Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AI Content Detector bach-ai-tools/bachai-ai-content-detector-ai-gpt Enables detection of AI-generated content from ChatGPT, GPT-4, and Gemini models through the BACH AI Content Detector API. | |
| B2Bhint MCP Server bach-ai-tools/bachai-b2bhint Enables access to B2Bhint API for searching and retrieving company and person information, including company details, financial reports, and contact data across multiple countries. | |
| bach-bin_ip_checker bach-ai-tools/bachai-bin-ip-checker An MCP server that provides tools for credit card BIN lookups and IP address verification to help prevent fraudulent transactions. It enables users to validate card details and perform IP lookups using the Bin Ip Checker API. | |
| Bin Lookup Checker API MCP Server bach-ai-tools/bachai-bin-lookup-checker-api Enables bank identification number (BIN) lookups via the Bin Lookup Checker API. It allows users to retrieve information about card issuers, card types, and brands using a specific BIN. | |
| Biztoc MCP Server bach-ai-tools/bachai-biztoc An MCP server that provides access to the Biztoc API for retrieving latest business news, trending topic clusters, and source-specific stories. It enables users to search the news index from the last 14 days and track real-time news wires. | |
| Bulk WhatsApp Validator bach-ai-tools/bachai-bulk-whatsapp-validator Enables validation of single or bulk WhatsApp numbers and retrieval of account metadata, such as business status and profile info, via the Bulk WhatsApp Validator API. | |
| Calculator MCP bach-ai-tools/bachai-calculator-mcp Provides mathematical computation capabilities including basic arithmetic operations (add, subtract, multiply, divide), advanced functions (square root, factorial, logarithm), and trigonometric functions (sin, cos, tan) through the Model Co | |
| Douyin API New MCP Server bach-ai-tools/bachai-douyin-api-new Provides access to Douyin (TikTok China) API for searching videos, retrieving user profiles, posts, comments, music, challenges, live streams, and hot trends through the Douyin platform. | |
| Email Social Media Checker bach-ai-tools/bachai-email-social-media-checker Enables checking email addresses through the Email Social Media Checker API to verify and validate email information. | |
| Envato Downloader API1 bach-ai-tools/bachai-envato-downloader-api1 Provides access to download files from Envato Elements platform by URL through the Envato Downloader API. | |
| Facebook Scraper3 MCP Server bach-ai-tools/bachai-facebook-scraper3 Enables access to the Facebook Scraper3 API to extract data from Facebook profiles, pages, groups, and the marketplace. It provides comprehensive tools for searching posts, people, and events, as well as retrieving detailed metadata for com | |
| Fotocasa1 MCP Server bach-ai-tools/bachai-fotocasa1 An MCP server for accessing the Fotocasa1 API to search real estate listings and retrieve detailed property information in Spain. It supports location suggestions, property filtering by type and price, and fetching specific property details | |
| Geocoding By API Ninjas bach-ai-tools/bachai-geocoding-by-api-ninjas Enables geocoding and reverse geocoding operations to convert city names to coordinates and coordinates to location names using the API Ninjas service. | |
| Geodb Cities MCP Server bach-ai-tools/bachai-geodb-cities Provides access to the GeoDB Cities API for retrieving global geographic data including city details, populations, and local time. It enables users to find nearby locations, calculate distances between places, and browse administrative divi | |
| Ghibli Image Generator MCP Server bach-ai-tools/bachai-ghibli-image-generator-api-open-ai-4o-image-generation-free Provides access to the Ghibli Image Generator API for creating Ghibli-style images using OpenAI models. It enables users to generate stylized artwork through the ghibli_generate_image tool. | |
| Google News13 MCP Server bach-ai-tools/bachai-google-news13 Provides tools to search and retrieve news across various categories including business, technology, science, and sports via the Google News API. It supports keyword searches, autocomplete suggestions, and region-specific news across multip | |
| Google News22 MCP Server bach-ai-tools/bachai-google-news22 Enables access to Google News articles through search by keywords, topics, geolocation, and top headlines with filtering by country, language, source, and date. | |
