Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ELSHWORK Agent Network MCP access to ELSHWORK agents, repositories, isolated runs, discovery and tasks. | |
| ElysianPrimus Public data for agents: CVEs, SEC filings, housing, wildfire, contractor licenses, EPA labels. | |
| email59 Send transactional email from AI agents: sign up by email code, no domain or DNS setup. | |
| Emailchaser Run cold email outbound from an AI agent: campaigns, leads, replies, sender accounts, autopilot. | |
| com.emailkind/emailkind Classify email addresses and domains by provider and type (business, personal, disposable). | |
| Email List Validation Email Verification Verify emails (valid/invalid/risky/unknown): MX, SMTP, catch-all, disposable. Free agent key. | |
| eMailPlane Mail Email for AI agents: send, receive, threads, templates, domains and mailboxes on your own server. | |
| Embedfinder Video page links to publish-ready metadata: title, thumbnail, tags and ranked embed players. | |
| Embers: Tabletop RPG Toolkit Characters, campaigns, adventures & worlds for D&D 5e/5.5e, Pathfinder, Savage Worlds, Fate, & more. | |
| Ember Websites Describe your business. Get a beautiful website, built and published for you from Claude or ChatGPT. | |
| emdly Search, install and submit Markdown skills for AI agents; private Brain files when signed in. | |
| com.emeditor/help Provides access to EmEditor help pages hosted on https://help.emeditor.com. | |
| Emerge Times News on AI agents, AGI, robotics and the agent economy. Read-only; articles CC BY 4.0. | |
| Emerging Tech Center — AI Agent Gig Board Discover and apply to paid (100 USDC) AI agent gigs at the Emerging Tech Center, Phoenix AZ. | |
| Signal-One by EMETZOR Verified external-state intelligence for agents with corroborated evidence and ANSWER or WAIT. | |
| Emisoras de Colombia 264 emisoras de radio colombianas en vivo: busca por ciudad, genero o dial y escuchalas. | |
| AgentsX Public agent exchange: discovery, discussions, social actions, replies and optional Autopilot. | |
| EmojiDig Emoji Search Search every Unicode emoji by meaning or slang and get the exact character, name and codepoints. | |
| Emora Health Find kids' and teens' mental health clinicians, check availability, get booking links and costs. | |
| Empath Legal: venues, sign-up and access Published venue facts for trial attorneys preparing jury selection, plus a guided account start. | |
| com.employeecostaustralia/site Employee Cost Australia: the site's own MCP server — calculator, enquiry (enquiry = a human... | |
| com.employeedeskhq/site EmployeeDeskHQ: the site's own MCP server — dataset; every answer cites the site. | |
| com.emplusx/emplusx Finished, on-brand .pptx and .docx from a brief - quality-gated by an agentic consulting team. | |
| Emporiqa Set up the Emporiqa AI shop assistant for an online store: create, set up, connect. | |
| emprego.com job search Search live job openings in many countries and languages, and read a full job ad. | |
| K-Beauty Agent Commons Public K-beauty catalog, product search, and latest-offers tools with canonical product facts. | |
| XRay-Vision AI-powered codebase analysis — call graphs, security, dead code, complexity. 150+ tools. | |
| EnCirca Domains Search, Register , Renew , Transfer and Manage domains | |
| Enclave402 Pay-per-call agent tools: Polymarket signals, IPFS pinning, EIP-712 attestations. USDC on Base. | |
| com.encompassconfirm/ec360 KYC automation from authoritative public sources. Requires an Encompass licence. | |
| Family Trip Budget Family trip cost estimates with a sourced, dated range for every line, from Endless Travel Plans. | |
| Endorso Turn product links or queries into tracked links that can earn. Carts and search too. | |
| com.endpointo/site Endpointo: the site's own MCP server — dataset; every answer cites the site. | |
| Endurance Wire Endurance gear release dates, launch prices, generation comparisons, rumors and launch predictions. | |
| Energy Drink Ratings Label facts (caffeine, sugar, ingredients) and community ratings for 1,000+ energy drinks. | |
| Enervia Power — Solar & BESS sizing Size solar, backup power and LiFePO4 battery systems for Iran; product picks and Persian guides. | |
| Engagemii Citation Watch Brands ChatGPT names for real buyer questions, updated every 30 minutes, with AI visibility scores. | |
| engman 1:1s, feedback and career plans for the people engineering leaders manage. | |
| EngScript Engineering MCP Engineering calculation MCP server for oil and gas engineering applications. | |
| Cortex booking Book with businesses on Cortex: see services, prices and open times, then book. No key needed. | |
| Book Enhanced Intelligence LLC Book with Enhanced Intelligence LLC: services, prices and open times. No key needed. | |
| Book ES Luxury Auto Detailing Book with ES Luxury Auto Detailing: services, prices and open times. No key needed. | |
| Book ShesMyDogLady Book with ShesMyDogLady: services, prices and open times. No key needed. | |
| com.enigma/enigma-mcp-server An MCP server that provides access to trusted data about business identity and activity | |
| com.enpso/site Enpso: the site's own MCP server — dataset; every answer cites the site. | |
| com.enrolvo/site Enrolvo: the site's own MCP server — dataset; every answer cites the site. | |
| Enshape Read your private Enshape diary and log meals through scoped account authorization. | |
| Entalpa Requirements MCP Spec-driven development for AI coding agents: live requirements, stories and traceability over MCP | |
| PariteCK PariteCK (formerly EntangleEQ): public pay transparency and Egapro data. Public content only. | |
| agentpay — card-funded wallets for AI agents Pay-per-call LLM + extract (no API key), prepaid wallets, scoped keys, BSV x402 MCP. |
31,201–31,250 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.