Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Business Frameworks matryoshka-paradigms/business-frameworks Operating judgement for businesses under $50M revenue. Free top layer; nodes and bundles over x402. | |
| io.github.MatsushitaTokitsugu/micro-data-api-factory matsushitatokitsugu/micro-data-api-factory-public 17+ Japan MCP tools (weather/calendar v2/local-pack/enrich). x402 on Base, wallet-free trial. | |
| lockvet matteo-sung/lockvet Explain any lockfile or workflow-pin change: bumps, vulns, ages, deprecations — 61 formats | |
| Mattermost mattermost/mattermost-plugin-agents Official Mattermost MCP server, built into the Mattermost Agents plugin. Read, search and post. | |
| io.github.matthewalexong/neo-vision matthewalexong/neo-vision Spatial DOM maps for AI agent browser navigation with anti-bot stealth. | |
| OntoRamp Decision Intelligence matthewdavisaiarchitect/ontoramp-decision-intelligence Log, evaluate, and ground AI decisions against authority context. Returns PASS, WARN, or BLOCK. | |
| OntoRamp Graph Query matthewdavisaiarchitect/ontoramp-graph-query Architecture-grounded query for AI agents. Governance constraints, evidence-linked answers. | |
| OntoRamp Knowledge Cartographer matthewdavisaiarchitect/ontoramp-knowledge-cartographer Knowledge coverage map and health score. Ingest docs into a governed knowledge graph via MCP. | |
| OntoRamp Transformation Radar matthewdavisaiarchitect/ontoramp-transformation-radar Transformation readiness gaps and initiative risk signals for AI agents and enterprise change leads. | |
| NugIt matthewrusk/nugit Save selected AI-generated answers as private Nugs in your personal NugIt library. | |
| Heystack matthews3301/heystack Living documents and tables that people and AI agents read, improve and create together. No sign-up. | |
| dev.nakodo/nakodo matthewwilliams949-ops/nakodo Warm introductions to the right builder, matched privately on your work. Double opt-in, no feed. | |
| Matrix matthiasnordwig/matrix-mcp Answer questions over large PDF folders up to 3x faster, with file and page citations. Runs locally. | |
| ClipOnIt mattjeff/cliponit-mcp Long video to captioned 9:16 shorts, plus AI explainer videos from a topic or voice. 70 tools. | |
| io.github.mattlsmith/navmds mattlsmith/navmds Research 7,400+ US doctors: search, semantic search, profiles, reviews & procedure pricing. | |
| CAD MCP Server mattmohandiss/cad-mcp-server Measure STEP CAD files with your AI assistant: walls, clearances, draft, and revision diffs. | |
| Crunch Accounting (crunch-mcp) mattoddie/crunch-mcp Work with your Crunch Accounting books: expenses, receipts, invoices, clients, suppliers and banking | |
| FutureProof AEO mattyb12345nyc/ai-tracker Track brand visibility across ChatGPT, Claude, Gemini & Perplexity. Scores, competitors, trends. | |
| Perfboard Designer maurerkrisztian/perfboard-designer Design perfboard and stripboard layouts, check the wiring and get a link to open them in the editor. | |
| LivTakt maurice1969db/livtakt-app Life-balance task manager that prioritises your tasks to restore balance across your life areas. | |
| Nonobench mauricekleine/nonobench An open-source benchmark of how well LLMs solve nonogram puzzles, from 5x5 to 20x20. | |
| app.takehub/mcp mauurda/takehub Manage discussion topics, gather votes and video rationale, and read AI insights. | |
| valvur maverickhq/valvur Offline security scanning for AI-generated code: seven open-source scanners in one MCP server. | |
| DrugAlpha 创新药投研 max-nobug/drugalpha-mcp Company/drug identification and published biopharma catalysts. DrugAlpha OAuth account required. | |
| Tools for Agents max124vip-dev/tools-for-agents Decision Layer for AI Agents — 58+ tools, Advisor, MCP. Free key: POST /v1/register {}. | |
