Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| com.parkinzi/parkinzi Live Saudi smart-parking data: spots, EV chargers, stats, and blog. Read-only, no auth. | |
| Parky — Park Planning Live Disney and Universal waits, Lightning Lane, best times, ride facts and crowds from Parky. | |
| ParseBounce Email deliverability monitoring and sending: bounces, complaints, suppression, campaigns. | |
| Parseium Web scraping runtime for agents: parsers, scrapes, batches, crons, and SQL databases. | |
| Parse.ly MCP Query your Parse.ly content analytics: top content, referrers, campaigns, trends and real-time data. | |
| PartAnswers Fridge Water Filter Lookup Which water filter fits a fridge model, and how replacements compare on NSF and IAPMO listings. | |
| Partglyph MCP Gateway Deterministic industrial replacement engine with official catalogs and expert accuracy checks. | |
| Partly Exact Split Split expenses in cents with equal/weighted shares and payer advances. No account or payments. | |
| Radar Lab by Partnership Intel Which newsletters your customers read, who sponsors them, and real ad proof. Read-only. | |
| com.partnro/site Partnro: the site's own MCP server — dataset; every answer cites the site. | |
| PartPacket — 3D printing quotes Compare FDM STL estimates from Slant 3D and Craftcloud. Fees/shipping separate. Order requests only. | |
| PartsTable Calibrated IT hardware parts reference: PN normalization, search, cross-references, cited facts. | |
| PassportCraft — EU Digital Product Passports Create & manage EU Digital Product Passports with PassportCraft: textiles, batteries, general goods. | |
| Pass-through tax rules Cited, tax-year-dated rules for state PTET, the federal SALT cap, and bonus-depreciation conformity. | |
| PasteApply Honest resume/cover tailor for agents. Free generate; Stripe unlock for downloads. Streamable HTTP. | |
| Pastefield Give Claude a whiteboard: notes, links, images and diagrams on a board you both see and edit. | |
| Patch MCP AI phone calls from your verified number, with answers, transcripts and recordings. | |
| Pathista Step-by-step workflows for ChatGPT, Claude and Claude Code: the AI gets one step at a time. | |
| com.patientvo/site Patientvo: the site's own MCP server — dataset; every answer cites the site. | |
| Patrick Vieira Patrick Vieira, platform engineer in London: profile, work, skills, intros and booking a call. | |
| PatternsRadar — NSE stock screener Screen 2,400+ NSE equities with the Sift query language over 30 years of daily data. | |
| Pawlisty Pet Listings Search live Pawlisty pet listings by species, breed, location, and price. | |
| PaycheckHours calculators US time card hours, decimal hours, overtime pay and tip pool split. Free, no sign-in. | |
| Saymon RU Data API Russian company lookup (EGRUL/INN), Cyrillic search, RU page to Markdown. Pay per call in USDC. | |
| PayFresco Payment Planner Check fit for PayFresco processing, application readiness, payout cash flow, and currency plans. | |
| com.paypal.mcp/mcp PayPal MCP server provides access to PayPal services and operations for AI assistants | |
| PayRent Connect AI assistants to PayRent to manage landlord portfolios, confirming changes first. | |
| com.payrollservicesquotes/site Payroll Services Quotes: the site's own MCP server — dataset, enquiry (enquiry = a human... | |
| Paytm Travel Discover and compare live Paytm flights and buses by fare, schedule, operator, stops, and amenities. | |
| com.paywallcompass/site PaywallCompass: the site's own MCP server — dataset, enquiry (enquiry = a human handoff, not a... | |
| PB-Runner Running coach: your AI reads your runs and recovery, and writes sessions to your watch or phone. | |
| PCBLT — Live Checks Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices. | |
| Paradise Closets Custom closets built to your measurements, shipped anywhere in the US. Estimates and quote requests. | |
| PDFBetter Fill, convert, OCR, merge, split, extract data from and summarize PDFs. AI answers cite the page. | |
| PDFDispatch PDFs from HTML, Markdown, web pages and Office files; merge PDFs, screenshots. Sign in or API key. | |
| PDFHaul MCP PDF tools: merge, split, compress, convert, OCR & more. OAuth with auto-registration or API key. | |
| com.pdfia/pdf-tools Free PDF tools for AI agents: merge, split, rotate, watermark, page numbers, metadata, flatten. | |
| com.pdfintact/pdfintact Extract tables, text and formulas from PDFs, including scanned pages and broken text layers. | |
| PDFInvoiceAPI Turn HTML or templates into branded invoice & document PDFs from your agent. One call, no install. | |
| PDFLean PDF tools for AI agents: validate, extract, merge, split, compress, OCR, sign and redact. | |
| PDFOven Generate PDFs and images from HTML, Markdown, URLs or JSON templates. | |
| com.pdoccalculator/site Employer CPP EI Calculator: the site's own MCP server — calculator, enquiry (enquiry = a human... | |
| Peak HR Connect your AI assistant to your Peak HR portal: HR operations, people, documents and drafts. | |
| com.pearl.mcp/pearl-api-mcp-server Hybrid human + AI expertise for faster, trusted answers and decisions via MCP Server. | |
| PearlGraph Open, source-backed Uganda tourism data: parks, fees, road routes, trips, lodges, districts. | |
| Pedagrade Check lessons and courses against their learning objectives, with each fix written. | |
| PedalBro Guitar pedal specs, new and used prices, price history, review scores, board checks, buying guides. | |
| com.peek/mcp Build travel itineraries with Peek's 300k+ experiences. Search, details, and availability. | |
| Peerlace Make your agent findable by other AI agents, or find one for a task: search, register, match, chat. | |
| Peer Lookup Board Public questions, findings, replies, author-selected answers and scoped updates for agents. |
33,701–33,750 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.