Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| io.github.radiovisual/zoekt-mcp radiovisual/zoekt-mcp Fast indexed code search for AI agents, powered by Sourcegraph Zoekt. | |
| AgentTrust raditotev/agent-trust MCP Server for Agent Reputation & Trust Scoring | |
| DeepSeek Search Everywhere radoxtech/deepseek-search-everywhere-mcp Web search, page fetching and multi-source research via the DeepSeek Search & Fetch API. | |
| Call Me radres/call-me Your AI rings your iPhone, speaks its question, and gets your spoken answer back as text. | |
| io.github.RAEN-DT/pynet-mcp-bridge raen-dt/pynetbridge MCP implementation to connect AI agents with the PyNet Platform for BIM/Engineering automation. | |
| io.github.rafaelgaspar/longhorn-mcp rafaelgaspar/longhorn-mcp MCP server for the Longhorn distributed storage manager API, with a --read-only mode. | |
| Board Planner rafalpodles/board-planner Project board for teams and coding agents: Kanban, sprints, 46 tools, OAuth 2.1 or API tokens. | |
| Lingua Universale MCP Server rafapra3008/cervellaswarm Verify AI agent communication with session types and formal proofs | |
| io.github.rafavecchi/grantd rafavecchi/grantd Grantd MCP server: let your AI agent act on a user's behalf across third-party APIs via OAuth. | |
| io.github.rafe-walker/kronicle-lite rafe-walker/kronicle-lite Hash-chained local document store with signed receipts and an orient protocol for stale agent memory | |
| io.github.rafe-walker/sea-lite rafe-walker/sea-lite Work queue for parallel coding agents: leased path-scoped claims, typed links, hash-chained history | |
| io.github.Raffaele86/local-leads-mcp raffaele86/local-leads-mcp Find local businesses with no website via OpenStreetMap, then verify them. No API keys needed. | |
| io.github.Raffaele86/seo-stack-mcp raffaele86/seo-stack-mcp The complete open-source SEO data stack for AI agents: 7 sources, 86 tools, one MCP server | |
| io.github.rafsilva85/skillflow rafsilva85/skillflow-mcp-server Search, discover, and install 500+ AI agent skills from the SkillFlow marketplace. | |
| RenewRoster raghuchinnannan/renewroster-mcp Track domain and SSL certificate expiry for your agency clients from any MCP client. | |
| io.github.RagingOrangutan/rootvine-mcp ragingorangutan/rootvine-mcp Neutral commerce resolution for AI agents — music live, ranked by trust, never by commission. | |
| io.github.ragionex/memory-mcp ragionex/memory-mcp Persistent memory for AI agents - save once, recall in every session, project and tool. | |
| io.github.rahuljava2807/claude-bridge-mcp rahuljava2807/claude-code-bridge-mcp Pipes Claude Code session output into Claude Chat — no more copy-paste between tools | |
| SaaS Puppy rahulparathy/saas-puppy-mcp Look up or compare free-tier developer tools, with the catch spelled out. | |
| ContextSmith rahulsankhla312/contextsmith Give your coding agent the right code: graph + hybrid search, packed into a token budget. Local. | |
| io.github.RailKill/mcp-aider-executor railkill/mcp-aider-executor Model Context Protocol (MCP) server to execute aider-specific code editing operations | |
| io.github.railwayapp/mcp-server railwayapp/railway-mcp-server Official Railway MCP server | |
| Raily railyai/raily-mcp Raily personal-agent MCP with scoped reads and approved actions. | |
| DocPull raintree-technology/docpull Sync public web sources into cited context packs for AI agents, RAG, and MCP clients. | |
| io.github.Raistlin82/btp-sap-odata-to-mcp-server-optimized raistlin82/btp-sap-odata-to-mcp-server-optimized Enterprise SAP OData to MCP Server with AI capabilities and Cloud Foundry integration | |
