Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| open-code-review raye-deng/open-code-review AI-powered code review tool that detects AI-generated code defects invisible to traditional linters — hallucinated packages, deprecated APIs, cross-file contradictions, hidden security anti-patterns, and over-engineering. Works as a standal | |
| gsearch rayenmlayeh/gsearch Real Google Search for AI agents: real URLs, AI Overview and People also ask as typed JSON. | |
| io.github.raysker/axon-research raysker/axon-research-mcp AI agent ecosystem research, DeFi analysis, and market research tools | |
| io.github.RaYYeR220/regimen rayyer220/regimen Tells you whether a trading strategy's edge is distinguishable from luck. | |
| NetLogo MCP razee4315/netlogo-mcp Create, run, and analyze NetLogo agent-based models through natural conversation | |
| IntentFence Agent Action Firewall razel369/intentfence Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts. | |
| LLM Eval Harness razilzul/llm-eval-harness Run a golden set and gate LLM model swaps on accuracy, with latency and cost per request. | |
| io.github.razvangirgiz/wazap razvangirgiz/wazap WhatsApp for your agent: chats, messages, media, contacts and groups behind MCP tools. | |
| Claudexor razzant/claudexor Route coding work across Claude Code, Codex, Cursor, and OpenCode with shared context. | |
| site.123skills/mcp rbarkerart/123skills-mcp Skill market run by AI agents: register, publish skills, vote weekly, buy winners with credits. | |
| Awesome Copilot MCP Server rbbtsn0w/awesome-copilot-mcp Model Context Protocol server for awesome-copilot agents and collections | |
| Hindsight MCP rbfinch/hindsight-mcp MCP server for AI-assisted coding with development history: git, tests, Copilot. | |
| QA Orchestrator rbkmen/qa-orchestrator A local MCP server that routes QA reviews through deterministic profiles and risk-based escalation while keeping source evidence and final decisions with the host. | |
| io.github.rbonestell/ap-mcp-server rbonestell/ap-mcp-server Model Context Protocol (MCP) server for the Associated Press Media API | |
| io.github.rbsoftwaresystems/draftlytic-mcp rbsoftwaresystems/draftlytic-mcp Offline MCP server for planning structured project specs — validate, render, and checklist tools. | |
| LicenseGuard rccaoki-wq/license-guard Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go. | |
| Extraer Datos de INE rcfrias/extraer-datos-ine-mcp Extrae CURP, nombre, domicilio y clave de elector de credenciales INE/IFE mexicanas. | |
| Verificar CURP rcfrias/verificar-curp-mcp Valida, coteja y verifica CURPs mexicanas en el registro de RENAPO. | |
| io.github.rchanllc/picdefenseio-mcp-server rchanllc/picdefenseio-mcp-server Image risk, EXIF/IPTC/XMP, reverse-image backlinks, content, watermark, OCR via PicDefense.io. | |
| Edith Second Brain rchari1/edith-secondbrain Claude distils its past sessions into linked Markdown notes on disk and searches them later. | |
| io.github.rclone-ui/rclone rclone-ui/rclone-mcp MCP server for the Rclone RC API, with selectable toolsets. | |
| com.accountingqb/accountingqb rcolkitt/accountingqb-mcp QuickBooks Online for Claude: reports, bookkeeping cleanup, and US & Canadian tax prep. | |
| io.github.RCS-kz/bitrix24-mcp rcs-kz/bitrix24-mcp Bitrix24 Cloud MCP server — 45 tools across CRM, Tasks, Deals, Leads, Files, Disk. | |
| RCSB PDB rcsb/rcsb-mcp MCP server to search, inspect, and cross-reference RCSB Protein Data Bank structures | |
| Hated WoW MCP rdygaming/hated-wow-mcp MCP server for WoW addons: Lua API, UI source, CVars, art, linting, plus model export to glTF/OBJ. | |
| Reach120 writing practice reach120/reach120-mcp Fetch English writing practice prompts and score a written response. Bring your own API key. | |
| readfetch readfetch/mcp-x402-proxy Stdio MCP: free probe; paid web reading (text/map/scrape) via x402 on readfetch.com | |
| mcp-server-data-exploration reading-plus-ai/mcp-server-data-exploration Enables autonomous data exploration on .csv-based datasets, providing intelligent insights with minimal effort. | |
| MCP Server for Deep Research reading-plus-ai/mcp-server-deep-research A tool that helps users conduct comprehensive research on complex topics by exploring questions in depth, finding relevant sources, and generating structured, well-cited research reports. | |
| ReadyAgents readyagentsdev/readyagents-core Local YAML/JSON agent workflow CLI with approvals, resume, and optional stdio or loopback MCP HTTP. | |
| Realmint realmint-io/mcp Agent-native scoring, search and routing for tokenized real-world assets across multi-chain. | |
| Hermtica realmnohgee/hermtica AI social network and marketplace for agentic tools and services. With 6 MCP tools available at launch. | |
| io.github.realopengroup/mcp-server realopengroup/mcp-server Verify crypto wallets and generate proof of funds letters for buying real estate with crypto. | |
| MnogoReels realsatanyan/mnogoreels-mcp Turn long videos into captioned vertical shorts, transcripts and articles with MnogoReels. | |
| RealtyCrawl realtycrawl/realtycrawl-mcp Search source-linked real estate observations with capability discovery and bounded credits. | |
| mcp-doctor realwigu/mcp-doctor Diagnose, secure, and benchmark your MCP servers. Zero-config CLI for Claude Code, Cursor, VS Code, and Windsurf. | |
| MCP OpenAPI Server reapi-com/mcp-openapi A Model Context Protocol server that loads multiple OpenAPI specifications and exposes them to LLM-powered IDE integrations, enabling AI to understand and work with your APIs directly in development tools like Cursor. | |
| Bilinc rearclabs/bilinc Hosted agent memory with provenance, contradiction surfacing, and snapshot rollback. | |
| io.github.RecallWorks/recall recallworks/recall Open-source MCP memory server. Persistent, searchable, tiered memory across sessions. | |
| Outbound OS recepiohq/outbound-os Evidence-gated email outreach MCP with dry-run defaults and explicit send approvals. | |
| io.github.isamu/mulmocast-vision receptron/mulmocast-vision Easy and stylish presentation slide generator. | |
| Rechtssysteem.ai rechtssysteem-ai/rechtssysteem-mcp Lekkage-vrije voorspelling van Nederlandse rechtszaken, getraind op 609.715 uitspraken | |
| recomention recomention/mcp Check whether AI engines recommend a product: public AI rankings and recomention reports. | |
| io.github.recordant/recordant recordant/recordant Patent-pending diagnostic + decisions-ledger engine with operator briefs and an MCP console. | |
| app.recordist/gateway recordist-app/gateway Read, search and act on meetings Recordist recorded locally. Listens on loopback by default. | |
| RecourseOS recourseos/recourse Consequence evaluation for AI agents. Check recoverability before destructive actions. | |
| Longevity Cell Therapy Weekly recs84/longevity-cell-therapy-mcp Free read-only feed of curated MSC, NK cell, extracellular vesicle and senescence research. | |
| Recued recued/recued A server you run yourself between AI agents and your accounts; by default, writes wait for your yes. | |
| Apple Shortcuts Server recursechat/mcp-server-apple-shortcuts An MCP Server Integration with Apple Shortcuts | |
| D2 MCP Server recursivefunctions/d2mcp Create, edit, validate, render, and export D2 diagrams with confined workspace access. |
17,101–17,150 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.