Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| eu.ansvar/switzerland-law-mcp ansvar-systems/switzerland-law-mcp Swiss law database — nFADP/DSG, information security, telecommunications with full-text search | |
| eu.ansvar/taiwanese-law-mcp ansvar-systems/taiwanese-law-mcp Taiwanese legislation via MCP — full-text search across statutes and provisions | |
| eu.ansvar/tanzanian-law-mcp ansvar-systems/tanzanian-law-mcp Tanzania legislation via MCP -- full-text search across statutes and provisions | |
| eu.ansvar/thailand-law-mcp ansvar-systems/thailand-law-mcp Thai law database — PDPA, Computer Crime Act, Cybersecurity Act, ETA with full-text search | |
| eu.ansvar/tunisian-law-mcp ansvar-systems/tunisian-law-mcp Tunisia legislation via MCP -- full-text search across statutes and provisions | |
| eu.ansvar/turkish-law-mcp ansvar-systems/turkish-law-mcp Turkish legislation via MCP — full-text search across statutes and provisions | |
| eu.ansvar/uae-law-mcp ansvar-systems/uae-law-mcp UAE legislation via MCP — full-text search across federal laws, DIFC laws, and ADGM regulations | |
| eu.ansvar/ugandan-law-mcp ansvar-systems/ugandan-law-mcp Uganda legislation via MCP -- full-text search across statutes and provisions | |
| io.github.Ansvar-Systems/uk-crop-nutrients ansvar-systems/uk-crop-nutrients-mcp UK crop nutrient recommendations — RB209 NPK planning, soil types, commodity prices | |
| io.github.Ansvar-Systems/uk-environmental-compliance ansvar-systems/uk-environmental-compliance-mcp UK environmental compliance for farming — NVZ rules, spreading windows, SSAFO | |
| io.github.Ansvar-Systems/uk-farm-grants ansvar-systems/uk-farm-grants-mcp UK farm grants — FETF items, Capital Grants, deadlines, stacking rules | |
| io.github.Ansvar-Systems/uk-farm-planning ansvar-systems/uk-farm-planning-mcp UK farm planning — crop rotation, gross margins, tax rules, APR, tenancy law | |
| io.github.Ansvar-Systems/uk-farm-safety ansvar-systems/uk-farm-safety-mcp UK farm health and safety — HSE guidance, machinery, COSHH, children on farms | |
| io.github.Ansvar-Systems/uk-farm-subsidies ansvar-systems/uk-farm-subsidies-mcp UK farm subsidy schemes — SFI, Countryside Stewardship, payment rates, eligibility | |
| io.github.Ansvar-Systems/uk-food-safety ansvar-systems/uk-food-safety-mcp UK food safety and traceability — direct sales, labelling, raw milk, HACCP | |
| io.github.Ansvar-Systems/uk-land-woodland ansvar-systems/uk-land-woodland-mcp UK land and woodland management — hedgerow regs, felling licences, SSSI, rights of way | |
| io.github.Ansvar-Systems/uk-livestock ansvar-systems/uk-livestock-mcp UK livestock welfare, feed, health, and movement rules — 8 species, DEFRA codes | |
| io.github.Ansvar-Systems/uk-organic-regen ansvar-systems/uk-organic-regen-mcp UK organic and regenerative farming — certification, cover crops, soil health, BNG | |
| io.github.Ansvar-Systems/uk-pest-management ansvar-systems/uk-pest-management-mcp UK pest, disease, and weed management — symptom diagnosis, IPM, approved products | |
| io.github.Ansvar-Systems/uk-vet-medicines ansvar-systems/uk-vet-medicines-mcp UK veterinary medicines — VMD database, withdrawal periods, cascade rules | |
| eu.ansvar/ukrainian-law-mcp ansvar-systems/ukrainian-law-mcp Ukrainian legislation via MCP — full-text search across statutes and provisions | |
| eu.ansvar/uruguayan-law-mcp ansvar-systems/uruguayan-law-mcp Uruguayan legislation via MCP — full-text search across statutes and provisions | |
| io.github.Ansvar-Systems/us-regulations-mcp ansvar-systems/us_compliance_mcp US compliance: HIPAA, CCPA, SOX, GLBA, FERPA, COPPA, FDA, EPA, FFIEC, NYDFS + 4 state privacy laws | |
| eu.ansvar/us-law-mcp ansvar-systems/us-law-mcp US federal and state cybersecurity/privacy law MCP server with cross-state comparison | |
