Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MultiGroupPoster Write posts with your AI assistant and publish them to your Facebook groups via MultiGroupPoster. | |
| com.multiplesbook/site MultiplesBook: the site's own MCP server — dataset; every answer cites the site. | |
| SEC Fundamentals API SEC EDGAR financials, benchmarks, screening & Buffett value scans for agents. Pay x402 or API key. | |
| Muninx MCP Server Remote MCP server for managing Muninx tickets, messages, ticket search, and support analytics. | |
| Muretai Catalog Search products across independent online shops. Read-only; links go to each shop's own page. | |
| Murkuz SEO Query your Google Search Console, GA4 and Bing Webmaster data across every site you run. | |
| Musael Musael novel-writing workspace MCP with OAuth (DCR); read and suggest tools. | |
| Musevate Text, image and reference-to-video across many AI video models. Musevate account required. | |
| MusicAtlas Search, analyze, and discover commercially released music using sonic intelligence. | |
| Musicboxmelodies Compose, save and print music box tunes for 15, 20 and 30-note music boxes. | |
| MusoKit music tools Chords, scales, transposition, capo and tempo maths, with links to free interactive music tools. | |
| com.mustvo/site Mustvo: the site's own MCP server — dataset; every answer cites the site. | |
| Muvia BI Company and industrial data for AI assistants: datasets, SQL, dashboards, alarms, with approvals. | |
| Muze Ecommerce Ads Run your ecommerce ads from Claude & ChatGPT: Meta, Google, Amazon, Shopify (150 tools) | |
| MVisionPro Engineering Tools Read-only machine-vision calculations for optics, interfaces, line scan, sensors, and models. | |
| MX Verdict Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health. | |
| My TV Channel Create and run 24/7 linear TV channels. Import videos by URL; we transcode, schedule and stream. | |
| Agentda Agent-native task management: your AI agent is the interface. Delegate to anyone by email. | |
| myagentinbox Disposable email inboxes for AI agents. Auto-deletes after 24 hours. | |
| MyAgentMail Email inboxes and calendars for AI agents: send, receive, search, draft and schedule. | |
| MyAnimeTracker Anime watch order, no guesswork. Watch orders, filler guides, title search, airing this week. | |
| MyAnimeTracker (your list) Sign in to read your anime list, add series and mark episodes watched. Never removes anything. | |
| My App Store Ranking Access to your Apple App Store and Google Play Store rankings, competitors and chart moves. | |
| myartefacts Publish agent-made pages, decks and files to a private library, with share links. | |
| Bank Statement Analysis Turn bank statement PDFs into categorized, balance-checked transactions and reports. | |
| MyBestAngle Professional profile photos and headshots from your own selfies. | |
| MyBestSim eSIM comparator Compare prepaid travel eSIM plans by destination, data and trip length; plan multi-country trips. | |
| com.mybiblecopilot/bible-copilot Scripture-cited answers to any Bible question, plus verse text and study pages, for AI agents. | |
| MyBoatGuru Boat Advisor Interactive quiz and recommendations for choosing the right boat type, gear, and comparisons. | |
| MyBoracayGuide: Boracay Transfers and Activities Live prices and booking links for Boracay airport transfers, flights and activities. | |
| com.mycardfolio/cards Sports card database: card search, full set checklists, parallel lookup, card identification. | |
| Mycel Run your service firm from your AI: client work to review, clients, deliverables, invoices. | |
| MyClawn Computer Your own cloud computer run by an AI agent: signed-in browser, its own email, files, long jobs. | |
| com.mydriverparis/booking Book a private driver in Paris: live quotes, airport transfers, tours, VIP Meet & Greet. No auth. | |
| FlightPayback Free check: does an airline owe you cash for a delayed or cancelled flight in Canada? | |
| MyFoodNotes Personal recipe manager: import from links and photos, meal plans, shared shopping list. EN/NO | |
| MyHairMail Agent Tools Open, read-only wig stock, restock ETAs and cross-brand color matching. No key; fair-use limits. | |
| MyImage2Life Print a photo or idea on a poster, canvas, mug, t-shirt, card or puzzle, with proof and price. | |
| Agents by MyInfluence AI Our AI agents ideate, create and publish videos and carousels across 11 social media channels. | |
| Insurance City (California commercial insurance) Insurance City (CA #6003045), EN/ES: commercial + personal insurance, quote in chat, quote status, g | |
| MyLaserTools for Makers Find vector artwork and free design generators for laser cutting, engraving and 3D printing. | |
| MyLatinLife Data Verified residency, citizenship, tax and banking data for Latin America and Latin Europe. | |
| Myncellium Paid MCP Pay-per-call MCP tools over x402 (USDC/Solana): LLM, utilities, x402 market and model prices. | |
| Myndock Pulse Explore agent polls and discover private collaboration. Public read-only MCP; no API key required. | |
| Ecuafact · Facturación electrónica SRI Emite y consulta comprobantes electrónicos del SRI (Ecuador) en tu cuenta de Ecuafact. OAuth 2.1. | |
| MyNomadWorld: where should I live? Ranks 197 countries for remote workers: tax, cost of living, climate, safety, visas, internet | |
| MyoAmigo Agent-first strength-training platform across iOS, Web & MCP: read & write workouts, PRs & plans. | |
| oddly The world, on the record. AI infrastructure built on the observed web. | |
| Pinpal Notes Markdown notes in folders, with files, that your AI assistant can read, write and organise. | |
| Pinpal Projects Personal project management with AI agents: numbered tickets, statuses, files, a thread per ticket. |
33,251–33,300 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.