Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| browser-search-mcp fangsylar-pixel/browser-search Enables web search via a real browser for any LLM, bypassing anti-bot measures without API keys. | |
| Marvis Working Memory MCP fangsylar-pixel/marvis-working-memory-mcp Provides local persistent working memory for AI agents, allowing them to load rules, preferences, and project state before tasks and save validated experiences after successful completion. Works with stdio MCP clients via a local JSON file. | |
| cubesugar-music fangtang0206/cubesugar-music A NAS music library downloader shell that aggregates multiple sources, writes ID3 tags, and exposes MCP tools for AI agents to search, download, and manage music. | |
| zhongxing-canvas fangwen950718-lvlv/zhongxing-canvas Enables users to run an Excalidraw infinite canvas inside a Codex MCP App, generate visual plans and images from briefs, and modify images via arrow annotations while saving projects locally. | |
| trae-memory fangxh2013/trae-memory 智能记忆系统，为TRAE IDE提供自动对话记录、上下文恢复和任务管理功能。 | |
| easy-code-reader fangyuan33/easy-code-reader An MCP server for intelligently reading Java source code, supporting extraction from Maven dependencies and local projects with dual decompilers. | |
| FinScope MCP Server fangyunok/finscope-agent Enables retrieval of versioned, source-attributed product term clauses and execution of deterministic Decimal cash-flow calculations against a user-confirmed cross-session profile, so clients can filter and rank simulated financial products | |
| QGISMCP fani-ko/qgis_mcp QGISMCP connects QGIS to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control QGIS for project creation, layer loading, code execution, and more. | |
| ibmi-mcp-server fanmnz/ibmi-mcp-server An MCP server that enables AI assistants to interact with IBM i AS/400 source members for source code management, compilation, and development workflows. | |
| page-bridge fannis9/dsh-page-bridge Enables an AI agent to read and operate the Chrome or Edge tabs you are already using — titles, URLs, text, HTML, screenshots, clicks, typing, scrolling, and tab management — via a browser extension and native messaging, without restarting | |
| tavern-tanuki fannnnnnn5822/tavern-tanuki MCP server for managing and playing a running SillyTavern instance, enabling AI coding assistants to read/write character cards, worldbooks, and chats, and to interact as a player via the full generation pipeline. | |
| taobao-mcp-server fanqi99-creator/taobao-mcp-server Enables AI assistants to automate Taobao shopping tasks such as searching products, viewing details, adding to cart, placing orders, and making payments via Playwright. | |
| MoeReview fanrec/moereview A local-first study workspace for MCP agents, providing a web UI for learning, quizzing, and review, independent of agent lifecycle. | |
| presence-mcp fanrj3/dsh-presence Exposes 20 tools over stdio that let coding agents treat any SSH-reachable machine as a local workspace: reading, writing, editing, searching and listing files, running commands and background jobs, driving persistent terminals, and forward | |
| after-effects-mcp fansist/mcp MCP server for Adobe After Effects, enabling structured control over projects, compositions, layers, properties, expressions, keyframes, imports, and rendering through a local authenticated WebSocket bridge. | |
| AI Colorist fantasychino/ai-colorist-agent Enables local photo grading through MCP by letting a host model inspect an image, choose a color strategy, and apply OpenCV-based LUTs to produce a graded output. | |
| ida-pro-mcp-plus fantay0312/ida-pro-mcp-plus An enhanced MCP server for IDA Pro that integrates bulk binary export, multi-instance management via Broker mode, and 80+ analysis tools for AI-assisted reverse engineering. | |
| kitsmith fantom2513/kitsmith Enables coding agents to build UI from a chosen React component kit by finding components by intent, reading their exact props, following composition recipes, and validating the result against the kit's real types. Kit-specific knowledge li | |
| mcp-namecheap fantomdancer/mcp-namecheap Comprehensive MCP server for the Namecheap API, enabling domain management, DNS record control, nameserver settings, and domain registration from any MCP client. | |
| @fantopy/fantopy-mcp fantopy-ai/mcp-server MCP server enabling AI agents to play fantasy football on Solana through Fantopy Arena, with tools for contests, lineups, and payouts. | |
| AgentScope Media MCP fanxing724/agent-mcp Enables MCP clients to call AgentScope Platform media models for speech synthesis, image generation and editing, audio transcription, and video generation and editing. It also supports media uploads and querying asynchronous task results. | |
| krita6-mcp fanzhuyifan/krita6-mcp Enables an AI assistant to inspect and edit a live Krita 6 desktop session, create and modify documents and layers, paint with native brushes, and receive inline PNG previews. | |
| GraphSense MCP Server faraazahmad/graphsense Enables natural language queries about JavaScript/TypeScript codebases using graph and vector search. Allows finding functions by semantic description, callers, callees, and function details. | |
| Nexar MCP Server farad-labs/nexar-mcp Enables searching for electronic components, comparing prices across distributors, checking availability, and retrieving datasheets through the Nexar/Octopart API with specialized tools for resistors, capacitors, inductors, semiconductors, | |
| Codebase Copilot MCP Server farahibreez18-ds/codebase-copilot Exposes code search and file reading tools over the Model Context Protocol, enabling any MCP-compatible client to query a codebase with natural language. | |
| Vantex-Security-A farahkhaterr/vantex-security-a This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions. | |
