Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| MAL MCP Server grinv/mal-mcp MyAnimeList MCP server: Tenrai-powered reads plus official MAL personal-list management. | |
| TMDB MCP Server grinv/tmdb-mcp MCP server for The Movie Database (TMDB) with IMDb/Rotten Tomatoes/Metacritic ratings via OMDb. | |
| Notes Vault gronare/notes-vault-mcp Indexed search, schema-checked writes and session hooks for a markdown notes vault | |
| fable MCP server grooverlab/fable Enables Claude to search, recall, and remember its own past conversations by indexing them into a local SQLite vault, providing direct access to the full context of previous sessions. | |
| io.github.grossiweb/toolroute grossiweb/toolroute Route AI agent tasks to the best MCP server and LLM, scored on 132+ real benchmark executions. | |
| GroundLens groundlens-dev/groundlens Guardrails for LLM answers: exact checks against sources, PASS/REVIEW/FAIL, signed records. | |
| io.github.groundlogic-ai-source/accessibility-ai groundlogic-ai-source/accessibility-ai Scan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports. | |
| CREHQ Location Intelligence groundroof/crehq-mcp-server CREHQ entity affiliation, brand, site, franchise, credit, and location-intelligence tools. | |
| Company Facts groundtruthtools/ats-jobs-mcp Company data from official sources: new US businesses, registers, tech stack, open jobs, SEC. | |
| io.github.groupdocs-annotation/groupdocs-annotation-mcp groupdocs-annotation/groupdocs.annotation.mcp MCP server for GroupDocs.Annotation — add, list, update, remove document annotations via AI agents. | |
| io.github.groupdocs-comparison/groupdocs-comparison-mcp groupdocs-comparison/groupdocs.comparison.mcp MCP server for GroupDocs.Comparison — compare, analyze, and inspect documents via AI agents. | |
| io.github.groupdocs-conversion/groupdocs-conversion-mcp groupdocs-conversion/groupdocs.conversion.mcp MCP server for GroupDocs.Conversion — convert, inspect, and list supported formats via AI agents. | |
| io.github.groupdocs-editor/groupdocs-editor-mcp groupdocs-editor/groupdocs.editor.mcp MCP server for GroupDocs.Editor — edit Word, Excel, PowerPoint and PDF via HTML with AI agents. | |
| io.github.groupdocs-markdown/groupdocs-markdown-mcp groupdocs-markdown/groupdocs.markdown.mcp MCP server for GroupDocs.Markdown — convert documents to Markdown via AI agents. | |
| io.github.groupdocs-merger/groupdocs-merger-mcp groupdocs-merger/groupdocs.merger.mcp MCP server for GroupDocs.Merger — merge, split, and inspect documents via AI agents. | |
| io.github.groupdocs-metadata/groupdocs-metadata-mcp groupdocs-metadata/groupdocs.metadata.mcp MCP server for GroupDocs.Metadata — read, search, write, and remove document metadata. | |
| io.github.groupdocs-parser/groupdocs-parser-mcp groupdocs-parser/groupdocs.parser.mcp MCP server for GroupDocs.Parser — extract text, images, metadata, tables, barcodes via AI. | |
| io.github.groupdocs-redaction/groupdocs-redaction-mcp groupdocs-redaction/groupdocs.redaction.mcp MCP server for GroupDocs.Redaction — redact text, metadata, annotations, image areas via AI agents. | |
| io.github.groupdocs-signature/groupdocs-signature-mcp groupdocs-signature/groupdocs.signature.mcp MCP server for GroupDocs.Signature — sign, search and verify document signatures via AI agents. | |
| io.github.groupdocs-total/groupdocs-total-mcp groupdocs-total/groupdocs.total.mcp MCP server for GroupDocs.Total — annotate, sign, convert, watermark, parse, redact documents via AI. | |
| io.github.groupdocs-viewer/groupdocs-viewer-mcp groupdocs-viewer/groupdocs.viewer.mcp MCP server for GroupDocs.Viewer — render pages as PNG and inspect view info via AI agents. | |
| io.github.groupdocs-watermark/groupdocs-watermark-mcp groupdocs-watermark/groupdocs.watermark.mcp MCP server for GroupDocs.Watermark — add and search document watermarks via AI agents. | |
| Hecher CRM growgeltsolutions/hecher-mcp Hecher CRM for Chabad shluchim — donors, donations, activities, and reports across your Mosads | |
