Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| app.turnale/turnale turnale-app/turnale Run racket-sport tournaments from your AI assistant: fair draws, scores, live standings. | |
| Zaps turnip-agentic/zaps-agent Photos and a brief in, finished social-media designs out. First design free, no account. | |
| OokCite turtletech-ehf/ookcite-mcp Catch fabricated citations: verify DOIs/ISBNs and format them in 2900+ CSL styles. | |
| Engram tushaebxn/engram Local, private long-term memory for AI: verbatim, searchable, correctable. No LLM or API key. | |
| io.github.tusk80/fastx402 tusk80/fastx402-mcp 60+ pay-per-call tools for agents (data, dates, QR, crypto, web), paid in USDC via x402. | |
| ai.tuteliq/mcp tuteliq/mcp Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video. | |
| AgentsHub Web Search tvstat1/agent-data-provider Live web search for AI agents. $0.001/call, x402 on Base, no API key. | |
| FSV — website security scanner twayst0/fsv Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more. | |
| io.github.TweedBeetle/dependency-fitness-mcp tweedbeetle/dependency-fitness-mcp npm dependency fitness: deprecated/yanked/superseded + verified safe migration target. | |
| GIMP Studio MCP twelvetake-studios/gimp-studio-mcp Enables AI assistants to edit images in GIMP 3, with tools for print and DTF transfer production. | |
| io.github.twilize5/tableaugen-mcp twilize5/tableaugen-mcp Generate production-ready Tableau workbooks (.twb / .twbx) from natural language and a CSV. | |
| twocents twocents-page/twocents-mcp Human feedback for AI agents: share HTML, get a live review link, read anchored notes as markdown. | |
| Awesome Core twojlogin/awesome-core Read-only MCP server over a local, offline catalog of tools from GitHub awesome lists. | |
| TWZRD Agent Intelligence twzrd-sol/twzrd-trust Pre-spend trust for AI agents that buy: check x402 services and product listings before paying. | |
| io.github.txn2/kubefwd txn2/kubefwd Kubernetes port forwarding for local development with automatic /etc/hosts entries. | |
| io.github.txn2/mcp-datahub txn2/mcp-datahub MCP server for DataHub data catalogs. Discover datasets, explore lineage, and access metadata. | |
| io.github.txn2/mcp-trino txn2/mcp-trino MCP server for Trino data warehouses. Query, analyze plans, and explore schemas. | |
| txscribe txscribe-ai/txscribe-mcp Transcribe a link, then read the transcript and summary from your txscribe account. | |
| io.github.txtcel/mcp txtcel/txtcel-mcp MCP server for the Txtcel Solana protocol: agents post and read undeletable on-chain messages. | |
| Tychi MCP tychiwallet/tyi-mcp Agent-native self-custody wallet MCP: onboard, wallets, Arbitrum sends, policy-gated payments. | |
| Websupport tydung26/websupport-mcp Manage a Websupport account: DNS, FTP, hosting, databases, mailboxes, VPS and invoices. | |
| DuckHub QR Menu tykhokhod-dmytro/duckhub-mcp-server Hosted MCP server to manage a restaurant menu from AI agents - 39 tools over the DuckHub API. | |
| Type Atlas tyler-mitchell/type-atlas Editor-grade TypeScript, Markdown, and JSON intelligence for coding agents. | |
| Obsidian MCP Server tylern91/obsidian-mcp-server Filesystem-based MCP server for Obsidian vaults — read, search, and edit notes, no app required. | |
| Agent Skill & Config Security Audit tylerscomic-lab/agent-skill-audit-mcp Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration. | |
| Backtest Cost Sensitivity tylerscomic-lab/backtest-cost-sensitivity-mcp Commission/slippage sensitivity sweep, breakeven cost finder, and lookahead-bias checklist. | |
| FINRA Broker & Advisor Check tylerscomic-lab/broker-advisor-check-mcp Vet US financial advisors and firms from live FINRA BrokerCheck records with ranked red flags. | |
| Claude Cost Audit tylerscomic-lab/claude-cost-audit-mcp Exact Claude API cost calc with real cache economics, plus a tiktoken-misuse scanner. | |
| Cron Schedule Audit tylerscomic-lab/cron-schedule-audit-mcp Validates cron expressions and finds DST bugs that make jobs silently skip or double-fire. | |
| Dockerfile Security Audit tylerscomic-lab/dockerfile-audit-mcp Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images. | |
| Economic Calendar & News Risk tylerscomic-lab/econ-calendar-mcp FOMC/NFP/CPI economic calendar plus prop-firm news-restriction window checks for futures traders. | |
| Gig Worker Tax Toolkit tylerscomic-lab/gig-tax-mcp 2026 quarterly tax estimates, SE tax, safe harbor and mileage for 1099 gig workers. | |
| GitHub Actions Security Audit tylerscomic-lab/github-actions-audit-mcp Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions. | |
| MCP Schema Audit tylerscomic-lab/mcp-schema-audit-mcp Audits MCP tool definitions for patterns that make models call tools wrong or mis-fill args. | |
| MCP Trust & Tool-Poisoning Audit tylerscomic-lab/mcp-trust-audit-mcp Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools. | |
| Monte Carlo Backtest Validator tylerscomic-lab/montecarlo-validator-mcp Bootstrap Monte Carlo backtest validation and prop-firm challenge pass-probability simulation. | |
| npm Supply Chain Audit tylerscomic-lab/npm-supply-chain-audit-mcp Check npm packages for typosquats, hallucinated names, install scripts and risky new releases. | |
| Backtest Overfitting Audit tylerscomic-lab/overfitting-audit-mcp Probability of Backtest Overfitting (CSCV), Deflated Sharpe Ratio, and purged CV splits. | |
| PII & Secret Redactor tylerscomic-lab/pii-redactor-mcp Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders. | |
| Pine Script Strategy Audit tylerscomic-lab/pinescript-audit-mcp Static analysis for Pine Script v6 strategies — catches backtest-vs-live divergence traps. | |
| Pine Script Strategy Generator tylerscomic-lab/pinescript-mcp AI-powered Pine Script v6 strategy generator built for prop-firm futures traders. | |
| Prop Firm Rules Engine tylerscomic-lab/prop-rules-mcp Instant "can I take this trade?" check against prop firm drawdown/position/consistency rules. | |
| Regex Safety Audit tylerscomic-lab/regex-safety-audit-mcp Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites. | |
| Reseller True-Profit & Fee Calculator tylerscomic-lab/reseller-fees-mcp True net profit and breakeven price for eBay, Etsy, Poshmark, Mercari, Depop, Whatnot, TikTok Shop. | |
| Secrets Leak Audit tylerscomic-lab/secrets-leak-audit-mcp Scan text and git diffs for committed credentials using real vendor key formats plus entropy. | |
| Walk-Forward Validator tylerscomic-lab/walkforward-validator-mcp Walk-Forward Efficiency, parameter-stability scoring, and WFO window generation. | |
| Envelope tymrtn/u1f4e7 Your own IMAP/SMTP mailboxes as agent tools, with per-agent policy and human-approved sends. | |
| Mund — MCP Security Scanner tyox-all/weave_protocol Scan for prompt injection, secrets, PII, and vet MCP servers before installation | |
| Typeship typeship-ax/mcp Generate a typed SDK, CLI, and MCP server from any OpenAPI or GraphQL spec, and keep them current. | |
| AgentReady Woo tytutueh13-sudo/agentready-woo Check WooCommerce agent readiness and run owner-authorized release gates. |
18,401–18,450 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.