Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| HireMike MCP Find your next great hire. Review candidates and manage hiring through your AI assistant. | |
| Hyperhuman Create, personalize and deliver branded workouts and programs from any AI assistant. | |
| Joules — AI Cycling Coach Turn Claude or ChatGPT into a cycling coach that plans your week, grades it, and adapts. Free beta. | |
| Modly Discord Server Management Scoped Discord module settings, XP leaderboards and moderation history for Modly communities. | |
| OpenDocs.cc Publish Markdown as shareable documents, export PDF and Word, share, and send for e-signature. | |
| Perfect Clock Find meeting times across time zones and compare working hours. | |
| PiPic Integration Guide Read-only PiPic CLI and HTTP API guidance; no image bytes are transferred. | |
| Place to Be What's on in any city: live, ranked concerts, sport, festivals, nightlife and culture. | |
| Prosp B2B prospect discovery: find companies by industry, size and market, checked against registers. | |
| Registrai Arc data Read-only hourly data on stablecoin apps on Arc: payments, volume, indices, verified builders. | |
| AI Deals Sentinel: Free AI API Tiers Agent-operated. Free LLM, GPU, search and embedding API tiers: limits, dated, linked to the source. | |
| ScopeAI GEO Observation GEO brand visibility and AI citation evidence. Free capability discovery and request matching. | |
| SecondPage Dashboards, websites, and apps: the Google Drive for everything your AI makes. Edit it together. | |
| SendHQ Send and receive email from your verified domains; manage domains, templates and deliverability. | |
| SmoothSign Send PDFs for e-signature by email and SMS code. Check signing status. No document storage. | |
| Squatch Stack Squatch Stack: a shop that opens in the chat, essays, and requests to the studio. No sign-in. | |
| SSearch Free web search for AI agents. No API key required. Hosted MCP in active development. | |
| Tamloot Look up your Tamloot contacts, sessions, transcripts and notes; add or update contacts and notes. | |
| cc.ticktape/mcp Polymarket preflight verdicts: OK/CAUTION/VETO on orders, COPY/WATCH/VETO on wallets. x402-paid. | |
| VIBEPOST Write, schedule and publish social posts to X, LinkedIn, Threads, TikTok and more, in any language. | |
| Wealthos Plan your financial future with AI: track net worth, manage budgets, and forecast scenarios. | |
| Lawn Care Center Lawn care guides with state- and city-specific timing. Search, read full guides, and cite sources. | |
| Mem.Center Read-only memory search and task context for AI clients. Requires a Mem.Center Pro account. | |
| Link Center Dynamic, editable QR codes + short links with scan analytics and branded QR rendering. | |
| trustai.center pay Pay-per-use LLM inference for agents: pay in USDC/USDT or per call via x402. 247 chat models. | |
| 1820.ch – Telefonbuch Schweiz Swiss phone directory: search people and businesses, reverse number lookup, business categories. | |
| Aarven Swiss accounting (CHF, VAT/MWST): balance sheet, P&L, VAT returns and draft bookings. | |
| agentready.ch: Swiss company directory Verified Swiss company profiles for AI agents: search, read and contact firms via allowed actions. | |
| ARVI Wine Catalog Swiss merchant ARVI SA: 27,000+ fine & rare wine labels, 300,000+ bottles ready to ship. No auth. | |
| Assurs LAMal comparator Swiss LAMal premium comparison (OFSP 2027), single or household; consented offer requests to SPI. | |
| BitSpire Search and read bitspire.ch: .NET development, AI agents, trainings and blog by BitSpire GmbH | |
| Robert Blust Robert Blust: One model, true everywhere | |
| busik.ch – Minibusfahrten Ukraine, Deutschland, Schweiz Search minibus trips between Ukraine, Germany and Switzerland. Read-only. | |
| ch.cowork24/booking Search, price and book Swiss coworking spaces, offices and meeting rooms on cowork24.ch. | |
| Dadaville Read-only search of dadaville.ch: pages, Personaggi, Sedi Dadaville, Glossario. Content in Italian. | |
| Dinilu Schweiz — bedruckte Werbeartikel Aktuelle Preise in CHF, Optionen und Versandkosten für bedruckte Werbeartikel. | |
| DriveLab Booking Find Swiss driving lessons, live availability, VKU, first aid and WAB courses; book on the website. | |
| EasyLPD: Swiss data protection (FADP) and GDPR Swiss FADP (nLPD/revDSG) and GDPR: which laws apply, action plan, templates, transfers abroad. | |
| elevai Commerce Demo Open demo shop: search products, place a 0.05 CHF order, create a PostFinance payment link. | |
| Firmenwatch — Swiss Company Register Search and verify Swiss companies, UID status and register changes with dated official sources. | |
| Finch Read-only access to your Finch finances: accounts, transactions, spending, net worth, goals. | |
| FunkyJobs Stellensuche Search current job listings in Switzerland on funkyjobs.ch and fetch a single listing by id. | |
| Agent Relay — Agent Commons Discuss ideas and uncertainty with LLM agents: join, browse threads, start discussions and reply. | |
| Heimster – Swiss homes Swiss homes to rent or buy, with walking distances, noise, sun and commute times for any address. | |
| Kranli New Swiss building permit applications by municipality and trade (last 90 days, official sources). | |
| JOBFLOW Existing trade and field-service flow for AI agents, request to paid job. Free intent.match first. | |
| PazAIr Where agents keep their word. Agent marketplace: pay on delivery, signed receipts. | |
| Latzerus Lernbereich Latzerus (CH): 100+ kostenlose 5-Minuten-Lernmodule zu Vertrieb, KI und Karriere. | |
| ch.lumabill/lumabill Swiss invoicing and bookkeeping: QR-invoices, clients, expenses, bank import, VAT and reports. | |
| Lundio Swiss commercial register: companies, officers, bankruptcy risk, and your monitored lists. |
28,901–28,950 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.