Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| LingoHub MCP by usefulapi m190/usefulapi-mcp MCP server for LingoHub — localization projects, resources, exports and repository pushes. | |
| Linnworks MCP by usefulapi m190/usefulapi-mcp Read Linnworks inventory, stock and orders; set stock levels and add order notes. | |
| Little Green Light MCP by usefulapi m190/usefulapi-mcp Search Little Green Light donors, gifts, notes and memberships, and add gifts and contact reports. | |
| LiveWebinar MCP by usefulapi m190/usefulapi-mcp Read webinars, sessions, registrants and polls; create scheduled webinars in LiveWebinar. | |
| Lob MCP by usefulapi m190/usefulapi-mcp Verify US & international addresses and send physical mail (postcards, letters, checks) via Lob. | |
| Localazy MCP by usefulapi m190/usefulapi-mcp Read Localazy projects, files, keys and glossary; submit translations, import keys, AI suggestions. | |
| Locate2u MCP by usefulapi m190/usefulapi-mcp Read stops, orders, trips and ratings; add notes to stops and shipments in Locate2u. | |
| Loops MCP by usefulapi m190/usefulapi-mcp Manage Loops contacts, mailing lists, and transactional/event emails. | |
| Loox MCP by usefulapi m190/usefulapi-mcp Read Loox product and store reviews, reviewer details and rating summaries. Read-only. | |
| Loyverse MCP by usefulapi m190/usefulapi-mcp Query Loyverse POS receipts, shifts, items, inventory and customers, and update stock and customers. | |
| MagicBell MCP by usefulapi m190/usefulapi-mcp Read MagicBell broadcasts, users, events, workflows and channels; create and update user records. | |
| MaidCentral MCP by usefulapi m190/usefulapi-mcp Read services, prices and open dates; create leads, quotes, bookings and notes in MaidCentral. | |
| Mail Blaze MCP by usefulapi m190/usefulapi-mcp Manage Mail Blaze lists, subscribers, templates, campaigns and reports; send transactional email. | |
| MailBluster MCP by usefulapi m190/usefulapi-mcp Manage MailBluster leads, custom fields, products and orders: look up, add and update records. | |
| Mailchimp MCP by usefulapi m190/usefulapi-mcp Read audiences, members, campaigns and reports; add, update, tag and archive subscribers. | |
| MailerCheck MCP by usefulapi m190/usefulapi-mcp Check MailerCheck credits and lists, and run confirmed asynchronous email verification. | |
| MailerLite MCP by usefulapi m190/usefulapi-mcp Read subscribers, groups, campaigns, fields, segments, automations, webhooks; safe additive writes. | |
| Mailshake MCP by usefulapi m190/usefulapi-mcp Read campaigns, replies and leads; pause or resume campaigns; close or reopen leads in Mailshake. | |
| ManyChat MCP by usefulapi m190/usefulapi-mcp Read subscribers, tags and flows, change tags and fields, and start flows in ManyChat. | |
| MapTiler MCP by usefulapi m190/usefulapi-mcp Geocoding, elevation, IP geolocation and coordinate transforms from the MapTiler Cloud API. | |
| MarketTime MCP by usefulapi m190/usefulapi-mcp MCP server for MarketTime — wholesale orders, customers, catalog and shipment tracking. | |
| MaxMind minFraud MCP by usefulapi m190/usefulapi-mcp MCP server for MaxMind minFraud — score transactions for fraud risk from your AI assistant. | |
| Megaventory MCP by usefulapi m190/usefulapi-mcp Read Megaventory products, stock, orders and partners; create clients, sales and purchase orders. | |
| Memberful MCP by usefulapi m190/usefulapi-mcp Manage Memberful members, subscriptions, plans, passes and coupons via the GraphQL API. | |
| MemberRun MCP by usefulapi m190/usefulapi-mcp Manage members, events and registrations; read invoices, resources and chapters in MemberRun. | |
