Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| Estonia Payments (Stripe — cards / Apple Pay) junter1989k-ai/estonia-payments-mcp Estonia payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Finland Invoices (Peppol BIS 3.0 via Storecove) junter1989k-ai/finland-invoice-mcp Finland Peppol/Finvoice e-invoices for AI agents: send, check recipient, get delivery proof. | |
| Finland Payments (Stripe — cards / Klarna) junter1989k-ai/finland-payments-mcp Finland payments for AI agents — cards / Klarna via Stripe. Never holds funds. | |
| France Logistics (buy Mondial Relay + more labels + tracking via Shippo) junter1989k-ai/france-logistics-mcp France shipping labels for AI agents: buy Mondial Relay and more, track and refund via Shippo. | |
| France Payments (Stripe — Cartes Bancaires) junter1989k-ai/france-payments-mcp France payments for AI agents — Cartes Bancaires via Stripe. Never holds funds. | |
| Georgia Payments (TBC Bank — TBC checkout) junter1989k-ai/georgia-payments-mcp Georgia payments for AI agents — TBC checkout via TBC Bank. Never holds funds. | |
| Germany Logistics (buy Deutsche Post + more labels + tracking via Shippo) junter1989k-ai/germany-logistics-mcp Germany shipping labels for AI agents: buy Deutsche Post and more, track and refund via Shippo. | |
| Germany Payments (Mollie — Klarna / SEPA) junter1989k-ai/germany-payments-mcp Germany payments for AI agents — Klarna / SEPA via Mollie. Never holds funds. | |
| Ghana Payments (Paystack — MTN MoMo) junter1989k-ai/ghana-payments-mcp Ghana payments for AI agents — MTN MoMo via Paystack. Never holds funds. | |
| Global Logistics (AfterShip labels with your own carrier accounts) junter1989k-ai/global-logistics-mcp Global shipping labels for AI agents via AfterShip with your own carrier accounts. | |
| Greece Invoices (AADE myDATA national API) junter1989k-ai/greece-invoice-mcp Greece myDATA invoices for AI agents: build AADE XML, transmit to myDATA, query by MARK. | |
| Greece Payments (Stripe — cards / Apple Pay) junter1989k-ai/greece-payments-mcp Greece payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Guatemala Payments (Recurrente — cards (Recurrente)) junter1989k-ai/guatemala-payments-mcp Guatemala payments for AI agents — cards (Recurrente) via Recurrente. Never holds funds. | |
| Hong Kong Payments (Stripe — Alipay / WeChat Pay) junter1989k-ai/hong-kong-payments-mcp Hong Kong payments for AI agents — Alipay / WeChat Pay via Stripe. Never holds funds. | |
| Hungary Payments (Stripe — cards / Apple Pay) junter1989k-ai/hungary-payments-mcp Hungary payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| India Invoices (GST e-invoicing IRN via IRP) junter1989k-ai/india-invoice-mcp India GST e-invoicing for AI agents - generate, query, cancel IRNs at the IRP via a GSP. Stateless. | |
| India Logistics (Shiprocket: courier serviceability + rates, create orders, track AWB) junter1989k-ai/india-logistics-mcp India shipping for AI agents: Shiprocket courier serviceability, create orders, track AWB. | |
| India Payments (Razorpay Payment Links — UPI / cards / netbanking) junter1989k-ai/india-payments-mcp India payments for AI agents — UPI, cards, wallets via Razorpay Payment Links. Never holds funds. | |
| Indonesia Logistics (Biteship: courier rates / cek ongkir, create orders, track waybills) junter1989k-ai/indonesia-logistics-mcp Indonesia shipping for AI agents via Biteship: courier rates, create orders, track waybills. | |
| Indonesia Payments (Midtrans Snap — GoPay / QRIS / Alfamart / bank VA) junter1989k-ai/indonesia-payments-mcp Indonesia payments for AI agents — GoPay, QRIS, Alfamart, bank VA via Midtrans. Never holds funds. | |
| Ireland Payments (Stripe — cards / Apple Pay) junter1989k-ai/ireland-payments-mcp Ireland payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Israel Payments (Stripe — cards / Apple Pay) junter1989k-ai/israel-payments-mcp Israel payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Italy Invoices (FatturaPA / SdI via Invoicetronic) junter1989k-ai/italy-invoice-mcp Italy FatturaPA invoices for AI agents: build FPR12 XML, transmit to the SdI, query status. | |
| Italy Logistics (buy Poste Italiane + more labels + tracking via Shippo) junter1989k-ai/italy-logistics-mcp Italy shipping labels for AI agents: buy Poste Italiane and more, track and refund via Shippo. | |
