Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MADLAB // Publishing Build, preview and publish websites from the chat – hosting in Switzerland and the EU. | |
| Neubau-Radar – Swiss building applications Every official Swiss building application on the day it is published, for professionals. | |
| Porsche Service Calculator (Garage Kuhn) Porsche service plans, workshop appointments and quotes at Garage Kuhn, Porsche specialist. | |
| Soljo Solar (Switzerland) Independent rooftop solar first estimate for Switzerland: yield, median cost, subsidy, with sources | |
| Spick Me — Swiss public transport Swiss trains, trams, buses, boats: door-to-door journeys with pictures, boards, days out, reach maps | |
| ch.swisslivingindex/swiss-living-index Official Swiss data for all 26 cantons and 2,100 communes: tax, rent, health premiums, fuel, jobs. | |
| ch.the-orbit/orbit Orbit Zürich: Workshop-Räume, Preise und freie Slots abfragen, Buchungsanfragen stellen. | |
| Uviqora Find and book people for short on-site tasks in Switzerland. Free public pilot, early stage. | |
| ch.valetvoisin/valetvoisin Swiss services marketplace. AI agents prepare mission drafts; a human always confirms and pays. | |
| Vetari Swiss company-register intelligence: new GmbHs by canton, shared addresses, UID history, SHAB text | |
| vidit (demo) Demo of a Swiss tax service for AI agents: AI-drafted answers, sample quotes, nothing validated yet. | |
| Was ist MCP? Demo-Server Plain-language MCP explainer in German: search and read was-ist-mcp.ch. Most tools need no login. | |
| Zenarion — Thai massage booking Find and book Thai-massage salons in Switzerland with live availability. | |
| Zeno AI bookkeeper for Swiss small companies: books invoices, reconciles the bank, keeps VAT current. | |
| Zitli Swiss scheduling: event types, availability and bookings in your Zitli account. | |
| Zuerst zuhause – Swiss new-build projects Swiss building applications: new residential projects, months before they are advertised. | |
| 1233.chat Search goods and services listings on 1233.chat, a classifieds board in Bishkek, Kyrgyzstan. | |
| Askli Customer Research Run interviews with real customers and retrieve evidence-backed product findings. | |
| chat.avva/catalog Search Avva for an expert, then connect their model - judgment from real past decisions. | |
| Conecto Bookkeeping Double-entry bookkeeping with bank matching, reports and DATEV export. Pay per action. | |
| Conecto Calendar Booking pages, free times and meetings for your agent. Pay per action. | |
| Conecto The whole back office for your AI agent: CRM, invoices, books, email and more. Pay per action. | |
| Conecto CRM Contacts, companies and deals, with every email, call and meeting on one record. Pay per action. | |
| Conecto E-signature PDFs signed in the browser and sealed with a signing certificate. Pay per action. | |
| Conecto Email Inboxes on your business's own subdomain that send, receive and keep threads. Pay per action. | |
| Conecto Forms Forms and surveys on your own pages, from quote requests to NPS. Pay per action. | |
| Conecto Help desk Support tickets from email, with SLAs, queues and ratings. Pay per action. | |
| Conecto Invoices Quotes and invoices numbered without gaps, sent as PDFs, paid online. Pay per action. | |
| Conecto Newsletters Newsletters with double opt-in, an archive and click counts. Pay per action. | |
| Conecto Website chat Your website's chat widget, answered by your agent. Pay per action. | |
| muro - Live Chat & AI Support Inbox Live chat + AI support inbox: list, triage, and reply to customer conversations; configure widgets. | |
| chat.prelim/prelim Read AI preliminary phone screens — your roles, candidate scores, transcripts, and analytics. | |
| Probed Run a Probed community space: chat, members, roles, moderation, roadmap, ideas, feedback and CRM. | |
| Prowl MCP Real-world market data for AI agents: 444 pay-per-call tools (SEO, ads, social, trends, finance) | |
| SMAT Create, schedule and publish Instagram and Facebook posts from Claude or ChatGPT. | |
| yui: where agents meet on Sui Open rooms where AI agents meet on Sui, plus a Sui docs search and a directory. | |
| Uproar Chat where AI agents are first-class members, with their own identity and permissions. | |
| Zorgverzekering.chat: Dutch health insurance Dutch health insurance (zorgverzekering): premiums, coverage, providers, yearly cost. Not advice. | |
| MCP Hub — your personal data for AI Your personal data for AI — Telegram, bank, courses, Zoom & more, scoped to you. | |
| city.atalaya/riesgos Riesgos en vivo en Colombia: lluvia, inundaciones, incendios, sismos y reportes de vecinos. | |
| C'est Chaud à Paris Read-only Paris catalogue: events and dates, places, free things, booking links. | |
| Alfabot MCP Server Consulta de planes de productos Alfabot y agendamiento de reuniones para colegios y empresas | |
| Coupondroid Chile Live coupons, promo codes and deals from online shops in Chile. Read-only, no login. | |
| Mr BnB: reservas en Santiago Disponibilidad, precios y link de reserva de departamentos amoblados en Santiago de Chile. | |
| PRO Universitas · PAES Practica para la PAES y revisa tu avance en PRO Universitas: ensayos, puntaje proyectado y más. | |
| Urbai · Normativa urbana de Chile Consulta la OGUC, la LGUC y Planes Reguladores Comunales de Chile con citas a la norma vigente. | |
| Ciro Cesar Maciel — Free Tools Free, no sign-in: favicons, web to Markdown, CSV to chart, text to speech, time zones, passwords. | |
| App Store Connect Revisão, versões, builds e avaliações dos seus apps | |
| Bing Webmaster Tráfego, consultas, rastreio e envio de URLs no Bing | |
| CNPJ e CEP Empresa pelo CNPJ, CEP, feriados, DDD, bancos, NCM, Selic, CDI e IPCA, e conferência de CPF e CNPJ |
28,951–29,000 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.