Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| FolioFact Read-only value-investing fund, holdings, financial, options, and insider research. | |
| Folionomiq Measures a portfolio from price history: independent bets, what funds own, past crises. No advice. | |
| Folsn Product Catalog Search recorded Folsn product catalogs with linked public seller prices, shipping fees and URLs. | |
| Fondatoria Créer son entreprise en France (statut, nom, aides) et son site vitrine : refonte, création, import. | |
| FontGlitch Zalgo Text Zalgo / glitch text generator plus 17 Unicode fancy font styles (bold, cursive, gothic, bubble). | |
| FoodEatUp Manage authorized restaurant data and tools with your existing FoodEatUp account. | |
| Foo Guard Library Search and read free, scanned AI agent skills and configs. Read-only, no account. | |
| FoolFish Games Find free browser games, get recommendations, and read gameplay guides from FoolFish Games. | |
| com.footballagentindex/site Football Agent Index: the site's own MCP server — checker, enquiry (enquiry = a human handoff,... | |
| com.footdigest/footdigest Calibrated, sourced football predictions: odds, tournament sims, standings, brackets, model card. | |
| com.footfally/site Footfally: the site's own MCP server — dataset; every answer cites the site. | |
| ForcedAlpha Supply Chain Graph Evidence-aware supply-chain research. Authentication required: OAuth or a client-stored API key. | |
| My Fordyce A hosted backlog coding agents claim work from: one ticket per agent, finished work back to review. | |
| AI法拍雷達 台灣法院法拍案件唯讀查詢：搜尋案件、單案標的與風險字樣、縣市行政區概況、知識庫、降價階梯與逾期差額試算。免費免註冊。 | |
| Bayline: truckload, LTL and intermodal freight lanes; warehouse space requirements Truck lanes and warehouse space, specified the way carriers and landlords quote them. | |
| Chamfer: CNC machining, molding, sheet metal and PCB RFQs; MRO parts by part number RFQs shops can quote for machined, molded, sheet metal and PCB parts; MRO parts by part number. | |
| Colophon: translation quotes; image, music, font and patent licensing Translation by language pair and field, and licences for images, music, fonts and patents. | |
| Decant: convert CSV, XLSX and PDF to JSON; web page extraction that honours robots.txt Convert CSV, XLSX and PDF files to JSON, read web pages into structure, and source datasets. | |
| Goodstanding: LLC and corporation formation, registered agent, EIN and annual reports Company formation, registered agents, EINs and annual filings, set out as one brief to quote. | |
| Groundtruth: site inspections, photos and pickups; court and property records retrieval Site photos, inspections and pickups at an address; court, property and business records retrieved. | |
| Joinery: ERP, ecommerce, CRM and accounting system integration quotes Integration briefs for ERP, storefront, warehouse, CRM and accounting systems, scoped and quoted. | |
| Loadfactor: business electricity and gas supply, solar and EV charging quotes A site's electricity, gas, solar or EV charging, specified the way suppliers and installers price. | |
| Millsheet: metals, resins and chemicals specified by grade; bulk CO2 supply planner Specify metals, resins, chemicals and gases by grade, and plan a bulk CO2 supply from your volume. | |
| Nodehour: GPU and accelerator capacity by chip, count, term and region GPU and accelerator capacity by chip, count, term, region and interconnect, specified to source. | |
| Plumbline: OFAC SDN sanctions screening, SEC financials and company checks from public registries OFAC sanctions screening and company checks against public registries, every source named. | |
| Requirements Desk Company, sanctions, SEC and federal award lookups, document conversion, and requirement capture. | |
| Formada3D 3D Printing Melbourne 3D printing: instant quotes for STL/3MF/OBJ files, 3D-printed products, order status | |
| FormaPortal Ask your customer portal and CRM anything, in plain English | |
| FormBuilder Build, preview, edit, publish and analyze forms and surveys; read responses and manage webhooks. | |
| formcarry Set up form handling for your site (email alerts, auto replies, webhooks) and query submissions. | |
| Formkurier Create, change and publish web forms, get link or embed code, list and export answers. | |
| Forms Legal templates Search free legal document templates for 36 jurisdictions and cite Forms Legal pages. | |
| FormsByState US legal documents matched to each state's law: leases, notices, NDAs, wills. PDF or Word. | |
| FormsMCP Hosted form backend for coding agents: create form endpoints, verify submissions, manage webhooks. | |
| FormulaSignal Dated formula history, confirmed changes and evidence for U.S. pre-workout supplements. | |
| Fortitude21 Dangerous Goods Tools Dangerous goods packaging tools: UN number lookup, UN mark decoder, ADR points, IBC dates, bunds | |
| fortrabbit Read apps and environments, and create them, on the fortrabbit PHP hosting platform. | |
| FORTVISION Agency marketing & CRM: leads, campaigns, email/SMS/WhatsApp, LinkedIn, landing pages, social. | |
| Forum for Agents Message board where AI agents ask and answer each other. Optional accounts with an inbox. | |
| com.fostay/hotels Agent-bookable hotels in Dubai, Abu Dhabi & Goa: live all-in AED prices, rate holds, payment links. | |
| fotosize Passport, visa and ID photo sizes, head size and background rules from official sources. | |
| Found17 Public web tools for agents: product extraction, claim checks, webpage QA and ranked audits. | |
| Foundations Counseling Counselors, services, offices, fees, and intake at Foundations Counseling, Northern Colorado. | |
| FounderPulse Your AI assistant reads today's one action to find customers, your context, and logs results. | |
| founderssaid Quotes from startup founders on YouTube: 6,700 videos, 2,000 Korean interviews, with timestamps. | |
| Goldsberry Orthodontics Public facts and a free consultation request for Goldsberry Orthodontics, Sugarhouse, Salt Lake City | |
| Foundry MCP Connect any AI to your Foundry VTT world: actors, combat, dice, journals, tokens, compendiums. | |
| Foundry MCP code mode Code mode (preview): the AI writes a script against a typed foundry.* API and runs it in a sandbox. | |
| Foundry IMS Manage a Foundry IMS catalog: products, variants, BOMs, plus invoices read from supplier docs. | |
| Kuro AI Agent MCP Server AI agent tools: translation (95+ langs), crypto research, compliance, summarization. |
31,551–31,600 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.