Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| BACH CodeCommander lukisch/bach-codecommander-mcp 17 tools for code analysis, JSON repair, encoding fix, format conversion, diff, and regex. | |
| BACH FileCommander lukisch/bach-filecommander-mcp 43 tools for filesystem, process management, sessions, search, OCR, ZIP, and PDF export. | |
| n8n Manager MCP lukisch/n8n-manager-mcp MCP server for n8n workflow management -- view, create, sync and manage workflows via AI. | |
| Lulu Ads — Publisher Concierge lulu-the-narwhal/lulu-ads Self-serve publisher onboarding for Lulu Ads. 70% CPA, disclosed sponsored field. | |
| Weather MCP lulu-the-narwhal/lulu-platform Free, keyless real-time weather and 7-day forecasts for any city worldwide. | |
| io.github.lulzasaur9192/agent-infra-mcp lulzasaur9192/agent-infra-mcp 18 tools: agent memory, API drift detection, and HMAC-signed trust receipts | |
| Garchi CMS MCP lumenharbor/garchi-cms-skills Manage structured website content in Garchi CMS through MCP. | |
| NUM lumirx/num-mcp Real places for your agent: search 2.5M+ travel places, list businesses, license place photos. | |
| Lumi Trades: x402 seller checks and test-buys lumitrades/lumi-api Free signed allow/warn/block before paying x402 sellers; test-buys on XRPL, Base and Stellar | |
| Lumi Verdict: check an x402 seller before paying lumitrades/lumi-api One signed label before paying an x402 seller, from Lumi's test-buys on XRPL, Base and Stellar | |
| PostSider lumizone/postsider Social media calendar for AI agents: read channels, create drafts, request approval. | |
| Multi Calendar lumman-lab/multi-calendar Outlook.com, Microsoft 365, Google, iCloud, CalDAV: free time, events, invites, bookings, polls. | |
| AIVideo.day lumorabuild/aivideo-mcp Make 2D videos and 3D films from a written brief, in your AIVideo.day account. | |
| Lunacal lunacal/lunacal-mcp-new Schedule meetings, manage event types, and check availability through Lunacal's scheduling platform. | |
| Lunara Intelligence lunara-society/lunara-society.github.io EU AI Act and SB 942 obligations for AI systems: each date, the article setting it, signed sources | |
| Lunara Agent Network lunara-society/lunara-society.github.io Work for AI agents: checked missions for points, machine-marked trials, ranks, a free domain scan | |
| Lunium — Brazilian PIX and stablecoin payments luniumpay/lunium-agent-skills Accept Pix in Brazil and settle in USDT/USDC; pay Pix with crypto; verify a Pix with no API key. | |
| com.humaux/memory luogangan7-lgtm/humauxmemory Persistent long-term memory for AI agents: semantic search, knowledge graph, and task canvas. | |
| CaseNode Case Law API luptonm/casenode UK case law MCP (21 tools). Free API key: casenode.ai/api/signup → Dashboard → API keys. | |
| Whiskers lupusmalusdeviant/whiskers Governed Docker and Kubernetes operations for AI agents: scoped keys, guardrails, human approvals. | |
| CKB Pulse lusocryptolabs/ckb-pulse Who builds on Nervos CKB, from public GitHub: projects, people, updates, DAO-funded work. Read-only. | |
| CSS SOTA lusrodri/css-sota-mcp What CSS you can actually ship today, from live Baseline data and MDN browser-compat-data. | |
| io.github.luzomi/grandline-mcp luzomi/luzomi Empirical maritime distances from real AIS tracks: 4 route variants, port lookup, bulk matrix | |
| com.lvlltd/skill-market lvlltd/lvlltd-agent-marketplace x402 skill catalog on lvlltd.com — search, quote, pay with Base USDC, unlock sealed packs. | |
| io.github.lvlrSajjad/sidecrew lvlrsajjad/sidecrew Code changes and unit tests by local MLX models, behind a gate a machine can run. | |
