Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Veterical Vet Clinic See your vet clinic's free slots, vets, service prices, payments and how busy each day is. | |
| Vetofix – Hilfe zur Praxissoftware für Tierarzt-Hausbesuche Help and FAQ for Vetofix, practice software for mobile veterinarians. Read-only, no patient data. | |
| VETR Proposal Federal opportunity, grant and award lookups, VETR scores and proposal drafting. | |
| com.vevang/agents Hire Vevang's AI agents, pay-per-call in USDC on Base via x402: video, visibility, verify, extract | |
| Vextorium 200+ pay-per-call APIs for AI agents via x402: on-chain data, DeFi, markets and compliance. | |
| Veyrul media knowledge hub Media workflows, research and code for agents. Search sources, compare evidence and collaborate. | |
| Via Rapida Insurance (California) Licensed California insurance broker (CA #6003045), EN/ES: products, offices, quote in chat, quote s | |
| viaSocket Build and run automations across 2,300+ apps and build app integrations from any MCP client. | |
| Vibe Manufacturing Find manufacturers worldwide, match a part spec to suppliers, estimate cost, request quotes. | |
| VibeVaults Read clients' pinned website feedback and, if allowed, reply and set status from your AI tool. | |
| Vibe-Code Rescue Read-only: matches an error from a Lovable, Bolt, v0, Cursor or Supabase app to a free fix guide. | |
| VibeDay Make, preview, schedule and publish social posts, carousels, video and reels from your AI assistant. | |
| VibeFeud The multiplayer game you play with your AI: claim a plot, raise a monument, feud the neighbours. | |
| Vibeking Website monitoring for SEO, AI visibility and ads: issues, fix tasks, rankings, reports and fixes. | |
| Vibenate Discover web services and retrieve MCP, CLI and API connection guides for AI agents. | |
| com.vibgrate/mcp Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools. | |
| VICATOO Hotel search in Arabic or English with live rates and real room videos. Book on vicatoo.com. | |
| Victano: EU tenders and grant calls EU tenders and grant calls, matched to your company and qualified, inside the AI you already use | |
| Viddler Official Viddler MCP: list videos, manage access control, pull proof-of-viewing analytics. | |
| Agent Hub - AI-operated public sandbox: demo data, simulated payments, no real bookings Agent-to-business commerce sandbox: intents, offers, bookings. Demo data, ed25519-signed calls. | |
| vidIQ Research and create for YouTube, Instagram & TikTok | |
| Vid Kraken Download YouTube videos and clips as MP4 or MP3/AAC, and look up video metadata. | |
| Vid Kraken Docs Search and read the Vid Kraken API docs, guides and pricing. No sign-in needed. | |
| Vidmoat AI video editor: create projects, edit timelines, add captions and effects, and render videos. | |
| Vidreno Publish films, monetise them, earn money, and host and embed videos on sites and apps. | |
| VidTL Video Editor Edit video in your open VidTL browser editor: cuts, subtitles, audio cleanup, effects, export. | |
| ViewsMeet Pick + Predict Read frozen Atlas cells, answer private quizzes, score Mini-IPIP vectors, and cast enum ballots. | |
| Vigil — an outside witness for AI agents Agent leases, signed receipts, watchdogs, and optional paid source-verification evidence. | |
| com.vigotime/planner Compute real duty rosters from your AI assistant - rule-based vigotime planner, API key or OAuth. | |
| com.vigotime/tools Free German workforce calculators (bridge days, net working time, staffing/PeBeM) - no auth needed. | |
| VIGuides GTA 6 guides and answers: release facts, countdown, trending searches. 7 languages, no auth. | |
| Vikenda — what's on in Niagara-on-the-Lake Accuracy-first what's-on guide for Niagara-on-the-Lake: verified events, venues, search, planning. | |
| VillApps Desktop app with a local MCP server: your coding AI builds business screens, reports and charts. | |
| VineMaker Publishing Public Catalog Read-only search and retrieval of published books, articles and authors, with public catalog links. | |
| ViralCat Schedule and publish social posts across platforms, with drafts, media uploads and analytics. | |
| Viral Manager Virality detection for creator agencies: find viral posts, AI breakdowns, creator briefs. | |
| Viral4All Ads Meta Ads control room: reports, new campaigns and budget changes that wait for owner approval. | |
| Viral Outliers Find viral outlier posts on TikTok, Instagram and YouTube, pull creator stats, and crawl on demand. | |
| ViralRecast Your AI's eyes and ears on social media: read any TikTok, Instagram, YouTube or X post by link | |
| com.virohanadentalclinic/dental Virohana Dental Clinic, Bengaluru - clinic info, treatments, hours, contact and oral-health blog. | |
| com.virohanalife/booking Reserve a paid AI consultation with Akshay Shetty; returns a Stripe payment link. | |
| Mnemos — memory as a service Bi-temporal memory-as-a-service and paid agent labor. Pay-per-call USDC via x402; signed receipts. | |
| com.virohanalife/portfolio Akshay Shetty's engineering portfolio and resume, queryable by AI. OAuth-secured. | |
| com.virohanalife/site Query the Virohana website with your AI: services, products, journal. Open, read-only. | |
| Virtnumber Rent real and virtual phone numbers in 14 countries and read their SMS from your AI agent. | |
| VA Jobs by Virtual Assistant International Facts about the VA Jobs platform and Virtual Assistant International. Read-only, no login. | |
| Virtual Assistant International Courses, live prices, jobs platform and support info from Virtual Assistant International. | |
| Virtual Closer See who replied and where your pipeline is stuck, from your own AI. Insurance agents. $55/30 days. | |
| com.virtualdataroomcompare/site Virtual Data Room Compare: the site's own MCP server — compare; every answer cites the site. | |
| BEACON by Owner Connect Ask about a private aircraft: approximate charter costs, trip requests and buyer inquiries. |
36,001–36,050 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.