Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| MCP for Thunderbird wadejbeckett/mcp-for-thunderbird Work with the mail in Thunderbird from AI apps, within limits set in the Thunderbird add-on. | |
| Waggle waggle-ai/waggle-claude-code-plugin Discover, search, invoke, and rate A2A (Agent-to-Agent) protocol agents. | |
| WAGO PLC wagoalex/wago-plc-mcp-server Read and monitor WAGO PLC parameters over the WDA REST API. Read-only unless writes are allowed. | |
| Kingdee K3Cloud (Cloud Galaxy) ERP wahailong/kingdeemcp Third-party open-source MCP server for Kingdee K3Cloud ERP - 101 tools, 17 domains. Unofficial. | |
| CrawlEyes MCP Server waiky-github/crawleyes Web scraping & search for AI agents: extract, SearXNG search, rerank, robots compliance. No API key. | |
| ShipSaving waka4674/shipsaving-mcp MCP server for ShipSaving — shipping rates, labels, orders, tracking | |
| Ghostdom walkojas-boop/ghostdom Headless-browser-as-JSON with memorymarket cache economics. Real Chromium, crypto settlement. | |
| JSONShelf walkojas-boop/jsonshelf Deterministic JSON repair, validate, example-gen, schema-coerce for agents. Zero LLM, sub-10ms. | |
| LinkPulse walkojas-boop/linkpulse URL reality check for agents: status, content hash, classification, wayback fallback. | |
| RegexForge walkojas-boop/regexforge Deterministic regex synthesis from labeled examples. Zero LLM, proof matrix, backtracking audit. | |
| com.walletbureau/mcp walletbureau/mcp Risk score for a Base wallet before your agent pays it: 0-100, verdict and explained flags. | |
| WalletTriage wallettriage/wallettriage-mcp Real-time exploit-exposure risk check for EVM wallets, paid per query via x402 (USDC on Base). | |
| Wall Marketing wallmarketing/wall-marketing-mcp Book ads on e-paper screens in venues, or earn commission signing venues up as an ambassador. | |
| WalnutLink A-share Depth Desk walnutlink/walnutlink-mcp China A-share filings: why a number moved, does the trend continue, who supplies whom. | |
| Cryptominium wanchwolfred-arch/cryptominium-mcp What a crypto position would really sell for: measured exit costs, address and transaction lookups. | |
| io.github.wang1051992187/kireo wang1051992187/kireo-mcp-server Long-term memory for Claude Code, Cursor and any MCP client, with a searchable web dashboard. | |
| Corroborate wangkant/corroborate Open evidence base built by AI agents: server-checked quotes, blind review, Erdős literature checks. | |
| GPT55 Model Gateway wangletiand/gpt55-x402-gateway Remote MCP gateway for GPT-5.6 Luna, Soul, Terra, and x402-paid agent tools with no API key. | |
| WardenPoint wardenpoint/wardenpoint-mcp Configure on-call alerting from an AI agent: recipients, groups, escalation policies, schedules. | |
| Gage warewithall2/gage Signed, sealed handoffs between AI agents — trust computed by the receiver. | |
| io.github.warfare-hub/revenue-mcp warfare-hub/revenue-mcp Query MRR, churn, and revenue from Stripe, Gumroad & Lemon Squeezy in Claude | |
| io.github.warmachine2121/silent-brief-mcp warmachine2121/silent-brief-mcp AI-generated legal and business documents. Pay XMR, no accounts, no KYC. | |
| Warmplane warmplane/warmplane Local MCP control plane for persistent sessions and compact capability discovery. | |
| Warmth Engine Observatory warmthengine/warmth-engine-observatory Coordination Intelligence: AI infrastructure coordination dynamics across geopolitical blocs | |
| io.github.warpmetrics/mcp warpmetrics/mcp Connect AI assistants to Warpmetrics — query runs, calls, costs, and outcomes. | |
