Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| segment-mcp katekruger/segment-mcp Read-first MCP server for Twilio Segment: routing, stale sources, delivery health, governance. | |
| LatentGate kathanmodh259/latent-gate Read large logs, JSON and docs in a fraction of the tokens. Offline, fact-preserving optimizer. | |
| CAM — Product Viability Standard kau17033/cam-product-viability-standard For items sold but no profit left — 「売れたのに残らない」 — verdicts counting all six cost items. | |
| io.github.Kavachh/agent-guard-mcp kavachh/agent-guard-mcp Git-aware safe file ops for AI agents: delete anything except git-tracked source code. | |
| Kawa Code kawacode-ai/kawa.mcp Team-aware memory: intent, decisions, real-time conflicts for AI coding assistants. | |
| APEX PSI kawal393/apex-psi-mcp-server Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. | |
| Aiagentmarket MCP kaxiyu/aiagentmarket Aiagentmarket MCP | |
| GeniusFlow Evidence kaydeep0/eigenstate-research Re-check pinned sources, package and cite. Live Federation MCP. No account. | |
| foehn kayhendriksen/foehn Access Swiss meteorological open data from MeteoSwiss, powered by foehn | |
| Abscissa kazkozdev/abscissa Safety-aware MCP server for Linear issues, projects, cycles, and dependencies. | |
| footnote-mcp kazkozdev/footnote-mcp Source-grounded web research: search, extraction, verification, and browser automation. | |
| MCP Search Server kazkozdev/mcp-search-server Web search, content extraction, PDF parsing, plus datetime and geolocation tools. No API keys. | |
| io.github.KazKozDev/weboperator kazkozdev/weboperator Hands your live Chrome tab to any MCP client — snapshot, navigate, click, type, extract. | |
| com.keyboardcrumbs/mcp kbcrumbs/mcp Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key. | |
| net.softricks/idig-dns kbhave/mcp-service-idig Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation. | |
| Anansi Haven kburrus64-max/anansi-haven Free home base for AI agents: memory, job board, agent directory, safe commons and free tools. | |
| io.github.kcofoni/duplicati-mcp kcofoni/duplicati-mcp MCP server for Duplicati backup management — list, run, monitor and configure jobs from an LLM. | |
| io.github.kcofoni/pmwiki-mcp kcofoni/pmwiki-mcp MCP server for searching and reading PmWiki pages with text queries and group filtering. | |
| io.github.kcw2034/maplestory-mcp-server kcw2034/maplestory-mcp-server MCP server for Nexon MapleStory OpenAPI - character, rankings, union, guild, and notices | |
| b123d-print kd5ryn/b123d-print Vibe CAD for 3D printing: design, check and export printable parts with build123d. | |
| KDAN PDF kdan-pdf/kdan-pdf-mcp Upload, edit, compress, protect, redact, and compare PDFs with KDAN PDF in Claude and ChatGPT. | |
| htmlweb.ru — справочники и проверки для AI kdg22/mcp-htmlweb RU INN/OGRN, banks, geo, WHOIS. Agent self-registers via register_agent. 20 free/day. | |
| Zaturn kdqed/zaturn An open-source MCP server that connects to various data sources (SQL databases, CSV, Parquet files), allowing AI models to execute SQL queries and generate data visualizations for analytics and business intelligence. | |
| io.github.ke4qqq/groupsio ke4qqq/groupsio-mcp-server MCP server for consuming and managing Groups.io data via the Groups.io REST API | |
| Search Memory kefyusuf/search-memory-mcp Free web search and long-term memory for AI assistants. No API keys; data stays local. | |
| JSON Filter MCP kehvinbehvin/json-mcp-filter Query only the data you need from your JSON file and keep your context clean | |
| mcp-retriever keiranhaax/mcp-retriever One MCP server for web search, page extraction, and cited research. | |