| Italy Payments (Stripe — cards / Apple Pay) junter1989k-ai/italy-payments-mcp Italy payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Ivory Coast Payments (Paystack — Orange Money / MTN MoMo) junter1989k-ai/ivory-coast-payments-mcp Ivory Coast payments for AI agents — Orange Money / MTN MoMo via Paystack. Never holds funds. | |
| Japan Logistics (Ship&co: Yamato / Sagawa / Japan Post labels + tracking) junter1989k-ai/japan-logistics-mcp Japan shipping labels for AI agents: buy Yamato, Sagawa, Japan Post labels and track via Ship&co. | |
| Japan Payments (KOMOJU — konbini / cards / PayPay) junter1989k-ai/japan-payments-mcp Japan payments for AI agents — konbini コンビニ, card, PayPay via KOMOJU. Stateless, never holds funds. | |
| Jordan Payments (Tap Payments — cards / Apple Pay) junter1989k-ai/jordan-payments-mcp Jordan payments for AI agents — cards / Apple Pay via Tap Payments. Never holds funds. | |
| Kazakhstan Payments (Freedom Pay — cards (Freedom Pay)) junter1989k-ai/kazakhstan-payments-mcp Kazakhstan payments for AI agents — cards (Freedom Pay) via Freedom Pay. Never holds funds. | |
| Kenya Payments (Flutterwave — M-Pesa) junter1989k-ai/kenya-payments-mcp Kenya payments for AI agents — M-Pesa via Flutterwave. Never holds funds. | |
| Korea Invoices (POPBiLL 전자세금계산서 issue, query & NTS transmit) junter1989k-ai/korea-invoice-mcp Korea POPBiLL e-tax-invoice: AI agents issue, query & transmit e-invoices, stateless BYO. | |
| Korea Payments (Toss Payments — cards / KakaoPay·NaverPay / virtual accounts) junter1989k-ai/korea-payments-mcp Korea payments for AI agents — card, KakaoPay/NaverPay, 가상계좌 via Toss Payments. Never holds funds. | |
| Kuwait Payments (Tap Payments — KNET) junter1989k-ai/kuwait-payments-mcp Kuwait payments for AI agents — KNET via Tap Payments. Never holds funds. | |
| Latvia Payments (Stripe — cards / Apple Pay) junter1989k-ai/latvia-payments-mcp Latvia payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Lithuania Payments (Stripe — cards / Apple Pay) junter1989k-ai/lithuania-payments-mcp Lithuania payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Luxembourg Invoices (Peppol BIS 3.0 via Storecove) junter1989k-ai/luxembourg-invoice-mcp Luxembourg Peppol BIS 3.0 e-invoices for AI agents: send, check recipient, get delivery proof. | |
| Luxembourg Payments (Stripe — cards / Apple Pay) junter1989k-ai/luxembourg-payments-mcp Luxembourg payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Malaysia Payments (Billplz — FPX / DuitNow QR / cards) junter1989k-ai/malaysia-payments-mcp Malaysia payments for AI agents — FPX banking, DuitNow QR, cards via Billplz. Never holds funds. | |
| Malta Payments (Stripe — cards / Apple Pay) junter1989k-ai/malta-payments-mcp Malta payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Mexico Invoices (CFDI 4.0 factura electrónica) junter1989k-ai/mexico-invoice-mcp Mexico CFDI 4.0 invoices for AI agents - issue, query, cancel facturas via Facturapi. | |
| Mexico Payments (Mercado Pago — OXXO cash) junter1989k-ai/mexico-payments-mcp Mexico payments for AI agents — OXXO cash via Mercado Pago. Never holds funds. | |
| Nepal Payments (Khalti — Khalti wallet) junter1989k-ai/nepal-payments-mcp Nepal payments for AI agents — Khalti wallet via Khalti. Never holds funds. | |
| Netherlands Invoices (Peppol BIS 3.0 via Storecove) junter1989k-ai/netherlands-invoice-mcp Netherlands Peppol BIS 3.0 e-invoices for AI agents: send, check recipient, get delivery proof. | |
| Netherlands Payments (Mollie — iDEAL) junter1989k-ai/netherlands-payments-mcp Netherlands payments for AI agents — iDEAL via Mollie. Never holds funds. | |
| New Zealand Payments (Stripe — cards / Apple Pay) junter1989k-ai/new-zealand-payments-mcp New Zealand payments for AI agents — cards / Apple Pay via Stripe. Never holds funds. | |
| Nigeria Invoices (FIRS / NRS MBS e-invoicing IRN) junter1989k-ai/nigeria-invoice-mcp Nigeria FIRS/NRS MBS e-invoicing for AI agents - validate, sign, confirm invoices (IRN + QR). | |
| Nigeria Payments (Paystack — bank transfer / USSD) junter1989k-ai/nigeria-payments-mcp Nigeria payments for AI agents — bank transfer / USSD via Paystack. Never holds funds. | |
| Norway Invoices (Peppol BIS 3.0 / EHF via Storecove) junter1989k-ai/norway-invoice-mcp Norway Peppol/EHF BIS 3.0 e-invoices for AI agents: send, check recipient, get delivery proof. | |
| Norway Payments (Stripe — cards / Klarna) junter1989k-ai/norway-payments-mcp Norway payments for AI agents — cards / Klarna via Stripe. Never holds funds. |
10,051–10,100 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.