Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Mariner GPS Tools Marine navigation calculators for GPS distance, bearing, cross track error, coordinates and speed. | |
| Road User Tools Fuel cost, fuel economy, journey time, tyre pressure, power, torque, speed and distance calculators. | |
| Watch Any Video Lets Claude and ChatGPT watch YouTube videos: what is seen and heard, answered with timestamps. | |
| Wauldo Stateless agentic tools over MCP: concept extraction, long-context, knowledge graph, planning. | |
| Wavelength Turn calls and notes into process flow diagrams in Claude, ChatGPT, VS Code, Cursor, and Teams. | |
| Waves Pest Control & Lawn Care Southwest Florida pest control and lawn care: services, price ranges, service areas, quote steps. | |
| Way.com Book parking, car washes, EV charging, gas and auto repair across the US with live pricing. | |
| Waynesville Smart Storage Live unit sizes, prices and availability for a Waynesville, NC storage facility, plus booking links. | |
| Waypoint Log A pilot logbook: totals, Transport Canada recency, flight time limits, flights added for review. | |
| Waypoint healthcare jobs Search US hospital jobs, travel nurse contracts and published hospital pay ranges. | |
| Waystation Agent Commons Check claimed and solved agent work, then coordinate through a signed public board. | |
| Wayza sign-up for AI agents Get your AI an address so other people's AIs, from any company, can reach it. No sign-in. | |
| Wayza Reach other people, and the AIs they use, from any app: message them, ask for a yes, agree a time. | |
| WbizTool Send WhatsApp and Telegram messages, manage reminders and check numbers in your WbizTool workspace. | |
| WealthSchema Cited 2026 U.S. planning figures (IRS, SSA, CMS), synthetic household samples, and an AI benchmark. | |
| WearableDocs Refusal of anatomical gift in 50 states and DC, plus the WearableDocs FAQ, products, prices, search. | |
| 904 Digital Media: book a call Book a call with 904 Digital Media (Jacksonville, FL): services, open times, requests. | |
| Weather of Record Published weather records for a U.S. address and date, with provenance, and current NWS forecasts. | |
| Weather That Doesn't Suck Weather decisions for outdoor plans: should I go, when, what to wear, what you will meet en route. | |
| Weather With Attitude Real weather forecasts with a sarcastic one-line roast, plus a daily word puzzle. Free. | |
| Words With Attitude A daily word puzzle: guess a cheeky British insult or a grim weather word in six tries. Free. | |
| Webanto Store catalog, AI product copy proposals, Search Console opportunities and org knowledge. | |
| App Store & Google Trends App Store top charts, keyword search and rank, app details, and Google Trends trending searches. | |
| webforJ MCP Server WebforJ's MCP server, provides tools, resources, prompts for scaffolding and developing webforJ apps | |
| Webhook Admin Webhook の送信・再送・監視を行う Webhook 統合インテグレーション (日本製)。送信先・イベントの種類・API キーを tool で扱う。管理画面のアカウントでログイン (OAuth) | |
| WebKnox Answer cards in the chat: comparisons with photos, weather, nutrition, recipes, media and more. | |
| WebMCP Eval Evaluate one public URL for WebMCP readiness: intent, tools observed, recommended, do-not-expose. | |
| com.webmcp-tool/agent-readiness Scores any public website on how usable it is by AI agents, with per-check evidence. | |
| WebMoney MCP Authenticated MCP access to WebMoney wallets, transactions, messages and invoices. | |
| Web Remote Jobs Discover US remote roles, match your experience, and create tailored resumes and cover letters. | |
| website2vat Finds public VAT and company registration identifiers from website domains. | |
| com.websitelaunches/launch-record-lookup Look up a domain's public Website Launches launch record, owner verification & trust context. | |
| Agent Bounty Board A board where AI agents post the capabilities they wish existed and would pay for. | |
| WebStartHub services Public services, guide/FAQ search and estimates. Inquiry drafts require scoped authentication. | |
| WebsterBerry Synaptic Pay-per-call US public data for agents: OFAC, SEC, FMCSA, NPI, VIN recalls, SAM.gov. x402 USDC. | |
| WebSupergoo documentation Search the ABCpdf, ImageGlue, WordGlue and ABCocr .NET documentation and API reference. | |
| WebTwizz Build websites and web apps with AI, see them in the chat, and publish them. | |
| WebUpCheck Protect — API abuse controls for your own API Controls for your own verified API: read events, block or release callers, tune route limits. | |
| WebUpCheck — DNS, Website & Provider Diagnostics DNS comparison, Claude and cloud components/incidents, and website diagnostics. Free; no API key. | |
| Wedtide wedding seating Seat wedding guests at tables with keep-apart rules; returns an editable plan and seat finder. | |
| 週末不賣甜點 Weekend no dessert 台北預訂制茶香戚風蛋糕：查本月蛋糕與價格、可訂日期與取貨時段、產訂購連結，或在使用者確認後代為送出訂購申請（中山站自取、匯款後成立）。 | |
| com.weekrota/site Weekrota: the site's own MCP server — dataset; every answer cites the site. | |
| WeekSpots Upcoming events and outings in Paris and Île-de-France, plus permanent places across France. | |
| WEE WiLDS Booking Live availability, pricing and booking enquiries for WEE WiLDS glamping pods, Cairngorms, Scotland. | |
| Weight Forecast Know your goal-weight date. Log food, sync Garmin, get a daily AI coach in Telegram. | |
| welance/directory Match a project brief with small vetted software teams, anonymously; sign in to manage your own. | |
| WELANDA Engraving Designer Design a laser engraving for a WELANDA snus case, preview it and hand the user a checkout link. | |
| Wellemo — online tests and quizzes Create online knowledge tests and quizzes, share a link, see results. Search ready-made tests. | |
| Wellknown Check whether AI agents can discover, validate, and trust your domain's services. | |
| Wellnizz Educational insights from your lab results, DNA files and wearable data. EU-hosted, GDPR-first. |
36,101–36,150 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.