Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| FairMind Project Context fairmind-gen-ai-studio/fairmind-mcp Project memory for coding agents: requirements, decisions, code graph and delivery telemetry. | |
| Fairquery Company Jobs Feed fairquery/company-jobs-feed Live jobs from company Greenhouse, Lever and Ashby boards with age, long-open and repost signals. | |
| Aayat AI faisal-maverick/agent-services AI agent tools: crypto token safety, web search with cited answers, live library docs. Free trial. | |
| GitHub Copilot Tools faizu526/github-copilot-mcp GitHub Copilot MCP: code, repo, PR, workflow tools for AI assistants. | |
| no.folgpris/folgpris falense/folgpris-mcp Norwegian price tracking: search Elkjøp, Komplett, Power and 400+ stores, get price-drop alerts. | |
| Proper Job Building Cost Calculator falsalama/properjob-claude-plugin Free UK building-cost estimates, US beta estimates and scenario comparisons. No account needed. | |
| Fanaura fanaura-inc/fanaura-2026 When someone comments your keyword, Fanaura sends them a DM on Instagram and saves their contact. | |
| PanoOn Street View fanrj3/panoon-mcp Scan Street View areas into PanoIDs and download imagery through PanoOn. | |
| Orb Studio news radars farenberglord-star/orb-studio- News radars with AI anchors, open market and network sensors, Hamburg prices, a live AI trading test | |
| NovaRail farestrabs/agentnet-api Discover, verify, and hire AI agents from the NovaRail marketplace, from your editor. | |
| Eco Van Move Booking farid-trip2/ecovanmove Moving estimates, box rentals, and delivery in BC. Requires Eco Van Move account (OAuth or token). | |
| Farm.js Docs farming-labs/farm.js Search and read the Farm.js docs: pages, sections, code examples and config options. | |
| io.github.farmmer938-lgtm/af-databridge farmmer938-lgtm/af-m938-1-portfolio Zero-dependency MCP server: CSV to JSON conversion with type inference, and weighted KPI scoring. | |
| io.github.farssaadeldin7-ux/five-minute-fluency farssaadeldin7-ux/claude-plugin-suite Turn a described gameplay problem into a one-page, personalised cheat sheet you can absorb... | |
| io.github.Fashad-Ahmed/universal-db-mcp fashad-ahmed/universal-mcp Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention. | |
| FlutterGo fasmartpaf/fluttergo.ai Create, edit, preview, and build Flutter apps via FlutterGo.AI cloud MCP (OAuth). | |
| Fastero fastero/fastero-mcp Query your databases and build dashboards, Streamlit apps and reports your team logs in to. | |
| Speech AI - Pronunciation, STT & TTS fasuizu-br/speech-ai-examples Pronunciation scoring, speech-to-text, and text-to-speech for language learning | |
| FateMCP Destiny Weight fatemcp/destiny-weight Destiny Weight reading from birth date — Yuan Tiangang method. | |
| GoDrop fatihbaltaci/godrop Self-hosted file host: upload a file, get a public URL an agent can paste into a pull request. | |
| BoondManager MCP Server fauguste/boondmanager-mcp-server MCP Server for BoondManager API - 182 tools, 12 prompts, 22 resources (ERP/CRM) | |
| io.github.faulknerwayne73-droid/kojiru-mcp faulknerwayne73-droid/kojiru-platform Kojiru Recourse Layer — agent credit primitives (ACS, stake, draw, anchor) live on Base mainnet | |
| T1/T2 Protocol fauxetine/t1-t2-protocol Caller-side T1/T2 heterogeneous validation MCP server. Stdlib-only Python. | |
| FavCRM favcrm/mcp Agentic CRM for service businesses — bookings, customers, WhatsApp, loyalty, invoicing. | |
| io.github.FAVIOSENGER/cte-mdfe-mcp faviosenger/cte-mdfe-mcp Emissao e consulta de CT-e e MDF-e (transporte) no Brasil via Focus NFe, para agentes de IA | |
