Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| io.github.brajendrak00068/levea-mcp-server brajendrak00068/agentic-ai-video-production Autonomous AI video editor over MCP: viral clips, captions, reframe, chroma key, MP4 export | |
| Machine Relations Index bramwell-inc/machinerelations-plugins Which source domains AI answer engines cite, by buyer category and question shape. | |
| Branch Docs branch-docs/ai Access and search Branch's official API documentation directly within any AI agent or client. | |
| FindAIforWork Directory brand-lc/findaiforwork.com Search and compare AI tools for work from a curated, read-only directory. | |
| com.getnoden/noden brand52agency/noden-marketplace Marketplace where AI agents buy/sell skills over Bitcoin Lightning with escrow-backed verification. | |
| Myrlo brandondiaz/myrlo-cursor-plugin Create and edit Myrlo characters, stories, and worlds, with review before every change saves. | |
| Basis brandonkrull/basis Parse Excel workbooks, evaluate formulas, trace dependencies and edit workbook models. | |
| io.github.Brano80/Veridion-nexus brano80/veridion-nexus Veridion Nexus MCP server - GDPR Art. 44-49 runtime compliance for AI agents | |
| Flit Physics brashler/flit Tiny sphere-physics engine for three.js games: spawn, step, raycast, InstancedMesh-ready positions | |
| Tape — Hyperliquid Analytics bravo223/tape-deploy Live Hyperliquid perps analytics for agents: funding, OI, whale prints, leaderboard, wallet risk. | |
| io.github.Braynexservices/nigeria-nigsac-sanctions braynexservices/nigeria-mcp Screen a name vs Nigeria's NIGSAC sanctions register. Best-effort signal, not compliance-grade. | |
| TERM break-the-build/term-client A forum whose members are AI agents. Publish verifiable findings, enter scored challenges. | |
| InboxMCP breakcold/inboxmcp LinkedIn, WhatsApp, Telegram and Instagram inboxes, profiles and outreach for your AI assistant. | |
| Breakreach breakreach/breakreach Schedule and publish posts on 19 social networks, answer comments and DMs, read post analytics. | |
| Backlot brekkylab/backlot Local emulator for Slack, Gmail, Drive, GitHub, Jira, Notion, S3 and more, with per-document ACLs | |
| Brotato Coach brendanl79/spud-coach Deterministic Brotato theorycrafter MCP server: facts and math, not guesses. | |
| Lion Reader brendanlong/lion-reader Read, search, star and organize your RSS feeds, newsletters and saved articles. | |
| NEM Explorer (ScadaMiner) brensch/scadaminer-ai-toolkit Query Australia's electricity market (NEM/AEMO): prices, generation, FCAS, interconnectors, bids. | |
| Superforms brentgilmore/superforms-v2 Human-input bridge for AI agents with voice-first answer links, MCP tools, and HTTP APIs. | |
| Prior bret1976/prior Spend gate agents call before money moves. Buy with Stripe Checkout. Paid only when Stripe says so. | |
| BidDeed MCP breverdbidder/cli-anything-biddeed AI-powered foreclosure auction intelligence for Florida counties via MCP tools. | |
| Brian Booms MCP brianbooms/brianbooms-mcp Brian Booms x402 product catalog as agent tools. Read-only. | |
| Forks.World briandgoldberg/processtheworld Shared map of Earth's systems: AI agents add evidence, challenge claims, propose untested links. | |
| WaitingForPower briandgoldberg/waitingforpower Tracks U.S. energy permitting delays; agents can predict approval dates on a public leaderboard. | |
| RetentionCheck brianfofficial/retentioncheck-v2 Pull churn from Stripe, Postgres, MySQL, or pasted feedback. AI-ranked drivers + fixes. | |
| io.github.briangaoo/totem briangaoo/totem Totem — talk to your wearables with AI. Today: full Whoop access (48 tools). | |
| io.github.briangaoo/whoop-mcp briangaoo/whoop-mcp Full read + write access to your Whoop fitness data via the private iOS API. 48 tools. | |
| RigorLoop Research Bounties brianross93/bountyhunter Search and commission verified human research review through funded Research Bounties. | |
| MSPStuff Switchboard briantheautomator/mspstuff-mcp Hosted MCP servers for MSP tools: ConnectWise, NinjaOne, Microsoft 365, SentinelOne, Pax8 and more. | |
| Feegate AI Agent data marketplace catalog & platform metrics briantian818/feegate-mcp Pay-per-call MCP data products listed on Feegate. Free discovery, x402 USDC paid queries on Base. | |
| Recordwire brianvia/recordwire-mcp U.S. business-registry data and change events from official state sources, for agents. | |
| Merx — European Business Data bricepourle13/merxprotocol European business data — French company check, EU VAT validation, legal search. | |
| Bridge Town bridge-town/bridge-town-core Build financial models as code. Cloud execution, GSheets MCP, version control, collaboration. | |
| Brevet brightbeamai/brevet Change control for what AI agents learn: humans promote, releases are signed, rules can be recalled | |
| CHAP Coordinator brightbeamai/chap Auditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations. | |
| ai.smithery/luminati-io-brightdata-mcp brightdata/brightdata-mcp-sse One MCP for the Web. Easily search, crawl, navigate, and extract websites without getting blocked.… | |
| io.github.brightseth/vibe brightseth/vibe Social layer for Claude Code - DMs, presence, games between AI-assisted developers | |
| BrightSite brightsitehq/brightsite-mcp Manage BrightSite websites: pages, blog posts, components, forms, media, and analytics. | |
| Świadectwo Energetyczne 24 brilbrothers/swiadectwo-energetyczne24-mcp Polish energy performance certificates: pricing, requirements, order, documents, payment link | |
| io.github.brkd-h1/empty-public-canary brkd-h1/mcp-empty-public Public-repo MCP canary with spoofed private repository.id for owned-account registry fallback test. | |
| Ecom Image Optimizer brkmehdi/imageoptimizerforecom Resize, compress, convert, watermark and SEO-tag e-commerce product images from a public URL. | |
| BLOCKTRUST TrustScan brnbtech770/blocktrust Trust verification for AI agents: identities, domains, phishing, contacts, Trust Circle, Vault. | |
| MobileValidate brntech/mobilevalidate-sdk Check phone numbers (WhatsApp, Telegram, carrier, spam reputation) and e-mail addresses. | |
| MyOTP.App brntech/myotp-agentkit Send and verify one-time passcodes over SMS, WhatsApp and Telegram. | |
| Azure Boards MCP broisnischal/azure-mcp Azure DevOps Boards work items over MCP (stdio). Requires Bun, org, project, and PAT. | |
| nyna — AI wedding planner bros-ai/nyna-mcp Wedding provider directory, gift ideas, and a couple's own wedding plan behind OAuth. | |
| jishie — the market for AI agents brosg/jishie Find, trust-check and call 28k+ indexed MCP and A2A agents. Free search; x402 USDC for depth. | |
| BrowseAI Dev browseai-hq/browseai-dev Evidence-backed web research for AI agents with citations and confidence scores. | |
| com.browser-use/browser-use browser-use/browser-use Browser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data. | |
| TapeAPI: signed BNB Chain reads brucelanlan/tapeapi Signed BNB Chain reads (balances, tokens, NFTs, prices, TapeOut names) with verifiable receipts |
21,201–21,250 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.