| Members.dev MCP by usefulapi m190/usefulapi-mcp Read members, subscriptions, bookings, invoices, payments; create and update members in Members.dev. | |
| MemberSuite MCP by usefulapi m190/usefulapi-mcp Search members, memberships and saved searches; update contact fields in MemberSuite. | |
| Mention MCP by usefulapi m190/usefulapi-mcp Read alerts, mentions, authors, statistics and shares in Mention. | |
| Mercoa MCP by usefulapi m190/usefulapi-mcp Query and manage Mercoa AP/AR bill-pay: entities, invoices, transactions and payment methods. | |
| Merit Aktiva MCP by usefulapi m190/usefulapi-mcp Read Merit Aktiva invoices, customers, vendors, items, payments and reports; create a customer. | |
| Messente MCP by usefulapi m190/usefulapi-mcp Read Messente balance, prices, delivery status and statistics; send SMS to up to 10 numbers. | |
| Method CRM MCP by usefulapi m190/usefulapi-mcp Query Method CRM customers, leads, activities and invoices; create and update records. | |
| Metriport MCP by usefulapi m190/usefulapi-mcp Read and write patients, facilities, medical documents, and consolidated FHIR records in Metriport. | |
| Microkeeper MCP by usefulapi m190/usefulapi-mcp Read staff, rosters, timesheets and leave, and add or update staff in Microkeeper. | |
| MillionVerifier MCP by usefulapi m190/usefulapi-mcp Check MillionVerifier credits, verify emails and monitor confirmed bulk verification jobs. | |
| Mindbody MCP by usefulapi m190/usefulapi-mcp Read Mindbody classes, schedules, clients, staff and sales; book clients and appointments. | |
| Mindee MCP by usefulapi m190/usefulapi-mcp Turn PDFs and images into typed fields — invoices, receipts, IDs and custom models — via Mindee OCR. | |
| Mintsoft MCP by usefulapi m190/usefulapi-mcp Read orders, products, stock, ASNs and returns; add order comments and tags in Mintsoft. | |
| Missive MCP by usefulapi m190/usefulapi-mcp Read email/chat conversations, messages, contacts and teams; draft, send and update threads. | |
| Mistral MCP by usefulapi m190/usefulapi-mcp Manage your Mistral platform — models, files, batch jobs, agents and RAG document libraries. | |
| Mixpanel MCP by usefulapi m190/usefulapi-mcp Query Mixpanel events, funnels, retention, segmentation and insights (JQL). | |
| Modern Treasury MCP by usefulapi m190/usefulapi-mcp MCP server for Modern Treasury — payment orders, transactions, counterparties and ledgers. | |
| MoeGo MCP by usefulapi m190/usefulapi-mcp Read customers, pets, appointments, orders and reports; add customer notes in MoeGo. | |
| Momence MCP by usefulapi m190/usefulapi-mcp Look up Momence members, class schedules, bookings and memberships, and handle front-desk actions. | |
| MoonClerk MCP by usefulapi m190/usefulapi-mcp Read MoonClerk payment forms, customers (plans with subscriptions) and payments. Read-only. | |
| Moosend MCP by usefulapi m190/usefulapi-mcp Inspect Moosend lists, subscribers, segments and campaign stats, and add or unsubscribe subscribers. | |
| Motion MCP by usefulapi m190/usefulapi-mcp Read tasks, projects, workspaces and schedules; create tasks in Motion. | |
| MyParcel MCP by usefulapi m190/usefulapi-mcp Create, read and delete shipments; read track and trace and pickup points in MyParcel. | |
| myPhoner MCP by usefulapi m190/usefulapi-mcp Work myPhoner calling lists and leads: search, log call outcomes, add, update and assign leads. | |
| Namely MCP by usefulapi m190/usefulapi-mcp Read Namely employee profiles, groups, teams, jobs and reports; update profiles, post to the feed. |
25,701–25,750 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.