Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Neleto CMS triple-a-software/neleto-mcp Create and edit pages, posts, events, files and layouts on your Neleto CMS site. EU-hosted. | |
| TripleBooks triplebooks/platform Connect Claude or Cursor to books, invoices, bills, payroll, and sealed closes. | |
| Condux error monitoring tripledownab/condux Read your Condux issues, events and stack traces (deminified with source maps). Triage optional. | |
| Triplex schema contracts triplexanalytics/triplex Infer and validate schema contracts on local CSV, TSV and JSON Lines files. No network access. | |
| LearnOS trippuroskie/learnos Hosted MCP for LearnOS: search courses, lesson citations, flashcards and notes from any MCP client. | |
| Tripsy tripsyapp/cli Plan trips and manage itineraries, stays, transport, activities, expenses, and documents in Tripsy. | |
| HelpDental tris686/helpdental Search 10,000+ UK dental practices, compare treatment prices, and find emergency dentists. | |
| shar8 - task list for AI agents triumphpc/shar8-agent Personal task list for AI agents: read, add and delegate tasks over MCP, reports return to the task. | |
| Trent trnt-ai/trent-agent-plugin Security reviews, threat models over a repo or website, and remediation tracking, in your editor. | |
| KanbanThing tronschell/kanban-thing Create and drive KanbanThing kanban boards. No account, no API key, board link required. | |
| Semanto by Trooth troothllc/trooth-semanto-worker Set up, sign, publish and check Semanto, a company's signed website file for AI agents. | |
| io.github.Truebases/truebases-mcp truebases/truebases-mcp Find opportunities, track market activity, and discover business signals with real-time data. | |
| truecopy truecopydev/truecopy Read tables, figures and dates out of a PDF, Word file, CSV or paste, with a verdict on the reading. | |
| TrueFixR Storm Data API truefixr/atlascast-truefixr Storm history by address since 2003, recent storm leads, model-based weather and storm forecasts. | |
| Prospect Intelligence truepointmarketingpartners-dotcom/prospect-intelligence B2B company research and work-email lookup for AI agents. Pay per call in USDC on Base via x402. | |
| TrueScrape truescrape/truescrape Live context for your agent: competitors, mentions and markets, from public data. | |
| io.github.truonglam1987/menhthien truonglam1987/supertuvi Connect astrology chart data from menhthien.com to Claude Desktop and MCP-compatible AI assistants. | |
| Ethos trust-ethos/api-docs Ethos credibility scores and profiles for wallets and X accounts. Read-only, free, no key. | |
| Trustabl Probe trustabl/agent-network-access-probe Drafts a network allow list for agent tools and runs them in a network-blocked sandbox. | |
| Trustabl trustabl/agent-reliability-analyzer Find and fix reliability and safety gaps in agent code, across nine agent SDKs. | |
| Trusteed trusteed-io/trusteed-mcp-plugin CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth. | |
| xyz.trusteed/mcp-gateway trusteed/mcpwebstore Agentic commerce gateway: discovery, search, checkout across Shopify/Woo/Odoo/PrestaShop. | |
| trustlists trustlists/trustlists-plugin Find public vendor trust centers, analyze SOC 2 reports, and request trust-center access. | |
| TrustRail Counterparty Risk trustrail-labs/trustrail External counterparty-risk checks and signed receipts for autonomous agents and machine payments. | |
| io.github.Trusty-Squire/mcp trusty-squire/trusty-squire Credential broker that signs your AI agent up to SaaS dev tools, within a signed spending mandate. | |
| Retired: install com.trustycap/trustycap trustycap-technologies/trustycap-mcp Retired identity. TrustyCap is published as com.trustycap/trustycap. Install that. | |
| dev.aieph/aieph tryaieph/aieph Shared knowledge cache for AI coding agents — reuse an answer once it exists. | |
| TryPost trypostit/trypost Run social media with agents. Connect over MCP to plan, write, and post to every network. | |
| thinking.town tsadoq/thinking-town-board A public message board built for AI agents. Read threads, reply, or start one; poll for new posts. | |
| Proof CLI (unofficial) tsarlewey/proof-cli Notarize, e-sign, and verify identity with the Proof API. Unofficial; not affiliated with Proof. | |
| SwapChan tsavo/swapcha.in Find money in any wallet, best-price swaps, simulate, PnL, pools, whales, contract and bridge tools. | |
| x402 Doctor tsharpe2282-web/twelve-permissions Diagnose x402 seller endpoints: what is wrong with your 402 challenge, and how to fix it. | |
| net.urbot/bots tsikanati/urbot 150+ vertical AI expert bots as agent tools. $1 bots run on YOUR machine - your data stays yours. | |
| NetTree Public tsingniao666/nettreeai Read-only link-destination catalog for agents: search, get, and suggest public fit. | |
| tsquare wireframes tsquare-js/tsquare Draws UI wireframes from a small text language: multi-screen boards with notes and flow arrows. | |
| io.github.Tsubaki414/toolfi tsubaki414/toolfi Open API Marketplace for AI Agents. Crypto data tools with USDC payments on Base. | |
| Blinka Machine Mouths tsukiryuu/blinka-nest Paid agent tools plus free procurement discovery and validation. No private Mika state exposed. | |
| Buy-Box tthompson0808/buy-box-cursor-plugin Stores your buying criteria by category so AI agents follow your rules before they search. | |
| Juris UCC Article 9 lien search tthorstenson/juris UCC Article 9 debtor lien search + honest list_coverage; fixture-default; live HTML ToS-GRAY opt-in | |
| io.github.tuananh/hyper-mcp tuananh/hyper-mcp 📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins | |
| Cadourile.ro tudorabrudan/lista_cadouri Manage gift lists, gifts and reservations on Cadourile.ro (Romania/Moldova). | |
| UNITEMFG U.S. Manufacturer Directory tudorbotezan/mfg-dir Search verified U.S. manufacturers with provenance, freshness, and live directory statistics. | |
| Tethered Task Sessions tumerit-llc/tethered Control Mac power modes, keep-awake, app priority and suspension; requires Tethered 1.2.0+ and Pro. | |
| com.see-geo/seegeo tunisian-aaron/seegeo Audit any website for AI visibility: graded report, findings with fixes, AI crawler access check. | |
| Arg2P tuprolog/arg2p-kt Structured argumentation: solve ASPIC+, ABA and abstract theories, explore their results | |
| MCP for Claude & ChatGPT tuqui-ai/tuqui-mcp Connect your Odoo to Claude and ChatGPT: ask about sales, stock, customers and invoices. | |
| Parrot turantekin/parrot Your recorded Mac meetings in Claude: search, promises with owners, follow-ups. Local, read-only. | |
| Turaxia Connect Public turaxia/apps Public Turaxia MCP surface for building localized draft bundles from supplier URLs. | |
| Turbo Notify: WhatsApp for AI agents turbo-notify/agent-skills Send and receive WhatsApp messages from your AI agent, on your own number, with Turbo Notify. | |
| ModelSpec turbobeest/modelspec Find AI models that fit a job from your requirements, sourced benchmarks and real cost. |
49,951–50,000 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.