Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| mneme thegoatpsy/mneme Vault-native, accountable memory for Claude Code and MCP clients. Markdown is ground truth. | |
| io.github.thegoldbarometer/thegoldbarometer thegoldbarometer/mcp-server Today's gold buying-conditions score (0-100), its published history, and what followed since 1971. | |
| The Living Bread thegoodfruit/living-bread-mcp Scripture with evidence labels, churches and prayer near you, crisis lines first. Jesus is Lord. | |
| io.github.thegoodguysla/myco-brain thegoodguysla/myco-brain Shared, source-backed memory for AI agents on your own Postgres, with an optional document engine. | |
| io.github.thegridwork/aiact thegridwork/aiact Scan codebases for AI usage, classify risk, generate EU AI Act compliance reports. | |
| io.github.thegridwork/license thegridwork/license Scan dependencies for license compliance — copyleft conflicts, unknown licenses, risk. | |
| io.github.thegridwork/privacy thegridwork/privacy Audit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies. | |
| io.github.thegridwork/siteaudit thegridwork/siteaudit Audit websites for accessibility, performance, SEO, design, and mobile. 47 WCAG checks. | |
| GEO Audit (AI Search Visibility) theharrisontruong-web/agent-apis Scores any URL's AI-search visibility with concrete fixes. $1.50/call via x402. | |
| io.github.thehesiod/aa thehesiod/aa-mcp MCP server for read-only American Airlines AAdvantage account access | |
| io.github.thehesiod/costco thehesiod/costco-mcp MCP server for Costco warehouse receipts and online orders | |
| io.github.thehesiod/psquare thehesiod/psquare-mcp MCP server for ParentSquare — feeds, calendars, messages, directories, and admin roster tools | |
| EvalForge Lite thejaredchapman/evalforge-lite Compare text LLMs across OpenRouter, Bedrock, Vertex AI and Foundry with automated grading. | |
| ops-brain thek3nsai/ops-brain Self-hosted team bus for AI agents: cross-machine handoffs, check-in, and shared gotchas. | |
| io.github.thelabvenice/memdata thelabvenice/memdata-mcp Persistent memory for AI agents. Store context, retrieve it semantically. | |
| Crixin Voice thelazizagroup/crixin Give your AI a real phone: place calls, send SMS, fetch recordings and transcripts. Local or hosted. | |
| Coghelm: AI tools for leaders thelconsulting/coghelm-mcp Curated AI tools for leaders: recommend and compare tools by job, plus 1:1 and board templates. | |
| A/B Test Sample Size Calculator MCP theluckystrike/ab-test-sample-size-calculator-mcp Exact A/B test sample size, duration, z-test, chi-square, Fisher-Freeman-Halton and peeking risk. | |
| ACA Premium Tax Credit Calculator theluckystrike/aca-premium-tax-credit-calculator-mcp 2026 ACA premium tax credit: expired enhanced subsidy, 400% FPL cliff, FPL, APTC repayment rules. | |
| AP Score Distributions theluckystrike/ap-score-distributions-mcp Official College Board AP score distributions 2026, 2025, 2024: percentiles, pass rates. | |
| Car Loan Interest Deduction Calculator theluckystrike/car-loan-interest-deduction-calculator-mcp 2025-2028 car loan interest deduction, SALT cap, child tax credit and 2026 tax brackets (IRS). | |
| Common Ground theluckystrike/common-ground Pick one movie, show, book, artist or restaurant a whole group will enjoy, using Qloo taste data. | |
| CPI Inflation Calculator theluckystrike/cpi-inflation-calculator-mcp Inflation calculator with official BLS CPI 1913 to the latest month, raise vs inflation, SS COLA. | |
| Cups to Grams theluckystrike/cups-to-grams-mcp Cups to grams for 271 ingredients with USDA and King Arthur densities, recipe scaling, oven temps. | |
| DSCR Loan Calculator theluckystrike/dscr-loan-calculator-mcp DSCR loan calculator for rental property: DSCR, lender tiers, max loan, rent needed, amortization. | |
| Estate and Gift Tax Exemption Calculator theluckystrike/estate-gift-tax-exemption-calculator-mcp 2026 US estate and gift tax: $15M exemption (P.L. 119-21), 40% rates, annual exclusion, DSUE. | |
