Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Every MCP Search the public universe of MCP servers. This data comes from the Official MCP Registry. | |
| Everyn Use Everyn's hosted MCP server to turn datasets into reviewed, exportable results. | |
| eVoost AI Verified facts about eVoost AI: products, FAQ, site search and contact channels. | |
| ExitValue.ai M&A Multiples Median EV/EBITDA and EV/Revenue multiples by industry and deal size from real M&A transactions. | |
| Explore Science Connect your Explore Science account for deep expert review of science, from idea to manuscript. | |
| eYKON Intelligence Live geopolitical intelligence feeds, plus eYKON's own scored and published forecast record. | |
| ai.ezel/ezel Search U.S. case law, fetch opinions, and ask matter-aware legal questions over your documents. | |
| Fabeo Make AI videos from chat: write, edit and render multi-scene branded videos with your Fabeo account. | |
| ai.facesign/facesign-mcp Build and test FaceSign step-up verification flows from your AI coding tool | |
| ai.factori/mcp Real-world location intelligence: foot traffic, trade areas, demographics, site scoring, and more. | |
| fAlpha Explainable model signals, drivers, news sentiment, SEC filings and macro data for US stocks. | |
| FamilyLore Reads handwritten family letters in old scripts and translates them, with notes on what they meant. | |
| FamRelay Share approved, expiring details with family or between your own AI assistants. | |
| Fantopy Free World Cup 2026 prediction game with fixtures, picks, brackets, and leaderboards | |
| FapperAI Chat with adult (18+) AI companions that remember you, send photos and voice notes and run your toy. | |
| Fast Insight AI-moderated voice and video interviews with a real consumer panel in 56 countries. | |
| FastMetal Run and compare LLMs, generate images and video, with the real yen cost returned per call. | |
| Fast Response AI Calls, texts and follow-ups from your AI receptionist: catch up, text customers, update contacts. | |
| ai.fathom.api/mcp Give your AI assistant real meeting context via Fathom so every output grounded in your work | |
| Feedback1 Collect feedback and manage the product roadmap from AI agents. | |
| FeedBoss LinkedIn content team: writes in your voice, makes brand visuals, schedules posts, tracks results. | |
| Fido Scheduling built for sign language interpreting: assignments, availability, Suggestions, exports. | |
| FICKEL by FickelUSA Custom branded promotional products and merch: search the catalog, request a quote. 100-piece min. | |
| filedone Merge, split, compress, OCR and translate PDFs, pull tables into Excel, and edit PDFs and photos. | |
| Filepad Connect AI agents to Filepad workspaces through OAuth MCP. | |
| 電影大師 filmai AI film studio: shoot video, images and sound, review takes, audit scripts, quote before you shoot. | |
| Filtrix AI MCP Filtrix MCP for image/video generation. Portal: https://agent.filtrix.ai/ | |
| ai.fincontext/fincontext Read-only bank & investment accounts via Plaid: balances, holdings, transactions, SQL analytics. | |
| FindBytes Search classified ads from European marketplaces: rentals, homes, vehicles, second-hand goods, jobs. | |
| FindIP Semantic patent search & analysis: find, compare, and analyze patents by meaning. | |
| Fine Structure Build and host full-stack apps from a prompt, with agents that reach you on WhatsApp and email. | |
| FinStat Documents in, reconciled double-entry books out. Statements, invoices, receipts, matched and posted. | |
| ai.fintent/signals Predictive Signals, Company Search, Sector Trends and Contacts for PEs, IBs, M&A dealmakers. | |
| Fireflies.ai Search and analyze meeting transcripts, summaries, soundbites and analytics from Fireflies.ai | |
| firmy.ai: Polish company and person registers (KRS, CEIDG) for AI agents Polish companies and people: KRS, CEIDG, financials, boards, VAT, sanctions. Free, no API key. | |
| FitCard Which size to buy in a men's shirt, from shirts he already owns that fit. Real garment measurements. | |
| ai.fiuto/mcp AI-powered user research for everyone | |
| Flamel Public Content Read-only MCP server for Flamel.ai's public content: company overview, blog, case studies, FAQs. | |
| FlipDomain Domain Sales Search 2,972 premium domains by keyword, category, TLD, and budget, then submit offers. | |
| ai.flowmingo/flowmingo Free AI hiring platform: create AI interview sets, invite candidates, read scored reports. | |
| Flowstep Generate, inspect, and manage Flowstep UI designs directly from your AI assistant. | |
| ai.fluxink/fci-mcp Convert handwriting into text, LaTeX math, chemistry, or molecular structures. | |
| Fluxmail Cloud Hosted MCP server for your Gmail, Outlook and IMAP mail, with mailboxes and scopes set per agent. | |
| Foliora Managed AI Search Foliora MCP for public discovery, account reads, and agent execution of human-approved changes. | |
| Fonzi Recruiter Manage your Company Profile, Jobs, Candidates, Interview Requests, Matches, and Company Team. | |
| Fonzi Talent Apply to Fonzi, manage your profile and resume, browse Companies, and answer Interview Requests. | |
| FoodPhoto Create food photos, menus and restaurant campaigns. Account-based paid service with Stripe checkout. | |
| Formist AI agent that fills CBAM, GHG, CSRD/ESRS, EU Taxonomy, CDP and other sustainability forms. | |
| Frameo AI video production, idea to final cut: generate, edit and assemble films, ads and social video. | |
| Freudly psychological tests Find psychological self-assessment tests in English, Spanish and Russian, with links to take them. |
26,801–26,850 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.