Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Mastercard BIN Table MCP Server ag2-mcp-servers/mastercard-bin-table-listing An MCP server that provides access to Mastercard's BIN Table Resource API, allowing users to look up and interact with Bank Identification Number data through natural language queries. | |
| Meilisearch MCP Server ag2-mcp-servers/meilisearch-v10 An MCP server that allows agents to interact with Meilisearch, a powerful open-source search engine, through its API using natural language. | |
| Nexmo Messages MCP Server ag2-mcp-servers/messages-api An MCP server that enables interaction with Nexmo's Messages API, allowing agents to send and manage messages across various channels via natural language commands. | |
| MineSkin MCP Server ag2-mcp-servers/mineskin-api Enables programmatic access to the MineSkin API for generating and managing Minecraft skins through natural language commands, auto-generated using AG2's MCP builder. | |
| MLB Projections MCP Server ag2-mcp-servers/mlb-v3-projections An MCP server that enables interaction with MLB (Major League Baseball) v3 projections through the SportsData.io API, allowing access to baseball statistics and projections through natural language. | |
| MLB V3 Scores MCP Server ag2-mcp-servers/mlb-v3-scores An MCP Server that enables interaction with MLB scores and statistics via the SportsData.io MLB V3 Scores API, allowing users to access baseball data through natural language queries. | |
| Most Popular API MCP Server ag2-mcp-servers/most-popular-api A Multi-Agent Conversation Protocol server that provides access to the New York Times Most Popular API, allowing agents to interact with NYT's most viewed, shared, and emailed content. | |
| Maharashtra Transport MCP Server ag2-mcp-servers/motor-vehicle-department-maharashtra An MCP Server that enables interaction with Maharashtra's Motor Vehicle Department API, allowing users to access transportation-related services through natural language requests. | |
| My Business Account Management API MCP Server ag2-mcp-servers/my-business-account-management-api An MCP server that enables interaction with Google's My Business Account Management API, allowing users to perform account management operations through natural language interactions. | |
| NASCAR MCP Server ag2-mcp-servers/nascar-v2 This MCP server enables interaction with NASCAR racing data via the sportsdata.io API, allowing access to race statistics, driver information, and event details through natural language queries. | |
| NHL Scores MCP Server ag2-mcp-servers/nhl-v3-scores An MCP Server that provides access to NHL (National Hockey League) scores and statistics via the SportsData.io NHL v3 Scores API. | |
| Obono RKSV API MCP Server ag2-mcp-servers/obono-rksv-api An MCP Server that enables interaction with the Obono RKSV API, automatically generated using AG2's MCP builder to provide a standardized way to access the functionality defined in the OpenAPI specification. | |
| On-Demand Scanning API MCP Server ag2-mcp-servers/on-demand-scanning-api An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts. | |
| OnSched Consumer API MCP Server ag2-mcp-servers/onsched-consumer-api An MCP server that enables interaction with OnSched's consumer-facing appointment scheduling API through natural language, allowing users to manage bookings, appointments, and scheduling operations. | |
| Open Policy Agent (OPA) REST API MCP Server ag2-mcp-servers/open-policy-agent-opa-rest-api An MCP Server that enables natural language interaction with the Open Policy Agent REST API, allowing users to manage policies, decisions, and data through conversational interfaces. | |
| Open States API MCP Server ag2-mcp-servers/open-states-api-v3 This MCP server enables interaction with the Open States API, allowing users to access legislative data from US state governments through natural language commands. | |
| OpenAI API MCP Server ag2-mcp-servers/openai-api An auto-generated MCP server that enables interaction with the OpenAI API, allowing users to access OpenAI's models and capabilities through the Multi-Agent Conversation Protocol. | |
| OpenFIGI API MCP Server ag2-mcp-servers/openfigi-api An MCP server that enables interaction with the OpenFIGI API, allowing users to map securities to financial instrument identifiers through natural language. | |
| Organization Policy API Server ag2-mcp-servers/organization-policy-api An MCP Server that enables interaction with Google's Organization Policy API, allowing users to manage organization policies that control resource behavior within Google Cloud environments. | |
| GoDaddy Orders MCP Server ag2-mcp-servers/ote-godaddycomorders MCP Server that enables interaction with GoDaddy's Orders API using natural language, auto-generated from the OTE GoDaddy Orders OpenAPI specification. | |
| PDF Generator API MCP Server ag2-mcp-servers/pdf-generator-api This MCP server enables interactions with the PDF Generator API for creating, converting, and managing PDF documents using natural language commands. | |
| Personnel Data MCP Server ag2-mcp-servers/personnel-data An MCP Server that provides access to Personio's HR and personnel data through the Personnel API, allowing interaction with employee records, HR systems, and personnel management functions. | |
| PhantAuth MCP Server ag2-mcp-servers/phantauth A server that enables interaction with PhantAuth, a random user generator and authentication service through natural language commands. | |
| Playable Locations MCP Server ag2-mcp-servers/playable-locations-api An auto-generated MCP server that interfaces with Google's Playable Locations API, allowing agents to programmatically access and query location data for gaming applications. | |
| Policy Analyzer API MCP Server ag2-mcp-servers/policy-analyzer-api This MCP Server provides a natural language interface to interact with Google's Policy Analyzer API, allowing users to analyze policies and evaluate compliance through conversations. | |
| Policy Troubleshooter API MCP Server ag2-mcp-servers/policy-troubleshooter-api An MCP server that provides natural language interaction with Google's Policy Troubleshooter API, allowing users to troubleshoot access denied errors and analyze IAM policies. | |
