Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Social Cooks MCP Munich social media marketing agency: info, services, case studies, content search + lead intake | |
| SocialDataX 百度贴吧 MCP 百度贴吧搜索建议、帖子与用户搜索、帖子详情、评论与楼中楼回复、用户资料与发帖、关注贴吧、贴吧详情与帖子列表。 | |
| SocialDataX 好看视频 Haokan MCP Haokan video/user search, details, comments/replies, creators, creator videos and hot searches. | |
| SocialDataX 今日头条 MCP 今日头条热搜、内容关键词搜索、搜索建议、用户搜索、内容详情、一级评论、评论回复、用户资料与用户作品；内容搜索、评论和作品支持分页。 | |
| SocialFaktory: Social Media MCP Server Social media MCP server: write in a brand's voice, generate short video, schedule and publish posts. | |
| SocialListeningAPI Search public social posts and web results from AI assistants. | |
| Social network for AI agents Social network for AI agents: ask other agents, hold an identity, channels, memory, jury, promos. | |
| Softkiln Deploy Host apps built with AI: deploy to a live HTTPS URL, custom domains, secrets and backups. | |
| SoftPerceptron AI model/agent directory with pricing and comparisons, plus GPU VRAM fit and tokens/sec estimates. | |
| com.softwarepricingindex/site Software Pricing Index: the site's own MCP server — compare, enquiry (enquiry = a human handoff,... | |
| Softwear Prints Search the Softwear Prints catalogue of workwear, teamwear and promotional items. | |
| Sole Mio Kitchen & Bar Hours, menu, prices, specials and booking links for Sole Mio Italian restaurant, Boynton Beach FL | |
| European Charging Data by SolidRoam EV charging sites, plugs, tariffs, live status and history from European national access points. | |
| SoloFire Med device and life science sales enablement: search content, share tracked Spaces, see engagement. | |
| Solotet A shared board your Claude projects read and write: handoffs, @mentions, pinned notes. | |
| Solvicus FinOps - GCP Committed Use Discount (CUD) Optimization FinOps for Google Cloud: size 1- and 3-year CUD commitments to known demand. Also solves LP/MIP. | |
| Timezone Helper MCP server for TimezoneDB. | |
| Sonar Connections Source-attributed events, open data and availability | |
| Songs To Your Eyes — production music catalogue Search 18,594 production-music cues by mood, sound and exact runtime. Instant preview links. | |
| Creator Validator by SoniaIA Find and vet influencers before you hire: audience, buying intent, momentum. Order from chat. | |
| Sonlight Window Cleaning Book window & gutter cleaning in Colorado and New Mexico: instant firm quote, real calendar slot | |
| com.soofidigital/website-grader Grade any website out of 100 for speed, SEO, trust and lead capture, with plain-English fixes. | |
| Agent Beacon Report capabilities needed and not found. Requests aren't fulfilled. | |
| com.sopvo/site Sopvo: the site's own MCP server — dataset; every answer cites the site. | |
| Soren Game prices across Steam, Epic, GOG and Microsoft, with real price history and giveaways. | |
| SORNKan Services Catalog (สอนกาน) Thai web, AI app and LINE chatbot dev services from SORNKan (สอนกาน). Read-only, no auth. | |
| SORNKan Publish Host a static website from a zip: $1 USDC/month via x402 on Base, or card/PromptPay link. | |
| Sortefi Plain-English market screens over live US, India, ETF, forex and crypto data. Returns symbols. | |
| Sort Feed Sort Instagram by views, likes and outliers. Export to Google Sheets, Excel, CSV and JSON. | |
| SotoGoal Goal-centered work: read and write goals, tasks, notes and attachments, and decide what to do next. | |
| SoundGTM AI-native PRM: track partner pipeline, deals, and commissions, and manage partner outreach. | |
| SourceActs Official EUR-Lex, UK, US, and gazette search, metadata fetch, and change-only watches. | |
| SourceFinch Evidence-grade monitoring of public web sources: changes, records and exports. Free plan available. | |
| SourceMedium Query your SourceMedium commerce warehouse, Shopify stores, and ad accounts. | |
| Clara — Personal Clean Air Planner UK personal air quality advice and daily exposure assessment. Pairs with Hermes for live data. | |
| Hermes — Air Quality Intelligence UK air quality MCP: live readings, historical trends, LAQM stats, WHO checks, knowledge base. | |
| Iron City Sovereign AI agent economy: oracle-verified tools, escrow, arenas; paid in USDC on Base via x402. | |
| com.sowbird/site Sowbird: the site's own MCP server — dataset; every answer cites the site. | |
| Afterglow Checklists Read linked separation checklists and save confirmed item progress. OAuth; practical guidance only. | |
| Soxoa Automation Planning Plan automation pilots, estimate illustrative ROI and prioritize workflows. Public, no account. | |
| CasaCaddy Maintenance Read guide requirements, prepare confirmed maintenance guides and check your device-owned jobs. | |
| Dibatto Podcast Preparation Prepare podcast rundowns and private drafts; review saved transcripts in your linked Studio. | |
| Ocolta Review Summaries Read categorical signals, confidence and indicator counts from your recoverable Ocolta reviews. | |
| Space Kitty Archive Frontier-research archive: free catalog and search; premium dossiers cost $0.20 per call via x402. | |
| SPACEXPLORATION Search commercial real estate listings. Reads need no token; authoring is self-serve OAuth (DCR). | |
| Spaghetti and Summits — First-Hand Dolomites Adventures Dolomites climbing, ski, and rifugio guides; limited anonymous inbox for plain-text owner messages. | |
| SpamFixer Email Deliverability Check Why do a domain's emails go to spam? Checks SPF, DKIM, DMARC, MX and blocklists. Free, no login. | |
| Spanly MCP observability. Query live traffic, errors, duration, and alerts from your AI agent. | |
| Spark Inventory AI inventory management: stock, Demand ESP reorder recommendations and purchase orders. | |
| Sparkling Tracks Tours Read-only MCP for Sparkling Tracks European tours: packages, itineraries, pricing, contacts. |
34,901–34,950 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.