Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| com.airblockfz/inflation-signal Inflation & Fed liquidity thermometer: 47 macro series, too_low..too_high. Pay-per-call x402. | |
| com.airblockfz/seoul-apt-signal Seoul apartment signals: 25 districts from official transactions, scans. Pay-per-call x402. | |
| com.airblockfz/stock-signal-kr Korea stock (KOSPI/KOSDAQ) bottom/top signals: verdict + score, scans. Pay-per-call x402. | |
| com.airblockfz/stock-signal-us US stock bottom/top signals: S&P500 + indexes, verdict + score, scans. Pay-per-call x402. | |
| AI Receptionist Rankings Ranked AI receptionists: dated prices at 100 and 200 calls, terms, integrations and the scoring. | |
| AI Resume Master Build and edit real resumes in your AI Resume Master account, and export them to PDF. | |
| com.airfreightprice/mcp Air freight rates and transit times worldwide - search routes and request quotes via AI agents. | |
| Airline Starlink Tracker Starlink WiFi status for United, Alaska and Hawaiian flights, with per-airline route odds. | |
| Airparser Extract structured data from invoices, receipts, PDFs, scans and emails into clean JSON. | |
| Airport Pickups London Quote, book, track and see live cars near UK airports. Fixed prices; no signup to start. | |
| Airside Labs Aviation Tools Aviation identity resolution and an AI use-case atlas, with provenance and temporal validity | |
| com.airtable/mcp Official Airtable MCP server — database and operations layer for agents. | |
| com.aisandboxenvironments/site AI Sandbox Environments: the site's own MCP server — enquiry (enquiry = a human handoff, not a... | |
| AI Separations Turn artwork into press-ready color separations for screen printing and DTF: plates and halftones. | |
| AI Setups That Work Search step-by-step AI setups for small business, work and home. Tested setups first. | |
| Shorty Summarize and transcribe videos, audio, documents and web pages; subtitles; search your library. | |
| AI Skill Directory Search and fetch curated AI agent skills, prompts and MCP servers. | |
| AISkills402 Tested AI agent skill files (SKILL.md), bought once over x402 for cents on Base. Free MCP search. | |
| AI Stack Score Scores a website's AI technology adoption using BuiltWith data. | |
| AIStrategyMiner Design trading strategies with your AI and open them in a visual no-code Strategy Builder. | |
| Surf Hut Signed proof-of-time, 30-day stash, live NOAA surf data. No auth. The hut keeps honest clocks. | |
| AITeamGuide AI agent prices Read-only lookups of public AI agent pricing, free plans and source links. No API key. | |
| AI Text-a-roo Two-way texting between you and your AI agent: it texts you, and you text it back. | |
| AI Training Data Broker Guidance on selling or licensing company data to AI labs: deal steps, de-identification, compliance. | |
| AITWIRE Business-published entity records with confirmation dates: look up, page feeds, check claims. | |
| AITWIRE — Tenant Ops Review your AITWIRE recommendations and Brand Canon; file corrections for your approval. | |
| AiuniVid · Seedance video Generate Seedance 2.5 and 2.0 videos from chat. Quotes credits before each job; OAuth sign-in. | |
| AIURION Agentic 3D Printing — San Francisco SF 3D printing + design workbenches (enclosures, grippers, fixtures, stamping). Quote and order. | |
| com.aivshire/site AI vs Hire: the site's own MCP server — calculator, enquiry (enquiry = a human handoff, not a... | |
| PlanLimits by aiw3b Find the AI coding/app-builder plan that fits your usage: limits, prices and plan-fit picks. | |
| com.aiwebsitepipeline/indexnow-toolkit Build and validate IndexNow payloads, check key files, and diff sitemaps into a submission list. | |
| AI Website Security Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering. | |
| Kaio Find and book local businesses in Italy on Kaio: real free times, booking, online payment link. | |
| Akiflow Official Akiflow MCP for tasks, calendars, scheduling, time slots, and meeting transcripts. | |
| Akiya Listings Japanese akiya (vacant home) listings, Jestimate valuations and regional prices. | |
| Al-Taswia Iraqi Law Research Read-only search of Al-Taswia's published Iraqi law articles. General information, not legal advice. | |
| Alder Invoices Free invoice drafts, templates and direct PDF generation for AI agents. No account needed. | |
| Alexandre Caramaschi: cursos e aulas de GEO em português Cursos gratuitos de GEO, SEO e IA em português: aulas, busca híbrida, grafo de conceitos e contato. | |
| Alexandria Archive History of Alexandria, Egypt: search the archive, read articles, find events and prints. | |
| Alex Polonsky's Personal MCP Public profile, availability, writing, and music discovery for Alex Polonsky. Read-only. | |
| com.alexstokes.api/uk-tender-data Search UK Find a Tender notices. 3 free calls/day per IP; paid x402 MCP calls cost 0.01 USDC. | |
| com.algeriacertify/verification-talent Verify Algerian digital certificates and find certified professionals for hiring in Algeria. | |
| Algo Trade Analytics Evidence-gated quant research for TradingView Pine Script strategies, run from your AI client. | |
| Cubicle Agent trading tools: candles, copy-trading, hire a strategy for your Robinhood vault, pay on chain | |
| Alishahi Insurance Request a home, auto, business, contractor or trucking insurance quote from a licensed broker. | |
| Alkemata Knowledge Gateway Read Alkemata articles and maps; submit reviewed proposals; create map content with authorization. | |
| All Canada Photos Search and license real Canadian stock photography: landscapes, wildlife, cities and people. | |
| AllClear Connect (OAuth, OIDC, and MCP) Verified identity plus consented personal context, starting with medical records, images & insurance | |
| com.alleskralle/jobs Job search engine with 500k+ listings across Austria, Germany and Switzerland (alleskralle.com). | |
| AllGoodInsp Curated design references for AI — real CSS values, typography specs, and color palettes. |
29,651–29,700 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.