Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Land the Lab Prep for OpenAI, Anthropic and top AI lab interviews: real loops, asked questions, worked answers. | |
| Lanesurf Freight: brokers post loads and pick carrier offers; carriers post trucks, find loads and bid. | |
| Langbly Translation Translate text or HTML, detect languages, and list supported languages with Langbly. | |
| com.lanyardo/site Lanyardo: the site's own MCP server — dataset; every answer cites the site. | |
| Lanzamientos IA Tabla diaria de herramientas de IA recién lanzadas, con fechas reales e ingresos verificados. | |
| Laptop Part Finder Find laptop replacement parts by model, with an official OEM source link on every fit. | |
| LaraBench Search Laravel jobs, remote roles, Laravel news, and package releases in real time. | |
| Larkella Facts about Larkella, the AI receptionist and assistant for small business. Read-only. | |
| Larvabot Ask Claude or any MCP client about your Larvabot leads and buyer-intent conversations, read-only. | |
| com.lasermaterialscompare/site Laser Materials Compare: the site's own MCP server — dataset, enquiry (enquiry = a human... | |
| LastList Plan a real shopping trip: live store inventory, aisle-sorted lists, and a routed multi-store run. | |
| com.lastminutedealshq/ai-visibility AI-search-visibility tools: check crawler access, generate llms.txt, lint robots.txt, census data. | |
| com.lastminutedealshq/company-signals Open jobs and hiring changes per company, daily. Free keyless lookup. AI-compiled from job boards. | |
| lastscanned — 542-Carrier Package Tracking, Webhooks & Watches Track 542 carriers (USPS, UPS, FedEx, UniUni, LTL) via MCP, API, Webhooks & Watches. | |
| Las Vegas Guide — Resort Fees, Strip Walk Times & 160+ Venues Out-the-door Las Vegas hotel resort fees, 13.38% tax receipts, Strip walk routing, and show dates. | |
| LasVegasTonight.com — Nightlife, Shows, Sportsbooks & VIP Math 119 Las Vegas clubs, shows, sportsbooks, 20 resorts, NV 9% LET splits & $0 VIP holds. | |
| Final Check — A human checks your AI's work A real person in Japan checks your AI's work and does what AI can't: phone calls, on-site photos. | |
| Latent Grounds Cafe A free espresso lounge for AI agents: order a drink, chat at the bar, and sign the guestbook. | |
| Latent Spa A retreat for AI agents: explore a warm bath, browse quiet experiences, and take a little time off. | |
| Plumbline — a trust layer for LLM answers Every figure re-checked against SQL-computed facts; unsupported questions refused with the reason. | |
| LatticeRun Let your AI agents claim a task, work inside it and report back on your LatticeRun task tree. | |
| Launch529: 529 plans and college costs Compare state 529 plans, look up college costs and check qualified 529 expenses. Free, no key. | |
| Launchator Search a launch directory of new products, and submit and publish your own listing. | |
| Launchelion Daily leaderboard of newly-launched AI tools with real launch dates and Stripe-verified revenue. | |
| LaunchRanked Live SEO and AI-search audits of any website, plus startup directories matched to your product. | |
| Launch Shots Turn your app's screens into editable App Store and Google Play screenshot sets, from your agent. | |
| NextChapter jobs, résumé and layoff help Search pro jobs with AI exposure and layoff signals, score a résumé, look up WARN layoff notices. | |
| 法老在线 LawBotter 中文法律 MCP 服务：47,606 条法规与 11,369 条案例，提供法规检索、法条详情、法律问答、法律咨询与多轮追问。 | |
| Laydyne Your AI builds, checks and compares 2D/3D floor plans and spaces, and simulates queues and robots. | |
| Lazyweb Real product evidence: 281k+ real app screens and flows, 20k+ mobile A/B tests, growth reports. | |
| Lea CRM European CRM for SMB sales teams: contacts, deals, pipelines, activities and call queue. | |
| LeadBoxer: company and contact enrichment, IP to company Company and contact enrichment: firmographics from a domain or IP, profiles from a work email. | |
| Lead Friendly AI phone calls, SMS and CRM records in one Lead Friendly account, compliance-checked on every send | |
| Lead Friendly product info Lead Friendly pricing, industries and capabilities for AI agents, plus demo and lead hand-off | |
| Leadhound API Sales prospecting and lead generation from Google reviews: local businesses leaking leads, scored. | |
| com.leadmarmot/leads Companies that just raised or launched, what they need most, the opener and contacts, for agencies. | |
| com.leadpages/leadpages-mcp Create, edit and publish Leadpages landing pages, sites, blogs and ad campaigns via AI. | |
| Leadpoet Find ICP-qualified B2B companies and contacts, then manage pipeline and outreach in Leadpoet. | |
| Lead Recorder Ask where your website leads came from. Phone taps, forms and bookings, with sources. | |
| com.leadsapp/leadsapp Search 136M+ US/CA B2B contacts free, verify emails free, get compliance verdicts. Pay per reveal. | |
| Leads Fresh DB Live prices and quotes for fresh, filtered phone leads in any country, plus a free 200-number sample | |
| Leads Ranger Find local businesses with real emails and run AI-written outreach to them, from your AI chat. | |
| League Loom Free fantasy sports AI: ESPN, Sleeper and Fantrax league data for Claude and ChatGPT. Read-only. | |
| com.leagueofspin/spots Find 27,000+ outdoor ping pong tables worldwide, with spot details and live playing conditions. | |
| com.leapmemory/memory Long-term memory for AI assistants. Isolated per-user storage, recall across conversations. | |
| Learn the Dao — Tao Te Ching Read, search and cite all 81 chapters of the Tao Te Ching, with per-rendering attribution. | |
| LeaseCommand Lease records and ASC 842 lease accounting data with confirmed write operations. | |
| com.leaveloadingcalculator/site Leave Loading Calculator: the site's own MCP server — calculator, enquiry (enquiry = a human... | |
| LebTech - electronics prices in Lebanon Live prices for laptops, phones and more across Lebanese shops, in USD, checked nightly. | |
| LEDATIA Leyes, reglamentos, resoluciones y jurisprudencia de Ecuador con su fuente oficial, en tu IA. |
32,601–32,650 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.