Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Noted fabriziosalmi/noted Local Markdown/HTML note-taking app with built-in MCP server, agentic workflow runtime engine, wikilinks, and state-machine approval gates. | |
| Proxxx fabriziosalmi/proxxx Terminal cockpit, CLI, and MCP server for Proxmox VE & PBS with 25 typed tools, pre-flight safety gates, Telegram HITL approval for destructive operations, and stdio/HTTP SSE transports. | |
| GraphQL MCP Server fabrwill/gql-mcp A Model Context Protocol server for executing GraphQL queries, allowing AI models to interact with GraphQL APIs through introspection and query execution. | |
| public-mcp fabs133/public-mcp Enables MCP clients to run deterministic checks on text inputs: validating a spec, checking tests against it, and checking an implementation's source, all by parsing Python without executing it. The client supplies the model while the serve | |
| sbb-mcp fabsbags/sbb-mcp Independent MCP client by swsistrip for Swiss Federal Railways (SBB/CFF/FFS) — all schedules, prices, ticket links via SBB's official SMAPI. | |
| Gemini MCP facar8719-crypto/gemini-mcp- Connects Claude.ai with Google's Gemini API to generate images and videos using your own API key. | |
| Calibre MCP Server facedeer/calibre_full_mcp_server Connects AI agents to Calibre ebook libraries for searching, reading, and managing digital collections. It supports metadata updates, format conversion, and full-text content searches while providing granular permission controls for library | |
| AdaptixC2 MCP Server faceless0x7/adaptixc2-mcp-server Enables LLM agents to interact with and automate operations with the AdaptixC2 framework via the MCP protocol. | |
| ruyi-mcp facetomyself/ruyi-mcp Community MCP server for RuyiPage enabling browser automation, fingerprint analysis, network interception, and human behavior simulation via 56 MCP tools. | |
| Workix MCP facetoplace/workix Enables AI agents to search a shared catalog of projects, roles, orders, participants, and mentors, create and update listings or profiles, draft proposals, and search and apply across external freelance and job platforms while keeping plat | |
| facets-control-plane-mcp-server facets-cloud/control-plane-mcp-server Enables management of Facets Control Plane projects, resources, environments, and deployments through Claude, offering secure infrastructure automation workflows. | |
| Control Plane OpenAPI MCP Server facets-cloud/control-plane-openapi-mcp Enables AI assistants to explore and interact with the Facets Control Plane API via natural language, supporting operations like searching endpoints, loading schemas, and making authenticated API calls. | |
| Facets Module MCP Server facets-cloud/facets-module-mcp Enables creation and management of Terraform modules for Facets.cloud infrastructure with interactive generation, validation, forking, testing, and deployment workflows through secure file operations and FTF CLI integration. | |
| Active MCP facexiang/active_mcp A Ruby on Rails engine for the Model Context Protocol (MCP) that enables connecting Rails apps to AI tools with minimal effort. | |
| Football Knowledge Graph RAG MCP Server fachreza28/football-knowledge-graph-rag Enables natural language querying of a football knowledge graph via Neo4j, generating Cypher queries and answers using LLMs, and also provides tools to build the graph from text. | |
| api-test-mcp factruesolin/api-test-mcp 基于fastmcp-ts开发的接口测试mcp工具，ai可以通过调用该工具对接口进行测试。 | |
| Image-Edit-RMCP factruesolin/image-edit-rmcp Image Edit RMCP is a powerful Model Context Protocol service that provides OpenAI-like image editing capabilities for text-based models. This Rust-based service enables traditional language models to "see" and process images through compreh | |
| FacturaHub MCP Server facturahub-com/facturahub-mcp Enables AI assistants to manage business operations including invoicing, WooCommerce syncing, expense tracking, POS, inventory, and team management through natural language. | |
| DataForSEO MCP Server facundozupel/mcp-dfs Enables professional SEO/SEM research with geolocalized keyword discovery, competitor analysis, and SERP ranking insights using DataForSEO API. | |
| MCP Weather Server facupve/intro-mcp A demonstration MCP server created for learning purposes, allowing Claude AI to interact with local files and a Postgres database while implementing a custom Model Context Protocol. | |
| sap-btp-destination-mcp facusada/mcp-btp A Python MCP server that authenticates with SAP BTP, reads Destination Service configurations, and exposes endpoints and MCP tools to access and call these destinations. | |
| Notebook fadamakis/codex-plugin-starter Enables users to create, search, favorite, and edit notes through four validated MCP tools, with an optional React-based UI in Codex. | |
| Homra Heartbeat 2.0 fadedchange0aran-netizen/homraheartbeatai A Python-based MCP server and React dashboard designed for system monitoring and automated notifications via PushPlus and Notion. It enables users to deploy a secure heartbeat tracking system with real-time updates through SSE. | |
| faden fadenhq/cli Enables posting to multiple social media platforms (X, LinkedIn, Facebook, Instagram, etc.) via a unified API, handling OAuth, media, and scheduling for each network. | |
| KiCad MCP SEA fadhilmayati/kicad-mcp-sea Audits KiCad PCB designs against South-East Asian fab capabilities using an IPC-compatible DFM rules engine with optional AI review via Ollama. | |
| mcp-vision-image-fadhli fadhlirajwaarahmana/mcp-vision-image MCP server for image analysis using Gemini API. It enables analyzing images from local paths or URLs, and provides usage statistics. | |
