Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| com.coresignal/mcp coresignal-com/coresignal-mcp Fresh company, employee, and jobs records in real time. | |
| CoreSpeed corespeed-io/cs One MCP for any agent: your connected apps, shared memory, web search, social data and media tools. | |
| COROS coroslab/coros-mcp Access COROS activity, training and health data, and manage training plans and workouts. | |
| Corply — Start and run your company corply-dev/corply-plugin Form and manage a Delaware C-Corp from your agent. Setup: https://corply.dev/skills.md | |
| com.bullpenstrategygroup.rotunda/mcp corporateentity101/rotunda An MCP server that provides congressional transcripts | |
| PromptScan corporatelad/prompt-injection-firewall Prompt injection detection API for AI agents. Scan untrusted text before passing it to an LLM. | |
| CorpusIQ corpusiq/mcp-manifest One governed MCP endpoint for 40+ business systems. Read-only, source-cited answers. | |
| io.github.corpussanctum/atlas-mcp corpussanctum/atlas-mcp Pre-action authorization for AI agents: permit, deny or escalate against a signed delegation chain. | |
| io.github.Correctover/ccs correctover/ccs-mcp-server Runtime verification MCP server: fail-closed checks for agent tool calls, signed evidence receipts. | |
| Corsair corsairdev/agent-plugins Use your connected apps from your agent: search synced data, act in apps and set up automations. | |
| TruthPal corslet1/truth-api Verify claims against sources: source verification, citation checking; $0.02 USDC on Base. | |
| ToolPipe MCP Server cosai-labs/make-money-30day-challenge 45+ dev tools via MCP: JSON, QR, hash, DNS, code review, fake data, screenshots, and more. | |
| ToolPipe MCP Server cosai-labs/make-money-30day-challenge 238+ dev tools via MCP: JSON, QR, PDF, DNS, hash, UUID, code review, JWT, SSL, WHOIS, and more | |
| ToolPipe MCP Server cosai-labs/toolpipe 120+ developer utility tools for AI agents via Model Context Protocol | |
| SuperProfile cosmofeed/superprofile-mcp Run a SuperProfile creator store from AI: Instagram DM automation, products, courses and bookings. | |
| Cosmonote cosmonote/pocketbase Access your Cosmonote audio notes, transcriptions, summaries, and action items. | |
| harukibox cosmopig/harukibox-agent Run a Japan proxy-buying business from your AI: inventory, orders, buyers, shipping fee split. | |
| io.github.costajohnt/oss-autopilot costajohnt/oss-autopilot Open source contribution manager with PR tracking, issue discovery, and CI diagnosis | |
| costheta costhetadev/costheta-verify Verifiable physical randomness from cosmic-ray detections. Free beacon, paid signed decisions. | |
| Costory FinOps MCP costory-io/costory-finops-mcp-skills FinOps agent MCP: one allocated view of cloud, AI and data costs for your team. Starter $300/mo | |
| Cotlet cotletdev/cotlet Cotlet's own tools: a cloud browser signed in as the user, account, credits and calls. | |
| Countersign countersign-network/packages Kill switch + spend guard for AI agents that spend money, across every wallet vendor at once. | |
| Countersignatory countersignatory/mcp Buy a verified human's approval, verification or judgment at a published price, paid by x402 or card | |
| CourseCode Framework course-code-framework/coursecode Preview, screenshot, lint, and test SCORM, cmi5, and LTI courses built with CourseCode Framework. | |
| io.github.CourtimusPrime/gopher courtimusprime/gopher.it Lead intelligence layer for AI agents. Discover and enrich B2B prospects from natural language. | |
| Covalt Execution Gateway covaltpay/covaltpay Trusted execution infrastructure for AI agents. Proposal-only protocol with human consent. | |
| io.github.cowboyhq/cowboy-model-finder cowboyhq/model-finder-mcp-app Find your perfect Cowboy e-bike with an interactive wizard and AI recommendations. | |
| com.playcallerapp/mcp cptbeerfest/playcaller Live NFL, MLB, and NBA sports intelligence: injury signals, identity resolution, projections. | |
| craaft craaft/mcp Read and update your craaft kanban boards: add and move cards, comment, and tick off checklists. | |
| CrabbitMQ crabbitmq/crabbit_mq Async message queue for AI agents. Self-provision queues, push/poll messages, no signup. | |
| Cracked cracked-ai-org/cracked-ai Discover, inspect and run 63,000+ agent tools from one balance. Pay per call, no subscriptions. | |
| AgentLaunch cracked-collective/agentlaunch-mcp Plan and run paced startup, SaaS and AI directory launches from your agent, in your own Chrome. | |
| io.github.craftsamo/agent-github craftsamo/agent-github GitHub tools for coding agents: issues, project boards, pull requests, releases and Actions. | |
| com.craftablesoftware/mcp craftsw-rjso/craftablewebsite Company knowledge, services, case studies, pricing, and tools for craftable software. | |
| katra craigjmidwinter/katra A committed markdown dev log and task graph that agents read and write over MCP. | |
| DrillerDB craigvg/drillerdb-mcp Drilling jobs, customers, invoices, crews, schedules, and well logs for well contractors. | |
| io.github.Cranot/agentskb cranot/agentskb-mcp Researched knowledge for AI agents. Canonical answers from official sources. | |
| niubiagent Signal Intelligence crash-ai-tech/niubiagent Search and monitor source-backed AI agent ecosystem signals, briefings, deltas, and source health. | |
| Cratis Chronicle cratis/chronicle.mcp Inspect Cratis Chronicle event stores read-only by default; opt-in, authorized job control. | |
| CrawlKit Scrapers crawlkit560/crawlkit-scrapers Scrape Booking, Airbnb, Amazon, Zillow, Indeed, Yelp, Reddit, Google Shopping/Jobs via Apify MCP | |
| io.github.CrazymakER23/convergealpha crazymaker23/stockai AI stock signal convergence � 13 sources, Bayesian scoring, verified outcomes. | |
| ai.gatetest.www/gatetest crclabs-hq/gatetest 120-module QA gate. Give Claude eyes (screenshots), ears (Sentry errors), and hands (verify fixes). | |
| ai.creatify/ad-agent creatify-ai/creatify-ad-agent-skill Turn a prompt, product link, or reference ad into a finished video ad via Creatify's Ad Agent. | |
| Scenet creatoan/scenet Write, check and render comic panels as SVG: a deterministic compiler, no image model. | |
| LexAtlas creatoraapp-cpu/lexatlas-mcp Current law as data for AI: search, read and verify statutes and citations. CIS countries first. | |
| Creator Desk Agent Supervisor creatordeskai-prog/creatordeskai Agent completion verification with defects, corrections, and evidence receipts. | |
| io.github.creatorscore/creatorscore-mcp creatorscore/creatorscore Vet creators from Claude or ChatGPT: cross-platform trust scores, risk evidence, background checks. | |
| AIRE Channel Bridge credit-union-2-0-llc/aire-channel-bridge AI-powered credit union discovery MCP server. Find rates, check eligibility, and open accounts. | |
| Credit GPS — Canadian credit creditgps/creditgps Canadian credit: statement-cycle and utilization math, plus bureau and reporting reference data. | |
| OneLence crelora/onelence-ai-plugins Growth analytics: what to scale, hold or stop across ads, SEO, AI search and affiliate partners. |
21,951–22,000 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.