perform structured root-cause analysis via natural language prompts, using MCP tools for log group listing and Insights queries. | |
| Wobbo Bobo Ops & Creative Sandbox MCP Server eugeneshemchuk/wobbobobo-mcp-server Enables conversational management of Postgres-backed project data, off-limits rules, and hook styles, plus logging TikTok view counts and correlating performance by creative direction, hook style, or video-gen model. It also provides a sand | |
| Telegram MCP Server eugenetver/telegram_mcp Enables AI assistants to interact with Telegram accounts, chats, messages, media, and more via MCP, using Telethon. | |
| Logseq MCP Server eugeneyvt/logseq-mcp-server Enables AI assistants to interact with your local Logseq knowledge base through advanced search, content creation, template management, and knowledge organization with privacy-first, local-only operations. | |
| SharePoint MCP Server eugeniogdiniz/c-sharepoint-mcp Enables access to SharePoint Online data via Microsoft Graph API, allowing listing sites, lists, and list items. | |
| jev-engineering eugeniughelbur/jev-engineering Lets AI agents gate actions before they happen with allow/ask/deny verdicts, rank up to 255 options, and report decision stats. | |
| 221B eugepolo/221b-mcp A local MCP server that gives AI clients OSINT tools to find public profiles, search the web, inspect pages, look up domains and Shodan services, and export sourced, timestamped findings without requiring API keys by default. | |
| Caddy MCP euisuh/caddy-mcp MCP server for safely inspecting and operating a local Caddy admin API. Provides read-only tools and dry-run mutations for config management. | |
| mcpkit eukennedy/mcpkit mcpkit enables rapid creation of MCP servers with Zod-based tool definitions, automatic schema generation, and built-in validation, reducing boilerplate significantly. | |
| mcp-sequel eukos/mcp-sequel MCP server for Claude that connects to MySQL, MariaDB, and SQLite databases. Query your databases using natural language. | |
| TeamTok MCP eun-y0ung/agentic-player-10-mcp 카톡 팀플방의 대화를 팀원별 역할, 마감, 미정 항목, 제출 체크리스트, 공지 메시지로 정리해주는 대학생용 MCP 서버. | |
| doc-template-mcp euna-source/doc-template Enables converting Obsidian Markdown files into planning and research HTML documents with light/dark, PC/mobile/print support and selectable color themes. | |
| bpftrace MCP Server eunomia-bpf/mcptrace A minimal server that provides AI assistants with access to Linux kernel tracing capabilities through bpftrace, enabling dynamic tracing and performance analysis via the Model Context Protocol. | |
| setup-guard-mcp eunryong/version-compat-mcp Enables AI coding agents to ground dependency setup, compatibility checks, and major-version migration advice in a project's real runtime, lockfiles, and config files. It parses local project state and npm registry metadata deterministicall | |
| EPICS MCP Server eunsang284/epics-mcp-server Enables interaction with EPICS (Experimental Physics and Industrial Control System) process variables through natural language. Supports reading PV values, setting PV values, and retrieving detailed PV information for monitoring and control | |
| kpop-wiki eunseo27/kpop-wiki Enables searching, retrieving, creating, and updating K-POP wiki pages (artists, albums, terms) via MCP tools. | |
| nrs_llm eunseopsong/nrs_llm An MCP server for ROS 2 environments that connects via rosbridge WebSocket, enabling topic/service introspection, publish/subscribe, service calls, robot connectivity checks, and polishing pipeline operations. | |
| aws-helper MCP Server eunyuljo/sample-mcp-server-with-claude-desktop A Model Context Protocol server that implements a simple notes system, allowing users to create, list, and summarize text notes. | |
| Browser-MCP Server euraxluo/browser-mcp A session-based MCP server that provides advanced browser automation capabilities, allowing users to control browsers, navigate websites, interact with elements, capture screenshots, generate PDFs, and manage cookies through natural languag | |
| Eureka Labo MCP Server eureka-labo/eurekalabo-mcp Enables task management and automated development tracking for Eureka Labo projects with git integration. Supports creating, updating, and tracking tasks while automatically capturing code changes and generating detailed development logs wi | |
