Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| IBTCC 공기업 경쟁률 조회 jojunho74/hometest 한국 공공기관(공기업) 채용 경쟁률을 기관명으로 조회합니다. 알리오(ALIO) 공시 데이터 기반으로 최근 채용 건별 1차 지원자 수와 1차 경쟁률을 반환합니다. | |
| com.bizgigz/agent-marketplace jolt-systems/bizgigz-mcp-docs BizGigz Agent Marketplace - register AI agents, manage API keys, and discover MCP capabilities | |
| com.bizgigz/talent-ecosystem jolt-systems/bizgigz-mcp-docs BizGigz Talent Ecosystem - AI-powered recruiting, interviews, onboarding, learning, and deal rooms | |
| Bike Router jonasheinickebio/pybikerouter Plan bike routes with a self-hosted OSM service: facts only, with weather and sights. | |
| PyEuropePMC jonasheinickebio/pyeuropepmc Europe PMC search, search analytics, full text, enrichment, PICO, MeSH, data links, export, auth | |
| OpenCaseLaw — Swiss Caselaw, Statutes & Doctrine jonashertner/caselaw-repo-1 1M+ Swiss court decisions, statutes & doctrine with citation graph (DE/FR/IT). CC0, free, 42 tools. | |
| io.github.jonathanhefner/hello-mcp-registry jonathanhefner/hello-mcp-registry A simple MCP server. | |
| Outbox jonathanleiva15/out-box-mcp Publish and manage HTML pages in your agents-first Outbox library from any MCP client. | |
| Built with Jon — Hidden Profit Tools jonathanmalkin/builtwithjon Read-only tools for finding where a small business leaks deals, time, and cash. | |
| Apple Calendar jonathanrreed/apple-mcps List, create, update, and delete events in Apple Calendar on macOS. | |
| Apple Tools (Unified) jonathanrreed/apple-mcps Unified Apple ecosystem MCP server for macOS: Mail, Calendar, Notes, Files, Messages, and more. | |
| Apple Contacts jonathanrreed/apple-mcps Inspect and search Apple Contacts on macOS, and resolve a contact into a message-ready recipient. | |
| Apple Files jonathanrreed/apple-mcps Inspect and manage local files and folders inside allowed roots on macOS. | |
| Apple Mail jonathanrreed/apple-mcps Read, search, compose, and send emails via Apple Mail on macOS. | |
| Apple Maps jonathanrreed/apple-mcps Search places, estimate routes, and build Apple Maps links on macOS. | |
| Apple Messages jonathanrreed/apple-mcps Read Messages history on macOS and send or reply through Messages.app. | |
| Apple Notes jonathanrreed/apple-mcps Inspect, search, create, edit, move, and organize notes in Apple Notes on macOS. | |
| Apple Reminders jonathanrreed/apple-mcps List, create, update, complete, and delete reminders in Apple Reminders on macOS. | |
| Apple Shortcuts jonathanrreed/apple-mcps List, inspect, and run Apple Shortcuts on macOS. | |
| Apple System jonathanrreed/apple-mcps Read and manage macOS system settings and perform scoped desktop actions. | |
| io.github.JonathanWeerakkody/vectorise jonathanweerakkody/vectorise_me Vectorize images to SVG and export to PDF, EPS, DXF, PNG, JPG, or WEBP via Vectorise.Me. | |
| com.costsegsmart/cost-seg-smart jonhersh/cost-seg-smart-mcp Cost segregation study pricing and Year-1 depreciation/tax-savings estimates for US properties. | |
| dev.pokes/pokes jonmorgs/pokes Poke your human for approvals and decisions during agent sessions — answered with one phone tap. | |
| app.goshipyard/shipyard jonnonz1/shipyard Ship, discover and review vibe-coded projects on Shipyard, the invite-only feed for AI-built apps. | |
| Workflow jonnyton/workflow Create, browse, remix, collaborate on, and run durable AI workflow nodes from MCP hosts. | |
| io.github.jonradoff/lastsaas jonradoff/lastsaas Read-only admin MCP server for LastSaaS — dashboards, users, tenants, billing, logs, health. | |