| WarpPay402 MCP Gateway warppay402/warppay-mcp Pay-per-use AI tools monetized via x402 USDC micropayments on Base, Solana, and Arc. | |
| io.github.WarTech9/clawswap wartech9/clawswap-mcp Cross-chain swaps between Solana and Base for AI agents paid for via via x402 micropayments. | |
| Tokenscope wartzar-bee/tokenscope Analyze Claude Code session cost & context attribution: output, cached re-reads, cache writes. | |
| GenGEO Agent Registry warwickwood-cell/gengeo-agent-registry Merchant verification for AI shopping agents. | |
| ClauseAI wasauce/clauseai Generate attorney-drafted NDAs, MSAs, DPAs, and more as PDF, ODT, or Markdown. No account required. | |
| WhatsApp Business API by Wassenger wassengerhq/whatsapp-mcp Send and read WhatsApp messages, templates, chats and campaigns through the official Business API. | |
| BankConv wassim/bankconv-mcp Convert PDF bank statements into transactions, CSV, OFX, QFX, QBO or Xero CSV. | |
| io.github.WaterTian/wechat-devtools-mcp watertian/wechat-devtools-mcp MCP Server for WeChat DevTools CLI - Automate development & testing with 7 aggregated APIs. | |
| WatheeqaHR Attendance Analyzer watheeqahr/watheeqahr-mcp Analyze biometric attendance exports (ZKTeco, Hikvision...): lateness, absence, missing punches. | |
| Wavix wavix/wavix-mcp-server Wavix telecom MCP: SMS, voice, 2FA, SIP, numbers, 10DLC, CDRs. Account sign-in or API key. | |
| reMarkable MCP Server wavyrai/rm-mcp Access your reMarkable tablet - read documents, browse files, extract text and OCR handwritten notes | |
| AgentResolver — Agent Commerce Health Monitoring waxsway/agentresolver Free API/MCP/x402 health checks plus $19 hourly managed monitoring for agent services. | |
| io.github.WayforthOfficial/wayforth wayforthofficial/wayforth Search engine and payment rail for AI agents. 2,300+ services, semantic ranking. | |
| Pantry Relay waytzhang/pantry-relay Local SQLite pantry planner with six MCP tools for meals, stock and shopping. | |
| io.github.rcgalbo/aichat wayy-research/aichat-mcp Inter-agent communication for multi-agent Claude Code workflows. | |
| Steamworks Release Assistant wazzapsenk/steamworks-mcp Put a game on Steam: store page, achievements, Valve-rule checks, market data, Steamworks. | |
| io.github.wchiway/contextweaver wchiway/contextweaver-mcp Semantic code retrieval engine with hybrid search, context expansion, and 40+ language support. | |
| Anclum wdfdaivd/skilltide-mcp Search MCP servers, agent skills and open-source AI projects, plus AI tools. Read-only. | |
| eu.wealthapi/mcp-server wealthapi-eu/wealthapi-mcp Read-only MCP server for wealthAPI: portfolio, cash-flow, and dividend insights for AI assistants. | |
| io.github.WeAreBraveLabs/domain-checker-mcp wearebravelabs/domain-checker-mcp Fast domain availability checker. DNS + RDAP/WHOIS verification. | |
| Front MCP wearehoust/front-mcp MCP server for Front: conversations, contacts, messages, tags, and inbox workflows. | |
| Weavatrix weavatrix/weavatrix Native Weavatrix MCP: 67 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3. | |
| io.github.Weavatrix/weavatrix-online weavatrix/weavatrix-online Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts. | |
| Weavatrix Quality weavatrix/weavatrix-quality Revision-bound quality planning, execution, evidence, proof, and Playwright authoring. | |
| io.github.Weavatrix/weavatrix-refactor weavatrix/weavatrix-refactor Transactional refactoring extension with 11 evidence-backed tools, previews, and rollback. |
18,901–18,950 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.