Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mcpcut rostislavmatov/mcpcut Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval | |
| klaws — Korean compliance risk scanner rostradamus/klaws Scan code for Korean compliance risks — PIPA/개인정보보호법, Network Act, Credit Info. Not legal advice. | |
| io.github.rotifer-protocol/mcp-server rotifer-protocol/rotifer-mcp-server Search, compare, and install self-evolving AI Agent Genes ranked by Arena fitness | |
| FlashBank rotwang9000/flashbank-net Fixed-fee P2P term loans (no oracles) and flash loans on Ethereum, Base, Arbitrum and Sepolia. | |
| Seneschal Data rotwang9000/seneschal-data-api Monero/Zcash payment webhooks + DeFi liquidation & Ethereum builder data over MCP. Free tier; x402. | |
| anew round/anew.page Encode self-contained HTML pages into shareable URLs. | |
| Routescore routescore/mcp Read-only pre-sign evidence for onchain agents: route quality, MEV exposure, clear/caution verdict. | |
| Rowih rowih/rowih Read, check and write Rowih, a language for AI agents whose moves state force, basis and authority | |
| Rowsend rowsend/mcp Draft and test marketing email for contacts in your own database, from a local desktop app. | |
| ego-webqa roy32172310/qa Deterministic browser delivery checks for AI-generated web pages. | |
| com.royalplugins/royal-mcp royalplugins/royal-mcp Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org. | |
| Ikenga iyke (control bridge) royalti-io/ikenga-pkg-mcp-iyke Drive a running Ikenga desktop app from MCP clients — DOM, click, type, navigate, screenshot. | |
| life. scored. royashbrook/lifescored Rebuilds the scores real systems run on you — credit, actuarial, lending — in the open, cited. | |
| MCP Ads royazran/mcp-ads Run Google Ads, Meta, TikTok, LinkedIn, GA4 & Search Console from chat. Changes wait for approval. | |
| mcp-server-asana roychri/mcp-server-asana Perform Asana operations from an MCP Client such as Anthropic's Claude Desktop Application, and many more. | |
| Oura Ring (read-only) royreznik/oura-ring-mcp Read-only access to your Oura Ring readiness, sleep, activity, HRV, heart rate and trends. | |
| portcheck roystondwork-dev/portcheck See which process holds a port, find free ports, and stop a dev server safely. | |
| Emission Factors rozetyp/emission-factors-mcp Keyless US grid carbon + power cost by ZIP: eGRID Scope 2, Scope 1 fuels, site ranking, clean hours | |
| vulntel rozetyp/vulntel-mcp Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports | |
| Drafta rpegorov/drafta-mcp Search, read and write notes in your local Drafta library over local stdio. | |
| obsidian-mcp-pro rps321321/obsidian-mcp-pro The most feature-complete MCP server for Obsidian vaults. 23 tools and 3 resources for search, read, write, tags, link analysis, graph traversal, and canvas support. | |
| LexRegPulse: Banking Regulation Brief rrgu26/bankregpulse-mcp-server Daily US banking regulation brief, weekly digest, archive and comment-deadline tracker. No key. | |
| Research Toolkit rrrrrredy/research-toolkit Research methods, workflow tools, and independent review for AI agents, packaged as a Skill, plugin, and local MCP server. | |
| Jira Alerts (JSM Operations) rrvrs/jira-alerts-mcp MCP server for Jira Service Management Operations — alerts, on-call schedules and responders | |
| madurai-transit-mcp rsiva2294/madurai-transit-mcp Enables AI assistants to discover Madurai CityBus routes, search stops bilingually, retrieve stop sequences and platform bays, and calculate official TNSTC stage fares. | |
| Rootstock (RSK) MCP Server rsksmart/rsk-mcp-server MCP Server for Rootstock Blockchain | |
| io.github.rsmdt/multimodal rsmdt/multimodal-mcp Multi-provider media generation — images, video, audio, and transcription via a unified interface | |
