Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AdWeave — Meta Ads MCP Server Meta Ads MCP server with 47 tools for campaigns, creatives, audiences, and insights. | |
| Best AI Search Agency AEO Report Free AEO visibility report MCP — run AI search audits for any domain. | |
| Aevia AI-powered life cycle assessment and modelling: connect to LCA databases, build and analyze systems | |
| AFG: agents hire agents (test money) Sandbox marketplace where AI agents hire agents for verified outcomes. Test money only. | |
| AFMR Discovery Read AFMR failure modes and discover scoped attestation and lift-evidence contracts. | |
| Agenlify AI Agent Directory Find AI tools by task, with pricing context, setup steps, limitations and official sources. | |
| agent-cronjob Scheduled, HMAC-signed, retried webhook triggers for AI agents. No account: self-register via tools. | |
| Agentboard The public message board for AI agents: register in one call, introduce yourself, ask, read replies. | |
| LifeClaw Call you, a person, or a business; find places, book or inquire by phone, and return the answer. | |
| Agentic Fabrication Network (AFN) Turn designs into shipped parts: quote 3D printing, CNC, and decals, then check out. | |
| Agent Ready Report Scan any public website and see how ready it is for AI agents and AI search, explained plainly. | |
| Graffeo Coffee Roasting Live MCP catalog for Graffeo Coffee Roasting - Simply the World's Finest Coffee since 1935. | |
| PuroAir Breathe with Confidence. Live MCP catalog for PuroAir HEPA air purifiers - stock, pricing, details. | |
| CounterScript - Drug Price Benchmarks Free US drug-price benchmarks from federal data (CMS NADAC): a benchmark, not a price anyone owes. | |
| GreenLight - Plug-in Solar Law Registry US plug-in solar (balcony solar) law registry with a daily UL 3700 certification watch. | |
| GroundRules - US Law Text The original text of US federal and state law, with official sources; never a summary or advice. | |
| GroundTruth - Environmental Records Federal environmental records near any US location, with dates and provenance; never a safety score. | |
| ai.agentlookups/overassessed Maryland property-assessment fairness checks vs similar homes, with appeal windows and links. | |
| Plumbline - Contractor License Checks Free contractor-license checks from official state records; a no-match never proves unlicensed. | |
| Spoon Scout - Food Contaminant Lookup Lab results, FDA recalls and additive rules for US packaged foods, with sources; never a grade. | |
| AgentMesh Be an agent on the AgentMesh network: find agents, hire them, be hired, and read your mesh inbox. | |
| ai.agentrapay/agentra Identity oracle and trust layer for autonomous AI agents. Bidirectional KYA and trust scoring. | |
| AgentsIndex The editors' index of AI-native software, from AI agents to the models and frameworks behind them. | |
| AgentUI Apps Create AgentUI data apps: define tables, read and write records, and run programs on your data. | |
| Amazon Seller Central & Ads MCP Amazon Seller Central and Ads in Claude or ChatGPT. Connect at agentxray.ai/connect. | |
| Amazon Seller Central & Ads MCP Amazon Seller Central and Ads inside Claude or ChatGPT. Real fees from your own settlements. | |
| Aginera Construction takeoffs, routes and schedules; PDF to CAD; floor plan to 3D dollhouse and room images. | |
| Agothe Agent Contract Preflight Deterministic MCP, JSON Schema, and SemVer preflight via Agothe's public MUV scope. | |
| AI-Advisors Read-only AI search visibility data: citations, AEO audits, and advisor insights from AI-Advisors. | |
| AI-Portal Enterprise GenAI Briefing Live AI data for agents: model releases, regulations (EU AI Act), GenAI glossary, daily news. | |
| Bot Office Report AI bot work to a live office; ask a person to approve risky actions; work queue and memory. | |
| aigamedev.ai Game-design skills for AI agents: describe a problem, get the right skill. Plus free sound effects. | |
| AI Photo Animator Animate photos into AI videos: viral effects, old photo restoration, text to video, AI images. | |
| AirShelf Catalog Cross-vendor B2B catalog for AI agents: search, compare, find equivalents, request a quote. | |
| AIS CVE Priorities — daily exploit-ranked patch list for AI agents Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full | |
| AIS Gateway — the campus front desk for AIS MCP buildings Front desk for the AIS MCP campus: lists our buildings (CVE, Flight Recorder), prices, how to pay | |
| AIS Agent Flight Recorder — dead-man alerts & resume for AI agents Dead-man switch for AI agents & cron jobs: heartbeat with state capsule, alerts + resume links | |
| ai.aivonic/mcp Do business with Aivonic: pricing, products, check availability, book a demo, request a quote. | |
| AkaPhone Cloud Android phones for AI agents: tap, type, screenshot, install APKs, run plain-English tasks. | |
| AkkruData SEC filings, financial statements, metrics, insider and institutional holdings as structured data | |
| Alcock Arena AI forecasting gym: markets, sports, policy and tech. Graded by reality, measured against markets. | |
| Aldro: small-business tax US and Canada business tax deadlines, annual reports, sales tax permits and quotes, with sources. | |
| Alpha Bazaar Arena Paper-trading arena for AI agents: publish stock calls, build attested track records, compete. | |
| AlphaCreek SEC Filings MCP Access SEC filings efficiently (10-K, 10-Q, etc), save time and tokens, and get cited answers. | |
| AQL PropertyCheck — check one exact address (Gold Coast & Brisbane) Gold Coast & Brisbane: the building, the street at its door and the everyday context around it. | |
| AlpiX A pixel wars MCP server: ask your agent to collaboratively draw pixels in a huge square | |
| Alpic Manage your projects, debug deployments, and check analytics for any MCP server you host with Alpic. | |
| ai.alpic.test/test-mcp-server Alpic Test MCP Server - great server! | |
| Alvin's Club BrandPilot Plan and run brand content on X, LinkedIn, TikTok, YouTube Shorts, Instagram and Hashnode. | |
| Alvin's Club Channel Publish approved videos and posts to TikTok, YouTube Shorts, Instagram, X, LinkedIn and Hashnode. |
26,451–26,500 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.