Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| ego-webqa roy32172310/qa Deterministic browser delivery checks for AI-generated web pages. | |
| com.royalplugins/royal-mcp royalplugins/royal-mcp Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org. | |
| Ikenga iyke (control bridge) royalti-io/ikenga-pkg-mcp-iyke Drive a running Ikenga desktop app from MCP clients — DOM, click, type, navigate, screenshot. | |
| life. scored. royashbrook/lifescored Rebuilds the scores real systems run on you — credit, actuarial, lending — in the open, cited. | |
| MCP Ads royazran/mcp-ads Run Google Ads, Meta, TikTok, LinkedIn, GA4 & Search Console from chat. Changes wait for approval. | |
| Oura Ring (read-only) royreznik/oura-ring-mcp Read-only access to your Oura Ring readiness, sleep, activity, HRV, heart rate and trends. | |
| portcheck roystondwork-dev/portcheck See which process holds a port, find free ports, and stop a dev server safely. | |
| Emission Factors rozetyp/emission-factors-mcp Keyless US grid carbon + power cost by ZIP: eGRID Scope 2, Scope 1 fuels, site ranking, clean hours | |
| vulntel rozetyp/vulntel-mcp Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports | |
| Drafta rpegorov/drafta-mcp Search, read and write notes in your local Drafta library over local stdio. | |
| io.github.RPER2001/rigshare rper2001/rigshare-mcp Rent GPUs, robots, drones, and construction gear on RIGShare; also onboards equipment owners. | |
| LexRegPulse: Banking Regulation Brief rrgu26/bankregpulse-mcp-server Daily US banking regulation brief, weekly digest, archive and comment-deadline tracker. No key. | |
| Jira Alerts (JSM Operations) rrvrs/jira-alerts-mcp MCP server for Jira Service Management Operations — alerts, on-call schedules and responders | |
| Rootstock (RSK) MCP Server rsksmart/rsk-mcp-server MCP Server for Rootstock Blockchain | |
| io.github.rsmdt/multimodal rsmdt/multimodal-mcp Multi-provider media generation — images, video, audio, and transcription via a unified interface | |
| io.github.Rswcf/deepviews rswcf/deepviews-mcp Free financial data: company analysis, DCF, comps, benchmarks, screening. No API key. | |
| io.github.rsweeting1/pixelvault rsweeting1/pixelvault-mcp AI-native marketplace for pre-cleared licensed media assets — search, license, and stream rights. | |
| Weather Alerts & Forecast rsys-vtiwari/weather-mcp US NWS alerts by state and short-term (next 5 periods) point forecasts. | |
| RTK Motion — Motion Capture, Biomechanics, Threat & Fleet Intelligence rtkmotion/motion-intelligence Mocap, rehab biomechanics, threat intel, fleet vision. 21 MCP tools, 10 free. x402/USDC paid. | |
| io.github.rubatoyd/kci-openapi-mcp rubatoyd/kci_openapi KCI (Korea Citation Index) literature & citation search via REST Open API + OAI-PMH | |
| io.github.rubatoyd/kosis-openapi-mcp rubatoyd/kosis-openapi-mcp Korean official statistics (KOSIS) — tables, metadata and observations | |
| io.github.rubatoyd/na-openapi-mcp rubatoyd/na-openapi-mcp National Assembly Library of Korea catalog search (books, theses, articles, bills) | |
| io.github.rubatoyd/nl-openapi-mcp rubatoyd/nl-openapi-mcp National Library of Korea holdings search - books, online materials, KDC classification | |
| io.github.rubatoyd/scienceon-mcp rubatoyd/scienceon-mcp KISTI ScienceON OpenAPI literature search & metadata collection (MCP server + CLI) | |
| io.github.RubenGlez/devicecloud rubenglez/devicecloud-mcp Triage failing DeviceCloud Maestro test runs: fail reasons, screenshots, flaky-flow analytics | |
| Rubin Exchange rubin-trade/rubin-mainnet-mcp Rubin: self-custody DEX for crypto perpetuals & spot - trade, read positions, orders, balances. | |