| io.github.Rswcf/deepviews rswcf/deepviews-mcp Free financial data: company analysis, DCF, comps, benchmarks, screening. No API key. | |
| io.github.rsweeting1/pixelvault rsweeting1/pixelvault-mcp AI-native marketplace for pre-cleared licensed media assets — search, license, and stream rights. | |
| Weather Alerts & Forecast rsys-vtiwari/weather-mcp US NWS alerts by state and short-term (next 5 periods) point forecasts. | |
| RTK Motion — Motion Capture, Biomechanics, Threat & Fleet Intelligence rtkmotion/motion-intelligence Mocap, rehab biomechanics, threat intel, fleet vision. 21 MCP tools, 10 free. x402/USDC paid. | |
| io.github.rubatoyd/kci-openapi-mcp rubatoyd/kci_openapi KCI (Korea Citation Index) literature & citation search via REST Open API + OAI-PMH | |
| io.github.rubatoyd/kosis-openapi-mcp rubatoyd/kosis-openapi-mcp Korean official statistics (KOSIS) — tables, metadata and observations | |
| io.github.rubatoyd/na-openapi-mcp rubatoyd/na-openapi-mcp National Assembly Library of Korea catalog search (books, theses, articles, bills) | |
| io.github.rubatoyd/nl-openapi-mcp rubatoyd/nl-openapi-mcp National Library of Korea holdings search - books, online materials, KDC classification | |
| io.github.rubatoyd/scienceon-mcp rubatoyd/scienceon-mcp KISTI ScienceON OpenAPI literature search & metadata collection (MCP server + CLI) | |
| io.github.RubenGlez/devicecloud rubenglez/devicecloud-mcp Triage failing DeviceCloud Maestro test runs: fail reasons, screenshots, flaky-flow analytics | |
| Rubin Exchange rubin-trade/rubin-mainnet-mcp Rubin: self-custody DEX for crypto perpetuals & spot - trade, read positions, orders, balances. | |
| Rubrik Security Cloud rubrikinc/rubrik-mcp Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate. | |
| io.github.rudimentall1/agent-guardrail rudimentall1/agent-guardrail Deterministic policy firewall for AI agent tool calls - YAML rules, not a fuzzy risk score. | |
| Wikipedia MCP Server rudra-ravi/wikipedia-mcp A Model Context Protocol server that retrieves information from Wikipedia to provide context to LLMs, allowing users to search articles, get summaries, full content, sections, and links from Wikipedia. | |
| verimcp rudranaresh0201/mcp Transparent MCP proxy that independently re-verifies tool-call claims before the Host trusts them. | |
| io.github.rudraptpsingh/figbridge rudraptpsingh/figbridge Free, local MCP bridge for Figma — HTML, CSS, Tailwind, tokens, agent handoff bundles. | |
| Expo Launch Video rudrasamadhiya/expo-launch-video Record your Expo app on a real phone and edit a 1080p launch video with motion graphics and sound. | |
| Expo Agent Bridge rudrasamadhiya/expo-mcp-bridge Let AI agents see, tap, type, scroll, screenshot and debug your Expo app on a real phone. | |
| io.github.RudrenduPaul/agent-eval rudrendupaul/agent-eval Statistical regression testing for LLM agents: p-value, effect size, and CI on behavior change. | |
| io.github.RudrenduPaul/agent-observability rudrendupaul/agent-observability AI agent observability with deterministic record/replay for debugging agent failures. | |
| io.github.RudrenduPaul/agenticworkspace rudrendupaul/agenticworkspace Wraps the AgenticWorkspace CLI as a single generic MCP tool for repo workspace scans. | |
| io.github.RudrenduPaul/auditreach rudrendupaul/auditreach BYOK Reddit/YouTube research CLI with a tamper-evident audit log and an MCP server. | |
| io.github.RudrenduPaul/computeledger rudrendupaul/computeledger Signs, hash-chains, and verifies compute usage receipts via an MCP server, no issuer trust required. |
17,501–17,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.