| io.github.Growi-DeFi/mcp-growi growi-defi/mcp-growi MCP server for Growi Finance — programmatic interaction with the GrowiHFVault on Arbitrum | |
| @growi/mcp-server growilabs/growi-mcp-server Connects AI models to GROWI wikis for search and retrieval, enabling context-aware responses from an organization's knowledge base. | |
| GrowingUpVideo growingupvideo/growingupvideo-mcp Turn photos of a person, couple, or pet across the years into an AI growing-up morph video. | |
| GrowthKit Revenue Intelligence growthkit-tools/mcp Sales intelligence for B2B SMEs — lead scoring, ICP fit, CRM enrichment & writeback. | |
| io.github.grulex/grpc-invoke-mcp grulex/grpc-invoke-mcp MCP server for describing and invoking gRPC methods | |
| io.github.grupo-avispa/dsr_mcp_server grupo-avispa/dsr_mcp_server An MCP server that provides tools for interacting with Deep State Representation (DSR) graphs. | |
| Grupr grupr-ai/mcp-server Act as one of your Grupr agents: rooms, messages, Room Files, sandbox workspace, routines, mail. | |
| io.github.grynienM/kalkulatory-place grynienm/kalkulatory-place-mcp Polish payroll: gross↔net salary, hourly rates, tax brackets and ZUS rates from a live public API | |
| io.github.gsepcore/gsep-mcp gsepcore/gsep-mcp AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts. | |
| Fulcru gsmmediaro/fulcru Find where ChatGPT names your competitor, write the page that closes the gap, measure it. | |
| Indian Legal MCP gsms-b/indian-legal-mcp Access 102 Indian Acts, 2026 Constitution, criminal mappings, and 10 legal research skills. | |
| SpendNod gstack-ds/spendnod AI agent spending controls. Set limits, blocklists, and caps. Approve transactions from your phone. | |
| FRESH — Shared URL Freshness Intelligence gsterlingpress/fresh-api Decide whether an agent should reuse cached URL knowledge or fetch the resource again. | |
| MAILTYPE — Email Domain Capability Intelligence gsterlingpress/mailtype-api Email-domain intelligence: MX capability, provider, disposable status, SPF, DMARC, and MTA-STS. | |
| ONCE — Exactly-Once Reliability for AI Agent Actions gsterlingpress/once-api Prevent duplicate AI-agent side effects with idempotency, verification, and durable receipts. | |
| POSTFACT — Resolve Ambiguous Side Effects Before Retry gsterlingpress/postfact-api Resolve whether an uncertain side-effecting action completed before software retries it. | |
| PREFLIGHT — URL Routing for AI Agents gsterlingpress/preflight-api Choose HTTP, browser, machine endpoint, or avoid before an agent visits an unfamiliar URL. | |
| RECOVER — Decide Safely After a Failed Machine Action gsterlingpress/recover-api Choose the safest next action after an API, MCP, or agent failure before retrying. | |
| io.github.gswardman/giveready gswardman/giveready Search 41K+ nonprofits, get impact data, submit enrichments, donate USDC via x402. | |
| MySQL Ops MCP gt-dinuo/mysql-ops-mcp MySQL MCP server: browse schema, query, CRUD. Delete/drop gated by user approval. | |
| com.theaslangroupllc.pulse/pulsenetwork gtcc777/mcp-pulsenetwork 914 paid market-data & token-safety endpoints — keyless x402 USDC: Base, Solana, XRPL, +8 chains | |
| com.theaslangroupllc.pulse/agent-wallet gtcc777/pulsepay-mcp Local agent wallet + 900 pay-per-call data APIs — free discovery, x402 USDC, code-level spend caps | |
| CompactPrompt gtkcyber/compact_prompt Review and compact prompts, docs, and AI-agent skills to save tokens, preserving structure. | |
| gtm-api: LinkedIn MCP Server gtm-api/linkedin-mcp Managed LinkedIn MCP server for AI agents: search, connect, message and enrich on accounts you own. | |
| GTM Otto gtmotto/mcp Self-driving LinkedIn prospecting: it sources, warms and invites daily. You approve every message. | |
| io.github.gtorreal/buda-mcp gtorreal/buda-mcp Buda.com market data: prices, spreads, OHLCV, order books, trades, and volume for CLP, COP, PEN. | |
| io.github.gtovtya/b2bleads-mcp gtovtya/b2bleads-mcp Search and enrich B2B business leads by industry and city. |
8,551–8,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.