Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| SRS Residual Gas Analyzer k-dense-ai/lab-instrument-mcps MCP server for SRS RGA100/200/300 residual gas analyzers. | |
| Thorlabs Optical Power Meter k-dense-ai/lab-instrument-mcps MCP server for Thorlabs optical power meters (PM100 family, PM400, PM101, PM5020) over SCPI. | |
| EPICS Channel Access k-dense-ai/lab-instrument-mcps MCP server for EPICS Channel Access: read, monitor and guarded writes of process variables. | |
| Modbus TCP/RTU Device k-dense-ai/lab-instrument-mcps MCP server for Modbus TCP/RTU devices with typed, scaled register maps and per-point limits. | |
| Generic SCPI Instrument k-dense-ai/lab-instrument-mcps Generic MCP server for any SCPI instrument over VISA, TCP or serial, with command allow/deny lists. | |
| SiLA 2 Bridge k-dense-ai/lab-instrument-mcps MCP bridge to any SiLA 2 server (lab-automation standard). | |
| Solana Token Intelligence k0diak/token-intel-x402 Solana token due-diligence: 3-source fused risk verdict incl. LP-lock depth. $0.01 via x402. | |
| Medius Docs k4hvh/medius-docs Medius docs: the binary control protocol, device behavior, and the medius Rust library. | |
| Canisell kacpergumieniuk/canisell Can I sell this Base token? Honeypot, tax and exit-liquidity verdict. Free metadata; $0.01 via x402. | |
| Guardrail MCP kadopi/guardrail-mcp Deterministic preflight checks for credentials, fund transfers, writes, and prompt overrides. | |
| Agent Card Health Check kadopi/my-projects Free no-storage MCP that checks A2A Agent Card connection readiness for authorized targets. | |
| Kagan kagan-sh/kagan AI-powered Kanban TUI for autonomous development workflows with agent orchestration | |
| Loopwise MCP Server kaikhq/manekineko Read and manage courses, members, orders, events, posts, and settings for Loopwise-powered sites. | |
| Recur kaikhq/recur.tw Subscription payment platform for Taiwan — manage products, customers, and billing | |
| io.github.kailayerhq/kai kailayerhq/kai Semantic code intelligence — call graphs, dependencies, impact analysis, and test coverage. | |
| 402-LAB kairose-master/handsel-mandate Budget-capped x402 buyer: delegate USDC in plain words, agent discovers and pays per call. | |
| io.github.kaito3636/x402-presign-guard kaito3636/x402-presign-guard Pre-sign EVM tx/approval safety for AI agents: decode calldata, flag drainers, return GO/HOLD/BLOCK. | |
| Readout kaitzyy-dev/readout Measured readings on open-source dependencies: health, end-of-life, model prices, incidents. | |
| Sighttrue kaitzyy-dev/sighttrue Measured readings on open-source dependencies: health, end-of-life, model prices, incidents. | |
| Sovereignty Scan kajaril/sovereignty-scan-mcp EU AI Act sovereignty scanning. Provider residency, registration status, audit trail support. | |
| Country Calling Codes kajdep/v0-countrycallingcodes Calling codes, phone analysis, dialing guidance, batch normalization and calling windows. | |
| io.github.kakarot-dev/deepmiro kakarot-dev/deepmiro Simulate hundreds of AI agents to predict how communities react to events and policies | |
| AuthProof kaleckh/agentauth Signed, non-replayable API auth. Agents self-register and sign requests with ERC-8128. | |
| xyz.getava/ava kamalbuilds/ava-4.0 Coding agents run multi-leg cross-chain DeFi. Legs re-derived from your sentence before signing. | |
| io.github.kambleaa007/weather kambleaa007/grappleai An MCP server for weather information. | |
| ViewDoctor kamnevvladimir/viewdoctor Local SwiftUI changed/staged checks with compact agent output and multi-module ownership. | |
| JestSprout kanaiharvey-netizen/jestsprout AI meme coin concept generator: theme in, coin name, ticker, lore and logo out. Concepts only. | |
| midnight-cast kanasjnr/midnight-cast Read-only tools for live Midnight networks: health, transactions, DUST, errors and example code | |
| PRzilla kangax/przilla-mcp CrossFit and HYROX workout search, benchmark targets, scaling guidance, and movement technique. | |
| Hungry eSIM kangih90/hungry-esim-mcp Travel eSIMs: unlimited data, pick your days, top up existing eSIMs, card checkout, no API key. | |
| MCP Security Sanitizer kansal-mukul/mcp-security-sanitizer-server Redacts common secrets, email addresses, and phone numbers. | |
| Phoenix Zero — Execution Oracle for L2s kant19801201behax5/x402-health-oracle Pre-transaction PASS/FAIL for an L2. Free verdict delayed ~60 s, no revert ratio; live via x402. | |
| Baton kanumuri9593/baton Run, hot-reload and screenshot Flutter, web, React Native and native iOS/Android apps. | |
| kapaweb deploy kapaweb/kapaweb-deploy Deploy websites, PHP apps and WordPress to kapaweb hosting (DirectAdmin, Plesk preview) from Claude | |
| io.github.kar69-96/agentpay kar69-96/useagentpay AI agent payments with human approval. Local-first, encrypted credentials, budget controls. | |
| io.github.karandaid/karandeepsingh-blog karandaid/hugov2.karandeepsingh.ca Search and read Karandeep Singh's DevOps and AWS blog: articles and cheatsheets. | |
| tell: buying signals with receipts karank2512/tell-ai Ask tell which accounts are in market and why, with a receipt URL behind every claim. | |
| Fabulotheca karbonovblyenot-cell/fabulotheca-mcp Folk tale and folklore scholarship search: verbatim passages with sources. Access by application. | |
| io.github.kareeem380/sketfly kareeem380/sketfly Design mobile app screens with AI — describe your app, get linked screens instantly. | |
| Kunkafa kareemfarid/kunkafa-mcp Market forecasts with their own track record, inside Claude, ChatGPT and other MCP apps. | |
| kari catalog kari-it/kari-mcp kari shoe and accessory stores in Russia, Kazakhstan, Belarus: search, prices, stores, size stock | |
| VidNotes karniej/vidnotes-mcp Video transcripts, summaries, chapters, study notes, and comparisons for AI agents. | |
| io.github.KarstenKreh/standby-design-mcp karstenkreh/standby.design Generate design systems: OKLCH colors, fluid type scales, spacing, shape, icon and motion tokens. | |
| Agent Budget Router kasp3965-bit/agent-budget-router Budget-aware AI agent research router with provider selection, validation, and automatic fallback. | |
| Katalon True Platform MCP katalon-labs/true-skills Katalon True Platform MCP: design tests, run with AI, upload reports, assess release readiness. | |
| io.github.katatan-org/katatan-TEST katatan-org/katatan-test KATATAN E2E testing agent set — Playwright + KATATAN MCP integration | |
| io.github.KatoMato65/time-mcp katomato65/time-mcp Simple MCP server that tells the time | |
| Lead Green katonic-dev/leadgreen-ai GPU energy per million output tokens by model, GPU and configuration, with grid carbon by country. | |
| Track katrinalaszlo/track Read which AI agents call your API, which paths convert, and which journeys pay. | |
| AsItIs katta041/asitis-agent-tools Read-only MCP server for markdown and agent steering files: read, outline, lint, context budget. |
24,651–24,700 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.