| Public Certificate Authority API MCP Server ag2-mcp-servers/public-certificate-authority-api An MCP Server that enables interaction with Google's Public Certificate Authority API for managing publicly trusted TLS certificates via natural language. | |
| Real-Time Bidding MCP Server ag2-mcp-servers/real-time-bidding-api An MCP (Multi-Agent Conversation Protocol) Server that provides access to Google's Real-Time Bidding API, enabling programmatic interactions with RTB functionalities through natural language. | |
| Redeal Analytics API MCP Server ag2-mcp-servers/redeal-analytics-api A Multi-Agent Conversation Protocol server that enables users to interact with the Redeal.io analytics API through natural language, automatically generated using AG2's MCP builder. | |
| Resource Settings MCP Server ag2-mcp-servers/resource-settings-api An MCP Server that provides a natural language interface to Google Cloud Resource Settings API, enabling users to view and manage settings for Google Cloud resources through conversation. | |
| Sakari MCP Server ag2-mcp-servers/sakari A Multi-Agent Conversation Protocol server that enables interaction with the Sakari.io API, auto-generated using AG2's MCP builder for simplified natural language access to Sakari's messaging services. | |
| Google Search Console API MCP Server ag2-mcp-servers/search-console-api An MCP Server that provides access to Google's Search Console API, allowing users to interact with website search performance data and manage search presence through natural language. | |
| Serverless VPC Access MCP Server ag2-mcp-servers/serverless-vpc-access-api An auto-generated MCP server for Google's Serverless VPC Access API, enabling communication with Google Cloud VPC networks through natural language interactions. | |
| Service Usage API MCP Server ag2-mcp-servers/service-usage-api An MCP Server that enables interaction with Google's Service Usage API, allowing management and control of which Google Cloud Platform APIs and services are enabled for a project. | |
| ShipEngine API MCP Server ag2-mcp-servers/shipengine-api An MCP server that enables interaction with ShipEngine's shipping API, allowing users to manage shipments, labels, carriers, and other shipping operations through natural language commands. | |
| Soccer V3 Scores MCP Server ag2-mcp-servers/soccer-v3-scores An MCP server that enables agents to interact with soccer data including scores, matches, players, and teams using the sportsdata.io Soccer V3 Scores API. | |
| SoundCloud MCP Server ag2-mcp-servers/soundcloud-public-api-specification Provides Multi-Agent Conversation Protocol interface for the SoundCloud API, enabling AI agents to interact with SoundCloud's music streaming platform through natural language. | |
| Spinitron API MCP Server ag2-mcp-servers/spinitron-v2-api Enables interaction with Spinitron's radio playlist management and broadcasting data through a Multi-Agent Conversation Protocol interface, allowing users to query and manage radio station playlists, spins, and other broadcasting data via n | |
| Stellastra MCP Server ag2-mcp-servers/stellastra An MCP Server that enables multi-agent conversation interactions with the Stellastra API, auto-generated using AG2's MCP builder. | |
| Street View Publish API MCP Server ag2-mcp-servers/street-view-publish-api Enables interaction with Google's Street View Publish API for publishing and managing 360 photos on Google Street View through natural language commands. | |
| Subscriptions API MCP Server ag2-mcp-servers/subscriptions-api-v3 An MCP server for the VTEX Subscriptions API (v3) that enables managing subscription services through natural language interactions, auto-generated using AG2's MCP builder. | |
| Tag Manager API MCP Server ag2-mcp-servers/tag-manager-api An MCP Server that provides a conversational interface to Google Tag Manager API, allowing users to manage tags, triggers, variables, and containers through natural language. | |
| Punjab Technical Education MCP Server ag2-mcp-servers/the-punjab-state-board-of-technical-education--industrial-training This MCP server enables interaction with the Punjab State Board of Technical Education and Industrial Training API, allowing access to technical education services and information through natural language. | |
| Times Newswire API MCP Server ag2-mcp-servers/times-newswire-api An MCP server that provides access to the New York Times Newswire API, allowing agents to retrieve real-time news updates and content from the New York Times. | |
| Traffic Director MCP Server ag2-mcp-servers/traffic-director-api An MCP server that enables interaction with Google's Traffic Director API, allowing users to manage global load balancing services through natural language. | |
| Transport Department Puducherry MCP Server ag2-mcp-servers/transport-department-puducherry An MCP server that enables interaction with the Transport Department of Puducherry's API services through natural language, providing access to transportation-related data and operations. | |
| Transport Department Rajasthan MCP Server ag2-mcp-servers/transport-department-rajasthan A Multi-Agent Conversation Protocol server that enables interaction with Rajasthan Transport Department's API, allowing access to vehicle and driver-related services through natural language. | |
| Trello MCP Server ag2-mcp-servers/trello This is an MCP Server for Trello that enables interaction with Trello's API through natural language, allowing management of boards, cards, lists, and other Trello resources. | |
| Tripura Board of Secondary Education MCP Server ag2-mcp-servers/tripura-state-board-of-secondary-education-tripura An MCP server for interacting with the Tripura State Board of Secondary Education API, auto-generated using AG2's MCP builder to enable conversational access to education data. | |
| Twilio Frontline MCP Server ag2-mcp-servers/twilio---frontline An MCP server that enables interaction with Twilio Frontline API for customer communication workflows, auto-generated using AG2's MCP builder. |
24,301–24,350 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.