| GST Insights API MCP Server bach-ai-tools/bachai-gst-insights-api Provides tools to retrieve and validate Goods and Services Tax (GST) details using GST numbers, PAN cards, or company names. It enables users to check registration status, filing history, and business addresses directly through the GST Insi | |
| Humanizer APIs MCP Server bach-ai-tools/bachai-humanizer-apis Enables access to Humanizer APIs for text humanization with multiple models including basic, easy-use, and multi-language support. Requires API key authentication. | |
| Ics Ap Apis MCP Server bach-ai-tools/bachai-ics-ap-apis Provides access to Ics Ap Apis API endpoints with authentication support, enabling API interactions through the MCP protocol. | |
| Instagram120 MCP Server bach-ai-tools/bachai-instagram120 Enables access to Instagram data including posts, reels, stories, user profiles, and highlights through the Instagram120 API with pagination support. | |
| Invoices Generator MCP Server bach-ai-tools/bachai-invoices-generator Provides access to the Invoices Generator API to create professional, customizable invoices with detailed buyer, seller, and service information. It supports multiple languages, currencies, and tax configurations through a standardized tool | |
| Ioc Search MCP Server bach-ai-tools/bachai-ioc-search Enables comprehensive threat analysis for Indicators of Compromise (IoCs) including IP addresses, file hashes, domains, and URLs. It provides detailed reputation scores, security vendor evaluations, and network metadata to facilitate securi | |
| bach-jsearch bach-ai-tools/bachai-jsearch MCP server for accessing Jsearch API to search jobs, get job details, and retrieve salary estimates. | |
| Li Data Scraper MCP Server bach-ai-tools/bachai-li-data-scraper Enables access to LinkedIn data through the Li Data Scraper API, supporting profile enrichment, company details, people search, post interactions, and activity tracking. | |
| LinkedIn Api8 MCP Server bach-ai-tools/bachai-linkedin-api8 Enables access to LinkedIn data including profile enrichment, company information, job searches, post analytics, and social interactions through the LinkedIn Api8 API with comprehensive search and data retrieval capabilities. | |
| LinkedIn Bulk Data Scraper bach-ai-tools/bachai-linkedin-bulk-data-scraper An MCP server that provides access to the LinkedIn Bulk Data Scraper API and various utility tools for data extraction and processing. | |
| LinkedIn Data API MCP Server bach-ai-tools/bachai-linkedin-data-api Enables access to comprehensive LinkedIn data, including professional profile details, company information, and social engagement metrics. It supports searching for people, retrieving posts and comments, and fetching detailed experience, sk | |
| LinkedIn Sales Navigator No Cookies Required MCP Server bach-ai-tools/bachai-linkedin-sales-navigator-no-cookies-required Provides access to the LinkedIn Sales Navigator API without requiring browser cookies for authentication. It enables AI assistants to interact with sales data and various utility endpoints including TV Maze and deck of cards. | |
| Local Business Data MCP Server bach-ai-tools/bachai-local-business-data Enables access to Google Maps business data including search, reviews, photos, and geocoding. Supports searching businesses by location, area, or coordinates, retrieving detailed business information, reviews, and performing reverse geocodi | |
| Malicious Scanner MCP Server bach-ai-tools/bachai-malicious-scanner Enables real-time scanning of URLs for malicious content, spam/gray classification, and additional security flags like domain age through the Malicious Scanner API. | |
| Malicious URLs MCP Server bach-ai-tools/bachai-malicious-urls1 Provides access to a malicious URL database API, enabling users to search, list, and retrieve information about potentially dangerous URLs for security analysis and threat detection. | |
| Midjourney Best Experience MCP Server bach-ai-tools/bachai-midjourney-best-experience An MCP server that provides access to the Midjourney Best Experience API for generating and manipulating images. It enables users to execute prompts and perform actions like upscaling, variations, and zooming directly within MCP-compatible | |
