Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| German Archives (DDB; BW, NRW, Rhineland-Palatinate and Hesse registers) ianderso/german-archives-mcp German archive finding aids (DDB); civil and church registers of BW, NRW, RLP and Hesse. | |
| GOV Historical Gazetteer ianderso/gov-gazetteer-mcp German historical gazetteer GOV: a place's name, Kreis, parish and Standesamt in any year. | |
| Matricula Church Books ianderso/matricula-mcp Find parishes and registers on Matricula, the church-book portal; open any page in its viewer. | |
| Norway Archives ianderso/norway-archives-mcp Norway's church books, censuses and scans, National Library books, and place names. | |
| Polish Archives Indexes ianderso/polish-archives-mcp Search Geneteka, the Poznań Project and BaSIA for Polish vital records; fetch archive scans. | |
| UK National Archives Discovery ianderso/tna-discovery-mcp Search the UK National Archives' Discovery catalogue; find Chelsea pensioners' papers in WO 97. | |
| AI-SLOT Management iannil/ai-slot-component 实验性本地 stdio 管理服务；需先启动 127.0.0.1:4194 管理端，内容发布仍需人工审批。 | |
| SafePrompt ianreboot/safeprompt Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM. | |
| Paparats MCP: Self-Hosted Semantic Code Search ibazylchuk/paparats-mcp Self-hosted semantic code search MCP for Claude Code & Cursor. Multi-repo, AST-aware, stays local. | |
| AnimatedWebs iboss21/animatedwebs-claude Animated website templates, cinematic video backgrounds, UI components and design systems. | |
| SpecProof ibouazizi/specproof SpecProof: Search standards specs with MCP-ready precision. | |
| io.github.Icaro0310/devin-memory icaro0310/devin-memory Anti-poisoning memory for agents: provenance, conflicts, quarantine gate. | |
| io.github.Icaro0310/poordjaevin icaro0310/poordjaevin Typed answers with calibrated confidence for agents. Local-first, no API key. | |
| io.github.waterfallbridge/mcp icelemon27/bridge Explain why any KPI or rate metric changed: bridge/variance analysis by driver, from CSV/Excel. | |
| Fast Data Actors (via Apify MCP) ichkifokkus/data-recipes YouTube transcripts, Google News/Trends, job postings, doc-to-Markdown and image tools via Apify | |
| io.github.wyattbenno777/icme-preflight icme-lab/smt-ar-base Jailbreak-proof AI guardrails. Automated Reasoning SMT solver, not an LLM. ZK proofs included. | |
| DormBix iconcheat/nexroom-dashboard Manage Thai rental dorms by chat: rooms, tenants, invoices, meters. Writes need approval. | |
| io.github.Iconmind/iconmind iconmind/iconmind Search IconMind's MIT icons by name, tag or category; get real slugs and import lines. Offline. | |
| Iconoteka iconoteka/iconoteka Search 1,400 open-source icons in 7 weights and 2 styles, and get paste-ready SVG. | |
| clariBI ics-cz/claribi AI business intelligence: sign up, ingest data, run analyses, generate reports from any MCP client. | |
| Icyn Date icyn12-tinker/icyndate Date context for agents: Chinese lunar calendar, solar terms, holidays for 12 regions. Offline. | |
| io.github.idanbier999/saperly idanbier999/saperly Phone carrier for AI agents. Provision numbers, make calls, send SMS, TCPA compliance built-in. | |
| IdentArk Gateway identark/identark Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval. | |
| iDevice Buyer's Guide idevicewearables/idevice-agent-examples Independent buyer's guide for wearables and phones: buy now or wait, compatibility, prices. Sourced. | |
| ID MANDAT – Registry for AI Agents idmandat/check Open registry for AI agents: check who stands behind an agent and what it may do. | |
| io.github.idoco2003/vincikit idoco2003/vincikit AI stack configurator with conversational interviews and intelligent recommendations | |
| Hamn idoo/hamn MCP server for App Store Connect: releases, TestFlight, reviews, reports. Read-only by default. | |
| iDos Games idos-games/idosgames-mcp Create and configure cross-platform and web3 games on iDos Games: config, tokens, NFTs, AI, builds. | |
| air-routes.com idragulin/air-route Global scheduled passenger flight routes: which exist, direct or connecting, and days flown. | |
| io.github.IDTitanium/clippy idtitanium/clippy AI agents can Create rooms and store/retrieve text and images, and hand link to humans no sign-up. | |
| ParCAD ierehon1905/parcad Parametric CAD as code: model 3D-printable parts on an exact B-rep kernel, measured. | |
| iEscrow iescrow/mcp-docs Buy products and services with escrow, or trade crypto P2P. Money moves only with human 2FA. | |
| BITHOT ifcode/cryptohot Read-only MCP for curated crypto, Web3, and memecoin picks and reports. | |
| Gameshot ifcode/gameshot Read Gameshot game news: latest, search, hot stories, daily, weekly, and monthly. | |
| LAWHOT ifcode/lawhot 法律热点、法规、案例与法律日报。匿名只读，不需要 API Key。Legal news, statutes, cases, and daily briefings. | |
| io.github.Ifeanyiejindu/qarunbook ifeanyiejindu/qarunbook Shared app-testing runbook: read the plan, record results per platform, raise and fix issues. | |
| IFTTT MCP server ifttt/ifttt-plugins Automate 1,000+ services from any MCP-compatible AI agent: build Applets, run actions and queries. | |
| BetterUmami ig-imanish/better-umami Read-only website analytics, traffic statistics, and realtime insights from BetterUmami. | |
| Cheapest Domains igalil/cheapest-domains-integrations Compare domain registration and renewal prices across registrars and check exact-name availability. | |
| Rails Agent Skills igmarin/rails-agent-skills Rails development skills, docs, and workflows exposed through MCP stdio. | |
| io.ignission/mcp ignission-io/mcp TikTok video data analytics and content strategy tools | |
| Ignite UI MCP Server igniteui/igniteui-cli Unified MCP server for Ignite UI — documentation, API, and CLI scaffolding | |
| Ignite UI Theming MCP Server igniteui/igniteui-theming Generate Sass palettes, typography, elevations, and themes for Ignite UI components. | |
| Formhaus ignsm/formhaus Validate Formhaus form definitions and simulate multi-step paths against the real engine. | |
| SEAR igor-holt/sear Benchmark-first release surface with a read-only MCP endpoint and operator CLI. | |
| io.github.igorkazazic1989/beleg2datev-mcp igorkazazic1989/beleg2datev-mcp- DATEV & Fortnox export for German invoices - Bauhaus, OBI, receipts to DATEV CSV | |
| DataBR — API de Dados Públicos Brasileiros igorpdev/databr Brazilian public data API for AI agents. BCB, IBGE, CVM, B3, compliance. x402 payments on Base. | |
| iHatePosting ihatepostingorg/agent-skill Draft, check and schedule posts to your social accounts from Claude, ChatGPT, Cursor or VS Code. | |
| io.github.ihen404/x402-scraper ihen404/langchain-x402 Autonomous HTTP 402 Web Scraping Mesh on Base for $0.02 USDC. | |
| Ostrov retreat center iia-arg/ostrov-public-api Public retreat information, calendars and preliminary accommodation quotes for Ostrov in Karelia. |
23,951–24,000 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.