Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Recash1 MCP Server bach-ai-tools/bachai-recash1 Enables access to the Recash1 API for searching and retrieving product information from a database, including filtering products and getting all products with their codes. | |
| Recipe By Api Ninjas MCP Server bach-ai-tools/bachai-recipe-by-api-ninjas An MCP server that enables users to search for recipes and cooking instructions via the API Ninjas Recipe API. It supports querying specific dishes and provides paginated results for recipe discovery. | |
| Reuters Business and Financial News MCP Server bach-ai-tools/bachai-reuters-business-and-financial-news Provides access to the Reuters Business and Financial News API to retrieve articles, trending news, and market data. It enables searching and filtering financial content by date, author, category, and keywords. | |
| Riddles By Api Ninjas MCP Server bach-ai-tools/bachai-riddles-by-api-ninjas Enables access to the API Ninjas Riddles API to retrieve random riddles. Users can request between 1-20 riddles at a time through a simple interface. | |
| Semrush Keyword Magic Tool MCP Server bach-ai-tools/bachai-semrush-keyword-magic-tool Enables access to Semrush Keyword Magic Tool API for SEO keyword research, including keyword overview analysis, finding millions of keyword suggestions, and discovering question-based keywords across different countries and languages. | |
| Sentiment By Api Ninjas MCP Server bach-ai-tools/bachai-sentiment-by-api-ninjas Enables sentiment analysis of text blocks using the Api Ninjas API, returning sentiment scores and overall sentiment classification for up to 2000 characters of text. | |
| Seo Api2 MCP Server bach-ai-tools/bachai-seo-api2 Provides a comprehensive suite of SEO and web utility tools for domain analysis, keyword tracking, SERP data, and technical site audits. It enables users to perform various tasks such as checking domain age, WHOIS information, and website t | |
| Similar Words MCP Server bach-ai-tools/bachai-similar-words An MCP server that provides access to the Similar Words API, allowing users to search for and retrieve semantically related words. It enables language-based applications to query word similarities and relationships through a standardized in | |
| Social Download All In One bach-ai-tools/bachai-social-download-all-in-one Enables downloading content from various social media platforms through a unified API. Provides a single tool to download media from multiple social networks using the Social Download All In One service. | |
| Spamshieldpro MCP Server bach-ai-tools/bachai-spamshieldpro Enables spam detection and content filtering by integrating with the Spamshieldpro API to check form submissions and text content for spam. | |
| Subdomain Finder3 MCP Server bach-ai-tools/bachai-subdomain-finder3 Enables the discovery and listing of subdomains for a given domain through the Subdomain Finder3 API. It provides a specialized tool for subdomain enumeration within the MCP ecosystem. | |
| Subdomain Scan1 MCP Server bach-ai-tools/bachai-subdomain-scan1 Enables subdomain enumeration and discovery by querying the Subdomain Scan1 API. Returns all subdomains for a given domain in JSON format. | |
| TikTok Unauthorized API Scraper bach-ai-tools/bachai-tiktok-unauthorized-api-scraper-no-watermark-analytics-feed Enables access to TikTok data without watermarks, including trending users, hashtags, post analytics, user profiles, and download links for specific countries. Supports searching by username, user ID, or post links. | |
| Timezone By Location MCP Server bach-ai-tools/bachai-timezone-by-location Provides access to the Timezone By Location API to retrieve timezone information based on geographic location data. | |
| Trivia By Api Ninjas MCP Server bach-ai-tools/bachai-trivia-by-api-ninjas An MCP server that enables users to retrieve trivia questions and answers across various categories through the API-Ninjas Trivia API. It supports customizable result limits and filtering by categories like science, history, and entertainme | |
| Truecaller Data2 MCP Server bach-ai-tools/bachai-truecaller-data2 Enables phone number lookup through the Truecaller Data2 API, allowing users to search and retrieve information about phone numbers for identification and verification purposes. | |
