Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Telnyx Lookup pipeworx-io/mcp-telnyx-lookup Telnyx Number Lookup MCP — wraps the Telnyx Number Lookup API… | |
| Temperature Random pipeworx-io/mcp-temperature-random temperature-random MCP — wraps StupidAPIs (keyless — no credential needed) | |
| Tenor pipeworx-io/mcp-tenor Tenor v2 MCP. | |
| Terminal49 pipeworx-io/mcp-terminal49 Terminal49 MCP — wraps the Terminal49 ocean/container shipment tracking API… | |
| Texas Code pipeworx-io/mcp-texas-code Texas Statutes — state statutes by citation. | |
| Textcase pipeworx-io/mcp-textcase Text case conversion MCP. | |
| Textstats pipeworx-io/mcp-textstats Text statistics & readability MCP. | |
| Tfl pipeworx-io/mcp-tfl Transport for London (TfL) Unified API MCP — keyless. | |
| Tga Artg pipeworx-io/mcp-tga-artg TGA ARTG — the Australian Register of Therapeutic Goods, the Therapeutic Goods Administration's… | |
| The Committee pipeworx-io/mcp-the-committee the-committee MCP — wraps StupidAPIs (keyless — no credential needed) | |
| The Graph pipeworx-io/mcp-the-graph The Graph MCP — indexed blockchain data via subgraph GraphQL queries | |
| The Guardian pipeworx-io/mcp-the-guardian The Guardian Open Platform MCP. | |
| Theaudiodb pipeworx-io/mcp-theaudiodb TheAudioDB MCP — community music metadata database. | |
| Thegamesdb pipeworx-io/mcp-thegamesdb TheGamesDB MCP — wraps TheGamesDB API (thegamesdb.net), a community video-game metadata database… | |
| Themeparks pipeworx-io/mcp-themeparks ThemeParks.wiki MCP — live theme park wait times, schedules, and attraction data. Keyless. Covers… | |
| Thesportsdb pipeworx-io/mcp-thesportsdb TheSportsDB MCP — sports catalog (teams, players, events) | |
| Threatfox pipeworx-io/mcp-threatfox ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required) | |
| Ticketmaster pipeworx-io/mcp-ticketmaster Ticketmaster Discovery v2 MCP. | |
| Tides pipeworx-io/mcp-tides Tides MCP — NOAA Tides and Currents data | |
| Tiingo pipeworx-io/mcp-tiingo Tiingo MCP — wraps the Tiingo financial API (tiingo.com) | |
| Timeapi Io pipeworx-io/mcp-timeapi-io TimeAPI.io MCP. | |
| Timestamp pipeworx-io/mcp-timestamp Unix timestamp MCP. | |
| Timezone pipeworx-io/mcp-timezone Timezone MCP — wraps timeapi.io (free, no auth) | |
| Tinder Bio pipeworx-io/mcp-tinder-bio tinder-bio MCP — wraps StupidAPIs (keyless — no credential needed) | |
| Tldr Pages pipeworx-io/mcp-tldr-pages tldr-pages MCP — fetched from the canonical github repo. | |
| Tle pipeworx-io/mcp-tle TLE MCP — satellite tracking via Two-Line Element sets (tle.ivanstanojevic.me, free, no auth) | |
| Tmdb pipeworx-io/mcp-tmdb TMDB v3 MCP. | |
| Tn Dmv pipeworx-io/mcp-tn-dmv Tennessee DMV MCP — Department of Safety and Homeland Security: the 186 driver service centers… | |
| Todoist pipeworx-io/mcp-todoist Todoist MCP Pack | |
| Token Risk pipeworx-io/mcp-token-risk Token Risk — rug-pull / honeypot screening for crypto tokens. | |
| Tomorrow Io pipeworx-io/mcp-tomorrow-io Tomorrow.io MCP — wraps the Tomorrow.io Weather API (api.tomorrow.io/v4) | |
| Tomtom pipeworx-io/mcp-tomtom TomTom MCP — wraps the TomTom Search & Routing APIs (api.tomtom.com) | |
| Trade Compliance pipeworx-io/mcp-trade-compliance Trade Compliance MCP — the two questions an importer asks that the tariff schedule alone cannot… | |
| Trademarks pipeworx-io/mcp-trademarks Trademarks MCP — US trademark search + record lookup | |
| Tradier pipeworx-io/mcp-tradier Tradier MCP — stock & options market data via the Tradier Brokerage API (tradier.com /… | |
| Traject Ecommerce pipeworx-io/mcp-traject-ecommerce Traject Data ecommerce MCP — Amazon (Rainforest API) + Walmart (BlueCart API) | |
| Trakt pipeworx-io/mcp-trakt Trakt MCP — TV/movie metadata + watch tracking signals | |
| Transit Land pipeworx-io/mcp-transit-land Transitland MCP — global GTFS aggregator | |
| Translate pipeworx-io/mcp-translate Translate MCP — LibreTranslate-compatible machine translation. | |
| Transport Feeds pipeworx-io/mcp-transport-feeds Transport Feeds MCP. | |
| Transport Nsw pipeworx-io/mcp-transport-nsw Transport for NSW MCP — journey planning, live departures, service alerts and commuter car-park… | |
| Travel Advisories pipeworx-io/mcp-travel-advisories US Travel Advisories MCP. | |
| Travel Feeds pipeworx-io/mcp-travel-feeds Travel Feeds MCP. | |
| Travelpayouts pipeworx-io/mcp-travelpayouts Travelpayouts MCP — wraps the Aviasales Flights Data API (travelpayouts.com) | |
| Traveltime pipeworx-io/mcp-traveltime TravelTime MCP — multi-modal isochrones & reachability incl. PUBLIC TRANSPORT (traveltime.com).… | |
| treasury pipeworx-io/mcp-treasury Treasury MCP — US Treasury Fiscal Data public API (free, no auth) | |
| Treasury Fiscal pipeworx-io/mcp-treasury-fiscal Treasury Fiscal MCP — US Treasury Fiscal Data API | |
| Treasury Tic pipeworx-io/mcp-treasury-tic U.S. Treasury International Capital (TIC) System — foreign holdings of U.S. securities, by… | |
| Trefle pipeworx-io/mcp-trefle Trefle MCP — global plant database (1M+ species) | |
| Trimet pipeworx-io/mcp-trimet TriMet MCP — live arrivals, stop lookup, vehicle positions and service alerts for Portland… |
16,301–16,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.