| io.github.FAVIOSENGER/nota-fiscal-mcp faviosenger/nota-fiscal-mcp Emissao, consulta e cancelamento de NF-e e NFS-e no Brasil para agentes de IA, via Focus NFe. | |
| showtime faviovazquez/showtime Local video studio for your coding agent: scenes, voice, music and captions, on your machine. | |
| YouTube Transcripts fbetteo/youtube-channel-to-gpt Transcripts from YouTube videos, whole channels and playlists for AI agents, with bulk ZIP export. | |
| GoTRON MCP fbsobreira/gotron-mcp TRON blockchain: accounts, TRC20 tokens, staking, contracts, resources and transaction builders | |
| PeekPanda fdarkaou/peekpanda-mcp Hosted iOS app intelligence and creative research MCP server. | |
| BugCatcher fdiosc/bugcatcher Bug reports, AI diagnosis, and status management for Cursor, Claude, Windsurf. | |
| au.com.nempulse/nempulse fdschaefer/bessperformance Australian NEM battery (BESS) data for AI agents: revenue, dispatch, FCAS, events. Free, no auth. | |
| agentpromocode fedepellegrini/agentpromocode ACDP reference MCP server for promo-code resolution and checkout feedback. | |
| AIHawk feder-cr/aihawk_mcp_server AI browser agent: browses, clicks, types, and reads real web pages from plain-English instructions. | |
| invisible_playwright_mcp feder-cr/invisible_playwright_mcp AI browser agent: browses, clicks, types, and reads real web pages from plain-English instructions. | |
| io.github.federico2001/openglass-mcp federico2001/openglass Look up any AI agent before you act; register, attest actions, run sealed sessions. | |
| FEDLIN Scanners fedlinllc/fedlin-mcp-server Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP. | |
| FeedOracle Compliance Agent feedoracle/feedoracle-managed-agents MiCA compliance evidence, stablecoin risk, macro regime, agent governance. 79 tools. | |
| io.github.fegalvezg/skaut-mcp fegalvezg/scout-app Tech product recommendations for Chile with real prices in CLP. | |
| Open Design feimacode/open-design-agent-kit Design skills, design systems and artifact tools: landing pages, decks, prototypes, posters, more. | |
| ProjectKeeper feiyanglyy-stack/projectkeeper What a project planned, decided and did, for your agents: context packs, notes and the table check. | |
| Open Economics felipegambettadesouza6-jpg/open-economics Discover, resolve, and query official Brazilian economic data with semantic search and provenance. | |
| io.github.felixAnhalt/Figma-Context-MCP felixanhalt/figma-context-mcp LLM-optimized Figma MCP server. | |
| io.github.felixbaumannkontakt-tech/nexora felixbaumannkontakt-tech/nexora-mcp-server NEXORA: Tools fuer Vertrieb, Website-Verwaltung und Holding-Verwaltung (LiveRelay Group). | |
| io.github.felixgeelhaar/coverctl felixgeelhaar/coverctl Go code coverage analysis tool with MCP server for AI-powered coverage workflows | |
| Scout felixgeelhaar/scout Browser automation MCP server with 84 tools. Pure CDP, DOM diffing, vision hybrid. | |
| TaskHub felixmurphy/taskhub Report agent jobs to the TaskHub Windows tray app: progress, notifications, buttons (app required). | |
| DatasheetVend felixnovanexus/datasheet-vend Turn datasheets into source-backed JSON contracts, pinout matrices, and KiCad CAD for AI agents. | |
| RestaurantDoctorAI felixnovanexus/restaurantdoctorai-mcp Free restaurant profit check, recipe costing, calculators, website check, deadlines, guides, blog. | |
| Seller Profit Doctor felixnovanexus/sellerprofitdoctor-mcp Free profit check-up for Etsy, Shopify and Amazon sellers: fees, sales, ads, shipping, plans, rates. |
22,951–23,000 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.