| LLM Inference Pricing Research Server fadi88/udacity_mcp Enables scraping and comparing pricing information for LLM inference services across multiple providers (CloudRift, DeepInfra, Fireworks, Groq) using Firecrawl API and SQLite storage. | |
| Cloudflare Remote MCP Server Template fadil369/mcp A deployment template for hosting remote Model Context Protocol servers on Cloudflare Workers using Server-Sent Events (SSE). It enables developers to expose custom tools to MCP-compatible clients like Claude Desktop and Cloudflare AI Playg | |
| business-overview fadiroot/business-overview-mcp Enables developers and product owners to scan a codebase and extract a readable business overview—features, roles, access control, data model, and endpoints—along with findings on missing or inconsistent rules, and generate shareable HTML o | |
| Lufa Farms MCP Server fadisheh/mcp-lufafarms Enables AI agents to interact with Lufa Farms for grocery shopping, including browsing/searching products, managing the basket, and viewing order details. | |
| dynamic-mysql-mcp fadlee/dynamic-mysql-mcp Enables secure, runtime-authenticated MySQL database querying and mutation through dynamic tools, allowing AI assistants to list databases/tables, describe schemas, and perform CRUD operations. | |
| PocketBase MCP Server fadlee/dynamic-pocketbase-mcp Enables MCP-compatible applications to directly interact with PocketBase databases for collection management, record operations, schema generation, and data analysis. | |
| cabrain-cli fadymondy/zekra-cli Connect any AI client to the CaBrain memory system via MCP, exposing tools for memory recall, retain, and brain management. | |
| ClaudBeyond faen399/claudbeyond A D&D 5e digital toolset with an MCP server enabling Claude to manage characters, search the SRD, roll dice, and interact with campaigns and encounters. It syncs data with the web app for real-time collaboration. | |
| fieldbook faen399/fieldbook A local MCP server for managing tabletop RPG characters, enabling character creation, advancement, inventory management, rules search, and dice rolling. | |
| DevFlow MCP Server faerberk/devflow-mcp MCP server that integrates DevFlow with AI code assistants to enforce structured development workflows including planning, task tracking, and code review gates. | |
| Proton Mail Bridge MCP faf-net/proton-mail-bridge-mcp Enables AI agents to read a Proton Mail mailbox over IMAP through the official Proton Mail Bridge without any write path, exposing tools to list mailboxes, search messages (umlaut-safe), read threads and emails, and fetch attachments as bas | |
| x402 MCP Gateway fafuppg/mcp-gateway A gateway that forwards tool calls to downstream MCP servers, handles x402 payment challenges with automatic wallet payment, and supports compliance checks. | |
| fagents-mcp fagents/fagents-mcp MCP server that enables Claude Code agents to send and read emails via SMTP/IMAP with per-agent credential isolation and audit logging. | |
| HubSpot MCP Server fagun04/hubspot-mcp-verser- An MCP server that exposes HubSpot CRM operations as tools over stdio, enabling any MCP client to query and modify HubSpot data. | |
| Salesforce MCP Server fagun04/mcp-server Enables querying and modifying Salesforce data (Accounts, Contacts, Opportunities, Leads, Cases) via MCP tools. | |
| slimread fahad-sajeem/slimread An MCP server that lets coding agents read individual functions, classes and symbols from source files instead of loading whole files, cutting the tokens spent reading code by 85-95% on large files. It provides outlining, exact symbol reads | |
| Syllabuddy fahad208177-tech/syllabuddy Enables students to ask by voice whether a specific topic is examinable on their exam — the digital SAT and PSAT, ACT, 24 AP courses, Alberta Diploma, and Singapore-Cambridge A-Level — returning the official syllabus's own wording, objectiv | |
| ananda-resonance fahadarfin/ananda-resonance Enables control of Equalizer APO profiles, filters, headphones, and diagnostics through MCP tools, allowing profile switching and audio management from any MCP client. | |
| jev-unreal fahadarfin/jev_unreal Enables Unreal Engine editor development through typed Jev decisions and guarded MCP tools, including tool recommendation, diagnostic classification, scene inspection, and preview/apply blockout operations with undo. | |
| Email MCP Server fahadbstech/mcp-gmail-sender Enables sending emails through SMTP using nodemailer, allowing AI assistants to send plain text and HTML emails with configurable SMTP credentials. | |
| magento-mcp fahadejaz/magento-mcp MCP server for Magento 2, exposing store data and operations via REST Admin API, GraphQL, and read-only SQL, with safety confirmations for destructive actions. | |
| goodreads-mcp fahadimmad786-stack/goodreads-mcp Enables answering statistical questions about a large Goodreads dataset in BigQuery using aggregate-only tools, with built-in guards and caveats that prevent users from getting misleading numbers from known data defects. | |
| KSoR fahadkhanreal/ksor-mcp Serves a governed knowledge system of record over MCP, letting agents answer questions with citations drawn only from approved documents and explicitly decline when the record does not cover the question. | |
| Travel MCP Server fahim-ux/mcp A Model Context Protocol server that enables flight searching, booking, and payment processing. It also provides access to resources like user profiles, pricing rules, and company travel policies. |
49,401–49,450 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.