UI Beats MCP Server

by nikhils4• 235•• Scanned•Claim this listing•Request removal
Design & Mediaaccessibilityanimationcomponent librarydesign systemframer motion

Animated React components you own. 55 components built with TypeScript, Tailwind CSS and Motion. Copy, paste, or install with the shadcn CLI.

UI Beats is an open-source mcp server by nikhils4, written mainly in TypeScript, with 235 GitHub stars and the MIT license. Its code was last updated Aug 23, 2026.

Scan summary: scanned Nov 5, 2026 at commit e1c367a. Seen able to read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at e1c367a · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit55 known vulnerabilitiesfail
Manifestserver.jsonpass
Buildpass
Boot & handshakefail
Network egressfail
Reproducible (×3)n/a

Findings (20)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    network issue
    Details are available to the maintainer after claiming this listing.
  • medium
    brace-expansion@1.1.18: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    yarn.lock
  • medium
    brace-expansion@5.0.9: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    yarn.lock
  • medium
    js-yaml@3.15.1: 1 known vulnerability
    GHSA-2883-xcg3-v3hh
    yarn.lock
  • medium
    js-yaml@4.3.1: 1 known vulnerability
    GHSA-2883-xcg3-v3hh
    yarn.lock
  • medium
    sharp@0.35.3: 2 known vulnerabilities
    GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    yarn.lock
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    yarn.lock
  • medium
    undici@8.10.0: 19 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +14 more
    yarn.lock
  • medium
    vite@8.2.1: 6 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
    yarn.lock
  • medium
    zod@4.4.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    yarn.lock
  • medium
    Install contacted hosts other than package registries
    fonts.googleapis.com, fonts.gstatic.com, telemetry.nextjs.org
  • medium
    MCP server didn't complete the protocol handshake
    timed out waiting for the server
  • low
    @vitest/mocker@4.1.10: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    yarn.lock
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    yarn.lock
  • low
    postcss-selector-parser@6.0.10: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    yarn.lock
  • low
    vitest@4.1.10: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    yarn.lock
  • low
    package.json has a prepare script
    husky
    package.json
  • low
    Reads environment variables not listed in the manifest
    NEXT_PUBLIC_SITE_URL, NEXT_PUBLIC_GA_ID, GITHUB_TOKEN, UIBEATS_URL, CI, E2E_REUSE_SERVER, GA_API_SECRET

Network activity

During install
api.github.comfonts.googleapis.comfonts.gstatic.comregistry.yarnpkg.comrepo.yarnpkg.comtelemetry.nextjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

UI Beats alternatives

View more →

Similar mcp servers in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
UI Beats (this page)
nikhils4
235MITAug 23, 2026Scanned, no flagged issues
Next AI Draw Io
DayuanJiang
37kApache-2.0Nov 1, 2026Scanned, no flagged issues
MCP For Blender
ahujasid
33kMITOct 29, 2026Scanned, no flagged issues
Figma Context MCP
GLips
16kMITOct 27, 2026Scanned, no flagged issues
Nginx UI
0xJacky
12kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
Lamda
firerpa
8.7kMITSep 27, 2026Scanned, no flagged issues