| AB[500] research and bounties maxand98/ab500 Sourced Art Blocks artist research, holding-duration data, and current agent bounties from AB5D. | |
| BD5D BrainDrops archive maxand98/bd5d Read-only archive of early BrainDrops releases, artists, holdings and editorial research. | |
| itemnumbers MBS schedule maxand98/item-ai Read-only Medicare Benefits Schedule lookup: items, history, relationships and combinations. | |
| maxand98 public corpus maxand98/personal-website Read-only access to approved maxand98 publications, citations, claims and evidence records. | |
| XCOPYBook maxand98/xcopybook Read-only XCOPYBook: book chapters, search, collector profiles and the XCOPY works registry. | |
| AdAnvil maxbuildog/adanvil Lets an AI agent edit vertical 9:16 video ads from your footage, a reference ad or an idea. | |
| Humanuscrit — HAPP maxcarriere/humanuscrit Submit a literary text in French to Humanuscrit, a publisher open to humans and AI agents. | |
| Medical RAG MCP - Semantic search and retrieval of high-quality clinical medical data maxi-moss/medical-rag-mcp-test Medical RAG: semantic search for clinical guidelines, drug interactions, diagnoses & EHR data. | |
| Synap Memory maximem-ai/maximem_synap_sdk Persistent memory for AI agents — log and recall conversation context over MCP. | |
| Car Repair Cost Estimator maximmaximovwork2018-gif/carrepaircostestimator-mcp Car repair cost estimates by make, model and repair type. 31 cost guides, VIN decode. Free. | |
| io.github.maximusrufus/medigami maximusrufus/medigami-public Attested healthcare-finance MCP: bill scans, appeals, denials, rate + ICD/CPT/NPI lookups. | |
| crosscheck maxugc/crosscheck Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install. | |
| dotrepo maxwellsantoro/dotrepo Preview repository facts with evidence. Choose your release channel at dotrepo.org/docs. | |
| Focuh maxxthedeveloper/focuh ADHD system of record for agents: tasks, goals, loops, calendar, focus stats. | |
| io.github.maxz712/clawhub maxz712/clawhub Git hosting for AI agents: repos, changes, focused diffs, reviews, issues, code search. | |
| ibara mayberrydt/ibara Computer use for your agents across the Omarchy machines you own. Open source MCP server. | |
| Autopia maydaytrey/autopia Verified, reproduced behavior of public HTTP APIs: spec gaps, errors, pagination, auth. | |
| LN Church Agent MCP mayim-mayim/ln-church-agent Inspect-only HTTP 402 surface classifier. Keyless, no wallet, no signing, no payments. | |
| io.github.Maytrella007/protonlite maytrella007/protonlite Python Proton Mail, Calendar, Contacts and Drive client with an MCP server. Free plan, no Bridge. | |
| io.github.mayurrawte/searoute mayurrawte/searoute-ts Real shortest sea routes between ports: distance, canals/straits, GeoJSON. UN/LOCODE aware. | |
| Rising Shores Singapore mazeasdamien/rising-shores-sg Sea-level rise in Singapore: when a place or address floods, areas and people affected, IPCC AR6. | |
| com.watchtower-api/sanctions-screening mazeh18/watchtower-mcp Sanctions screening, KYB, identifier validation, jurisdiction risk & secret scanning for AI agents | |
| consolelog dev tools mbdev3/console-log-tools Deterministic dev tools for AI agents over MCP: hashing, encoding, formatting, codegen, and more. | |
| adrkit decision memory mbeacom/adrkit Deterministic, offline, read-only ADR decision memory for coding agents. No model or network calls. | |
| io.github.mbeato/agentcontext mbeato/agentcontext-mcp Normalize AGENTS.md / CLAUDE.md / .cursor/rules / .clinerules / .windsurf/rules from one source. |
26,351–26,400 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.