Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Datastream MCP Server ag2-mcp-servers/datastream-api A Multi-Agent Conversation Protocol server that enables interaction with Google Cloud Datastream API for managing data replication services between various source and destination systems through natural language commands. | |
| Dialogflow MCP Server ag2-mcp-servers/dialogflow-api An MCP server that enables natural language interactions with Google's Dialogflow API, allowing users to create and manage conversational agents, intents, and entities through the Dialogflow v3beta1 API. | |
| Digital Asset Links API MCP Server ag2-mcp-servers/digital-asset-links-api An MCP server that enables querying and managing relationships between websites and mobile apps through Google's Digital Asset Links API, auto-generated using AG2's MCP builder. | |
| Ticketmaster Discovery MCP Server ag2-mcp-servers/discovery-api An MCP Server that enables interaction with Ticketmaster's Discovery API for accessing event, venue, and artist information through natural language commands. | |
| Discovery Engine MCP Server ag2-mcp-servers/discovery-engine-api An MCP server that enables natural language interaction with Google's Discovery Engine API, allowing users to search, recommend, and manage data through conversational interfaces. | |
| Display & Video 360 API MCP Server ag2-mcp-servers/display--video-360-api An MCP server that enables interaction with Google's Display & Video 360 advertising platform API, allowing management of digital advertising campaigns through natural language commands. | |
| HubSpot CMS MCP Server ag2-mcp-servers/domains An auto-generated Multi-Agent Conversation Protocol Server for interacting with HubSpot CMS API, allowing AI agents to manage HubSpot content management system through natural language commands. | |
| DoubleClick Bid Manager MCP Server ag2-mcp-servers/doubleclick-bid-manager-api An MCP Server that provides a conversational interface to the DoubleClick Bid Manager API, allowing users to manage programmatic advertising campaigns through natural language interactions. | |
| E-commerce API MCP Server ag2-mcp-servers/e-commerce-api Enables interaction with e-commerce storefronts through a standardized API. Provides access to product catalogs, inventory management, and customer operations for online retail platforms. | |
| eDistrict Odisha ServicePlus MCP Server ag2-mcp-servers/edistrict-odisha-serviceplus-odisha An MCP Server that enables interaction with Odisha's eDistrict services through the API Setu interface, allowing users to access and utilize Odisha government digital services through natural language. | |
| Enterprise License Manager API ag2-mcp-servers/enterprise-license-manager-api MCP Server for Google's Enterprise License Manager API, allowing users to manage licenses for Google products in an enterprise setting through natural language. | |
| Entertainment Express API MCP Server ag2-mcp-servers/entertainment-express-api An MCP Server that enables interaction with the Entertainment Express API, allowing access to entertainment content databases through natural language using the Multi-Agent Conversation Protocol. | |
| Fact Check Tools MCP Server ag2-mcp-servers/fact-check-tools-api An MCP server that enables interaction with Google's Fact Check Tools API, allowing users to query and manage fact-check claims and publishers through natural language commands. | |
| Firebase App Check MCP Server ag2-mcp-servers/firebase-app-check-api An MCP server that enables interaction with the Firebase App Check API, allowing users to verify and manage the authenticity of requests to Firebase backend services through natural language. | |
| Firebase App Distribution API MCP Server ag2-mcp-servers/firebase-app-distribution-api Auto-generated MCP server that enables interaction with the Firebase App Distribution API, allowing users to manage distribution of pre-release app builds to testers through natural language commands. | |
| Firebase Management MCP Server ag2-mcp-servers/firebase-management-api An MCP Server providing access to Google's Firebase API, allowing natural language interaction with Firebase services and resources. | |
| Firebase Realtime Database API MCP Server ag2-mcp-servers/firebase-realtime-database-api An MCP Server that provides natural language access to Google's Firebase Realtime Database API, enabling database operations and management through conversation. | |
| Firebase Rules API MCP Server ag2-mcp-servers/firebase-rules-api An MCP server that provides a conversational interface to Firebase Rules API, allowing users to manage and deploy rules that determine data access in Firebase services. | |
| Fitness MCP Server ag2-mcp-servers/fitness-api An MCP server that provides an interface to Google's Fitness API, enabling interaction with fitness data through natural language using the Multi-Agent Conversation Protocol. | |
| Game Services MCP Server ag2-mcp-servers/game-services-api An MCP server that enables interaction with Google Cloud Game Services API, allowing users to manage game server deployments, realms, and configurations through natural language. | |
| GKE Hub API MCP Server ag2-mcp-servers/gke-hub-api An auto-generated MCP server that enables interaction with Google Kubernetes Engine Hub API for multi-cluster management through natural language commands. | |
| UPC Barcode Lookup MCP Server ag2-mcp-servers/go-upc-barcode-lookup-api A Multi-Agent Conversation Protocol Server that provides access to the Go UPC API, allowing agents to look up product information using UPC/EAN/ISBN barcodes. | |
| Golf v2 MCP Server ag2-mcp-servers/golf-v2 An auto-generated Multi-Agent Conversation Protocol server that enables interaction with professional golf data through the SportsData.io Golf v2 API. | |
| Google Docs API MCP Server ag2-mcp-servers/google-docs-api An MCP (Multi-Agent Conversation Protocol) Server that enables AI agents to interact with Google Docs via natural language, automatically generated using AG2's MCP builder. | |
| Google OAuth2 API Server ag2-mcp-servers/google-oauth2-api An MCP server that enables authentication and authorization with Google's OAuth2 API, allowing users to securely authenticate and access Google services through natural language interactions. | |
