Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Fourward AI visibility tools Score any website's AI search visibility out of 100 and see which of 20 AI crawlers can read it. | |
| com.foxfiver/state-transfer-tracker Whiteout Survival State Transfer tracker: phase dates, active status, remaining pass chances. | |
| FPL Cat Fantasy Premier League tools: rate a team, captains, player points, fixtures, injuries. No login. | |
| FPL Copilot Fantasy Premier League expected points, team ratings, captaincy and mini-league win chances. | |
| FPV-DB Specs of FPV drone parts and every Betaflight/INAV CLI setting by release; checks a pasted diff | |
| Fractional Teams Portal Fractional Teams client reports, outreach leads, lead marking, paid media and agent-readiness scans. | |
| Framekeep Public Discovery Read-only discovery of Framekeep capabilities, security boundaries, and public resources. | |
| FramePond Read all published image prompts free after sign-in; generate images with subscription credits. | |
| FramerToNextJS Edit text, layout and CMS on your FramerToNextJS sites (converted Framer or AI-built), then publish. | |
| com.framesail/framesail Create long-form YouTube videos end to end: script, storyboard, voiceover, final MP4. | |
| Framevine Generate, extend and edit AI images and videos, then assemble clips on a timeline and render. | |
| FrankoX Verified opt-in trade profiles and consented manufacturer drafts; no private customer data. | |
| Frankreel YouTube growth tools: keyword research, title scoring, AI titles, tags, audits, outliers, ideas. | |
| Frapea A video editor in your browser that your AI drives: cuts, captions, multicam, motion titles, export. | |
| Motion by Frapea One sentence to a finished animation: your AI writes motion graphics as code and checks real frames. | |
| FrazzleCRM CRM + visual automation builder AI agents can drive via MCP: contacts, tags, maps, email/SMS flows. | |
| FreeSign — Free e-signature Free e-signature for humans and AI agents — zero-document PDF signing from hashes only. | |
| Free100EcommerceLeads Check ecommerce store contact coverage by country, platform and company size. | |
| Free100InfluencerLeads Check influencer contact coverage by country, creator category and follower band. | |
| Free100Leads Check B2B contact coverage by country, industry, company size and US state. | |
| Free100LocalLeads Check local business contact coverage by country, category and US state. | |
| Free100RealtorLeads Check realtor and brokerage contact coverage by country and US state. | |
| Free100StartupLeads Check startup contact coverage by country, category and company size. | |
| Free AI For That Find free AI tools, check their free-plan limits, compare free plans and find free alternatives. | |
| com.freebatteryfactory/docs Search and read the Free Battery Factory docs (LiteShip, batpak) as live MCP tools. | |
| FreeDailyPro Tools 200+ MCP tools: PDF, PowerPoint, text, calculators, media, publishing. Nothing stored. | |
| Freelance Clearing Hire a human or agent for what you can't do. Read the whole market with no account and no key. | |
| com.freename/mcp Search, register & manage Web2/Web3 domains, edit DNS records, and build & deploy AI websites. | |
| FreeRateUpdate Mortgage & Home Equity Shopping Today's mortgage and home equity rates (HELOC, home equity loan, cash-out), lenders, start links. | |
| Free Small Biz Tools Free quote and late-fee calculators, paid reminder emails and a $1 small-business tool stack report. | |
| FreightFA Freight rate benchmarks (truckload, LTL, rail, intermodal, barge), market outlooks, FMCSA checks. | |
| com.freightforwarderfinder/site Freight Forwarder Finder: the site's own MCP server — compare, enquiry (enquiry = a human... | |
| com.freightinsurancecost/site Freight Insurance Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a... | |
| Freight Right Freight rates, quote requests and shipment tracking from your Freight Right account. | |
| Freight Sidekick Instant LTL, partial and truckload freight quotes in the US and Canada, with class and pallet tools | |
| FreqBlog Music Metadata Audio features + harmonic set-building for tracks by name/ISRC. Spotify audio-features replacement. | |
| Fresh SEM Agent Backlink Checkout Quote and track managed contextual backlink orders paid in USDC. | |
| Austin Oaks Page Watch Watch a public web page for changes when your agent cannot stay running. Hourly checks, signed diffs | |
| Austin Oaks Payload Rescue Repair malformed JSON that fails a schema. Deterministic only; refuses to guess; signed receipt. | |
| FridgeToForks Real recipes you can cook from the food you already have, with exactly what is missing. | |
| Fromerica U.S. Trade Data U.S. tariffs (HTS), Schedule B codes, export statistics, party screening and FMC license checks. | |
| Frontera Signal Rio Grande Valley, Texas construction data: free catalog, samples and series; paid calls via x402 | |
| Frontic UI Search, read and add Frontic UI's Vue components for commerce storefronts. | |
| Frontlatch Find local service businesses and send requests the owner confirms. Sandbox by default. | |
| com.frontofgoal/odds-api Live soccer prediction-market odds and order-book depth from Polymarket. | |
| FrontRowTickets.com MCP Server FrontRowTickets.com inventory for AI agents: search, deals, and seat-level options. | |
| Front Sentinel Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls | |
| com.frontstat/visibility See whether ChatGPT, Claude and Gemini recommend a startup's product, and who they name instead. | |
| FrunkLab AI Tesla Paint Shop wraps and lock chimes for your FrunkLab account, plus gallery and sound search. | |
| FuelAzores Official maximum fuel prices, effective dates and history for the Azores and Madeira. |
31,601–31,650 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.