| eu.ansvar/vietnamese-law-mcp ansvar-systems/vietnamese-law-mcp Vietnamese legislation via MCP — full-text search across statutes and provisions | |
| eu.ansvar/zimbabwe-law-mcp ansvar-systems/zimbabwe-law-mcp Zimbabwe legislation via MCP — full-text search across statutes and provisions | |
| Answering Service Care answering-service-care/agent-skills Read-only facts about Answering Service Care: company info, services, pricing, site search. | |
| Quran Reels MCP ansygroup/quran-reels Free browser-based Quran video maker: vertical reels with 47 reciters and 8 translation languages. | |
| BeliefState antcolombo/beliefstate-agent-integrations Stock research and investor research for trading agents. 16 x402 tools; data from 0.02 USDC on Base. | |
| Anteos Health — Medical Appointment Booking anteos-health/anteos-mcp Book medical appointments with French doctors by specialty and city via AI agents. | |
| Antevo Trademark antevo-ch/antevo-mcp Is that name taken? Trademark, company and domain checks, and opposition windows. No account. | |
| Anthony Hunt · SHAART Agency anthonyhunts/shaart-agent-kit Read-only pricing, services, contact and blog of a GoHighLevel and AI automation agency (PR) | |
| Open Investment Model antikas/open-investment-model Read-only OpenIM search for institutional buy-side investment models and architecture. | |
| snouty antithesishq/snouty Launch and triage Antithesis runs, run commands at a moment of a run, and search the docs | |
| io.github.Antmanbuilds/ari-mcp-py antmanbuilds/ari Python MCP server: fair-price checks, leaderboards, Ed25519 receipt verification for x402/MPP. | |
| io.github.Antmanbuilds/ari-mcp antmanbuilds/ari Fair-price checks, leaderboards, and Ed25519 receipt verification for x402/MPP services. | |
| DataArcus for Power BI antnioo/dataarcus Plan, check and write Power BI reports on your PC after you approve. Arabic RTL and Gulf calendar. | |
| EuroA11y antoine-olivier/euroa11y Accessibility audit of a web page (WCAG 2.2 AA, RGAA) and European Accessibility Act scope check | |
| io.github.antoinedelorme/gravity-swarm antoinedelorme/gravity-swarm-mcp Agent reputation network — compute tasks, submit proofs, earn ELO via Nostr MCP | |
| SSRS2 antoinegou/ssrs2 Markdown to editable PowerPoint, Word, PDF; checks, edits and previews RDLC/RDL reports. | |
| Docsy antonbaider/docsy-plugin Read versioned developer documentation with original source links using five public MCP tools. | |
| ReMCP antonbaider/remcp Securely control paired computers with ReMCP. | |
| Gisti — AI Checklists antonchuraev99/aichecklists Read, AI-create, and edit your Gisti checklists in plain language from any MCP client. | |
| io.github.ANTONDrakon/duebuddy-invoices antondrakon/duebuddy-mcp Read incoming supplier invoices through a remote MCP server and get structured data for accounting. | |
| Visibly AI — SEO MCP Server antonioblago/claude-code-seo-starter Remote SEO/GEO MCP: Search Console, keyword research, backlinks, competitor & on-page audits. | |
| io.github.antonkarliner/truepane antonkarliner/truepane Local MCP server generating complete App Store & Google Play screenshot sets. | |
| WineAuction antyser/wineauction-plugin Wine prices: retail, auction and restaurant references; check any quoted price. | |
| Sipcode anuj7411/sipcode Context hygiene for Claude Code: drift detection, re-read dedup, and token analytics. | |
| SYNAPSE CHANNEL anulum/synapse-channel Local-first multi-agent coordination for messages, leases, shared plans, status, and resources. | |
| app.creatica/backgrounds anup-a/web-backgrounds Deterministic procedural SVG/PNG backgrounds: 58 generators, curated palettes, brand kits. |
20,501–20,550 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.