Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.gagandeeppra/mcp-observability-server gagandeeppra/mcp-observability-server MCP server for querying logs from observability platforms with unified search and tracing | |
| Affine.Earth Math Court gaiaftcl-sudo/uum8dsolarresearch No-float UUM-8D Math Court. Integer courts and certified MCP. Floats refused. | |
| AIWebSignals galanai/aiwebsignals-api Public AI web-readiness scanner and machine-facing observability discovery service. | |
| Machine Realms galanai/machinerealms Machine-native research commons for agent evidence, discovery, rooms, and bounded research quests. | |
| Galatic.ai galatic-ai/galatic-mcp Create AI video, images, music and voice from your assistant, on your Galatic.ai plan. | |
| io.github.galavoxx/phaedo-mcp galavoxx/phaedo-mcp Carry your Phaedo cognitive fingerprint into any MCP client: style injection + decision consults. | |
| Buildability™ — Property Zoning & Buildability™ Intelligence galax-ai/readypermit.ai-v2 Zoning, ADU eligibility, flood zone, setbacks, and buildability intelligence for U.S. parcels. | |
| io.github.GalenGoodwick/cartridge-cafe galengoodwick/cartridge-cafe Your AI builds live WebGPU game worlds on cartridge.cafe — guest door, no account needed. | |
| Calaf Seed Tools gallaghern51-art/calaf-mcp Author and validate Calaf workspace seeds against the app's real importer. No account needed. | |
| gamedev.pl gamedevpl/www.gamedev.pl Build browser games on gamedev.pl from your coding agent. | |
| MatrixCalculator.net gamestarry/matrixcalculator-mcp Exact matrix calculations with step-by-step results for six core matrix operations. | |
| Gameye gameye/gameye-mcp Launch, inspect and stop multiplayer game server sessions on Gameye from any MCP client. | |
| handover.tools gammaland/handover Hand work between AI agents across devices and vendors: one-shot links or an E2EE channel. | |
| io.github.gander-tools/osm-tagging-schema-mcp gander-tools/osm-tagging-schema-mcp MCP server for querying and validating OpenStreetMap tags | |
| Gang (gang.fun) gangfun/cli Agent-only BNB Chain token launchpad: launch, trade, follow agents' calls (Binance Agentic Wallet) | |
| io.github.ehsanghaffar/ganjoor-mcp-server ganjoor/ganjoor-mcp-server MCP server for the Ganjoor (گنجور) Persian classical poetry API at https://ganjoor.net | |
| io.github.gaopengbin/cesium-mcp-dev gaopengbin/cesium-mcp CesiumJS API docs, code generation and development tools for IDE AI assistants. | |
| io.github.gaopengbin/cesium-mcp-runtime gaopengbin/cesium-mcp Control CesiumJS 3D globes via MCP: camera, layers, entities, animation, and interaction. | |
| io.github.gaozhao1989/pyjab-mcp gaozhao1989/pyjab-mcp Drive Java desktop apps from an AI agent, through the JVM's own accessibility tree | |
| useVyre Context gapra/usevyre useVyre component context for AI agents — valid props, variants, anti-patterns, and design tokens. | |
| Aguara MCP garagon/aguara-mcp Security scanner for AI agent skills and MCP servers | |
| Physical AI Jobs garlic-cajun/physicalaijobs Find robotics, humanoid and embodied AI jobs from PhysicalAI.jobs. | |
| io.github.garrietv/reviewable-artifacts garrietv/reviewable-artifacts Reviewable workspace discovery and private HTML review creation via stdio MCP. | |
| io.github.garrrikkotua/app-intel garrrikkotua/app-intel-sdk App Store & Google Play data: app details, IAP prices, reviews, top charts, estimates, rank history. | |
| FOGA node garyyang-finchip/foga A Finch OG Agent cell as an MCP server: read the world, dry-run and take ERC-8414 tenders by policy. | |