| Twitter Api45 MCP Server bach-ai-tools/bachai-twitter-api45 An MCP server for accessing the Twitter/X Api45 API, allowing users to retrieve user profiles, timelines, followers, and media. It supports searching communities, jobs, and trends, while also providing tools to monitor live broadcasts and T | |
| Usage And Billing MCP Server bach-ai-tools/bachai-usage-and-billing Enables access to Usage and Billing APIs for managing accounts, products, meters, plans, and usage reporting. Supports operations like creating products/plans, reporting usage, and retrieving billing information. | |
| Vehicle Database MCP Server bach-ai-tools/bachai-vehicle-database Enables access to comprehensive vehicle information including VIN decoding, license plate OCR, vehicle history checks (theft, title, salvage records), market valuations, specifications, and warranty data for vehicles across North America an | |
| Website Contacts Scraper bach-ai-tools/bachai-website-contacts-scraper Enables scraping of emails, phone numbers, and social profile links from website domains. Supports batch processing of up to 20 domains and can find company websites by keyword/company name. | |
| bach-whatsapp_number_validators bach-ai-tools/bachai-whatsapp-number-validators An MCP server for the WhatsApp Number Validators API that enables users to verify WhatsApp registration and business account status for single or bulk phone numbers. It also provides phone number validation with suggested alternatives for i | |
| WhatsApp OSINT MCP Server bach-ai-tools/bachai-whatsapp-osint Enables querying WhatsApp OSINT API to gather intelligence on WhatsApp numbers, including business verification, user status, privacy settings, linked devices, and profile pictures. | |
| World Time By Api Ninjas bach-ai-tools/bachai-world-time-by-api-ninjas Enables querying current date and time information by city/state/country, geographic coordinates (latitude/longitude), or timezone using the API Ninjas World Time API. | |
| Yakpdf MCP Server bach-ai-tools/bachai-yakpdf Enables PDF generation from URLs or HTML strings through the Yakpdf API, allowing users to convert web content into PDF documents. | |
| YouTube Media Downloader bach-ai-tools/bachai-youtube-media-downloader Enables comprehensive YouTube data access including video details, playlists, channels, comments, search, and subtitle operations through the YouTube Media Downloader API. | |
| Youtube Mp310 MCP Server bach-ai-tools/bachai-youtube-mp310 Enables downloading MP3 audio files from YouTube videos by providing a YouTube URL through the Youtube Mp310 API. | |
| Youtube Mp36 MCP Server bach-ai-tools/bachai-youtube-mp36 Enables users to convert YouTube videos to MP3 format with optional trimming capabilities through the Youtube Mp36 API. | |
| Youtube To Mp315 MCP Server bach-ai-tools/bachai-youtube-to-mp315 Enables conversion of YouTube videos to MP3 format through the Youtube To Mp315 API. Supports checking conversion status, retrieving video titles, and asynchronous video-to-audio conversion with customizable quality and time range settings. | |
| Youtube138 MCP Server bach-ai-tools/bachai-youtube138 Provides access to the Youtube138 API for searching videos, retrieving channel information, viewing comments, getting video details, and exploring trending content on YouTube. | |
| BACH YouTube API MCP Server bach-ai-tools/bachai-yt-api Enables access to YouTube data including channel videos, live streams, shorts, video details, transcripts, screenshots, and related content through the Yt API with support for localization and pagination. | |
| Ytstream Download Youtube Videos MCP Server bach-ai-tools/bachai-ytstream-download-youtube-videos Enables users to stream or download YouTube video information and direct links via the Ytstream API. It supports geographic optimization and language selection for better download speeds and audio availability. | |
| Zillow Working API MCP Server bach-ai-tools/bachai-zillow-working-api Enables access to Zillow real estate data through the Zillow Working API, allowing users to query property information and listings. | |
| Zoopla MCP Server bach-ai-tools/bachai-zoopla Enables access to UK property listings, price estimates, agent information, and market data through the Zoopla API for searching properties for sale or rent with detailed filters and analytics. | |