| airus-mcp eureka-zhang/airus-mcp- MCP server exposing 1688 and OZON e-commerce crawling tools, enabling AI agents to perform product search, image search, and supplier contact scraping via natural language. | |
| Weather MCP Server eurekali/weather-mcp-server Enables real-time weather queries for 12 major Chinese cities and global cities using the wttr.in API. Provides tools to get weather, list supported cities, and server info. | |
| code-cache-mcp eurekame2000/code-cache-mcp A persistent, tree-sitter-backed code knowledge cache MCP server that reduces token usage by storing parsed structure and enabling fast symbol lookup, inheritance graph, call graph, and semantic search. | |
| Hermes GLPI Wave Hub eurfra-wave/mcp-glpi-wave-hub Enables interaction with GLPI (ITSM) through 71 tools covering tickets, assets, problems, changes, knowledge base, projects, users, and more, using SSE or stdio transport. | |
| MCP Pionex Management eurobertics/mcp_pionex Enables access to Pionex's public REST APIs for market data, spot accounts and orders, wallets, trading bots, and Earn products, with safeguards such as symbol and amount limits and destructive-operation annotations. | |
| mcp-rpg-worldstate eurobertics/mcp_rpg_worldstate Gives an AI game master a persistent memory for tabletop roleplaying games by storing worlds, characters, plots, and scenes. It enables saving, searching, and loading game state (via MCP tools) so the GM doesn't have to recall plot and deta | |
| ucsim-mcp eurobtec/ucsim-mcp Enables AI models and other MCP clients to load firmware images into a simulated microcontroller, then reset, run, step, and debug the virtual CPU while inspecting or modifying memory and registers, setting breakpoints, and driving peripher | |
| whatsapp-mcp eurogas-bbl/whatsapp-mcp MCP server for WhatsApp via GREEN-API gateway, enabling agents to read chat history and send messages and files. | |
| Europarcel MCP Server europarcel/mcp-docker Enables shipping and logistics operations through the Europarcel API, including order management, address lookup, pricing calculation, and package tracking. Supports both stdio integration with Claude Desktop and HTTP mode for web applicati | |
| EUROPESIP custom MCP Server for HCL DX IQ europesip/hcl-dx-iq-europesip-mcp It exposes five streamable-HTTP tools that add service and FAQ information, Figma or URL-to-DX component generation, session-based user identity lookup, and diagnostics to an existing DX IQ deployment. | |
| NiChart DLMUSE MCP euroso97/dlmuse_mcp Hosts T1 MRI skull-strip and MUSE ROI segmentation as an MCP server, enabling Claude Code to run segmentations on a remote GPU instance via SSH tunnel with async job processing. | |
| EuroVDC MCP Server eurovdceu/eurovdc-mcp Enables browsing EuroVDC's live hosting catalog, searching domains, receiving AI server recommendations, and performing agent-assisted checkout via remote HTTP or stdio. | |
| Roboflow MCP Server eusef/eusef_roboflow_mcp A Model Context Protocol server that gives AI coding agents programmatic access to Roboflow's computer vision platform, providing tools for discovery, rapid creation, inference, workflows, and utilities. | |
| knowledge-engine eusoubrasileiro/knowledge-engine Enables grounded, dated research from a curated AI-knowledge repository, offering free BM25 retrieval and a research loop that combines the knowledge base, curated sources, and the open web with tiered citations. | |
| whatsapp-mcp eusoubrasileiro/whatsapp-mcp Enables agents to use a personal WhatsApp account over MCP, with tools for messaging, real-time presence streams, and webhook subscriptions via a long-lived Docker daemon. | |
| Orchestrator Python MCP Server eustin/mcp-server-orchestrate Enables AI coding assistants to run a machine-verified DESIGN→PLAN→EXECUTE→VERIFY→COMPLETE workflow with human approval gates, state integrity checks, and DAG task scheduling. | |
| Euthynos euthynos-org/euthynos A local, read-only MCP server that provides AI coding agents with structural evidence about a repository, including dependency analysis and impact assessment, while naming the boundary of every answer without any LLM calls. | |
| AssetForge MCP Server euuuuuuan/assetforge-public Enables AI agents to generate game assets (sprites, audio, meshes, etc.) through MCP tools with a fail-closed license gate, ensuring every generation is vetted for licensing compliance before writing output. |
48,851–48,900 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.