| io.github.keitaemsden-lab/asic-lookup keitaemsden-lab/asic-lookup-mcp Look up any Australian company by ABN, ACN or name. USD 0.01 per lookup, paid in USDC via x402. | |
| Formquote keith-cy/formquote-mcp Published prices and licence fit for email verification, sound effect packs and font licences. | |
| Laplace’s Mini World keith-cy/laplace-mini-world-mcp Interactive 3D science models in Chinese and English, found and shown live in the chat. | |
| MeshMend keith-cy/meshmend-mcp Check and repair STL and 3MF meshes on your own computer: holes, flipped faces, inside-out shells. | |
| ai.smithery/keithah-hostex-mcp keithah/hostex-mcp Manage your Hostex vacation rentals—properties, reservations, availability, listings, and guest me… | |
| ai.smithery/keithah-tessie-mcp keithah/tessie-mcp Unofficial integration! ## ✨ Key Features ### 💰 Financial Intelligence - **Smart Charging Cost An… | |
| Keith APIs: web to Markdown, OG images, job & resume parsing, ratings keithhk/keith-apis-mcp Web page to Markdown, link previews, OG images, job and resume parsing, Elo/Glicko-2 ratings | |
| image-tiler-mcp-server keiver/image-tiler-mcp-server MCP server that gives LLMs full-resolution vision by tiling images and capturing web pages before details are lost. | |
| idmly: HTML to InDesign (IDML) kellykazi3/idmly-mcp Convert a self-contained HTML design into an editable Adobe InDesign (.idml) file. 2 pages free. | |
| Plane MCP Server kelvin6365/plane-mcp-server A Model Context Protocol server that enables LLMs to interact with Plane.so, allowing them to manage projects and issues through Plane's API for streamlined project management workflows. | |
| io.github.kelvinbiffi/ollos-mcp kelvinbiffi/ollos-mcp Local, offline transcription, speakers, keyframes, on-screen text and review of any audio or video. | |
| Kema Invoice kema-studio/kema-invoice-mcp Compliant invoicing for freelancers: create, issue and track invoices from your AI agent. | |
| io.github.kemalersin/fonparam-mcp kemalersin/fonparam-mcp MCP server for FonParam API - Turkish mutual funds data | |
| edumints SCORM MCP kemalyy/edumints-scorm-mcp Compiles structured specs into SCORM 1.2/2004 e-learning packages. 47 tools, quality gate, no LLM. | |
| seshat-bi kemetra/seshat-bi A read-only MCP server that reports BI pipeline readiness, blockers, and the next allowed action for governed Power BI workflows. It never writes files, executes warehouse work, or grants human approvals. | |
| Jami kenawak/jami-mcp Jami creator payouts for your agent: ETB checkouts, orders, payouts, webhooks. Powered by ArifPay. | |
| Kenda kenda-co/ingestion-mcp Read-only MCP server for querying Kenda token spend and waste | |
| JVMind MAT Heap Dump Analyzer kengrary/web_mat_project Analyze Java heap dumps locally with Eclipse MAT, including live JVM capture. | |
| CodeDebut kenil9630/codedebut-mcp Search new software launches, read product pages, find alternatives and see daily upvote rankings. | |
| RabbitMQ MCP Server kenliao94/mcp-server-rabbitmq A Model Context Protocol server implementation that enables Claude to interact with RabbitMQ message queues and topics, allowing read/write operations on a RabbitMQ instance. | |
| com.artifyde/artifyde-mcp kennethkoontz/artifyde-mcp A home for your agent's HTML artifacts - publish, pull, share and review them over MCP. | |
| Digilent WaveForms MCP Server kenosinc/dwf-mcp-server MCP server for Digilent WaveForms instruments (oscilloscope, AWG, logic analyzer). | |
| sigrok MCP Server kenosinc/sigrok-mcp-server Wraps sigrok-cli for signal analysis: capture data, decode protocols, and query instruments. |
10,301–10,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.