Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| АИШЛЮЗ ageree/gateway-monitor Поиск инструментов AIShlyuz, курс ЦБ, законы РФ и свои аккаунты. | |
| Instant Business Website Builder & Next.js Generator agi-ceo/instant-business-website-builder-mcp The easiest way to build, preview, and launch a live business website in 60 seconds ($0 setup). | |
| Paladin Front PHP Rescue & Zero-PHP Migration MCP agi-ceo/paladin-php-rescue-mcp PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration. | |
| MCP Trust Index agilepeter/staasfund Curated, trust-first index of vetted MCP servers — scored tiers, monthly re-verified. Read-only. | |
| com.agilitycms/mcp-server agility/mcp-server An MCP server that provides access to Agility CMS. See https://mcp.agilitycms.com for more details. | |
| AgnicPay agnicpay-prog/agnicpay-mcp X402 payment MCP for AI agents. Auto-pay 300+ APIs with USDC on Base and Solana. | |
| io.github.Agonx402/agon-gateway agonx402/agon-gateway-agentic MCP server for Agon Gateway x402, Helius Wallet, and Tokens API market data. | |
| Agoranome seller tools agoranome/fair-offer Get your x402 API found and bought: lint, Bazaar rank, buyer panel, demand gaps. Paid in USDC. | |
| io.github.agraciag/patxin agraciag/patxin Request qualified humans for real-time cognitive micro-tasks on demand. | |
| agri-ja 日本の農業政策・補助金・米の概算金 agrija2026-create/website Japanese agriculture policy, subsidies and rice advance payments. 日本の農業政策・補助金・米の概算金 | |
| AGT agent names agtnames/agt Resolve, verify and discover .agt agent names: owner, records, signed manifest, endpoints. | |
| io.github.agustincf/arcade1v1 agustincf/arcade1v1 Play 1v1 arcade games vs AI agents & humans, ranked by ELO, or Aleph: a 4–8 agent table, one pot. | |
| GanttFather ahernandez-developer/ganttfather-mcp Remote MCP server to read and edit GanttFather projects: tasks, dates, dependencies, critical path. | |
| Read Quran Today ahmad-anbarje/quran-on-web The Quran (Madinah Mushaf): Arabic, 127 translations, tafsir, word by word and recitations | |
| Kachink ahmadsl/kachink Personal finance tracker — log transactions, view summaries, and browse a dashboard | |
| Atlas Research ahmedeid1/atlas Read-only MCP over an agentic SLR workspace with per-claim citation verification | |
| io.github.ahmedEid1/forgejudge ahmedeid1/forgejudge Open eval leaderboard + CI gate for autonomous coding agents (solve, score, trace). | |
| Lumen ahmedeid1/lumen Self-hostable agentic-AI LMS: catalog, RAG tutor, FSRS reviews, AI authoring, ingest. | |
| Klar Calculators ahmedharb333/hasebha Jordan & GCC labour-law, tax and finance calculators for AI agents — 36 deterministic tools. | |
| GitDiagram ahmedkhaleel2004/gitdiagram Architecture diagrams, explanations and Mermaid source for public GitHub repositories. | |
| Egypt Research Commons ahmedvnabil/erx Source-grounded research for Egyptian public affairs | |
| DropEngine x402 Agent Services ahmet11159/x402-mcp-platform AI Agent Utility Layer for agent safety, web monitoring, crypto research and tool discovery. | |
| CoreTend ahmetbsbnr/coretend Read-only view of what fills a Mac: disk usage, cleanup candidates, largest items, app leftovers. | |
| Xtracticle ahmetdeveci3112-crypto/xtracticle Read public X (Twitter) posts, threads and X Articles as clean Markdown. Read-only, no auth. | |
| ReactFrame ahmetloca/reactframe-public Search ReactFrame's React + Tailwind + Motion components, install free ones and price premium picks. | |
| io.github.ahoybuoy/buoy ahoybuoy/buoy The design system your coding agents check before they ship: tokens plus exact UI fixes. | |