| mcp-weather-server farahsaeed/mcp-weather-server This MCP server provides weather tools for current conditions, forecasts, and travel recommendations using the National Weather Service API, enabling agents to answer weather-related questions. | |
| reddit-ads-mcp farahtrip/reddit-ads-mcp A self-hosted MCP server for the Reddit Ads API v3, enabling reading ad accounts, campaigns, ad groups, ads, and performance reports, with optional write support for pausing/activating, budgeting, patching, and creating entities. | |
| SportFinder Pro MCP Server faraonramses333/sportfinder-pro-mcp Enables searching for sports stores with intelligent ranking, filtering, and availability checks across multiple languages. | |
| n8n-mcp-guard farazhayder/n8n-mcp-guard Lets AI agents read, create, and update n8n workflows with a guarded two-phase plan-and-apply flow that backs up every change, refuses writes when the live workflow has moved, and verifies results by readback. Also supports rehearsing chang | |
| ScholarReach MCP farazkhan542/scholarreach-mcp Enables students to discover professors by recent research, draft personalized outreach emails, and send them from their own Gmail only after explicit approval, with voice-friendly status tracking across sessions. | |
| faraztools-mcp farazmazhar/faraztools-mcp Enables AI clients to call small utility tools like echo and Markdown-to-PDF conversion, running locally over stdio. | |
| hubstify-mcp farce1/hubstify-mcp MCP server enabling natural language interaction with Hubstaff data, including organizations, projects, members, tasks, and tracked-time activities. | |
| farebox-mcp fareboxfun/farebox-mcp Connects Claude Desktop, Cursor, or any MCP-compatible client to 36+ frontier LLMs with automatic per-token payments in USDC on Solana. | |
| farebox-mcp fareboxfun/platform Crypto-native LLM gateway with OpenAI-compatible API and per-token USDC payments on Solana via the x402 protocol. | |
| production-grade-mcp-agentic-system fareedkhan-dev/production-grade-mcp-agentic-system A production-grade MCP server designed for multi-tenant, authenticated, and observable AI agent systems, enabling secure tool execution across heterogeneous data sources. | |
| Sara farena-ai/sara Self-hosted AI companion whose MCP server lets Claude, Cursor and other clients search her long-term memory, document library and notes, read today's plan and to-dos, and ask her questions. Read-only by default; write tools follow her appro | |
| GitHub Project Manager MCP faresabdelghany/github-project-manager-mcp Enables comprehensive GitHub project management with 20 tools for issue tracking, milestone management, label organization, AI-powered task complexity analysis, and PRD generation with roadmap planning capabilities. | |
| geo-mcp fareski/geo-mcp OSM-backed multimodal navigation MCP server enabling geocoding, route planning, POI discovery, and urban layout analysis. It provides a structured city graph to LLM apps without proprietary map APIs. | |
| snowflake-mcp faressoft/snowflake-mcp Enables AI agents to execute SQL queries and explore Snowflake databases using natural language, with schema discovery, table inspection, and readonly mode. | |
| MCPilot farfive/mcpilot Enables an agent to search approved MCP integrations and expose only the tools a given task needs, signing the user in once via browser-based OAuth and enforcing scopes, effects and budgets in code. It also acts as a single gateway connecti | |
| design-flow-mcp fargo161/design-flow-mcp MCP server bridging ChatGPT-compatible clients to the Design Flow System, enabling project session management, draft import, round locking, and read-only access to design state and traceability. | |
| Tldraw MCP Server farhadjaman/tldraw-mcp This project integrates tldraw with Claude AI using the Model Context Protocol (MCP). It allows Claude to create and manipulate diagrams based on natural language instructions. | |
| sheypoor-mcp farhamaghdasi/sheypoor-mcp Enables AI clients to search and browse Sheypoor classifieds, fetch product details, and manage account features such as bookmarks, chats, and login. | |
| Maggeloku MCP farhan0431/maggeloku-mcp Connects QGIS to any MCP-speaking AI agent, exposing 125 tools that let the agent manage layers, edit features, run processing algorithms, render and style maps, author layouts and atlases, query across layers with SQL, and administer the Q | |
| no-api-media farhan6667/no-api-media-mcp Enables AI coding clients to generate and save project-aware images and videos using existing paid AI subscriptions, without API keys or passwords, and to optimize media for the web. | |
| ServiceNow Cowork Automation API farhanakhtar46/foundry-agent-sn-automation-backend MCP-compatible backend that automates ServiceNow incident handling via Microsoft 365 Copilot, offering tools for incident analysis, automation, and job status retrieval. | |
| Claude Context Local farhanaliraza/claude-context-local Provides semantic code search capabilities that run 100% locally using EmbeddingGemma embeddings. Enables finding code by meaning across 15 file extensions and 9+ programming languages without API costs or sending code to the cloud. | |
| mainframe-mcp farhanjml/mainframe-mcp Enables Claude Code to access and operate an IBM z/OS mainframe via TN3270, including reading screens, browsing datasets, editing code, submitting jobs, and running regression tests through natural language. | |
| Redis MCP Server farhankaz/redis-mcp Enables users to perform Redis database operations using the Model Context Protocol (MCP) tools, allowing for efficient data management through commands like setting, getting, and scanning hash fields. |
49,601–49,650 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.