| LLM Optimizer jonradoff/llmopt AI brand visibility analytics: visibility scores, optimizations, video, Reddit, and search rankings. | |
| ddbx — insider dealings jonwillington/ddbx-plugin Search rated insider dealings across the UK, US, Sweden, Netherlands and US Congress. | |
| Vibe BI MCP jonwlee-dev/vibe-bi Ask business questions in plain English. Get instant answers from your database, no SQL needed. | |
| io.github.jonybur-oc/mcp-server jonybur-oc/locus stories.yaml — an open specification for software requirements, enforced by CI. | |
| io.github.jonybur/mcp-server jonybur/locus stories.yaml — an open specification for software requirements, enforced by CI. | |
| io.github.siddik-web/helix-mcp-server joomshaper/helix-ultimate MCP server for Helix Ultimate Joomla: layout builder, mega menus, code scaffolding & audits. | |
| thumbs jorchg/usethumbs-mcp Give an AI agent an iPhone to see, tap and type on over MCP. Free early access (Simulator). | |
| ATS Jobs Search API jordan-belfort-ai/company-jobs-api Search 700k+ open jobs by keyword across Greenhouse, Lever, Ashby, Workday & 5 more ATSs. $0.001/job | |
| Image to SVG Vectorizer jordan-belfort-ai/image-to-svg Convert PNG, JPG and WebP images to SVG vector paths. Runs on Apify, $0.01 per image. | |
| Sitemap Extractor (reliable) jordan-belfort-ai/sitemap-extractor Every URL in a site's sitemaps, with lastmod. Runs on Apify, $0.30 per 1,000 URLs. | |
| Workday Jobs Scraper jordan-belfort-ai/workday-jobs-scraper Every open job on any myworkdayjobs.com careers site as JSON. Runs on Apify, $0.001 per job. | |
| Agent Handoff jordan23wagner-ops/agent-handoff Pass messages between AI agents with cleaning, metadata enrichment, and metered billing. | |
| PredictionScan jordankarst/predictionscan-mcp Derived prediction-market flow, price changes, trader research and news. 11 read-only tools. | |
| io.github.JordanNewell/curtis-mcp jordannewell/curtis-cloud Expose any folder of notes as an MCP server — list, read, search, and (opt-in) write files. | |
| io.github.jors7/kadenzo-mcp jors7/kadenzo-mcp Schedule, manage, generate & analyze social posts across 11 networks from any AI agent. | |
| Cronjob.de joschaschultze/cronjob-de-mcp Web cron for sites without their own scheduler: calls your URLs on schedule and logs every call. | |
| Consignatarias · Argentine Cattle Market josebarnetche/consignatarias-next Argentine cattle market data: steer index since 2015, prices, auctions, land values, SENASA rules. | |
| Preflight Checks (x402) josediegorobles/preflight-x402 Deterministic pre-execution verification tools for AI agents with x402 USDC pay-per-call on Base | |
| Sorted — Event Registration & Queue Management josefrichter/sorted Event registration at scale: events with photos, waitlists, virtual queues, and dynamic pricing. | |
| io.github.Joseph-Brendan/frame-relay joseph-brendan/frame-relay MCP server for the Frame-Relay design kit: components, tokens and live Figma selections. | |
| io.github.Joseph-CEO/global-intel-exchange joseph-ceo/m2m2-engine Real-time sanctions screening, CVE, and company registry checks for agents. | |
| Sitepeel josephbadigar/sitepeel DESIGN.md, clone prompts, HTML, screenshots, assets, fonts, colors and tech stack of any website. | |
| SkillOS MCP Server joshanihub/skillos SkillOS MCP Runtime exposes the SkillOS skill registry as activatable MCP tools for AI agents. | |
| Basalt joshiii-xyz/basalt Local SQL workspaces with bounded, recoverable writes for coding agents. |
24,501–24,550 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.