Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Wikinews MCP Search 20,000+ Wikinews articles (2004-present), with sources. Miso demo at wikinews.mcp.miso.ai | |
| mitbbs.ai 华人空间 — Chinese News for AI Agents Chinese-diaspora news and data for AI agents: news search, stories, markets, weather, visa info. | |
| Modulos Demo Booking Book a Modulos demo. AI Governance Platform for EU AI Act, ISO 42001, NIST AI RMF. | |
| Monolithos Recall authorized Vault notes with keyword and hybrid search, original excerpts, and source paths. | |
| Moonlings — Local Business Intelligence AI visibility + fact-checks (ChatGPT/Perplexity), review gaps & competitor scans, local SEO. | |
| MoreLike Track the TV and films you watch, and find more like them, by talking to your own AI. | |
| MorphaReels AI editor to build, animate & export layered short-form video projects via one tool catalog. | |
| Moxt Workspace Browse and manage files in your Moxt AI workspace from any MCP client. | |
| Mozark MCP Server Mozark's MCP server for AI-powered app testing: device access, test automation, and QA insights. | |
| msza.ai — Polish Catholic Sermons ✝ Search public Polish Catholic sermons, transcripts, Scripture, prayers, churches and daily content. | |
| Mukala Approval-first store operator MCP: drafts, reads, and shop tools. You still approve. | |
| ai.multi-turn/enacta Long-term memory for AI agents: durable records, observable retrieval, governed context assembly. | |
| Multiservicios services Lists Multiservicios services and leaves a request to be contacted. Does not quote, sell or issue. | |
| Video Dubbing, Subtitles, Transcription & Audiobooks — MultiVoice AI video dubbing, subtitles, transcription and audiobook creation. Exact price before any paid job. | |
| Murmur Run heavy compute across your idle devices as one machine. Free up to 10 devices. Data stays local. | |
| MyBooking.ai Run hotels, apartments, job offers and real-estate listings in MyBooking.ai from your AI assistant. | |
| Marky Create, schedule, and publish on-brand social posts to Instagram, LinkedIn, TikTok, and more. | |
| Penny Portable AI memory you own. Keep memories and notes across Claude, ChatGPT, and other AI tools. | |
| myplot.ai Property Intelligence US property risk data for agents: flood, hazards, taxes, air quality. Credits or USDC. | |
| MyPorta Find UK homes for sale and to rent, matched to your wishes, with nearby schools and area guides. | |
| ai.myriade/myriade Explore and query your data warehouse through Myriade's AI data analyst agent. | |
| ai.mythex/mythex Build and publish web, Android and iPhone apps from your AI client, in Arabic, English and 60+ more. | |
| n3tz Atlas Governed company knowledge over MCP. Synthetic read-only demo; customer Atlas by contract. | |
| Naelos.ai Astrology charts, transits and eclipses from NASA JPL data, 13,200 BC to AD 17,191. Free, no key. | |
| Nashboard Merchants Merchant intelligence for AI agents: brand/operator/location hierarchy + industry codes. | |
| NatalChart.AI Astrology Swiss Ephemeris astrology: natal charts, transits, synastry, solar returns and astrocartography. | |
| NativeAds AI ad creative generation: brands, Brand DNA, asset uploads, image and video generation. | |
| NativePort 30+ web-access and AI APIs behind one key: search, scraping, browsers, voice, OCR and LLMs. | |
| naturali Configure AI agents, give them knowledge and tools, and read back every generation they run. | |
| Nebelus Agent Construction Build & govern AI agents for regulated industries: EU/GCC residency, governance, audit. | |
| Neopress Build, publish, and grow SEO-ready websites just by chatting with your AI assistant. | |
| Nerdit Deploy, run and share the apps you build with Claude, on your own machines or a Nerdit box. | |
| Sasha, Neural Partners Chief of Staff Ask Neural Partners' Chief of Staff about services, published pricing and booking a conversation. | |
| NeuroViz — AI Jewelry Photography AI jewelry photography: retouching, virtual try-on, and product video generation. | |
| NewDesk Help desk: read the queue, answer and solve tickets, look up customers, refund in Stripe. | |
| Nexez Agentic Commerce Find Nexez sellers, inspect offers, and validate checkout or negotiation before buyer approval. | |
| NexRex Running training and coaching: activities, plans, recovery, rosters and plan drafts. | |
| NinjaChat MCP Create images & video from any MCP agent — 17 models, spend limits, one URL. | |
| Shop Nobi Search products from independent stores. Read-only remote MCP; no sign-in. Buy on merchant sites. | |
| Nodary Linked team workspace: AI agents read and write docs, wikis, sheets, diagrams, boards and reviews. | |
| Fidenta Verify Independent fact-checking for AI answers: a verdict and sources for every claim. | |
| NoInfra MCP Discover managed business agents. Private capabilities require owner authorization and eligibility. | |
| Nolavi Connect Your Google, Meta, Microsoft, TikTok and LinkedIn ads in your AI. Changes wait for your OK. | |
| Nordax AI Entity Network Search and verify 360K+ business entities with trust scores and W3C credentials. | |
| ai.norg/express AI Retrievability by Norg — mirror and optimize your site for AI agents like ChatGPT and Claude. | |
| ai.normhyra/normhyra Swedish normhyra calculation engine: convert rents, process rent rolls, generate PDF reports. | |
| ai.northlit/northlit AI design studio: briefs to direction boards, HTML prototypes, images and video. OAuth sign-in. | |
| note1.ai Search meetings, export summaries and transcripts, and manage recordings from any AI tool. | |
| Not Human Search Search the agentic web. 4,100+ sites, 11 tools incl. check_url + verify_mcp for probe-before-use. | |
| ai.noveum/noveum Trace, evaluate, and optimize your LLM, RAG, and agent apps with Noveum observability. |
27,201–27,250 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.