Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MCP RAG fastmcp-me/mcp-rag A RAG-based knowledge base system supporting document processing, semantic search, and intelligent Q\&A with multiple AI model integrations. | |
| mcp-sentry fastmcp-me/mcp-sentry A Model Context Protocol server that enables retrieving and analyzing Sentry issues, including stacktraces and debugging information. | |
| EventCatalog MCP Server fastmcp-me/mcp-server Enables querying event-driven architecture documentation including domains, services, messages, and schemas through MCP clients like Claude and Cursor. | |
| mcp-server-apache-airflow fastmcp-me/mcp-server-apache-airflow Enables interaction with Apache Airflow through the Model Context Protocol, allowing users to manage DAGs, task instances, variables, connections, pools, XComs, and datasets. | |
| BigQuery MCP server fastmcp-me/mcp-server-bigquery A Model Context Protocol server that provides access to BigQuery. This server enables LLMs to inspect database schemas and execute queries. | |
| mcp-server-duckdb fastmcp-me/mcp-server-duckdb Enables DuckDB database interaction through MCP, supporting SQL queries, table creation, and schema inspection with optional read-only mode. | |
| Keboola MCP Server fastmcp-me/mcp-server-keboola Connects AI agents and MCP clients to Keboola, enabling storage queries, SQL transformations, job triggers, and more through natural language. | |
| MotherDuck DuckDB MCP Server fastmcp-me/mcp-server-motherduck A local MCP server implementation that interacts with DuckDB and MotherDuck databases, providing SQL analytics capabilities to AI Assistants and IDEs. | |
| MCP Shell Server fastmcp-me/mcp-shell-server Enables secure execution of whitelisted shell commands through MCP, with support for stdin input, timeout control, and comprehensive output including stdout, stderr, and execution time. | |
| Tenzir MCP Server fastmcp-me/mcp-tenzir An MCP server that enables AI assistants to interact with Tenzir, a data pipeline engine for security operations, including executing pipeline queries, managing OCSF schemas, and generating parsers. | |
| MCP Text Editor Server fastmcp-me/mcp-text-editor A Model Context Protocol (MCP) server that provides line-oriented text file editing capabilities through a standardized API. Optimized for LLM tools with efficient partial file access to minimize token usage. | |
| MCP-timeserver fastmcp-me/mcp-timeserver A simple MCP server that exposes datetime information to agentic systems and chat REPLs | |
| mcp-toolbox fastmcp-me/mcp-toolbox A comprehensive MCP server enabling LLMs to execute commands, manage files, interact with Figma, search the web, generate images, and more, extending their capabilities beyond text generation. | |
| MCP Trino Server fastmcp-me/mcp-trino-python MCP server providing seamless integration with Trino and Iceberg for advanced data exploration, querying, and table maintenance. | |
| MCP LLMS-TXT Documentation Server fastmcp-me/mcpdoc Provides a user-defined list of llms.txt files and a fetch_docs tool to read documentation URLs from those files, enabling controlled and auditable documentation retrieval for MCP host applications. | |
| Mnemex fastmcp-me/mnemex Provides human-like memory dynamics for AI assistants, enabling natural forgetting and reinforcement of memories over time. | |
| MoziChem-MCP fastmcp-me/mozichem-mcp A collection of MCP servers for chemical engineering and chemistry applications, enabling AI assistants to perform thermodynamic calculations, equation of state modeling, and phase equilibrium computations. | |
| NPI Registry MCP Server fastmcp-me/npi-registry-mcp-server A Model Context Protocol (MCP) server for searching the National Provider Identifier (NPI) registry. It provides tools to search and retrieve information about healthcare providers and organizations in the United States. | |
| Office-PowerPoint-MCP-Server fastmcp-me/office-powerpoint-mcp-server A comprehensive MCP server for PowerPoint manipulation using python-pptx, providing 32 tools organized into 11 modules for creation, management, and professional design. | |
| OpenAI WebSearch MCP Server fastmcp-me/openai-websearch-mcp Provides intelligent web search capabilities using OpenAI's reasoning models, enabling AI assistants to fetch up-to-date information with smart reasoning. | |
| OpenDataMCP fastmcp-me/opendatamcp Connects open data to LLMs via MCP, enabling easy access to public datasets and publishing new datasets with community help. | |
| PDF Manipulation MCP Server fastmcp-me/pdf-manipulation-mcp-server Enables PDF manipulation including text, images, annotations, form fields, page operations, and metadata through natural language. | |
| pdf2md-mcp fastmcp-me/pdf2md-mcp Converts PDF files to Markdown format using AI sampling capabilities. | |
| Perplexity Advanced MCP fastmcp-me/perplexity-advanced-mcp Advanced MCP server that uses OpenRouter and Perplexity APIs for enhanced query processing with multi-vendor support, query type optimization, file attachments, and robust retry logic. | |
| perplexity-mcp fastmcp-me/perplexity-mcp Enables web search using Perplexity AI's API, allowing users to search the web with optional recency filters and integration with Claude, Cursor, and other MCP clients. | |
