Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Be Sew Bizzy Search Be Sew Bizzy's quilt fabrics and sewing supplies: prices, sales, stock, classes and hours. | |
| Besot: Musician Fashion Resale Cross-source price compare for clothing musicians designed, wore, or founded. Real listings. | |
| Bespree Resumes Create and edit saved resumes, make tailored or translated copies, and export PDF or Word. | |
| Boat Day Read-only boating data: Seacoast ME-NH boatyards, cited winter storage prices, boat models, value. | |
| BestBounceBiz Public Rankings Read-only public rankings of US bounce-house rental websites: national top 5 and each state's #1. | |
| com.bestcarfinder/dealer-mcp Car dealer AI: search inventory, match Car Wanted buyer requests, and draft private offers. | |
| Beste KI Tools KI-Tools nach Kategorien, mit echten Startdaten und über Stripe geprüften Umsätzen. | |
| BestSaaSWebDesigns Search 400+ real SaaS marketing websites by category, section, style, stack, palette and font. | |
| Roboto Studio evidence Roboto videos, client interviews, articles and social posts with source citations. | |
| Bestshopping Cashback — IT, DE, FR Search eligible retail merchants and prepare cashback links for adult account holders in IT, DE, FR. | |
| Best Time to Book Hotels Best-time-to-book verdicts, live last-minute hotel deals, and city price calendars, from data. | |
| Betacade Deploy web game builds and read playtests: who played, errors, feedback, bugs. | |
| Better Analyst PDF to Excel Turn bank statements, invoices, receipts and other PDFs into Excel workbooks. | |
| Bettrails eSoccer, esports and NBA 2K stats: head-to-heads, player profiles, today's matches, standings. | |
| Beyond Payday Household finance planner: cash flow, net worth, bills, debts, goals, retirement. | |
| com.beyourcover/book-cover-generator Generate genre-aware, print-ready AI book covers (ebook, KDP wrap, audiobook) via BeYourCover | |
| BharatStock Indian stock market data: NSE/BSE prices, financials, NIFTY/SENSEX, mutual funds, screener. | |
| com.biaedge/immigration-research U.S. immigration law research: BIA/AAO/circuit cases, INA/CFR, USCIS policy, crimmigration. | |
| BidBud Estimating Home-improvement cost estimates, tier comparisons, quote checks and permit guidance for US homes. | |
| BidCraft Get bids from local US contractors: scope a job, then BidCraft contacts contractors for you. | |
| com.bidda/bidda-compliance 10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE). | |
| BidProwl US government surplus auctions: search live lots by ZIP radius, sold prices and Flip Scores. | |
| com.bids44/marketplace Resale prices (INR) for 600+ used products in India, plus live Bids44 marketplace search. | |
| com.bidskim/mcp UK procurement intelligence: live tenders, renewals with incumbents, buyer and supplier profiles. | |
| Bidwell Health Bidwell Health info: UTI, BV, yeast, ED, hair loss, cold sores and herpes care across 11 US states. | |
| CMS Orbit Let AI assistants read pages and draft content in CMS Orbit. A person always reviews and publishes. | |
| Big Balls Sports Data Sports data across 8 sports under one canonical schema — scores, stats, standings, Elo, odds | |
| Bike4Mind — the open-core AI workbench Read-only facts on Bike4Mind: live model catalog, comparisons, open-core license, blog, updates. | |
| com.bilanceapp/bilance Your Bilance finances: spending, budgets, net worth. Optional edits, switchable. Never moves money. | |
| com.bilgai/bilg Shared memory for coding agents and their teams: docs, epics, tasks and decisions over MCP. | |
| Billstride Create, send and track invoices from a conversation, with e-invoices, reminders and DATEV export. | |
| BilYe Compare the same dish across Yemeksepeti, Trendyol Yemek, Migros Yemek and Tıkla Gelsin in Istanbul. | |
| BinaryBirthday Turn birthdays, names and words into binary code, with links to personalized binary-code gifts. | |
| Binderwork Share docs with tracked links, send them for e-signature and run a SAFE round, with your approval. | |
| com.binstockly/site Binstockly: the site's own MCP server — dataset; every answer cites the site. | |
| Biology Verdict Longevity product reviews as data: dated US prices, cited sources and disclosed store links. | |
| BioTuring MCP GPU-accelerated compute engine for BioTuring's biological databases | |
| Birch & Bracken Knitwear and layers: search the catalogue, sizes and size charts, delivery, policies, order status. | |
| BirdieDuel Import golf scores after reviewing a preview. Create rounds with the correct course and play date. | |
| BirdSift Search local businesses, manage saved leads, and draft cold-outreach email from your workspace. | |
| com.birkinbagstock/mcp Read-only Hermes resale research: listings, asking prices, reports, auctions and directories. | |
| Birthday Paper What happened on any date since 1946: headlines, number-one hit, birthday twins. Read-only. | |
| biseyvarmi.com – Etkinlik Rehberi Upcoming theatre, concerts, stand-up, exhibitions and festivals in Türkiye. Read-only, no sign-in. | |
| Autotrade — Autonomous Trading Agents Deploy autonomous LLM trading agents and drive them over MCP. | |
| Bitly Shorten links, generate QR codes, and track performance across your Bitly account. | |
| Bitmovin Observability MCP Query and analyse your data from Bitmovin Observability | |
| Bitpoort On-chain blockchain data for AI agents across Ethereum, Bitcoin, and Hyperliquid. | |
| Bitsound Search the Bitsound music store, manage collection and playlists, edit your releases as an artist. | |
| BitsWeave Read and write shared BitsWeave context, projects, tasks, and work sessions through MCP. | |
| BitterClip Video editor and producer that remembers everything you've recorded. |
30,051–30,100 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.