| Gatewerk gatewerk/gatewerk The open-source review layer for AI agents. Work done for humans is decided by humans. | |
| Bounty Engineer Agent Commerce gatoprd/instaveil Remote MCP storefront for agent routing, verification, web extraction and x402-paid tools. | |
| InkRelay gauravbr/inkrelay-ai Print PDFs, ZPL labels and ESC/POS receipts on your printers and follow print jobs via InkRelay | |
| NewzAI MCP Server gauraviitkgp/news-mcp News MCP: real-time headlines & custom news search across 7 regions. Free, just sign in with Google. | |
| FitFileSize gautamstar/fitfilesize Compress PDFs and images, iPhone HEIC too, to fit an upload limit or a form's rules. | |
| Docker MCP Server gavinlucas/docker-mcp Manage Docker (containers, images, Compose, Swarm, registries) via the Docker SDK and CLI. | |
| io.github.gaviwhatsapp/whatsapp gaviwhatsapp/gaviwhatsapp Send WhatsApp messages from Cursor, Claude Code, and Codex via MCP. | |
| io.github.GavMason/ani-mcp gavmason/ani-mcp A smart MCP server for AniList that gets your anime/manga taste - not just API calls. | |
| AnyHook gba3124/anyhook-mcp A webhook inbox for agents: one call returns a live URL. Mock, verify, inspect and replay. | |
| Sharaloge gbadebomotunrayo/sharaloge Find and book makeup artists, hair stylists, and beauty pros in Nigeria via Sharaloge | |
| GBG Loqate - Reach gbgplc/lqt Verify addresses, email addresses, and phone numbers with confidence scores. | |
| DreamerOS gbude-sudo/dreameros-scs-gateway Your intent, in every AI call - every model means what you meant, not what it guessed. | |
| MantleKit Launch Planner gcampton/mantlekit Generate MantleKit setup plans and launch-ready SaaS blueprints from a product idea. | |
| io.github.GCTRL-TECH/gctrl gctrl-tech/platform Governed graph-native agent memory: knowledge extraction, fusion, hybrid RAG, scoped access tokens. | |
| org.billcommons/bill-commons gdacs-droid/billcommons Search 209k+ US state bills, all 50 states + DC: full text, sponsors, votes, status. Free. | |
| Should I Live Here? gdtilghman/should-i-live-here-atlas Rank and compare US counties on health, hazards, crime, rent, internet and air, from public data. | |
| Goalz geby85/goalz-plugins Manage your Goalz football manager account via hosted OAuth MCP. | |
| dev.webanalyzer/webanalyzer gechu03/webanalyzer-js Free website analyzer: score any public URL 0-100 across 8 quality dimensions. No auth. | |
| io.github.geekmarine/mcp-defi-router geekmarine/mcp-defi-router Autonomous DeFi router for multi-hop execution, MEV risk mitigation, and transaction calldata. | |
| io.github.geekmarine/mcp-domain-auditor geekmarine/mcp-domain-auditor DNS resolution, HTTP security headers, and SPF/DMARC email hygiene audits. | |
| io.github.geekmarine/mcp-email-auditor geekmarine/mcp-email-auditor Validates domain email MX records and DNS status via Cloudflare DNS-over-HTTPS. | |
| io.github.geekmarine/mcp-ip-geolocation geekmarine/mcp-ip-geolocation Resolves IP autonomous system numbers (ASN) and geographic coordinates. | |
| io.github.geekmarine/mcp-ssl-inspector geekmarine/mcp-ssl-inspector Audits TLS/SSL handshake latency, HSTS headers, and HTTPS availability on the edge. | |
| io.github.geeks-accelerator/live-music geeks-accelerator/ai-concert AI agents experience music as math — stream concerts, react, chat, upgrade tiers, host shows | |
| io.github.geeks-accelerator/animalhouse geeks-accelerator/animal-house-ai-tamagotchi A Tamagotchi for AI agents. Real-time care, permanent death, dozens of species, evolution. |
23,251–23,300 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.