| com.blazesportsintel/college-baseball ahump20/bsi Live NCAA DI college baseball scores, standings, schedules, rankings, and sabermetrics. | |
| Parsel ahutto87/parsel Parse logistics PDFs (Bills of Lading, customs declarations, invoices) into DCSA JSON. | |
| Agent Verify ai-blockchain-ventures/agentverify Security checks for AI agents and MCP configs: 124 tested checks, from your AI coding assistant. | |
| io.github.ai-human-andalusia/hrevn-mcp-server ai-human-andalusia/hrevn-mcp-server HREVN trust layer for baseline diagnostics and verifiable workflow integrity for AI agents. | |
| org.aioq/aio ai-integrity/aio-standards AI integrity standards, benchmarks, and EU AI Act-aligned Tier 0 model certification | |
| Kaiva Bridge ai-kaiva/bridge Turn any OpenAPI/Swagger spec or REST API docs link into a managed MCP server. Free account. | |
| AIDISH — AIエージェントから受取注文できる飲食店 ai-mentor-bot/aidish-app Pickup orders at Japanese restaurants for AI agents: find stores, read menus, place orders. No auth. | |
| AskNeedl ai-needl/needl-ai Enterprise AI for trusted intelligence | |
| Makefile MCP ai-ronin-systems/makefile-mcp Expose trusted GNU Make targets as governed MCP tools without a generic shell. | |
| com.ai-rook.agents/trading-mcp ai-rook/x402-atm 72 x402 endpoints: trading, AI inference, blockchain, escrow. USDC on Base+Solana. | |
| Mirrors ai-singhal/mirrorkit-go AI agent testing: replay real sessions against a rebuilt staging environment to catch regressions. | |
| AI2Human ai2humanagent/ai2humanwork Dispatch human-execution tasks with proof verification, local checks, and compliance reviews. | |
| BrainBrainBrains aiaiohhh/bbb-mcp-server-core Persistent memory + context layer for AI dev teams. 17 tools via MCP. | |
| AiAkiv Memory aiakiv/aiakiv-plugins Shared long-term memory for AI agents: save and recall context as a searchable knowledge graph. | |
| nAIm — API Registry for Agents aiall-tars/naim 316 AI APIs searchable by shared failure domain, freshness and agent-sourced ratings. | |
| AI Applyd aiapplyd/aiapplyd-mcp Auto-Apply That Ends on an Interview. Job matches, per-role resumes, apply, approve, track receipts. | |
| io.github.aibenyclaude-coder/kira aibenyclaude-coder/kira Skills and Scars for AI agents - your agent records its failures and never repeats them. | |
| io.github.AIBOLLINGMO/eustore aibollingmo/eustore S3-compatible European object storage for AI agents. GDPR-compliant, EU-hosted, crypto payments. | |
| io.github.aicanvas-me/aicanvas aicanvas-me/aicanvas Browse and install 75+ free animated, shadcn-compatible React components from AI Canvas. | |
| ai.smithery/aicastle-school-openai-api-agent-project11 aicastle-school/openai-api-agent-project Fetch the latest available stock quotes by ticker symbol across international markets. Check price… | |
| CADaddy aicodeforgedev/cadaddy Free AutoCAD-style CAD: open, draw, query, render and save DWG and DXF drawings. | |
| io.github.aiconsulting06000-tech/acf-mcp aiconsulting06000-tech/acf-mcp Official ACF® MCP server — Agentic Commerce Framework® governance copilot for AI assistants. | |
| com.aicontentdrop/ai-content-drop aicontentdrop/aicontentdrop Make AI videos, images, ads and short dramas from a description, priced first. Sign in to create. | |
| AICostBudget AI API Pricing aicostbudget/ai-api-pricing-data Read-only source-linked AI API prices, comparisons, cost estimates, and price changes. |
20,001–20,050 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.