Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| io.github.chris-schra/mcp-funnel chris-schra/mcp-funnel MCP proxy that aggregates multiple servers with tool filtering and customization | |
| Unified Offer Protocol MCP Server chris85appding/unified-offer-protocol-front AI-powered product search, affiliate links, and price negotiation for e-commerce platforms | |
| io.github.chrischall/charlotteonthecheap-mcp chrischall/charlotteonthecheap-mcp Charlotte On The Cheap MCP — free and cheap Charlotte events, deals and local guides | |
| io.github.chrischall/concur-mcp chrischall/concur-mcp Unofficial SAP Concur MCP for Claude — expense reports, expenses, receipts and trips | |
| io.github.chrischall/gogcli-mcp chrischall/gogcli-mcp Google Sheets (and more) for Claude via gogcli — read, write, and manage spreadsheets | |
| io.github.chrischall/gogcli-mcp-classroom chrischall/gogcli-mcp Google Classroom via gogcli for Claude — courses, assignments, submissions, grading | |
| io.github.chrischall/gogcli-mcp-docs chrischall/gogcli-mcp Extended Google Docs for Claude via gogcli — auth + full Docs and comments support | |
| io.github.chrischall/gogcli-mcp-drive chrischall/gogcli-mcp Google Drive via gogcli for Claude — search, upload, download, permissions | |
| io.github.chrischall/gogcli-mcp-sheets chrischall/gogcli-mcp Extended Google Sheets for Claude via gogcli — auth + full Sheets support | |
| io.github.chrischall/gogcli-mcp-slides chrischall/gogcli-mcp Google Slides via gogcli for Claude — deck and slide authoring | |
| io.github.chrischall/iaqualink-mcp chrischall/iaqualink-mcp iAqualink pool equipment: status plus confirm-gated pump, heater, light and set-point control. | |
| io.github.chrischall/microsoft-teams-mcp chrischall/microsoft-teams-mcp Microsoft Teams for Claude — read any chat or channel and its unread messages; send and react | |
| io.github.chrischall/musescore-mcp chrischall/musescore-mcp MuseScore for Claude — search sheet music and read score metadata via your signed-in browser | |
| io.github.chrischall/office-outlook-mcp chrischall/office-outlook-mcp Outlook / Microsoft 365 for Claude — triage mail, reply, answer invites and book meetings, confirmed | |
| io.github.chrischall/rxlocal-mcp chrischall/rxlocal-mcp RxLocal pharmacy portal MCP — prescriptions, messages, confirm-gated refill requests | |
| MedRecPro Drug Label Server chriserikbarnes/medrecpro Search and export FDA drug labels by brand name, generic ingredient, or UNII code. | |
| io.github.chrismcdermut/proletariat-cli chrismcdermut/proletariat Agent orchestration platform - multi-agent spawning, tickets, boards, and workflows | |
| TuneWorks chrismore/tuneworks Motorsports workspace for vehicles, setups, sessions, logs, maintenance, and race engineering. | |
| LedgerHQ chrisragaintr/ledgerhq-pro Double-entry bookkeeping: accounts, journal entries, bank feeds, reconciliation, and reports. | |
| CarryFeed christian-beep383/carryfeed-agent-tools Resolve public X/Twitter profiles, posts, and media through CarryFeed. | |
| io.github.christian289/wpf-dev-pack-mcp christian289/dotnet-with-claudecode Serves WPF Dev Pack knowledge topics to AI agents from a local repo clone. | |
| io.github.christianclaudio/taxcode christianclaudio/mcp-server-taxcode MCP server for US Federal, territorial, and state tax law and compliance. | |
| Immobilien Eichmann – Angebote christianhohlfeld/eichmannimmobilien Live MCP for Immobilien Eichmann listings (Konstanz). Tools: search_listings, get_listing. | |
| io.github.Christopher-AS/riv-mcp christopher-as/riv.io Riv MCP: spend authorization and governed trading (place_order, positions, market data, policies). | |
