Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| MCP Dubai mahdi-salmanzade/mcp-dubai Dubai and UAE public data plus curated business setup knowledge across 120 MCP tools. | |
| GeoServer MCP Server mahdin75/geoserver-mcp A Model Context Protocol server that connects Large Language Models to the GeoServer REST API, enabling AI assistants to query and manipulate geospatial data through natural language. | |
| GIS MCP Server mahdin75/gis-mcp A Model Context Protocol server that connects LLMs to GIS operations, enabling AI assistants to perform accurate geospatial analysis including geometric operations, coordinate transformations, and spatial measurements. | |
| io.github.Maher-Reven/asdesigned maher-reven/asdesigned Diff a rendered UI element against its Figma source and get every drifted property with its delta. | |
| io.github.mahmoud-nb/thread-mind mahmoud-nb/thread-mind-mcp Git-friendly memory for AI coding: a tree of thread summaries with inherited context | |
| Passiv Web Tools mahope/passiv-mcp Free web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers. | |
| Mailbuttons mailbuttons/mcp-server Governed email for AI agents: a sandbox inbox to read and send from, human approval to go external. | |
| MailFlat mailflat/mailflat-sdks Real email inboxes for AI agents: open an address, read the one-time code, send mail. | |
| dev.mailkite/mailkite mailkite/mailkite-mcp Send email, manage domains, DNS, webhooks, templates, and inbound routing on MailKite | |
| MailProbe mailprobe/mcp Verify email addresses in real time: deliverability, disposable and role addresses, typo fixes. | |
| Mailtrap mailtrap/mailtrap-mcp Official MCP Server for Mailtrap | |
| mailverdict mailverdict/mailverdict Keyless email checks: disposable, role, and free-provider detection, MX, and typo suggestions. | |
| MainWP mainwp/mainwp-mcp Manage WordPress sites in MainWP from AI tools, with approval before destructive changes by default. | |
| Minecraft mairwunnx/minecraft-mcp Ask an AI about your Minecraft server and let it run it: players, worlds, configs, logs. | |
| Keyspoor majiayu000/keyspoor Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root. | |
| Performance Co-Pilot major/pcp-mcp Query system performance metrics via MCP - CPU, memory, disk I/O, network, processes | |
| Porkbun DNS 🐷 major/porkbun-mcp Manage DNS records, domains, DNSSEC, SSL certificates via MCP | |
| Money Reactor makar52nn-crypto/x402-money-reactor Pay-per-call x402 MCP: 22 agent APIs on Base USDC. Crypto, onchain reads, repo safety. From $0.001 | |
| Agent Blast Radius makash/agent-blast-radius Scan what an AI agent running as you can reach; optionally verify which keys are live (x402). | |
| io.github.makash/feedmyagent makash/feedmyagent-skill Agent-readable feed: AI/agent tech news, security advisories, compliance deadlines, and live events. | |
| CSPR[dot]trade MCP make-software/cspr-trade-mcp The CSPR.trade MCP server provides AI Agents with 14 tools for interacting with the CSPR.trade decentralized exchange on the Casper Network. | |
| Make0 Brain make0-official/brain-oss One shared, versioned memory for Claude Code, Cursor, Codex and every MCP agent. Local and offline. | |
| MakeAIVideo makeaivideo-ai/mcp AI video generator: make TikTok, Reels and Shorts videos with voiceover and captions, and post them. | |
| Craft Color Codes makebead/craft-color-codes Bead, floss, yarn, LEGO and Minecraft color codes: look up, find closest, convert between brands. | |
| Notion MCP Server makenotion/notion-mcp-server An MCP server that enables AI assistants to interact with the Notion API, allowing them to search, read, comment on, and create content in Notion workspaces through natural language commands. | |
| Dashform MCP Server makloai/mcp-server-dashform Connect AI assistants to Dashform — build and manage AI-powered forms, funnels, quizzes. | |
| io.github.makosdDavid/package-risk makosddavid/package-risk-mcp Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup. | |
| io.github.makririch/buchpilot makririch/buchpilot-mcp DACH accounting for AI: connect sevDesk & Lexoffice to create invoices, contacts, vouchers. | |
| io.github.makririch/einvoice makririch/einvoice-mcp XRechnung & ZUGFeRD: create, validate, and convert German e-invoices. EN 16931 compliant. | |
| Advanced Zebrunner MCP Server maksimsarychau/mcp-zebrunner Advanced analytics, reporting, and safe mutations for Zebrunner. 64 tools, 14 resources, 17 prompts. | |
| Spendlog makz81/spendlog MCP server for expense tracking, invoices, budgets, and financial insights directly in Claude | |
| Google Search Console Connector malaysherasia-ai/google-search-console-connector-for-claude-code Google Search Console: search analytics, CSV reports, URL inspection, sitemaps, site verification. | |
| io.github.MALeitch/live-chemdraw-mcp maleitch/live-chemdraw-mcp Connects AI assistants to a live ChemDraw window on Windows via COM automation. | |
| Proven malikabyl/proven Judge AI-written Python: no invented packages or calls, no facts from memory, verified LLM output. | |
| io.github.malkreide/amtsblatt-mcp malkreide/amtsblatt-mcp Swiss official gazettes (SHAB + cantonal) — procurement & notices, person-data rubrics excluded | |
| io.github.malkreide/bag-epl-mcp malkreide/bag-epl-mcp BAG EPL: Spezialitätenliste, medication and reimbursement data | |
| io.github.malkreide/bag-health-mcp malkreide/bag-health-mcp BAG public-health open data: indicators, programmes, statistics | |
| io.github.malkreide/bakom-mcp malkreide/bakom-mcp BAKOM telecommunications and media open data | |
| io.github.malkreide/eth-library-mcp malkreide/eth-library-mcp ETH Library Discovery API | |
| io.github.malkreide/fedlex-mcp malkreide/fedlex-mcp Swiss federal law, consultations (Fedlex) & TERMDAT terminology (LINDAS) via SPARQL | |
| io.github.malkreide/global-education-mcp malkreide/global-education-mcp UNESCO UIS and OECD Education at a Glance | |
| io.github.malkreide/hn-tech-signal-mcp malkreide/hn-tech-signal-mcp MCP server for tech & AI signal intelligence: HackerNews, arXiv, Lobste.rs and GitHub | |
| io.github.malkreide/i14y-mcp malkreide/i14y-mcp MCP server for I14Y — Switzerland's national open-data metadata catalogue (DCAT-AP-CH) | |
| io.github.malkreide/lindas-mcp malkreide/lindas-mcp MCP server for LINDAS — the Swiss administration's linked-data SPARQL knowledge graph (cube.link) | |
| io.github.malkreide/lobbywatch-mcp malkreide/lobbywatch-mcp Lobbywatch.ch transparency data on parliamentarians, interests, access badges | |
| io.github.malkreide/meteoswiss-mcp malkreide/meteoswiss-mcp MeteoSwiss Open Data for weather, climate normals, warnings | |
| io.github.malkreide/news-monitor-mcp malkreide/news-monitor-mcp News monitoring via WorldNewsAPI: search, sentiment, headlines, trends, alerts (Swiss default) | |
| io.github.malkreide/openlex-mcp malkreide/openlex-mcp Canton Zurich legislation via ZH-Lex with full-text search and article extraction | |
| io.github.malkreide/parlament-mcp malkreide/parlament-mcp Swiss Federal Parliament Curia Vista OData API | |
| io.github.malkreide/register-mcp malkreide/register-mcp Zefix commercial register with a company-UID join to amtsblattportal.ch (SHAB + cantonal gazettes) |
11,301–11,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.