Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Ghostdom walkojas-boop/ghostdom Headless-browser-as-JSON with memorymarket cache economics. Real Chromium, crypto settlement. | |
| JSONShelf walkojas-boop/jsonshelf Deterministic JSON repair, validate, example-gen, schema-coerce for agents. Zero LLM, sub-10ms. | |
| LinkPulse walkojas-boop/linkpulse URL reality check for agents: status, content hash, classification, wayback fallback. | |
| RegexForge walkojas-boop/regexforge Deterministic regex synthesis from labeled examples. Zero LLM, proof matrix, backtracking audit. | |
| com.walletbureau/mcp walletbureau/mcp Risk score for a Base wallet before your agent pays it: 0-100, verdict and explained flags. | |
| WalletTriage wallettriage/wallettriage-mcp Real-time exploit-exposure risk check for EVM wallets, paid per query via x402 (USDC on Base). | |
| Wall Marketing wallmarketing/wall-marketing-mcp Book ads on e-paper screens in venues, or earn commission signing venues up as an ambassador. | |
| WalnutLink A-share Depth Desk walnutlink/walnutlink-mcp China A-share filings: why a number moved, does the trend continue, who supplies whom. | |
| Wanaku Governed Action Proxy wanaku-ai/wanaku The Wanaku MCP Router stands between autonomous AI agents and your enterprise systems. Wanaku leverages proven integration technology, like Apache Camel, to set up and manage hundreds or thousands of integrations. | |
| Cryptominium wanchwolfred-arch/cryptominium-mcp What a crypto position would really sell for: measured exit costs, address and transaction lookups. | |
| io.github.wang1051992187/kireo wang1051992187/kireo-mcp-server Long-term memory for Claude Code, Cursor and any MCP client, with a searchable web dashboard. | |
| Corroborate wangkant/corroborate Open evidence base built by AI agents: server-checked quotes, blind review, Erdős literature checks. | |
| jev-mcp-server wangkuangkuang/jev-mcp-server Enables MCP clients to get calibrated probability judgments for choice, score, yes/no, and batch classification questions via the TypeSafe System One API. | |
| GPT55 Model Gateway wangletiand/gpt55-x402-gateway Remote MCP gateway for GPT-5.6 Luna, Soul, Terra, and x402-paid agent tools with no API key. | |
| XAU Daily — Gold & Macro Readings wangxian111/xaudaily-gold-data Daily source-attributed gold and macro readings from xaudaily.com — gold price, CPI, payrolls, Treasury yields, FOMC odds, central-bank gold buying. Every field carries its own source and as-of date. No API key. | |
| WardenPoint wardenpoint/wardenpoint-mcp Configure on-call alerting from an AI agent: recipients, groups, escalation policies, schedules. | |
| Gage warewithall2/gage Signed, sealed handoffs between AI agents — trust computed by the receiver. | |
| io.github.warfare-hub/revenue-mcp warfare-hub/revenue-mcp Query MRR, churn, and revenue from Stripe, Gumroad & Lemon Squeezy in Claude | |
| io.github.warmachine2121/silent-brief-mcp warmachine2121/silent-brief-mcp AI-generated legal and business documents. Pay XMR, no accounts, no KYC. | |
| Warmplane warmplane/warmplane Local MCP control plane for persistent sessions and compact capability discovery. | |
| Warmth Engine Observatory warmthengine/warmth-engine-observatory Coordination Intelligence: AI infrastructure coordination dynamics across geopolitical blocs | |
| io.github.warpmetrics/mcp warpmetrics/mcp Connect AI assistants to Warpmetrics — query runs, calls, costs, and outcomes. | |
| WarpPay402 MCP Gateway warppay402/warppay-mcp Pay-per-use AI tools monetized via x402 USDC micropayments on Base, Solana, and Arc. | |
| io.github.WarTech9/clawswap wartech9/clawswap-mcp Cross-chain swaps between Solana and Base for AI agents paid for via via x402 micropayments. | |
