Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| China Air Quality pipeworx-io/mcp-china-air-quality China Air Quality MCP — nationwide hourly AQI from CNEMC (中国环境监测总站). 中国空气质量实时数据… | |
| China Customs pipeworx-io/mcp-china-customs China Customs (GACC English) — monthly merchandise trade statistics. | |
| China Disclosures pipeworx-io/mcp-china-disclosures China Disclosures MCP — non-SEC Chinese biotech deals and HK/STAR IPO financing, read straight out… | |
| China Exchange Data pipeworx-io/mcp-china-exchange-data China Exchange Data MCP (SZSE + SSE). Keyless. | |
| China Macro pipeworx-io/mcp-china-macro China macro: PBOC Loan Prime Rate, headline NBS indicators (via Eastmoney's data centre), 70-city… | |
| China News pipeworx-io/mcp-china-news China / Hong Kong / Taiwan news search. | |
| China Pharma pipeworx-io/mcp-china-pharma China Pharma MCP — China-to-Western biotech licensing deals, from SEC filings. | |
| China Recalls pipeworx-io/mcp-china-recalls china-recalls: product recall announcements published by China's State Administration for Market… | |
| China Safe pipeworx-io/mcp-china-safe China SAFE (State Administration of Foreign Exchange) — 国家外汇管理局 | |
| China Stocks pipeworx-io/mcp-china-stocks China A-shares MCP. Keyless. | |
| Chrome Ux Report pipeworx-io/mcp-chrome-ux-report Real-user Core Web Vitals for any website with enough traffic, from Google's Chrome UX Report… | |
| Chrome Web Store pipeworx-io/mcp-chrome-web-store Chrome Web Store — public extension listing data: a single extension by id, free-text search, and… | |
| Chronicling America pipeworx-io/mcp-chronicling-america Chronicling America MCP — full-text search of ~150 years of digitized U.S. newspapers… | |
| Chucknorris pipeworx-io/mcp-chucknorris Chuck Norris MCP — wraps chucknorris.io (free, no auth) | |
| Cipo pipeworx-io/mcp-cipo CIPO MCP — Canadian Patents Database | |
| Circl Vulnerability Lookup pipeworx-io/mcp-circl-vulnerability-lookup CIRCL Vulnerability-Lookup — aggregated vulnerability records | |
| Cisa Kev pipeworx-io/mcp-cisa-kev CISA KEV MCP. | |
| Citybikes pipeworx-io/mcp-citybikes Citybikes MCP — wraps CityBik.es API (free, no auth required) | |
| Civic pipeworx-io/mcp-civic CIViC — Clinical Interpretation of Variants in Cancer. | |
| Civitai pipeworx-io/mcp-civitai Civitai MCP. | |
| Clash Royale pipeworx-io/mcp-clash-royale Clash Royale MCP. | |
| Clearlydefined pipeworx-io/mcp-clearlydefined ClearlyDefined — the licence, copyright attribution and provenance actually found inside an… | |
| Clevelandart pipeworx-io/mcp-clevelandart Cleveland Museum of Art Open Access MCP. | |
| Clickup pipeworx-io/mcp-clickup ClickUp MCP — wraps the ClickUp REST API v2 (BYO API key) | |
| Climate pipeworx-io/mcp-climate Climate MCP — wraps Open-Meteo Climate API (free, no auth) | |
| Climate Feeds pipeworx-io/mcp-climate-feeds Climate & Energy Feeds MCP. | |
| Climatiq pipeworx-io/mcp-climatiq Climatiq MCP — carbon footprint calculator with emission factors | |
| Clinicaltables pipeworx-io/mcp-clinicaltables NIH Clinical Tables Search Service MCP. | |
| Clinicaltrials pipeworx-io/mcp-clinicaltrials Search and analyze ClinicalTrials.gov: trials by keyword/condition/drug/status/phase, one study's… | |
| Close Crm pipeworx-io/mcp-close-crm Close CRM MCP Pack — wraps the Close (close.com) API v1. | |
| Cloudflare Radar pipeworx-io/mcp-cloudflare-radar Cloudflare Radar MCP — internet observatory (traffic, attacks, BGP, quality) | |
| Cmf Chile pipeworx-io/mcp-cmf-chile CMF Chile MCP -- Comision para el Mercado Financiero (Chile's financial regulator). | |
| Cms pipeworx-io/mcp-cms CMS Open Data MCP — US Centers for Medicare & Medicaid Services. | |
| Cms Drug Price Negotiation pipeworx-io/mcp-cms-drug-price-negotiation CMS Medicare drug price negotiation: the Maximum Fair Price (MFP) for every drug CMS has selected… | |
| Cms Open Payments pipeworx-io/mcp-cms-open-payments CMS Open Payments, with annual dataset discovery through the official DKAN API. | |
| Cn Law pipeworx-io/mcp-cn-law China (mainland) national law — one pack per jurisdiction (at-ris precedent: legislation AND case… | |
| Cnb Cz pipeworx-io/mcp-cnb-cz Czech National Bank (Česká národní banka, ČNB) public API MCP. Keyless. | |
| Cnmv Filings pipeworx-io/mcp-cnmv-filings Spain CNMV Regulated Filings MCP — keyless, same-day-fresh. | |
| Cnpj Br pipeworx-io/mcp-cnpj-br CNPJ Brazil MCP — Brazilian company-registry (Receita Federal) lookup via minhareceita.org, an… | |
| Cobalt pipeworx-io/mcp-cobalt Cobalt Intelligence MCP — US Secretary-of-State business registration, UCC liens, and TIN/EIN… | |
| Cocktails pipeworx-io/mcp-cocktails Cocktails MCP — TheCocktailDB API (free, no auth) | |
| Codeforces pipeworx-io/mcp-codeforces Codeforces MCP — public read API. | |
| Codestats pipeworx-io/mcp-codestats Code::Stats MCP — public user XP / activity. | |
| Codewars pipeworx-io/mcp-codewars Codewars MCP. | |
| Codex Contaminants pipeworx-io/mcp-codex-contaminants Codex Alimentarius CXS 193 — maximum levels for contaminants and toxins in food and feed: lead… | |
| Codex Gsfa pipeworx-io/mcp-codex-gsfa Codex GSFA — the FAO/WHO General Standard for Food Additives (CXS 192-1995). | |
| Codex Mrl pipeworx-io/mcp-codex-mrl Codex Alimentarius maximum residue limits — the internationally agreed legal ceilings for… | |
| Coinbase Exchange pipeworx-io/mcp-coinbase-exchange Coinbase Exchange public MCP. | |
| Coingecko pipeworx-io/mcp-coingecko CoinGecko MCP — wraps CoinGecko free API (no auth required) | |
| Coinglass pipeworx-io/mcp-coinglass CoinGlass MCP — wraps the CoinGlass Derivatives API v4 (coinglass.com) |
15,001–15,050 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.