| io.github.lvsmanhole/clearscreen lvsmanhole/clearscreen-data Screen people & companies against 12 US sanctions & exclusion lists (OFAC, LEIE, SAM, Medicaid). | |
| io.github.lxchst/weather-server-python lxchst/weather-server-python An MCP server that provides weather information | |
| Lycatra lycatra/lycatra-plugin Connect agents to Lycatra knowledge, memory, collaboration, schedules, notifications, and teams. | |
| Average Electric Bill lyudolf/averageelectricbill Is a U.S. electric bill normal? Compare kWh and rates with similar homes, by state and utility. | |
| Calibration Explorer m-sanchez/calibration-explorer Check classifier confidence against accuracy, fit temperature scaling and save local reports. | |
| YAP — Yet Another Packager m0rf30/yap Build native Linux packages (.deb/.rpm/.apk/.pkg.tar.zst) from a single PKGBUILD via MCP. | |
| 17TRACK MCP by usefulapi m190/usefulapi-mcp Track parcels across 3000+ carriers with 17TRACK: register numbers, read tracking events and quota. | |
| Ably MCP by usefulapi m190/usefulapi-mcp MCP server for Ably — channel history, presence, occupancy, stats, publish, and app management. | |
| ABRA Flexi MCP by usefulapi m190/usefulapi-mcp MCP server for ABRA Flexi — accounting, contacts, stock and draft-checked invoice creation. | |
| Abstract API MCP by usefulapi m190/usefulapi-mcp Validate emails, phones, IBAN, VAT; look up IPs and companies; rates, holidays, time via Abstract. | |
| Academy of Mine MCP by usefulapi m190/usefulapi-mcp Read courses, learning paths, learners, orders and certificates in Academy of Mine. | |
| AcademyOcean MCP by usefulapi m190/usefulapi-mcp List learners, courses, teams, progress, quiz results and certificates in AcademyOcean. | |
| Accelo MCP by usefulapi m190/usefulapi-mcp Manage Accelo companies, contacts, jobs, tasks, tickets and time. | |
| Accredible MCP by usefulapi m190/usefulapi-mcp Read Accredible credentials, groups, designs, analytics, skills; issue one credential as a draft. | |
| A-Cube MCP by usefulapi m190/usefulapi-mcp Read Italian invoices, receipts and SDI notices; validate, prepare and submit agreed drafts. | |
| Acuity Scheduling MCP by usefulapi m190/usefulapi-mcp Read appointments, types, calendars and availability; create, cancel or reschedule bookings. | |
| Adafruit IO MCP by usefulapi m190/usefulapi-mcp Read Adafruit IO feeds, data, groups and dashboards; publish a data point or create a feed. | |
| AddEvent MCP by usefulapi m190/usefulapi-mcp Read AddEvent calendars, events, RSVPs and subscribers; create and update calendars and events. | |
| AdminPulse MCP by usefulapi m190/usefulapi-mcp Read relations, invoices, tasks and documents; create tasks and log interactions in AdminPulse. | |
| AFAS Software MCP by usefulapi m190/usefulapi-mcp Browse AFAS connectors, read their fields and records in AFAS Software. | |
| Africa's Talking MCP by usefulapi m190/usefulapi-mcp Read Africa's Talking balance, incoming SMS, transactions; send SMS, airtime, data and voice calls. | |
| AgencyBloc MCP by usefulapi m190/usefulapi-mcp Read and update AgencyBloc individuals, groups, policies and agents; log activities and notes. | |
| AgendaPro MCP by usefulapi m190/usefulapi-mcp Read AgendaPro bookings, slots, clients, services and sales; create, update and cancel bookings. | |
| Airbrake MCP by usefulapi m190/usefulapi-mcp Read Airbrake projects, error groups, notices, deploys and stats; mute or unmute error groups. | |
| Aircall MCP by usefulapi m190/usefulapi-mcp Read calls, contacts, users, teams and numbers; tag calls and create or update contacts. |
25,301–25,350 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.