| PitchLense MCP fastmcp-me/pitchlense-mcp AI-driven startup risk analysis server using Gemini, providing comprehensive assessments across market, product, team, financial, and other risk categories via MCP tools. | |
| Rasdaman MCP Server fastmcp-me/rasdaman-mcp Enables natural language interaction with rasdaman databases, allowing users to list coverages, describe datacubes, and execute WCPS queries. | |
| Reddit MCP fastmcp-me/reddit-mcp-gridfireai Enables browsing, searching, and reading Reddit posts, comments, and subreddits through Reddit's API using PRAW. | |
| SEO MCP fastmcp-me/seo-mcp A MCP SEO tool service based on Ahrefs data, offering backlink analysis, keyword research, traffic estimation, and more. | |
| simple_snowflake_mcp fastmcp-me/simple_snowflake_mcp Enables natural language querying and management of Snowflake databases, including SQL execution, schema exploration, and warehouse monitoring. | |
| Sketchfab MCP fastmcp-me/sketchfab_mcp Search and download 3D models from Sketchfab using the Sketchfab API. | |
| SkyDeckAI Code fastmcp-me/skydeckai-code Provides tools for AI-driven development workflows including file system operations, code analysis, code execution, web fetching, and search. | |
| Telnyx MCP Server fastmcp-me/telnyx-mcp-server MCP server enabling interaction with Telnyx telephony, messaging, and AI assistant APIs through natural language. | |
| trackio-mcp fastmcp-me/trackio-mcp Enables AI agents to observe and interact with trackio experiments through the Model Context Protocol (MCP). | |
| uniprot-mcp fastmcp-me/uniprot-mcp Provides seamless access to UniProtKB protein data, enabling querying of protein entries, sequences, Gene Ontology annotations, and ID mappings through a typed, resilient interface. | |
| video-editor-mcp fastmcp-me/video-editing-mcp Integrates with Video Jungle to allow LLMs to upload, search, edit, and generate videos from natural language commands. | |
| vikingdb-mcp-server fastmcp-me/vikingdb-mcp-server Enables interaction with VikingDB, a high-performance vector database, for storing and searching vector data via natural language. | |
| xlwings Excel MCP Server fastmcp-me/xlwings-mcp-server Enables Excel automation via natural language, providing session-based workbook management, data manipulation, formulas, charts, and formatting through the Model Context Protocol. | |
| YggTorrent MCP Server fastmcp-me/ygg-torrent-mcp Enables searching and downloading torrents from YggTorrent via MCP tools such as search_torrents, get_torrent_details, get_magnet_link, and download_torrent_file. | |
| Fastn Server fastn-ai/fastn-mcp An MCP server that enables dynamic tool registration and execution based on API definitions, providing seamless integration with services like Claude.ai and Cursor.ai. | |
| Slack Feedback MCP Server fastops-ai/slack-feedback-mcp Enables users to collect, search, and retrieve product feedback and full conversation threads directly from Slack channels. It supports filtering messages by specific stakeholders and time ranges to facilitate efficient feedback analysis. | |
| LaunchGrade MCP Server fastpresspages/launchgrade Enables MCP clients to scan a URL, receive Markdown or JSON launch-page grades, retrieve ranked fixes, and inspect the full weighted checklist. | |
| repograde-mcp fastpresspages/repograde Enables agents to grade any public GitHub repository, returning overall and category scores plus prioritized fixes, and to list all available checks. | |
| ContextEngine fastprod/contextengine Persistent memory and mechanical enforcement for AI coding agents — so they stop repeating your mistakes. | |
| OpsContext fastprod/opscontext-mcp Enables AI coding agents to access live operational context like processes, containers, and git state, while providing a tamper-evident audit log and policy-as-code compliance hooks locally. | |
| MCP Toolkit fastprosecurity/mcp-toolkit A collection of production-ready MCP servers for PostgreSQL, SQLite, Redis, File System, and GitHub API, enabling database operations, file management, and GitHub interactions through natural language. | |
| kernl fastslack/kernl A self-hosted MCP server that provides any LLM with a graph-backed memory layer of your life—tasks, email, finance, contacts, calendar—plus autonomous agent offices that act on your behalf. | |
| instagram-data-mcp fastsocialco/instagram-data-mcp-python Enables MCP clients like Claude and Cursor to query public Instagram data read-only — profiles, posts, reels, stories, highlights, comments, likers, followers, hashtags, places, audio and search — over local stdio without writing files or s | |
| mcp-austrian-firmenbuch fat-operator/mcp-austrian-firmenbuch Enables searching and retrieving Austrian company register data through the official BMJ FBW-WebServices SOAP API, covering company searches, extracts, filed documents, and register changes. Uses token-based authentication and surfaces rate | |
| MCP Public Data fat-operator/mcp-public-data Enables querying, sampling, and exporting datasets from over twenty keyless free public data sources spanning the EU, Switzerland, Germany, the US, and global providers through one uniform set of tools. A single consistent interface lets us |
49,751–49,800 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.