Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Dealboard Simple deal tracker with pipeline cards, notes, goals, reports, and AI-powered deal updates. | |
| Deep Recall (getdeeprecall.com) One memory you own, shared by Claude, ChatGPT, Gemini, Muse and any remote MCP client. | |
| com.getdextego/dextego Sales coaching data in your AI assistant: calls, Influence Scores, objections and meeting prep. | |
| DoLoop Recurring tasks in loops. Your assistant reads today's tasks, checks or skips them, edits loops. | |
| Domly — rentals in Bulgaria Search long-term rentals in Bulgaria, get rent prices by city and district, contact a local realtor. | |
| DropAgent Ringless voicemail and SMS follow-up for AI agents, with consent checks and confirmed bulk sends. | |
| Dynamic QR Codes Create dynamic QR codes and re-point ones already printed, with bot-filtered scan analytics. | |
| Finbolt SEC-filed company financials with filing citations, plus market data, for AI agents | |
| Finero Read a Finero workspace and issue payment links, as the person who approved it. | |
| formset Build, share and read hosted forms by describing them in conversation. | |
| com.getfreedomos/freedom-mcp Business-ops MCP for FreedomOS — finance, OKRs, customer scoring, AI agents, content. 250+ tools. | |
| Genko Prior Auth public docs Read-only Genko Prior Auth docs, guides, specialty checklists, facts, pricing and fit checks. | |
| GYEOL Site Maker Free multi-page website draft for a small business; the owner signs in to keep and edit it. | |
| Harbor (gethrbr) Team memory for coding agents: rules you approve, served to every agent, and which ones it cited. | |
| Human Design Calculate Human Design charts, follow transits and forecasts, compare people and analyse groups. | |
| Inbox Triage Connect Gmail, Outlook, iCloud, Yahoo and IMAP to AI apps in one MCP connection. | |
| Infrly Read-only access to your Infrly services, deploys, logs, metrics and billing. | |
| IntentCast Find live Reddit, Quora and forum threads your video, page or topic answers, with draft replies. | |
| Klar Read-only access to your Klar marketing attribution and profit data. | |
| Klo - video editor Edit videos in the cloud: footage, color grading, audio, editable Remotion graphics and exports. | |
| LandLens rental records Owner of record, code violations, evictions and tenant reviews for US college-town rentals. | |
| Leal Design and launch Apple Wallet and Google Wallet loyalty stamp cards for your shop, café or salon. | |
| com.getliftcompass/liftcompass Compare protein, creatine and pre-workout by price per serving, third-party testing and dose. | |
| LinkBunny Placement Checker Checks whether a public page links to an expected URL; reports anchor, rel and canonical. | |
| LinkIntel Evidence for your AI's next X post: your post metrics, X ranking weights and chosen references. | |
| Litjob Litjob AI job application assistant: job matches, tailored CVs and cover letters. You submit. | |
| Lowcart delivered prices Cheapest delivered price for any product: tech, home, shoes, beauty. Read from each store's checkout | |
| Mailcheck: Email Open & Click Tracker Email open and click tracker for Gmail, Outlook, Zoho Mail, Roundcube, Hostinger Mail and more. | |
| Get Mandatory Training courses Online CPR, AED & first aid courses, prices and employer-acceptance wording. Read-only, no sign-in. | |
| Manifeste E-commerce margin calculator: GO/RISKY/NO-GO verdict for Amazon, Etsy, eBay, Shopify, TikTok Shop. | |
| com.getmcpulse/mcpulse Analytics for MCP servers. Query your tool calls, first-call success, retries and schema cost. | |
| MeetNotes Search, read and export MeetNotes meeting transcripts, minutes and action items (getmeetnotes.com). | |
| Merci AI App Store and Google Play reviews and reply drafts. Publishing stays in Merci AI. | |
| MixWise Cocktails you can make from bottles you already have, full recipes, and the best next bottle to add. | |
| Get on Board Recruiter-scoped search across Latin America's largest tech talent pool. OAuth-authenticated. | |
| Ideal Run a creator's Ideal: publish video, music, podcasts, posts; shop; own AI; pricing. | |
| Opservo Read-only server insight: why a Linux server or K8s cluster is slow, failing or changed. | |
| Orquesta Read a project's prompts, logs and agents, and send new work to the agent on your own machines. | |
| Panes — a private feed on your phone Send notifications, updates and daily digests to a person's phone — typed cards in a private feed. | |
| Planagram Create, schedule and manage social posts on 10 networks (Instagram, TikTok, LinkedIn, X...) | |
| Postcue Plan social posts that Postcue cues on your iPhone at the right time. It never posts for you. | |
| PrepSheet Read-only kitchen costing, recipe scaling, UK GP, starter menus, and prep lists for chefs. | |
| Priorivo: Technical SEO & Website Audit for AI Agents Evidence-backed technical SEO website check. EUR 9.90 via MPP or buyer-approved Stripe Checkout. | |
| ProofSnap Capture web pages as signed, timestamped evidence; compare, watch and verify them. | |
| ProofSnap Verify Check without an account whether ProofSnap issued an evidence package. | |
| Pylot AI Draft, schedule and publish on-brand social posts and images for a small business from any AI agent. | |
| RigBase Measured local-LLM tok/s on home AI rigs. Search builds, can-it-run, best GPU; sourced + linked. | |
| Roomproof Room planning to scale from your AI: it places furniture, Roomproof checks walkways and door swings. | |
| Rosey – Quality verification for human and AI content Fact-checks generated content against your sources of truth showing what to trust, change, & verify. | |
| Sapiens Course authoring for AI agents: write from Sapiens' personalized briefs; export and send to Kindle. |
31,751–31,800 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.