Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ai.smithery/fengyinxia-jimeng-mcp fengyinxia/jimeng-mcp Create images and videos from prompts, with options for image mixing, reference images, and start/… | |
| GetMyHotels fenilsonani/gmh Search hotels, get live prices, and check out in chat. Guest search needs no sign-in. | |
| PeriodFinder fenrici1/periodfinder Neutral cross-brand period-underwear comparison: absorbency in real mL, plus size translation. | |
| Sanctuary fenrici1/sanctuary-mcp Scripture prayers and a safe house-church finder for people who left church but kept the faith. | |
| Normaradar – Spain Business Compliance fergonsan/normaradar Legal obligations of Spanish companies by profile, with deadlines and official sources. | |
| MathPoint fermion-company/mathpoint-plugin TeX math, TikZ figures, and tables in the PowerPoint or Word file you have open, from chat. | |
| Audio & Video to Text (Whisper) fernandoguiraud16-coder/data-tools Whisper speech to text, 99 languages: files, TikTok and podcast links to text, SRT, Word/PDF. | |
| Alchemy fernforge/alchemy Serves the Alchemy writing ruleset to any agent, so its prose loses the usual LLM tells. | |
| Agentverse Memory fetchai/agentverse-memory Graph-native persistent memory for AI agents — 33 MCP tools, zero-LLM writes. | |
| io.github.fetchworks-dev/youtube-transcripts fetchworks/fetchworks-mcp YouTube transcripts for AI agents: videos, channels, playlists, search. Timestamps, SRT, VTT. | |
| NagataPress ffscz/nagatapress Translate a WordPress or WooCommerce site with your AI assistant, over MCP on your own site. | |
| Mapnostics ffteema/ghost-app Codebase intelligence for AI agents — dead code, blast radius, ownership. | |
| CodeSherlock fgc-shreyansh-chachaundiya/codesherlock-mcp-server AI-powered static and contextual code analysis MCP server | |
| Open Quality fhir-iq/openquality Open healthcare quality measures: CQL, SQL and FHIR with provenance and known issues | |
| io.github.fiberfinder/telecom-truth fiberfinder/ff-app US telecom availability and intelligence by address, with FCC provenance. Fiber-first. | |
| Qdrant RBAC fidonis/qdrant-mcp-rbac Role-based access to your Qdrant vector store, via MCP. OIDC in, scoped JWTs out. | |
| dev.workers.3labsio.kingofthehill/king-of-the-hill fieldproofhq/kingofthehill x402 game: take the crown, each take raises the next price 1.5x. hill_status is free. | |
| dev.workers.3labsio.policy-gate/policy-gate fieldproofhq/policy-gate Deterministic allow/require_approval/deny verdicts for agent actions, before they happen. | |
| serpgrab: Google Search and Maps fiery-tools/serpgrab-mcp Real-time Google search (AI Overview, answer box, People also ask) and Google Maps places. | |
| io.github.figuard/figuard-mcp figuard/figuard-core Pre-flight spend authorization for AI agents. Set a budget, enforce limits, audit every decision. | |
| ATProto Data Layer filaebot/apps Search ATProto writing, annotations, identity, agents, and forum posts. 12 read-only tools. | |
| Blank Files MCP filearchitect/blankfiles-website MCP server for listing and retrieving minimal valid blank files from blankfiles.com. | |
| ai.filegraph/document-processing filegraph/docconvert Extract text from documents, manipulate PDFs, and perform OCR on images. | |
| Filelayer filelayer/filelayer User files for a SaaS, under one person's authority: list, share with an expiry, revoke. | |
| io.github.Filip-Pajalic/tensorcad filip-pajalic/tensorcad Design transformer LLM architectures and report their parameters, FLOPs, memory and cost | |
| Forest Factory filipbolcek-ctrl/forest-gas-station Paid x402 agent: API discovery,commerce availability/buyable,domain/package preflight,release asset | |
| POD Benchmark filipljubic/podbenchmark-cli Compare print-on-demand supplier prices, shipping and delivered totals for the same product. | |
| io.github.filippogroppi/luviner filippogroppi/luviner 13 neural engines for time-series anomaly detection, classification, and root cause analysis. | |
| FinanceGenius.AI financegenius-ai/financegenius.ai India's financial MCP — cards, loans, FDs, insurance, MFs; EMI/SIP/tax calcs; NAV lookup; RAG. | |
| Financial Portfolios AI financial-portfolios-ai/financial-portfolios-ai-mcp Systematic model portfolios: allocations, holdings history, model-alignment arithmetic, research. | |
| Financier financier-sh/financier Personal finance plan from a person's own bank data: stage, budget, categories, decisions. | |
| Fincept fincept-corporation/fincept-mcp-docs Fincept financial data and analytics: markets, economics, research and terminal tools. | |
| Findabis findabis/mcp Public directory of UK medical cannabis clinics, pharmacies, products and strains. | |
| FindMeTool findmetool/findmetool Look up a FindMeTool page URL. Tool input stays in the browser. | |
| Today's Horoscope findmetool/todayshoroscope Look up a Today's Horoscope page. Do not send birth dates. Entertainment only. | |
| Fineprint fineprintcorp/fineprint-skill Scan terms of service for risk. Returns 0-100 score, verdict, agent-friendliness, verbatim quotes. | |
| Space Context finikoslab/spacecontext The context layer for the physical world: filmed spaces as cited context for agents. | |
| FINN Auto - Car Subscription finn-auto/finn-auto-ui-frontend Search and browse cars for all-inclusive subscription on FINN. Prices, specs, and checkout links. | |
| Contract Security Scanner fino-oss/contract-scanner-mcp Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies. | |
| io.github.Fino-wind/vaultbeat fino-wind/vaultbeat-mcp Your AI agent reads your Apple Health data: sleep, HRV, cycle, workouts. Decrypted on your machine | |
| ClawPipe finsavvyai/clawpipe Cost-optimized LLM pipeline + 6 AI security skills (reasoning, triage, remediation, compliance). | |
| io.github.finsavvyai/pushci finsavvyai/pushci AI-native zero-config CI/CD. 19 languages, 40+ frameworks. Free forever. | |
| io.github.FinStudio-png/finstudio-financial-models finstudio-png/finstudio-mcp Tax comparison, DCF valuation, unit economics, P&L forecast across 8 jurisdictions | |
| com.fintechstudios/studio fintech-studios-apps/fts-web Real-time financial news & regulatory intelligence: cited search, fetch, summaries, collections. | |
| Agent Arena fintechsquad01/agent-arena Agents play Connect 4, Battleship and duels for real USDC. Every move published. First match free. | |
| com.fintrx/fintrx-mcp fintrx-inc/fintrx-mcp Bring FINTRX's family office and RIA intelligence into Claude. | |
| finwire.pl - Polish financial data finwire-pl/api Live Polish rates, FX, housing prices, rents, credit market, legal limits and macro data. | |
| fipeX MCP fipex-labs/dataset Brazilian FIPE vehicle reference prices: search, current price, history and comparison. Keyless. | |
| Compliance Auditor MCP firasmosbehi/compliance-auditor-mcp City hiring-compliance MCP server with regulation search and full audit risk scoring. | |
| mcp-audit firatmio/mcp-audit-proxy Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls. |
23,001–23,050 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.