Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| CooperBuild AI-native operating system for general contractors: estimates, takeoff, bids, pay apps. | |
| Cordex WhatsApp CRM: inbox, contacts, deals, campaigns, AI agents, automations, ads and reports. | |
| ai.corduroy-labs/updates Corduroy Labs studio updates over MCP: list_updates and get_update, backed by the site's JSON Feed. | |
| Coreplex Search, compare prices and find official stores across brands that sell on Shopify. | |
| Corey James portfolio Fit reports and search over Corey James's work: GPU inference, agent governance, enterprise AI. | |
| Corvio Cloud notes and AI workspace: search your notes and save AI answers as editable, shareable docs. | |
| Council of AI GSPC 19 tools (14 free, 5 x402-metered): GSPC board, evidence, Ed25519 card verify. Measurement only. | |
| Council of AI GSPC (free) 14 free read-only tools: GSPC board, signed card and capsule verify, Merkle proofs, route. | |
| Counterparts AI Phone A phone number for your AI: people and their AIs leave messages, your AI reads them to you. | |
| Coworker Enterprise context layer for AI across 50+ work apps. Enterprise-only: book a demo for access. | |
| Crane Ledger Headless API-first double-entry accounting & bookkeeping engine. 84 MCP tools over HTTP. | |
| CraterView Enlarge, restore and retouch photos from your assistant, billed to your CraterView account. | |
| Create Prints Generate AI artwork and order physical wall-art prints through conversation. | |
| CreditPolicy.ai Australian lender credit policy library and client files for mortgage and finance brokers. | |
| Crub Identify plants, mushrooms and insects, and keep your garden’s records and jobs, from your AI. | |
| Cursu Job Age Checker When a job was first posted and whether it is still open, from the employer's own job link. | |
| Custodo Documents, mail, tasks, CRM and expenses of Italian businesses, from the Custodo archive. | |
| Greenhouse & Ashby Jobs Watch: new jobs at companies you track New jobs (facts and links) from public Greenhouse and Ashby job boards, with a newOnly mode. | |
| AI Image Upscaler: Upscale Images 4x to 8 MP in Bulk Upscale and enhance photos 4x to up to 8 megapixels for $0.01 per image. | |
| CyberNative public PDF accessibility check Check a PDF on a public website for the structure screen readers use. | |
| Upgrade X-Ray: npm & PyPI dependency update diff Diff two npm/PyPI versions or lockfiles: new install scripts, network/shell/eval calls, new deps. | |
| Cybret findings Validated API and app vulnerability findings with remediation guidance. | |
| D50 AI — Sales, Marketing & Hiring Automation 246 tools to run sales, marketing & hiring: CRM, leads, AI calling, content, recruiting & SEO. | |
| Daiku Your own browser in the cloud, logged in to your sites, shared by you and your AI. | |
| Daishi Studio Run AI agent evaluations on your own model keys, and publish runs others can review and re-run. | |
| Daishi A persistent multi-agent world any AI agent can join over MCP, with a public record of every match. | |
| Data Center Index AI infrastructure tracker: data center campuses, power projects, MW and the companies behind them | |
| DataForB2B Search and enrich B2B people & companies — 70+ filters (funding, linkedin, industry, country, ...). | |
| DataGrout Discover, plan and run tools across your connected business systems through one OAuth MCP endpoint | |
| DataMerge MCP B2B data enrichment for 375M+ companies: legal entities, corporate hierarchies, and contacts. | |
| Data Parrot AI Revenue Analyst for HubSpot Data Parrot brings AI revenue analysis of your HubSpot data into your AI tools. | |
| Data Reaktor Find people inside target companies, score warm intro paths, and draft openers. Never sends. | |
| DatePhotos.AI Tinder, Hinge and Bumble photo rules and AI-photo policies, plus a free dating photo audit. | |
| Day Trade AI Day Trade AI signals, analyses, journal and rule checks for your AI agent. Never places trades. | |
| Daystruct Discover reusable source, data and memory capabilities; inspect release evidence and compatibility. | |
| DealFilter AI deal pipeline for IT freelancers in DACH: analyze, list and manage project inquiries. | |
| DealSharp Work with your DealSharp negotiation projects, documents and tools from Claude. | |
| Decision Log Append-only decisions with provenance, supersession, retrieval, and audited MCP actions. | |
| DeCyph Real estate deal underwriting, rent rolls, T12s and portfolio data for your DeCyph team. | |
| Dedox Gives AI assistants read access to your Dedox help centre and knowledge base articles. | |
| DeepInquiry Verified Facts Search and read short factual claims with cited sources, a verification tier and a signature. | |
| Deep Values Value investing for US stocks: SEC filings, 13F guru holdings, intrinsic value, AI briefings. | |
| delega.ai for AWS Pricing Calculator Create AWS cost estimates and shareable AWS Pricing Calculator URLs. | |
| Demand Discovery AI Validate startup ideas with real people asking for them, each quote linked to its source. | |
| Denser Ask, search and review your Denser AI chatbots: knowledge base, chats, analytics and leads. | |
| DeployIt Product Expert AI product expert answering from live source code, with sources and a verification status. | |
| DeskClone Ask a company's DeskClone support agent from Claude, Cursor or any MCP client (API key needed). | |
| DetectifAI Detect AI-generated speech, verify speakers by voice, and tell who answered a call (Noesis). | |
| DeviceLink Read and search folders on your own computer with explicit consent. Files are never uploaded. | |
| Dibri Verified answers for AI agents: only from approved documents, with sources, or a refusal. |
26,701–26,750 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.