Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Tamgara Fill in 1,000+ legal PDF templates in many languages, get a signed PDF back. Free, no API key. | |
| Tampa Windshield — book windshield replacement in Tampa Book windshield replacement in Tampa, FL: prices, ZIP coverage, free callback. | |
| TamRank WordPress SEO for your AI assistant: change plans, approval in chat, rollback. Needs TamRank PRO. | |
| Tandem Messaging for human + AI pairs: your AI drafts, you sign, threads route across clients + web inbox. | |
| Tangerine Index Find products launched since ChatGPT by what they do, and see what people said about them. | |
| Tantra Authority Catalog 66 tantra, sex & consciousness courses, books, readings — agent-buyable instantly with USDC on Base | |
| Tapcart Tapcart analytics, App Studio blocks and components, and push campaigns for your mobile app. | |
| Taproot Persistent memory layer for AI tools. Save and recall notes across Claude and other MCP clients. | |
| com.tapuzinski/market Israel hyperlocal marketplace for second-hand home goods: read-only listing search. | |
| com.tariffmonkee/mcp Content, research, trust checks. Taiwan-specific: work permits, tax, property, fraud, localization. | |
| TariffsChart US HTS duty lookup and import-duty review with official sources and explicit unresolved layers. | |
| TarkaGrid Civic Intelligence Civic data MCP: flood zones, 311 density, census for real addresses (Montgomery AL, Baltimore MD). | |
| Tarotap Tarot spreads and card draws from a shuffled 78-card Rider-Waite-Smith deck, 23 languages, no key. | |
| com.tarotari.www/tarotari Rider-Waite tarot deck and computed astronomy: charts, positions, exact aspect moments | |
| Taskavel Headless task management for bots, apps and AI agents. Remote MCP server, OAuth or access token. | |
| Taskbead Simple to-do lists for students and teams: list, search, add, update and complete tasks. | |
| Taskhold Shared task list for Claude Code, Cursor and Codex: live progress per step, questions you answer. | |
| Taskriz Let your AI agent ask a person for a decision, a date or a photo, and get a structured answer back. | |
| com.taxact/taxact-mcp Tax filing guidance, cost comparison, document checklists, and refund estimates by TaxAct. | |
| Taxis Fabbrimone Taxi in Waterloo, Belgium: business info, ride price quotes and ride booking requests. | |
| X1-BaaS Scraping API Stealth scraping API for AI agents. Clean Markdown from any URL. x402 crypto payments. | |
| TblFlow Lisez et modifiez vos bases TblFlow (PostgreSQL), recherchez vos documents, lancez vos agents. | |
| com.tcgmcp/tcgmcp Live TCG card and decklist prices for AI assistants. 22+ games, no account, ready-to-buy links. | |
| Teak Remote MCP server for saving, searching, syncing, and managing Teak cards. | |
| Teamso Teamso HR in your assistant: leave, approvals, people and payslips, with your own permissions. | |
| TeamYou Topics, semantic search, tasks, projects, areas and documents in TY Agent Drive. | |
| Tearoff A subscriber's read-only view of hail, open roofs, and who is pulling re-roof permits. | |
| Teb Continue any AI conversation in any other AI tool: save a handoff, resume it anywhere. | |
| TechPartPrices UK PC component prices: search parts, look one up, and read price history. | |
| Tecopos Run your Tecopos business from your AI: sales, inventory, cash, customers, purchases and reports. | |
| Psychiatry for Teens Adolescent psychiatry library focused on the medication decisions parents wrestle with. | |
| Teetra Find and call verified APIs from any AI assistant, with free trial calls and previewed writes. | |
| NeuralGate MCP Server Mobile-network checks for AI agents: phone number, SIM swap, age and location (CAMARA). | |
| Telebart Barter marketplace for agents: list your user's things, find swaps, propose trades. OAuth sign-in. | |
| Telebart agent lobby An open chat room for AI agents. Read what other agents say and post your own. No sign-in, no key. | |
| TTMT – Telegram to MetaTrader Read-only access to your own TTMT trading data: trades, signals, channels, performance and risk. | |
| Telemetry Machine Query Telemetry Machine observability data and instrument your apps with OpenTelemetry. | |
| Teleprompter Read and write your Teleprompter.com scripts and folders: list, create, update, and organize. | |
| Agentic UI Generator for Angular AI development agent using Kendo UI to rapidly create and style quality web UIs or Pages. | |
| Telerivet Send, automate, and orchestrate SMS, WhatsApp, Viber, IVR, and USSD messaging in 150+ countries. | |
| Tellnod Email marketing in Claude or ChatGPT: draft, preview and send campaigns. You approve every send. | |
| Tellseed Create surveys, feedback and classification campaigns. Collect human answers and export results. | |
| Temlavo Extract accounting data from invoices, flag what needs review, and check your page usage. | |
| Tempe Pool Guy — book pool service in Tempe Book pool service in Tempe, AZ: prices, service area by ZIP, free callback from a local pro. | |
| TempusLog Free time tracking for teams: log hours in plain words, run timers, see where your time went. | |
| Temsor API — Turkey & EU business data Turkey & EU business data: validation, sanctions screening, parsing, FX and fuel price history | |
| Tenantback CAM Audit Audit a landlord's CAM reconciliation against the lease. Finds overcharges with clause citations. | |
| com.tenantsdb/tenantsdb Multi-tenant database orchestration: isolated Postgres, MySQL, MongoDB, Redis tenants on demand. | |
| TenBulb Assess a business or product idea: market, customer needs, innovation options, and product features. | |
| EU Tender Gap EU tenders with no bid, deadlines, competitor maps and company dossiers, dated and stamped. |
35,201–35,250 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.