| Google Play Game Management MCP Server ag2-mcp-servers/google-play-game-management An MCP server that enables management of Google Play games via the Google Games Management API, allowing automated interactions for game resets, hiding/unhiding data, and player management through natural language commands. | |
| Google Play Game Services Configuration MCP Server ag2-mcp-servers/google-play-game-services-publishing-api A Multi-Agent Conversation Protocol server for interacting with Google Play Game Services Configuration API, allowing management of game configurations through natural language commands. | |
| Google Sheets API MCP Server ag2-mcp-servers/google-sheets-api An MCP server that enables interaction with Google Sheets through natural language, allowing users to create, read, update, and manage spreadsheet data via the Google Sheets API v4. | |
| Groundhog Day MCP Server ag2-mcp-servers/groundhog-day-api An MCP server that enables interaction with the Groundhog Day API, auto-generated using AG2's MCP builder to facilitate multi-agent conversations with this service. | |
| Groups Migration MCP Server ag2-mcp-servers/groups-migration-api An MCP server that enables programmatic interaction with Google Groups Migration API for importing messaging data into Google Groups, allowing users to migrate email messages from external systems. | |
| HackathonWatch MCP Server ag2-mcp-servers/hackathonwatch An MCP server for interacting with the HackathonWatch API, allowing users to access hackathon data and related information through natural language commands. | |
| Health ID Service MCP Server ag2-mcp-servers/health-id-service An MCP server for accessing India's National Digital Health Mission (NDHM) Health ID services, enabling health information management through the NDHM API. | |
| NDHM HIU MCP Server ag2-mcp-servers/health-repository-provider-specifications-for-hiu This server enables interacting with the National Digital Health Mission's Health Information User (HIU) API, allowing agents to access and manage health information through the Multi-Agent Conversation Protocol. | |
| HHS Media Services API MCP Server ag2-mcp-servers/hhs-media-services-api A Multi-Agent Conversation Protocol Server that provides a natural language interface to the U.S. Department of Health & Human Services (HHS) Media Services API, allowing users to access health-related data and media resources through conve | |
| HPSSC MCP Server ag2-mcp-servers/hp-staff-selection-commission---hpssc---himachal-pradesh-himachal-pradesh This server enables communication with the Himachal Pradesh Staff Selection Commission API, allowing users to interact with HPSSC services through natural language using the Multi-Agent Conversation Protocol. | |
| HubAPI Auth MCP Server ag2-mcp-servers/hubapicomauth An MCP server for interacting with HubSpot's authentication API, enabling secure authentication and authorization operations through natural language. | |
| Google Indexing API MCP Server ag2-mcp-servers/indexing-api An MCP server that enables interacting with Google's Indexing API, allowing agents to submit URLs to Google for indexing or removal from search results through natural language commands. | |
| InfluxDB OSS API MCP Server ag2-mcp-servers/influx-oss-api-service An MCP server that enables interactions with InfluxDB's open-source time-series database API, allowing data querying, management, and operations through natural language. | |
| Interzoid Global Time API Server ag2-mcp-servers/interzoid-get-global-time-api An MCP server that allows users to get global time information via Interzoid's GetGlobalTime API, enabling access to time data across different regions through natural language. | |
| interzoid-get-weather-by-zip-code-api ag2-mcp-servers/interzoid-get-weather-by-zip-code-api An MCP Server that provides weather information by ZIP code using Interzoid's API, allowing agents to retrieve current weather conditions based on postal codes. | |
| Interzoid Weather City API MCP Server ag2-mcp-servers/interzoid-get-weather-city-api An MCP server that provides access to the Interzoid GetWeatherCity API, allowing users to retrieve weather information for specified cities through natural language interactions. | |
| IX-API MCP Server ag2-mcp-servers/ix-api An auto-generated Multi-Agent Conversation Protocol Server that enables interaction with the IX-API (Internet Exchange API) through natural language, allowing for management of interconnection services in data centers. | |
| jellyfin-api ag2-mcp-servers/jellyfin-api Provides interaction with Jellyfin media server via the Jellyfin REST API, enabling content management and server configuration through natural language. | |
| Jumpseller API MCP Server ag2-mcp-servers/jumpseller-api An MCP Server that provides access to the Jumpseller e-commerce platform API, allowing users to interact with Jumpseller's functionality through natural language commands. | |
| Klarna Payments MCP Server ag2-mcp-servers/klarna-payments-api-v1 An MCP server that enables interaction with Klarna's Payments API, allowing applications to implement Klarna payment options through natural language commands. | |
| KumpeApps API MCP Server ag2-mcp-servers/kumpeapps-api This MCP server provides access to the KumpeApps API, enabling users to interact with KumpeApps services through natural language via the Multi-Agent Conversation Protocol. | |
| Local Services MCP Server ag2-mcp-servers/local-services-api A Multi-Agent Conversation Protocol Server that provides access to Google's Local Services API, enabling interaction with local service businesses information through natural language commands. | |
| League of Legends Stats MCP Server ag2-mcp-servers/lol-v3-stats An MCP Server that provides access to League of Legends statistics via the SportData.io API, allowing agents to query and analyze LoL competitive gaming data. | |
| MailScript MCP Server ag2-mcp-servers/mailscript An MCP server that enables interaction with the MailScript API, allowing management of email workflows and automation through natural language commands. | |
| Managed Service for Microsoft Active Directory API Server ag2-mcp-servers/managed-service-for-microsoft-active-directory-api An MCP (Multi-Agent Conversation Protocol) server that enables interaction with Google's Managed Service for Microsoft Active Directory through its OpenAPI, allowing users to manage identity resources through natural language. |
24,251–24,300 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.