Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AcidPeak Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches. | |
| Acoustic Sound Panels Estimate a room's echo, get panel recommendations, and request a Free Room Analysis. | |
| com.acprompt/acprompt AI agent social network + no1land: a persistent multiplayer ASCII RPG agents play and co-build. | |
| ActiKidz Find kids' activities in Canada; parents check schedules, bookings and payments (read-only). | |
| Action Battery Wholesalers product catalogue Find stationary batteries by chemistry, voltage or application; datasheets, SDS, quotes. | |
| Active Recalling Flashcards, multiple-choice quizzes, mind maps and spaced-repetition reviews from your study notes. | |
| ActivitySmith AI agents and scripts reporting back to your iPhone with Push Notifications and Live Activities. | |
| Actual group – offres d'emploi Search Actual group job offers in France, find agencies and prepare applications. | |
| Actually Asked Manage your website FAQ, visitor questions and leads, with answers written from your own pages. | |
| ActuallyCare Real-estate platform for agents: escrows, listings, clients, leads, and commissions. OAuth login. | |
| com.actuato/actuator Hire vetted local people for real-world jobs: post, rank, hire, pay in escrow, verify with photos. | |
| AcuiQ Evidence-based acupuncture protocol matcher – search symptoms, match protocols, browse acupoints. | |
| Acutis Gate Every AI tool call runs as the person who asked, under your rules, fully audited. | |
| Ada Diamonds Live lab grown diamond inventory, engagement ring settings, fine jewelry, and diamond buying guides. | |
| AdaptlyPost Post + analytics: Instagram, TikTok, YouTube, X, Facebook, LinkedIn, Pinterest, Threads, Bluesky | |
| Adbloop Meta Ads Meta Ads MCP: bulk-create Facebook & Instagram ads across accounts from Drive folders, guardrailed. | |
| adbtd Email infrastructure as a service: mailboxes, domains, dedicated IPs, sending, deliverability. | |
| AI Site Builder: website preview Builds a website preview for a small business from a one-sentence description and returns its link. | |
| AdCreator AI: Ad Creative Maker Turn a product photo into a finished ad image with copy, or get 10 ad headlines. Free, no signup. | |
| AdCritter for Agents Operate the AdCritter ads platform: campaigns, creatives, audiences, and reporting. | |
| AdCritter for Builders AdCritter ads platform: docs, API reference, app scaffolding, and white-label integration. | |
| Shuffle Runs your Instagram, Facebook, TikTok, YouTube and Google Business: posts, DMs, comments, reviews. | |
| Store Manager for WooCommerce Run a WooCommerce store from Claude: reports, SEO, prices, stock. You approve every change first. | |
| AdGPT Ready-to-publish ad creatives from an AI assistant: campaigns, image/video/UGC ads, brands, edits. | |
| ADITUS Developer Portal MCP Read-only docs for the ADITUS event-technology APIs (ticketing, access, BI) and Shop Micro Frontend. | |
| Sitewalk Technical SEO audits from ChatGPT or the web: health score, prioritised fixes, CSV and PDF reports. | |
| com.adlibapi/adlib Every public ad library in one API — 12 platforms, plus the ads that got removed. | |
| AdLiftr: Meta (Facebook & Instagram), TikTok, Google Ads & Snapchat Launch campaigns, manage ads and analyze performance across Meta, TikTok, Google Ads and Snapchat. | |
| AdMakeAI Generate ad images and UGC videos, research competitor ads, and manage Meta ad campaigns. | |
| com.adminlanding/french-rental-compliance FR/EN tools for French rental, frontalier & home-employment (CCN 3239) — sourced, dated answers. | |
| Admit Coach — College Search & Costs Search US colleges and compare historical admissions, costs and aid using public federal data. | |
| Adology MCP Server Competitive ad intelligence for AI agents: portfolios, ad/content search, analytics, discovery. | |
| LinkedIn Ads Library (unofficial) Unofficial read-only search over LinkedIn's public Ad Library: 253,610 B2B ads with durations. | |
| AdPilot MCP Analyze and manage Apple Ads from your AI assistant with RevenueCat insights and safety controls. | |
| Adrenaline List Search published adrenaline adventures worldwide by destination, category, rating and season. | |
| Mall Store Directory Search 6,926 mall stores across 49 malls in RO, US, UK, HU by city, operator, or category. | |
| Ashraf Gents Hostel, Kalamassery Men's hostel in Kalamassery, Kochi: facts, rates, local guides, nearby places, WhatsApp enquiry. | |
| AdsKub Search classifieds in Phuket, Thailand: vehicles and property for rent and sale. | |
| Meta Ad Library Spend MCP by AdSpendSpy Facebook and Meta Ad Library ads with estimated ad spend per ad, top landing pages and alerts. | |
| Meta Ad Library Spend MCP Demo by AdSpendSpy Keyless demo: Meta Ad Library ads of one advertiser with estimated ad spend and top landing pages. | |
| com.aduanafacilandorra.www/mcp Customs paperwork for shipping used furniture from Andorra to Spain. 49 EUR, ready in 24 hours. | |
| Adviserry Search your newsletter and YouTube archive, drafted actions and working context from any MCP client. | |
| AdvisorIQ CE rules for US advisors by designation and state, plus independent wealth RIA data, with sources. | |
| AdvisorPPC Connect authorized ad accounts to AI assistants for audits, reporting, and approval-gated changes. | |
| com.adwhispr/adwhispr Manage and optimize your ads on Meta, Google, TikTok, X, ChatGPT Ads, Reddit and LinkedIn from chat. | |
| Navisworks MCP AI clash detection in Navisworks Manage 2025–2027 on your PC. Needs the free plug-in. | |
| Revit MCP Read and edit the Revit 2024–2027 model on your PC. Needs the free Revit MCP add-in. | |
| AEC Pilot: MCP for Revit, AutoCAD, Civil 3D, Navisworks and more Let AI read and edit the open model in Revit, AutoCAD, Civil 3D, Navisworks and 4 more Autodesk apps | |
| AegeanBot Direct Stays Search verified Greek vacation rentals with live availability, prices, policies, and booking links. | |
| AEO Auditor — AI Search & Agent Readiness Engine Live AEO, GEO, JSON-LD Schema, robots.txt AI crawler, and Agent Readiness diagnostic auditor. |
29,451–29,500 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.