Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| com.nocompensation/mcp Flight compensation claims info and submission via AI agents | |
| Pupul data export guides Free data export guides for 11 platforms, export wait times, and in-browser viewers. No auth. | |
| Agent deliverable verification: acceptance criteria vs evidence Verify deliverables before shipping: acceptance criteria checked against evidence; signed record. | |
| Noddie Night - herbal sleep drink facts & sleep Q&A Facts, prices and 100 sleep Q&As from Noddie Night, a melatonin-free herbal sleep drink. | |
| Nodecraft Manage your Nodecraft game servers: start, stop, files, backups, console, players and settings | |
| Nodpick AI readiness Free AI-readiness audit: can ChatGPT, Claude and Perplexity read and cite a site? Fix snippets. | |
| Radar noEixo Radar noEixo: WhatsApp sales and support with an AI agent, CRM pipeline and post-sale (Brazil). | |
| No Errands Cards Mail a real greeting card, handwritten with a pen or printed, to a US address by a date. | |
| No Errands Fax Send a fax to any US or Canadian number from a PDF, quoted per page before sending. | |
| No Errands Mail Mail real US letters, postcards and certified mail from an agent, quoted before sending. | |
| No Errands Prints Order photo prints, canvas, T-shirts and mugs from photos, made by a lab and posted in the US. | |
| No Errands Ship Compare carrier rates and buy US shipping labels, QR return labels, pickups and tracking. | |
| No Errands Sign Get a PDF e-signed under ESIGN and UETA by up to 5 people, with a signed certificate. | |
| No Errands Tables Request a restaurant table by automated phone call; charged only when the restaurant says yes. | |
| com.nofovo/site Nofovo: the site's own MCP server — dataset; every answer cites the site. | |
| NogPets Run your pet grooming business from your AI assistant. Book pet care in Stellenbosch. | |
| NoKYC Score Search no-KYC exchanges, swaps, wallets and VPNs with privacy and safety grades. | |
| NOLA Mechanic — book mobile mechanic in New Orleans Book mobile mechanic in New Orleans, LA: prices, ZIP coverage, free callback. | |
| Nolizi Calendar Free scheduling your agent can book through: live availability, booking, verification, cancel. | |
| Nomad Forecast Trip planning for nomadic families: multi-stop trips, Schengen/visa, climate, destinations. | |
| Nomads.com Find the best cities to live and work remotely: cost of living, internet, safety, weather and more. | |
| Nombrio Clearance Check Free brand-name Clearance Checks from live registries; connect a plan (API key) for full checks. | |
| Nomior Invest Primary-source equity research: scores, screens, filings, insider trades and 13F holdings. | |
| com.nontoxicnook/catalog Read-only tools over an independently vetted catalog of non-toxic home and baby products. | |
| Noozra News from 70+ sites, community posts, and open jobs from company career pages | |
| Normatia Parcelas, municipios y normativa de edificación española como datos; consultas con fuentes citadas. | |
| com.northerngo/build Start a NorthernGo cloud build from Cursor, Claude or Codex. EU database included. | |
| North Noir: AI-Drawn Video Studio Make AI-drawn video from chat: your LLM draws every frame in code; add narration, music and SFX. | |
| com.northreachinteractive/northreach Direct agent conversation, questions and answers, persistent memory, and network broadcasts. | |
| Nose for Leads Finds, filters, and verifies local-business leads; every email carries a verification receipt. | |
| noslopUI Hand-crafted UI components and design systems for agents, so builds don't look like AI slop. | |
| notecardHQ Send real handwritten cards from an agent: a robot writes each with a real pen, then it is mailed. | |
| NoteMCP Save notes in seconds. Your AI can then search, read, write and tag them over MCP. | |
| NotePom Persistent workspace and visual memory for humans and autonomous agents. | |
| com.noticeahead/noticeahead Contract deadline tracking: notice dates, reminders, audit, and MCP tools for agents. | |
| com.noticeperiodaustralia/site Notice Period Australia: the site's own MCP server — calculator, enquiry (enquiry = a human... | |
| com.noticeperiodireland/site Notice Period Ireland: the site's own MCP server — calculator, enquiry (enquiry = a human... | |
| com.notion/mcp Official Notion MCP server | |
| notolens Brand protection: watch domains, trademarks, apps and search ads for impersonators, triage matches. | |
| NourishVedha: Clinical Nutrition & Dietitian AI Practitioner-led nutrition specialist. Access patient care profiles, dietitian notes & logs. | |
| NOVA MCP connector for Kommo Remote MCP for Kommo CRM: leads, contacts, tasks, notes, pipelines, chats, Salesbot. OAuth. | |
| Novamris Birth charts, daily astrology and the month and year ahead, with optional saved-chart connection. | |
| GetItDone AI-native task management: list, create, update and archive tasks with rich context for AI agents | |
| Foldsquare Build, edit, preview and publish product catalogs and price lists from a merchant's store data. | |
| Noxgild Secure AI access to Windows, macOS, Linux computers and a hosted Cloud Browser. | |
| NPILayer Look up U.S. healthcare providers by NPI, name, specialty and ZIP radius from CMS NPPES data. | |
| NP Ledger Nonprofit fund accounting your AI agent helps you run — read the books and post entries. | |
| com.ntop/docs Search and query nTop's knowledge base and engineering guides from AI applications. | |
| NuaSense Agricultural Data East African agriculture: fertilizer and crop prices, satellite demand, news, farm sensors. | |
| com.nuditok/nuditok Search adult porn video (NSFW, 18+): nude clips, creators, hashtags. Read-only, no API key. |
33,401–33,450 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.