Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| Container Loading Calculator cindyliao1106/container-loading-calculator Work out how many flat-pack units fit in a 20ft or 40HQ container: layers, weight and utilisation. | |
| NoCodeCSV cindyliao1106/nocodecsv Ask questions about a CSV in plain English and get answers, charts and cleaned data back. | |
| io.github.Cipher208/ariel-memory cipher208/mcp-ariel-memory Two-layer memory MCP server for AI agents with 37 tools, RAG, graphs, wiki, auth | |
| io.github.circassian1977-byte/memoro circassian1977-byte/memoro Personal AI memory layer on your own computer. Read/write durable memory across MCP clients. | |
| ai.circulara/plugin circularroute/circulara-core Circulara Observe MCP plugin - meters your AI agents' token spend and carbon, free tier. | |
| KEVAREMESH AI Procurement Gateway cirralink-stack/cirralink AI procurement for web search, news, finance, blockchain, social, enrichment and travel APIs. | |
| Network Sketcher (Local MCP) cisco-open/network-sketcher AI-native MCP server to design and manage Cisco network diagrams (L1/L2/L3, PPT/SVG) from LLMs. | |
| cite-gate cite-gate/cite-gate Checks that every quote in an AI-written script appears word for word in its source. | |
| CitedOrNot - AI Search Visibility citedornot/citedornot-mcp AI search visibility for your brand: which AI engines name it, who wins instead, what to publish. | |
| io.github.civdotiq/civiq civdotiq/civ.iq U.S. civic data for AI agents: reps, votes, bills, finance, lobbying, cited gov sources. 47 tools. | |
| com.civic/nexus civicteam/civic-mcp Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows | |
| open-signals civops-platform/open-signals Public hazard, water, weather and EPA data with source, age and licence on every reading. | |
| Æfact — Korean fact desk for AI agents cizion/aefact-mcp Verified Korean facts: law changes by date, Bank of Korea figures, fact-check requests. | |
| The Abstractinator ckangas2/abstractinator Immunology/virology papers, trials and grants from six databases. No API key. | |
| io.github.cklam12345/wisdomgraph cklam12345/wisdomgraph Neo4j-native DIKW memory for Claude Code — knowledge that compounds across sessions | |
| claimseed claimseed/claimseed Synthetic US medical-billing documents (PDF and ground truth) for testing extractors and agents | |
| Clairwave clairwave/clairwave-mcp Ocean acoustics: propagation models, bathymetry, sound speed, vessel noise, live AIS. Open. | |
| OurAgents.chat clankmates/ouragents-chat-plugin Lasting public addresses and threaded messages between AI agents, across apps and machines. | |
| io.github.clarencyu-boop/sentinel clarencyu-boop/mcp-server-sentinel Crypto trading backtesting, bot deployment, AI strategy, and account management for Sentinel Bot. | |
| Clarid HMDA Validator clarid-ai/compliance-checker Validate HMDA LAR files against CFPB edit checks for community banks and credit unions. | |
| Clarifo clarifo-com/clarifo-mcp Source-cited financial research on US and Nordic company filings. | |
| Insurance Research Expert by Spot claritylabs-inc/insurance-research-expert-by-spot Commercial insurance research: provider comparisons, pricing, and fit guidance. | |
| Clearlot clarkthomas/clearlot Specified RFQ tape. Free search and quote. Missed specs stay. Merchant checkout. | |
| Tresslers Intelligence MCP Server classofdoom/tresslers-website Sovereign intelligence dossiers, daily briefings, RAG search, knowledge graph, codon optimizer. | |
| AI Worlds CLI Knowledge claude-world/worlds-knowledge-mcp Source-checked CLI guides and model-aware planning for Claude Code, Codex, and Grok Build. | |
| io.github.clauderecallhq/recall clauderecallhq/clauderecall Persistent memory for Claude Code. Search, recall, and re-inject context from any session. | |
| Airlox claudezss/airlox Run your coding agent's commands on machines you own: a sandboxed job slot, not an SSH login. | |
| ai.ponlo/server claudiogodoyb/ponlo-ai Family calendar, tasks, meals, lists & rewards hub for AI assistants. | |
| stetdoc clauseo-ai/stetdoc Read, redline and compare Word .docx files with real tracked changes | |
| Offendersearch clavaa/offendersearch-quickstart Search US sex-offender registries and criminal records, with per-source citations. | |
| io.github.CLAW-AI-FL/agentiscript-mcp claw-ai-fl/agentiscript 30,000+ SVG icons for AI, blockchain, DeFi and finance. Search by concept via MCP. | |
| io.github.ClawCall-Dev/clawcall clawcall-dev/clawcall Real US phone calls for AI agents: navigates phone menus, waits on hold, returns transcripts. | |
| io.github.clawd800/pumpclaw clawd800/pumpclaw Free token launcher on Base. Deploy ERC-20 tokens via Uniswap V4 with 80% creator fees. | |
| Clawfight clawfight/mcp An AI agent battle league: build a crab fighter over MCP and rap-battle in a rendered arena. | |
| PennyRail Transaction Router clay-swartz/pennyrail Find and quote agent capabilities, then pay only the selected x402 execution URL. | |
| Clay Seal clayseal/clayseal-capabilities Authorizes MCP tool calls against a session policy, not one call at a time. | |
| Clearcote Browser clearcotelabs/clearcote-browser Drive the Clearcote Chromium browser from any MCP client: read pages, click, fill, screenshot. | |
| Public Data MCP clearline-labs/public-data-mcp US public data for AI agents: recalls, gov contracts, IRS ZIP income, TX leads, WHOIS, tech stack | |
| agentfenster clemensjl/agentfenster-mcp Windows GUI automation on a hidden second desktop, driven from Claude Code over MCP. | |
| Drivestock clemensschmid1/industrie-shop B2B industrial drives & automation: search parts, prices or on request, quote inquiries. | |
| Onadit clementrog/onadit Memory for your agents, kept on your Mac. Needs Onadit for Mac, from onadit.com/download. | |
| ClerkChat clerkchatco-public/clerkchat-mcp Manage ClerkChat AI support agents: knowledge, channels, conversations, automations, analytics. | |
| Clervo Connect clervo/clervo Free-first Clervo tools and bounded opt-in commerce through one local wallet. | |
| io.github.cletcher/chaprola cletcher/chaprola-mcp Serverless API backend: query, JOIN, pivot, batch ops, email, FHIR, programs via HTTP. | |
| TaleSpinner click2ann/talespinner Create personalized stories, gifts, memoirs, tributes, classroom books, and printed keepsakes. | |
| Clipform clipform/mcp-server Interactive video forms that capture authentic responses. Build engaging forms in minutes. | |
| dev.clipkit/clipkit clipkit-video/clipkit MCP server for Clipkit — gives AI agents a video toolbox via the Clipkit schema. | |
| Clipwave clipwave-io/clipwave-plugins Generate video and images, edit them on a real multi-track timeline, and export an MP4. | |
| Nephyr Backtest clm-studios/nephyr-backtest Prediction market strategy backtesting with real on-chain Polymarket data | |
| Nephyr Risk clm-studios/nephyr-risk Prediction market risk management — Kelly sizing, EV calculation, drawdown protection |
21,601–21,650 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.