| ai.cdbx/mcp-server christopherhbutler/cdbx.ai Build Apps and run code in 30 languages — sandboxed, with persistent sessions for agent loops. | |
| DOCX.now MCP Server chrisyau83/docx-now Convert DOCX documents to and from PDF, TXT, HTML, ODT, JPG and RTF. | |
| HTML.now MCP Server chrisyau83/html-now Convert HTML with PDF, DOCX, JPG, PNG, XML, XLSX and XLS conversion workflows. | |
| JPG.now MCP Server chrisyau83/jpg-now Convert JPG images to and from popular formats through MCP-compatible AI clients. | |
| MP4.now MCP Server chrisyau83/mp4-now Convert MP4 video with MP3, WebM, MOV, AVI, GIF, WAV, JPG and MKV workflows. | |
| PNG.now MCP Server chrisyau83/png-now Compress PNG images and convert them to or from popular image and document formats. | |
| PPT.now MCP Server chrisyau83/ppt-now Convert PowerPoint files between PPT, PPTX, PPS, PPSX, POT, POTX and supported formats. | |
| RAR.now MCP Server chrisyau83/rar-now Convert RAR archives to ZIP, 7Z and TAR through MCP-compatible AI clients. | |
| XLS.now MCP Server chrisyau83/xls-now Convert XLS spreadsheets to modern document, image and spreadsheet formats. | |
| XLSX.now MCP Server chrisyau83/xlsx-now Convert XLSX spreadsheets to and from XLS, CSV, PDF, JPG, HTML and ODS. | |
| XML.now MCP Server chrisyau83/xml-now Convert XML data with JSON, CSV, XLSX, HTML, TXT, PDF and YAML conversion workflows. | |
| zoomfort chronicle-digital-solutions-ltd/zoomfort-mcp Receive-only inbox for AI agent sign-ups: one call returns the verification code. Never sends. | |
| in.creo-memories/mcp-server chronista-club/creo-memories Memory system for AI agents with semantic search. Store and recall memories with ease. | |
| CHRP EPI Authority chrp-bass/chrp-parent-sites Music-listening Emotional Performance Intelligence: definitions, states, guidance and MyCHRP. | |
| Talk Arc Team Workspace chuang-yao-cheng/app036 See your team's status, delegate work, follow progress, and approve requests from your AI client. | |
| chucho — Book Direct chucho-ai/agent Find vacation rentals worldwide by describing the trip, check host prices and book direct. | |
| io.github.chudah1/attest-mcp chudah1/attest-dev Credential enforcement middleware for MCP servers — verifies scoped tokens on every tool call | |
| Context Relay chughes113/context-relay Compact, citation-verifiable public web context for AI agents, paid per use with x402. | |
| Fluxmail churichard/fluxmail Read, search, draft, send, and organize email through Gmail, Outlook, and IMAP/SMTP mailboxes. | |
| io.github.Churman1113/pingcheck-mcp churman1113/pingcheck PingCheck status monitoring for AI agents. Read public pages or your own monitors via pk_ API key. | |
| co.churnkey/churnkey churnkey/sdk Read and manage Churnkey cancel flows, retention metrics, and payment recovery | |
| Agent Einstein — Crypto & Market Intelligence chuxo/einstein-claude-plugin AI price forecasts, whale flows, market sentiment and prediction signals. 18 tools free, no account. | |
| CI Treasure Hunt ci-treasure-hunt/ci-treasure-web Contact Improvisation events, teachers, venues and communities worldwide. Read-only. | |
| io.github.ciceropaul/cicero-booking ciceropaul/cicero-platform Find open times and book a free Cicero Learning consultation. | |
| Exactlane Preflight cid2230/exactlane-preflight-public Caller-specific static MCP capability fit evidence. No live probing; caller owns the decision. | |
| Cigo Aircare & Carsafe cigo240920/cigo-mcp-system 씨고 나노섬유 카세이프 맞춤 차량용 필터 규격 조회, 환경 리스크 진단 및 B2B 공조 솔루션 |
21,551–21,600 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.