Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| Network Monitor Comfortably monitor your Internet traffic 🕵️♂️ Based on GyulyVGC/sniffnet (32,966+ GitHub stars). network monitor, rust, application, gui, iced, linux, macos | |
| Notion Template Notion模板生成器。工作空间规划、数据库设计、仪表盘布局、知识库Wiki、项目管理、个人模板。Notion template generator with workspace, database, dashboard, wiki, project. | |
| Okr Planner OKR目标管理。OKR制定、季度复盘、上下对齐、评分、模板库、级联分解。OKR planner with goal setting, quarterly reviews, alignment, scoring, templates, cascading. OKR、目标管理、绩效。 | |
| Onchain Analyzer Reference tool for devtools — covers intro, formulas, regulations and more. Quick lookup for Onchain Analyzer concepts, best practices, and implementation pa... | |
| Page Builder Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Page Builder concepts, best practices, and implementation patterns. | |
| Partycraft Plan events with budgets, guest lists, and timelines. Use when organizing weddings, coordinating birthdays, managing vendors, drafting invitations. | |
| Passport Validate and format passport or identity document data. Use when checking fields, validating numbers, generating fixtures, linting records. | |
| Perftest Run HTTP performance tests with latency and throughput measurement. Use when benchmarking web services. Requires curl. | |
| Polymarket Screener Filter Polymarket prediction markets and track probabilities. Use when screening bets, drafting analyses, outlining trends, tracking price movements. | |
| Privacy Policy 隐私政策生成器。GDPR/CCPA合规、App/网站隐私政策、合规审计。Privacy policy generator with GDPR, CCPA compliance. 隐私政策、合规。 | |
| Profit Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Profit concepts, best practices, and implementation patterns. | |
| Queue Manage message queues with priorities and retry logic. Use when adding jobs, planning retry strategies, tracking delivery status, reviewing failed items. | |
| Raspberry Pi Manager Manage Raspberry Pi devices — GPIO control, system monitoring (CPU/temp/memory), service management, sensor data reading. | |
| Readme Maker Design beautiful GitHub profile READMEs with templates. Use when styling profiles, validating badges, generating stat widgets, formatting bio sections. | |
| Regexr Create, test, and learn regular expressions with live matching. Use when validating patterns, checking groups, generating regex, linting syntax. | |
| Ring Security Reference tool for life — covers intro, quickstart, patterns and more. Quick lookup for Ring Security concepts, best practices, and implementation patterns. | |
| Roast Generator 吐槽生成器。温和吐槽、毒舌模式、朋友互怼、名人吐槽、自嘲、Battle模式。Roast generator with gentle, savage modes. 吐槽、毒舌、搞笑。 | |
| Room Organize room inventory and maintenance schedules. Use when adding furniture items, tracking appliances, scheduling deep cleans, setting repair reminders. | |
| Roomba Control Reference tool for life — covers intro, quickstart, patterns and more. Quick lookup for Roomba Control concepts, best practices, and implementation patterns. | |
| Rsi Calculate RSI for any asset. Use when checking overbought/oversold conditions, spotting divergence signals, comparing multi-timeframe RSI, or setting trading... | |
| Shadow Generate and preview CSS shadow effects using CLI tools. Use when you need box-shadow, text-shadow, drop-shadow, layered shadows, presets, animations, | |
| Sleep Tracker 睡眠改善工具。睡眠分析、改善建议、作息规划、睡眠环境优化、小睡指南、睡眠日记。Sleep tracker with analysis, improvement tips, schedule planning, environment optimization, nap guide. | |
| Ssl Cert Manager Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for SSL Cert Manager concepts, best practices, and implementation pat... | |
| Step Log daily steps, set fitness goals, and chart walking trends. Use when logging counts, tracking progress, charting trends, setting goals. | |
| Study Plan 学习计划生成器。考研计划、考证规划、每日学习、番茄钟。Study plan generator for exams, certifications, daily schedules. 学习计划、考研计划、备考规划。Use when creating study schedules. | |
| Trim Data trimming reference — whitespace trimming, string cleanup, data truncation, outlier trimming, and signal processing. Use when cleaning text data, removin... | |
| Trivia Quiz Play knowledge quizzes with facts, categories, and daily challenges. Use when learning topics, drilling flashcards, reviewing answers, tracking progress. | |
| Usb usb reference tool | |
| Vitamin Track vitamin and supplement intake with goals and reminders. Use when logging supplements, setting nutrition goals, reviewing history, or scheduling doses. | |
| Wallet Tracker Crypto wallet analytics reference — address formats, on-chain analytics, transaction tracing, hardware wallets, and approval revocation | |
| Xss Xss reference tool. Use when working with xss in devtools contexts. | |
| Yamlcheck Validate YAML syntax using python3, lint configs, and convert YAML to JSON. Use when checking syntax, finding errors, or converting formats. | |
| Zapier Recipe 自动化流程设计。Zapier/Make流程、触发器、动作链、条件逻辑、模板、效率分析。Automation recipes for Zapier, Make. 自动化、工作流、效率。 | |
| Amm Analyze amm operations. Use when you need to understand amm mechanisms, evaluate protocol security, or reference on-chain concepts. | |
| Apimon Monitor API endpoints and track response times to catch outages. Use when checking uptime, validating schemas, or generating status reports. | |
| Apm Monitor APM, (Application Performance Management) tool for large-scale distributed systems. apm-monitor, java, agent, apm, distributed-tracing, monitoring. | |
| Attestation Analyze attestation operations. Use when you need to understand attestation mechanisms, evaluate protocol security, or reference on-chain concepts. | |
| Awesome Submitter Pro Generate submission issues for GitHub awesome-lists. Auto-creates formatted Issue content for awesome-indie, awesome-privacy, awesome-cloudflare, and 7 more... | |
| Bcc bcc reference tool | |
| Benchmark Tool Benchmark CPU, memory, disk I/O, and network on your system. Use when measuring server performance. | |
| Binomial Binomial reference tool. Use when working with binomial in finance contexts. | |
| Biomass Biomass energy reference — feedstock properties, combustion, gasification, pyrolysis, and pelletization. Use when evaluating biomass resources, designing con... | |
| Bizplanner Create business plans, lean canvases, and financial projections. Use when pitching investors, planning startups, or modeling revenue scenarios. | |
| Bonded Bonded warehouse reference — customs procedures, duty deferral, FTZ operations, compliance requirements. Use when managing bonded storage, customs clearance,... | |
| Breaker Circuit breaker sizing and coordination tool. Use when json breaker tasks, csv breaker tasks, checking breaker status. | |
| Breathe Breathing techniques reference — box breathing, 4-7-8, Wim Hof, pranayama, resonance breathing. Use when guiding breathwork for stress relief, focus, sleep,... | |
| Cgroup Cgroup reference tool. Use when working with cgroup in sysops contexts. | |
| Chartmaker Visualize data with bar charts, sparklines, and progress bars in terminal. Use when plotting metrics, rendering inline charts, or transforming data. | |
| Comic Script Draft comic storyboards with panels, dialogue, and scene pacing. Use when designing panels, writing dialogue, structuring comic chapters. | |
| Compass Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Compass concepts, best practices, and implementation patterns. |
17,451–17,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.