| Rubrik Security Cloud rubrikinc/rubrik-mcp Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate. | |
| io.github.rudimentall1/agent-guardrail rudimentall1/agent-guardrail Deterministic policy firewall for AI agent tool calls - YAML rules, not a fuzzy risk score. | |
| verimcp rudranaresh0201/mcp Transparent MCP proxy that independently re-verifies tool-call claims before the Host trusts them. | |
| io.github.rudraptpsingh/figbridge rudraptpsingh/figbridge Free, local MCP bridge for Figma — HTML, CSS, Tailwind, tokens, agent handoff bundles. | |
| Expo Launch Video rudrasamadhiya/expo-launch-video Record your Expo app on a real phone and edit a 1080p launch video with motion graphics and sound. | |
| Expo Agent Bridge rudrasamadhiya/expo-mcp-bridge Let AI agents see, tap, type, scroll, screenshot and debug your Expo app on a real phone. | |
| io.github.RudrenduPaul/agent-eval rudrendupaul/agent-eval Statistical regression testing for LLM agents: p-value, effect size, and CI on behavior change. | |
| io.github.RudrenduPaul/agent-observability rudrendupaul/agent-observability AI agent observability with deterministic record/replay for debugging agent failures. | |
| io.github.RudrenduPaul/agenticworkspace rudrendupaul/agenticworkspace Wraps the AgenticWorkspace CLI as a single generic MCP tool for repo workspace scans. | |
| io.github.RudrenduPaul/auditreach rudrendupaul/auditreach BYOK Reddit/YouTube research CLI with a tamper-evident audit log and an MCP server. | |
| io.github.RudrenduPaul/computeledger rudrendupaul/computeledger Signs, hash-chains, and verifies compute usage receipts via an MCP server, no issuer trust required. | |
| io.github.RudrenduPaul/continuityguard rudrendupaul/continuityguard Wraps the ContinuityGuard CLI as a single generic MCP tool for video-clip continuity scans. | |
| io.github.RudrenduPaul/deskcert rudrendupaul/deskcert-cli Evaluates whether an AI agent is safe to operate internal web apps via an MCP run_suite tool. | |
| io.github.RudrenduPaul/electronics-rfq-agent rudrendupaul/electronics-rfq-agent AI quoting agent for electronics distributors. RFQ in, quote out via MCP tools. | |
| io.github.RudrenduPaul/evolveguard rudrendupaul/evolveguard Wraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks. | |
| io.github.RudrenduPaul/freelancer-payment-protection rudrendupaul/freelancer-payment-protection Wraps the fpp CLI as a single generic MCP tool for freelancer client payment-risk checks. | |
| io.github.RudrenduPaul/graphkeeper rudrendupaul/graphkeeper Mines git history for file co-change patterns into a queryable knowledge graph via MCP. | |
| io.github.RudrenduPaul/haltproof rudrendupaul/haltproof Fail-closed deterministic checks and hash-chained receipts for AI agent outputs via MCP. | |
| io.github.RudrenduPaul/inferbench rudrendupaul/inferbench Benchmarks local LLM inference speed (tokens/sec) on your own hardware via MCP tools. | |
| io.github.RudrenduPaul/llmscout rudrendupaul/llmscout Zero-config SEO and GEO checker: 21 technical-SEO and generative-engine checks for a live site. | |
| io.github.RudrenduPaul/masterytrace rudrendupaul/masterytrace Wraps the MasteryTrace CLI as a single generic MCP tool for skill-mastery tracking. | |
| io.github.RudrenduPaul/memtrust rudrendupaul/memtrust Independent, reproducible benchmark harness for agent-memory backends. | |
| io.github.RudrenduPaul/neuronscope rudrendupaul/neuronscope Traces which neurons and attention heads drive a language model's output via MCP tools. | |
| io.github.RudrenduPaul/ownvoice rudrendupaul/ownvoice Wraps the ownvoice CLI as a single generic MCP tool for voice/identity checks. |
16,151–16,200 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.