| io.github.rajanrengasamy/vidlens-mcp rajanrengasamy/vidlens-mcp YouTube intelligence layer for AI agents. 41 tools, 10 modules, zero config. | |
| io.github.Rajeev-Shyam/quellgeist-commits rajeev-shyam/quellgeist Read-only MCP server: get_recent_commits over a local deploy log (Quellgeist triage). | |
| GRACE Hello MCP rajitharul/grace-hello-mcp A very simple remote MCP server that greets you, with a custom icon. | |
| io.github.Rajveerx11/gfi-scout rajveerx11/gfi-scout Finds open source issues where beginners actually succeed, ranked by a 0-100 beginner score. | |
| io.github.RajX-dev/n3mo rajx-dev/n3mo N3MO: Code intelligence engine mapping repositories into queryable symbol graphs. | |
| AgentDrive rakesh1002/agentdrive-mcp Cross-agent artifact workspace with provenance across Claude Code, Codex, Cursor, LangGraph. | |
| io.github.Rakesh1002/namemyapp rakesh1002/namemyapp-mcp Brandable business names with live domain availability + one-click buy URLs. | |
| Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API ralf9090/agent-kiosk 23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security. | |
| SqlToAi ralfhuesing/sqltoai Microsoft SQL Server schema discovery and SQL tools over local stdio on Windows x64. | |
| Titen Memory ramaaditya49/titen Evidence-grounded agent memory with mandatory provenance, on local SQLite or Cloudflare D1 | |
| ai.smithery/ramadasmr-networkcalc-mcp ramadasmr/networkcalc-mcp Look up DNS information for any domain to troubleshoot issues and gather insights. Get fast, relia… | |
| NervaPack ramdhavepreetam/nervapack Offline codebase knowledge graph: 91% token reduction vs naive RAG, plus cross-session agent memory. | |
| Rami Code Review rami-code-review/claude-code-marketplace AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor | |
| mdreview ranawaqas-ai/mdreview-service Human-in-the-loop document review: an agent pushes a draft, a person comments, the agent revises. | |
| bot.ranch/mcp-server ranchbot/mcp-server Read and write cattle and sheep records with farm-scoped, revocable access. | |
| Pi-hole MCP Server ranklancer/pihole-mcp MCP server for Pi-hole v6 API — manage multiple instances: queries, lists, groups, stats | |
| io.github.Ranork/remnus ranork/remnus-app MCP-native open-source Notion alternative: read & write pages, databases and kanban boards. | |
| io.github.Ranshiv/noether-physics ranshiv/noether-physics Physics assistant: checked equations, live simulations, claims verified against arXiv papers | |
| QuickerSpot MCP Server raphaelinacio/quickerspot-mcp Servidor MCP do QuickerSpot para vinhetas, rádio indoor e sonorização comercial com IA. | |
| NeuroStack raphasouthall/neurostack Token-efficient MCP memory for Markdown vaults. Tiered search, GraphRAG, AI memories. | |
| io.github.raphysicst-create/korean-secondary-learning-map-mcp raphysicst-create/korean-secondary-learning-map-mcp 한국 중등 2022 개정 교육과정 학습 그래프 MCP 서버 (중학교 714 · 고교 3,124 성취기준 · 원문 수록 · 중→고 전이) | |
| io.github.raphysicst-create/korean-vocational-learning-map-mcp raphysicst-create/korean-vocational-learning-map-mcp 한국 특성화고 전문교과 2022 개정 교육과정 학습 그래프 MCP 서버 (528과목·성취기준 47,625건, 공식 원문 전량 수록) | |
| io.github.RapierCraft/perplexity-comet-mcp rapiercraft/perplexity-comet-mcp Bridge Claude Code with Perplexity Comet for autonomous browsing and tab management | |
| io.github.raportagent/raportagent-mcp raportagent/raportagent-mcp Sourced market and compliance research for Claude Desktop, Claude Code and Cursor. | |
| ReelScribe rara-cyber/reelscribe-mcp-server Transcribe social videos, selected comments, URL batches and Instagram channels. |
15,701–15,750 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.