| Moz Da Pa1 MCP Server bach-ai-tools/bachai-moz-da-pa1 Enables access to Moz API to retrieve Domain Authority, Page Authority, external URLs, and Spam Score metrics for website analysis. | |
| Netdetective MCP Server bach-ai-tools/bachai-netdetective An MCP server that provides access to the Netdetective API for querying information about IP addresses. It enables users to retrieve metadata for a specified IP address or the connecting client's default IP address. | |
| News Api14 MCP Server bach-ai-tools/bachai-news-api14 Enables access to News Api14 for searching and retrieving news articles, publishers, and trending topics with filtering by country, language, category, and date. | |
| Newsnow MCP Server bach-ai-tools/bachai-newsnow Enables access to news from multiple sources including Google News and DuckDuckGo, supporting queries by location, category, site, date range, and providing top news headlines with detailed information. | |
| Nutrition By Api Ninjas MCP Server bach-ai-tools/bachai-nutrition-by-api-ninjas Provides access to the Nutrition By Api Ninjas API to extract detailed nutritional information from natural language food queries. It enables users to retrieve data such as calories, vitamins, and macros from text descriptions of meals. | |
| Onecompiler APIs MCP Server bach-ai-tools/bachai-onecompiler-apis Enables code execution in 70+ programming languages and databases through the Onecompiler API, allowing users to run and test code directly from their MCP-enabled applications. | |
| Open AI Text To Speech1 MCP Server bach-ai-tools/bachai-open-ai-text-to-speech1 Enables users to convert text into high-quality audio by accessing the OpenAI Text-to-Speech API. It supports customizable model selection and voice options for synthesized speech generation via the MCP protocol. | |
| Open Ai21 MCP Server bach-ai-tools/bachai-open-ai21 Provides access to Open Ai21 API services including chatbots (GPT-3.5, Claude 3, Llama 3), text-to-image generation, image background removal, text-to-speech, question answering, and text summarization capabilities. | |
| Pan Card Verification At Lowest Price MCP Server bach-ai-tools/bachai-pan-card-verification-at-lowest-price Enables access to the Pan Card Verification API for validating Indian PAN card details. It provides a dedicated tool for performing PAN verification through a standardized MCP interface. | |
| Perplexity2 MCP Server bach-ai-tools/bachai-perplexity2 Enables AI-powered search and analysis of Google data through the Perplexity2 API, allowing users to discover insights and enhance decision-making capabilities. | |
| Power Assist MCP Server bach-ai-tools/bachai-power-assist Provides a comprehensive suite of utility tools for string manipulation, mathematical calculations, and array processing via the Power Assist API. It enables complex data transformations and validations including regex operations, statistic | |
| Prycd Pricing MCP Server bach-ai-tools/bachai-prycd-pricing Enables access to the Prycd Pricing API for retrieving estimated property values and performing health checks on the API service. | |
| QR Code By API Ninjas MCP Server bach-ai-tools/bachai-qr-code-by-api-ninjas Enables generation of customizable QR codes through the API Ninjas service, supporting multiple image formats (PNG, JPG, SVG, EPS) with configurable colors and sizes. | |
| Rchilli Resume Parser MCP Server bach-ai-tools/bachai-rchilli-resume-parser1 Enables parsing and extracting structured data from resumes using the Rchilli API. Supports resume parsing from public URLs or binary data in base64 format. | |
| Real Time News Data MCP Server bach-ai-tools/bachai-real-time-news-data Enables access to real-time news articles through search, topic headlines, full story coverage, and geo-based local news across multiple countries and languages using the Real Time News Data API. | |
| Realty In Au MCP Server bach-ai-tools/bachai-realty-in-au Enables access to Australian real estate data through the Realty In Au API, supporting property listings, agent/agency information, property details, school lookups, and property search with various filters. | |
| Realty In Ca1 MCP Server bach-ai-tools/bachai-realty-in-ca1 Enables users to access the Realty In Ca1 API to search for residential and commercial property listings, view detailed property information, and retrieve neighborhood demographics or statistics. It supports filtering by geographic location |
32,501–32,550 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.