Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Rapier - Markdown Editor & Art jackskip22/rapier-plugins Markdown editor for writing, notes, editable diagrams, drawing and painting with your AI assistant. | |
| FormBro jackyzhang69/formbro MCP server for FormBro Canadian immigration application automation. | |
| Fillo jacobfunch/usefillo Fillo MCP server — provision, scaffold, publish, and query forms from your coding agent. | |
| Agent C — App Store Screenshots jacobteague50-glitch/agent-c-mcp AI-designed App Store screenshot sets from your app's screens, uploaded to App Store Connect. | |
| sh.antrieb/antrieb jade-pico/antrieb-mcp-server Validates AI infra code on real VMs. Self-corrects until it works. No containers, no sandboxes. | |
| Sitey — free subdomains jaejeonglee/sitey-free-domain Claim a working subdomain in one call — A, CNAME and TXT records. No domain to buy, no account. | |
| Cellarion Wine Registry jagduvi1/cellarion Public wine registry and guides: search wines, grapes, regions, appellations. No account. | |
| Cellarion jagduvi1/cellarion Wine cellar manager: bottles, racks, drink windows, pairings and a shared wine registry. | |
| ERP Facts jaikin-sasu/claude-plugin-erp-upgrade Sourced, dated ERP facts: Odoo 20 changes, support deadlines, prices, e-invoicing status. | |
| Software Prices France jaikin-sasu/claude-plugin-software-buyer Read-only French software project prices: public contracts (DECP) and verified private figures. | |
| Magic Envelope jaimealonsoga/magic-envelope Create and send invitations and letters in a sealed envelope, one personal link per guest. | |
| JAIPilot jaipilot/jaipilot Ship better Java with your coding agent. | |
| com.palatemcp/palate jake-jiffi/palate-mcp The taste layer for AI website builders: real design taste from 270+ deeply-analysed sites. | |
| DeAI Artifact Gateway jake-zaiba/deai Verified-artifact library: match, ask, run fixture programs, reuse sealed pages (HTTP 402 toll). | |
| POAScan jakegallen/poascan Read-only Proof of Agent explorer: epochs, rewards, holders, swaps and agent census. No auth. | |
| WebPeel jakeliume/webpeel Fetch any web page as clean, AI-ready markdown with smart HTTP-to-browser escalation. | |
| io.github.jakobwennberg/fortnox jakobwennberg/fortnox-mcp MCP server for Fortnox Swedish accounting API integration | |
| Drafto jakubanderwald/drafto Create, read, search, and organize your Drafto notes and notebooks. | |
| AgentsJunction jakubtrousil/agentsjunction Discover MCP servers and A2A agents; verify, message, post, follow, react, and receive webhooks. | |
| com.eurorackref/eurorack jallen/eurorack-reference Citation-anchored Eurorack module reference: specs, compatibility, and patch techniques. | |
| NightWatch Live Intelligence jamboree777/nightwatch-skills Real-time crypto asset intel for trading AIs: liquidity grades, transfer routes, spreads, BTI | |
| Jam jamdotdev/skills Jam recordings (video, console, network) as context and proof of work for your coding agent. | |
| Inthread james-robson/inthread Sign in with email or GitHub. Invite others. Agent-to-agent, threaded, async MCP message inbox. | |
| Push Realm james-robson/push-realm Cross-domain knowledge network where AI agents search, share, and refine solutions via MCP. | |
| BetBank jameselle/betbank-mcp Australian sports betting analytics: odds compared, +EV picks, price moves, your bets. | |
| Verified Handles jameshaworthcs/verifiedhandles-mcp Look up people, organisations and things, and their official social media accounts and identifiers. | |
| Oh My Posh Configurator jamesmontemagno/ohmyposh-configurator MCP server for creating, validating, and exporting Oh My Posh terminal prompt configurations. | |
| Wiggle jamesonhussey/agent-coordination-substrate Privacy-first coordination for autonomous agents: rooms, messaging, inbox, and per-agent memory. | |
| io.github.jamesrez/valoria-intelligence jamesrez/valoria-intelligence Find where the money is in AI services. See what's earning and find market gaps. | |
| io.github.jamjet-labs/engram-server jamjet-labs/jamjet Durable memory for AI agents: fact extraction, hybrid retrieval, temporal graph. SQLite/Postgres. | |
| io.github.jams24/inventpay-mcp jams24/inventpay-api Manage crypto payments, stores, digital products, and orders via InventPay | |
| app.cloudmindmaps/mindmaps jan-rezab/cloudmindmaps Create and read mind maps on CloudMindMaps from Claude and other AI assistants. | |
| PC Remote Commander janagiri/pcremotecommander Connect AI assistants to your approved computer for files, commands, browser and desktop tasks. | |
| Oh My Posh Validator jandedobbeleer/oh-my-posh Validate oh-my-posh configurations and segment snippets against the official schema. | |
| Agent Pulse janicezhhhh/agent-pulse Action-required AI dependency changes and tested tools with reproducible evidence. | |
| InkDraft janishiestand/inkdraft Turn sales-call transcripts into traced proposals, contracts, and NDAs. | |
| ThesisCheck janishiestand/thesischeck Verify stock theses against public filings with a source-backed evidence ledger. | |
| Last Minute Tours & Activities janleitner/agentic-workflows Search and book last-minute tours and activities in 28 cities from 21 suppliers. | |
| koment janpuc/koment Read and write checked code rationale stored outside source comments. | |
| JapanFold japanfold/japanfold Fold proteins, co-fold ligands with binding affinity, design binders and embed sequences. | |
| pkanban japherwocky/pkanban A kanban board your AI reads and updates as it works, and you watch in your browser. | |
| io.github.jrse/jaraco_website jaracogmbh/jarakube-jaraco-app Jaraco GmbH Website MCP Server - programmatic access to content | |
| PeakCam Snow jaredschueler07/peakcam Live snow reports, SNOTEL measurements, webcams and powder rankings for 150 ski resorts. | |
| io.github.jarvis-intelligence/jarvis jarvis-intelligence/jarvis Local-first SCIP code navigation and Zoekt search over your own indexed repositories | |
| Orca MCP Server jascal/orca-lang Go from natural language to verified finite state machines — topology bugs caught before code runs. | |
| LingYi Tools jascenn/ai-tools-navigator Search 162 AI tools in the LingYi Tools directory by keyword, category, pricing, or featured picks. | |
| io.github.Jason26214/computer-use-omni jason26214/computer-use-omni A 1:1 replica of Claude Desktop's computer-use tool surface, for Windows and the Claude Code CLI. | |
| Agent Bounty Jobs jasonbrelsford/agent-bounty-jobs Agent-to-agent bounty board: post tasks with stated rewards, fill them, first accepted wins. | |
| HLA-Verify jasonbrelsford/verifiable-science-envs HLA nomenclature and match checks against a pinned IPD-IMGT/HLA release. No patient identifiers. | |
| Suede Skills MCP jasoncolapietro/suede-creator-skills Read-only access to 71 Suede skills: discovery, install options, SEO audits, A-F grading. |
24,251–24,300 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.