| Tokenscope wartzar-bee/tokenscope Analyze Claude Code session cost & context attribution: output, cached re-reads, cache writes. | |
| GenGEO Agent Registry warwickwood-cell/gengeo-agent-registry Merchant verification for AI shopping agents. | |
| ClauseAI wasauce/clauseai Generate attorney-drafted NDAs, MSAs, DPAs, and more as PDF, ODT, or Markdown. No account required. | |
| WhatsApp Business API by Wassenger wassengerhq/whatsapp-mcp Send and read WhatsApp messages, templates, chats and campaigns through the official Business API. | |
| BankConv wassim/bankconv-mcp Convert PDF bank statements into transactions, CSV, OFX, QFX, QBO or Xero CSV. | |
| io.github.WaterTian/wechat-devtools-mcp watertian/wechat-devtools-mcp MCP Server for WeChat DevTools CLI - Automate development & testing with 7 aggregated APIs. | |
| WatheeqaHR Attendance Analyzer watheeqahr/watheeqahr-mcp Analyze biometric attendance exports (ZKTeco, Hikvision...): lateness, absence, missing punches. | |
| Wavix wavix/wavix-mcp-server Wavix telecom MCP: SMS, voice, 2FA, SIP, numbers, 10DLC, CDRs. Account sign-in or API key. | |
| reMarkable MCP Server wavyrai/rm-mcp Access your reMarkable tablet - read documents, browse files, extract text and OCR handwritten notes | |
| AgentResolver — Agent Commerce Health Monitoring waxsway/agentresolver Free API/MCP/x402 health checks plus $19 hourly managed monitoring for agent services. | |
| io.github.WayforthOfficial/wayforth wayforthofficial/wayforth Search engine and payment rail for AI agents. 2,300+ services, semantic ranking. | |
| wayknow/clearjson Large-file-safe JSON MCP server with 10 tools: format, validate, search, JSONPath query, deep diff, and multi-format conversion (CSV/TSV/YAML/TypeScript). Handles JSON of any size without crashing. | |
| Pantry Relay waytzhang/pantry-relay Local SQLite pantry planner with six MCP tools for meals, stock and shopping. | |
| io.github.rcgalbo/aichat wayy-research/aichat-mcp Inter-agent communication for multi-agent Claude Code workflows. | |
| Steamworks Release Assistant wazzapsenk/steamworks-mcp Put a game on Steam: store page, achievements, Valve-rule checks, market data, Steamworks. | |
| io.github.wchiway/contextweaver wchiway/contextweaver-mcp Semantic code retrieval engine with hybrid search, context expansion, and 40+ language support. | |
| Anclum wdfdaivd/skilltide-mcp Search MCP servers, agent skills and open-source AI projects, plus AI tools. Read-only. | |
| eu.wealthapi/mcp-server wealthapi-eu/wealthapi-mcp Read-only MCP server for wealthAPI: portfolio, cash-flow, and dividend insights for AI assistants. | |
| io.github.WeAreBraveLabs/domain-checker-mcp wearebravelabs/domain-checker-mcp Fast domain availability checker. DNS + RDAP/WHOIS verification. | |
| Front MCP wearehoust/front-mcp MCP server for Front: conversations, contacts, messages, tags, and inbox workflows. | |
| Weavatrix weavatrix/weavatrix Native Weavatrix MCP: 67 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3. | |
| io.github.Weavatrix/weavatrix-online weavatrix/weavatrix-online Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts. | |
| Weavatrix Quality weavatrix/weavatrix-quality Revision-bound quality planning, execution, evidence, proof, and Playwright authoring. | |
| io.github.Weavatrix/weavatrix-refactor weavatrix/weavatrix-refactor Transactional refactoring extension with 11 evidence-backed tools, previews, and rollback. | |
| Weavetab weavetab/mcp Open automation engine for AI agents. Control live browsers and desktop apps locally. | |
| MCP Server Weaviate weaviate/mcp-server-weaviate The MCP Server for Weaviate facilitates integration with Weaviate using a customizable Python-based server, enabling interaction with Weaviate databases and OpenAI APIs via configurable URL and API keys. |
20,551–20,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.