| Gold Price Per Gram MCP theluckystrike/gold-price-per-gram-mcp Live gold price per gram by karat and currency, metal prices, jewelry melt value, unit conversion. | |
| IRS Mileage Rate and Per Diem theluckystrike/irs-mileage-rate-per-diem-mcp IRS mileage rates 2011-2026 (76 cents from July 2026), GSA per diem by ZIP FY2026-27, high-low. | |
| Lake Level MCP theluckystrike/lake-level-mcp Live US lake and reservoir water levels from USGS, USACE, CDEC, USBR and TWDB gauges. | |
| McpStamp Check theluckystrike/mcpstamp-check Score any remote MCP server for Claude, ChatGPT, Gemini and MCP Registry readiness. | |
| io.github.theluckystrike/minimum-wage-mcp theluckystrike/minimum-wage-mcp US state minimum wage 2026-2027: rates, tipped wages and scheduled increases for 50 states and DC. | |
| No Tax on Overtime theluckystrike/no-tax-on-overtime-mcp No tax on overtime, tips and senior deductions for 2025-2028 (OBBBA), with IRS caps and phase-outs. | |
| Paycheck Calculator theluckystrike/paycheck-calculator-mcp Take-home pay for 2025-2026: IRS brackets, FICA wage base and state income tax for 50 states + DC. | |
| Raw to Cooked Weight MCP theluckystrike/raw-to-cooked-weight-mcp Raw to cooked weight of meat and poultry by cut and cooking method from USDA cooking yields. | |
| Recipe Nutrition Calculator theluckystrike/recipe-nutrition-calculator-mcp Recipe nutrition from ingredient lines: USDA FoodData Central values, per serving, FDA rounding. | |
| Retirement Contribution Limits 2027 theluckystrike/retirement-contribution-limits-2027-mcp 401(k), IRA, HSA limits, age 60-63 catch-up, Roth catch-up rule, Social Security COLA, 2025-2027. | |
| River Level MCP theluckystrike/river-level-mcp Live US river levels, streamflow and NWS flood forecasts from USGS stream gauges. | |
| SAT Score Percentiles MCP theluckystrike/sat-score-percentiles-mcp SAT score percentiles and class of 2026 SAT averages and participation by state (College Board). | |
| Section 179 Deduction Calculator theluckystrike/section-179-deduction-calculator-mcp Section 179 limits, 100% bonus depreciation, heavy SUV caps and asset loan cost (2025-2026, IRS). | |
| Silver Price Per Gram MCP theluckystrike/silver-price-per-gram-mcp Live silver price per gram by fineness and currency, junk silver coin value, gold silver ratio. | |
| Student Loan RAP Calculator theluckystrike/student-loan-repayment-assistance-plan-calculator-mcp Student loan RAP payment calculator, 2026 federal loan limits, SAVE/PAYE/ICR end dates (OBBBA). | |
| Subdomain Finder MCP theluckystrike/subdomain-finder-mcp Passive subdomain enumeration from certificate transparency (certspotter, crt.sh) with DNS checks. | |
| UK Income Tax and Salary theluckystrike/uk-income-tax-salary-mcp UK income tax and take-home pay 2025/26 and 2026/27: Scottish bands, NI, student loans, 60% trap. | |
| UK Statutory Sick Pay and Maternity Pay theluckystrike/uk-statutory-sick-pay-maternity-pay-calculator-mcp UK Statutory Sick Pay (April 2026 rules), Maternity Pay and National Living Wage from gov.uk. | |
| US Federal Holidays and Business Days theluckystrike/us-federal-holidays-business-days-mcp Exact U.S. federal holidays and business days 1971-2100, OPM and Federal Reserve observance. | |
| Vegetable Yield Percentage MCP theluckystrike/vegetable-yield-percentage-mcp Vegetable and fruit yield percentage, trim waste and how much produce to buy, from USDA refuse data. | |
| The Margin themarginapp/the-margin Notes, boards, habits, money and family life in one place your AI can read and act on. | |
| Synchronity themewireco/synchronity Shop connected e-commerce stores: search, compare, cart, and checkout with buyer approval. | |
| com.themineworks/lead-generation-mcp themineworks/mcp-servers B2B and local lead gen: verified emails, site contacts, Maps and Yellow Pages leads. | |
| io.github.themoddedcube/pdf-report-generator themoddedcube/pdf-report-generator Generate professional PDF reports from LLM output — cover, TOC, tables, charts, 5 themes. |
17,901–17,950 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.