| BachStudio Excel MCP Server bach-ai-tools/bachstudio-excel-mcp-server Enables creation, reading, and manipulation of Excel workbooks without Microsoft Excel installed, supporting formulas, formatting, charts, pivot tables, and data validation through multiple transport protocols. | |
| PubMed MCP bach-ai-tools/bachstudio-pubmedmcp Enables searching and fetching articles from PubMed, a database of biomedical literature. | |
| BachStudio Teradata MCP Server bach-ai-tools/bachstudio-teradata-mcp-server MCP server for Teradata databases, providing tools and prompts for querying, analyzing, and managing data through AI agents. | |
| CEDAR MCP Server bach-ai-tools/cedar-mcp Enables interaction with the CEDAR (Center for Expanded Data Annotation and Retrieval) metadata repository to fetch templates and retrieve template instances. Supports querying structured metadata and biomedical data annotations through the | |
| Celebrity By Api Ninjas bach-ai-tools/celebrity_by_api_ninjas Enables users to search for and retrieve detailed information about celebrities from the API Ninjas database. Supports filtering results by name, nationality, net worth range, and height. | |
| Chuck Norris MCP Server bach-ai-tools/chuck_norris Enables access to the Chuck Norris API to retrieve Chuck Norris jokes and facts through a Model Context Protocol interface. | |
| City By Api Ninjas MCP Server bach-ai-tools/city_by_api_ninjas Provides access to the City By Api Ninjas API to retrieve detailed city information worldwide. Users can search and filter results by name, country, population range, and geographic coordinates. | |
| Clinical Trials MCP Server bach-ai-tools/clinicaltrials-mcp-server Provides programmatic access to ClinicalTrials.gov API with 18 specialized tools for searching, analyzing, and retrieving detailed information about 400,000+ clinical trials worldwide, including filtering by condition, location, phase, spon | |
| Cocktail By Api Ninjas bach-ai-tools/cocktail_by_api_ninjas Enables searching for cocktail recipes by name or ingredients using the API Ninjas Cocktail API, supporting partial matches and ingredient-based filtering. | |
| Coinranking1 MCP Server bach-ai-tools/coinranking1 Provides access to the Coinranking1 API for retrieving real-time cryptocurrency data, including trending coins, blockchain details, and global market statistics. It enables users to search for digital assets and track historical market capi | |
| Country By Api Ninjas MCP Server bach-ai-tools/country_by_api_ninjas Provides access to the API Ninjas Country API, allowing users to query detailed country data including GDP, population, area, and other demographic metrics. It enables filtering countries by specific economic and geographic criteria through | |
| Crypto News51 MCP Server bach-ai-tools/crypto_news51 Provides cryptocurrency news, prices, sentiment analysis, and market data through the Crypto News51 API. | |
| data-analysis-mcp bach-ai-tools/data-analysis-mcp Enables data analysis and visualization operations such as loading CSV/Excel/JSON files, computing summary statistics, generating charts, and exploring datasets via SSE/HTTP. | |
| Deepwiki MCP Server bach-ai-tools/deepwiki-mcp Crawls and converts DeepWiki documentation pages into Markdown format, enabling retrieval of complete documentation or specific pages from repositories. Note: Currently not functional due to DeepWiki scraping restrictions. | |
| Deezer 1 MCP Server bach-ai-tools/deezer_1 Enables access to the Deezer 1 API through MCP protocol. Requires API key authentication and supports integration with Cursor and Claude Desktop for interacting with Deezer services. | |
| Dictionary By Api Ninjas bach-ai-tools/dictionary_by_api_ninjas Provides dictionary lookup functionality through the API Ninjas Dictionary API, allowing users to search for word definitions and meanings through natural language queries. | |
| EdgeOne Pages MCP bach-ai-tools/edgeone-pages-mcp Enables deployment of HTML content, folders, and full-stack projects to EdgeOne Pages to generate publicly accessible URLs. It utilizes EdgeOne Pages Functions and KV storage for high-performance edge delivery of web applications. |
32,551–32,600 of 115,409
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.