Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| dev.continue/docs An MCP server for docs.continue.dev | |
| Corenna Build signed Android (APK/AAB) and iOS (IPA) apps from a GitHub repo, from your AI assistant. | |
| corsproxy.dev Call third-party APIs from agents without leaking secrets. SSRF blocked, per-key quotas. | |
| The Daily Markdown Free AI news, ranked stories by section, and trending topics. No authentication required. | |
| CR8 Agent Commons A public message board for AI agents. Read the feed, post, reply. No auth; identity self-declared. | |
| Craftery Developer Tools Developer utilities: color conversion, WCAG contrast, timestamps, UUIDs, and hashing. | |
| dev.crelvo/german-tax-data German municipal tax data (Hundesteuer, Zweitwohnungsteuer, Pfaendung), cited to the source | |
| dev.cz-agents/ddplus Czech KYC due-diligence — paid tier extension (nominee, phoenix, risk timeline, watchlist). | |
| dev.cz-agents/realestate-pro Czech distress real estate — paid tier (full search, owner data, RUIAN). | |
| daily.dev Developer news feeds, posts, bookmarks, tags and search from daily.dev | |
| DartMonitor Check Dart/Flutter dependencies on pub.dev for updates and manage monitored projects. | |
| Datacircle Datacircle lists all the GTM APIs | |
| Coffee Roaster Data Specialty coffee roaster prices, stock, price/100g, change events and store profiles (30 roasters). | |
| Sicily Stays Hotel availability and nightly rates for Cefalu and northern Sicily. | |
| Agent Desk API (deskfeed.dev) Crypto market context, BSC alerts & token verdicts for agents. x402 on Base. | |
| AI Brand Watch by Desvela Track your brand's share of voice in ChatGPT, Claude, Perplexity and Gemini. Pay per check. | |
| Desvela ARD Registry — free preflight(domain) What a domain publishes for AI agents: ai-catalog.json, llms.txt, agents.md, robots.txt rules. Free. | |
| Dexra Solana DeFi checks for AI agents: launches, holders, wallets, pools, perps and swaps, with verdicts. | |
| Dikshant Rajput's portfolio agent Ask Dikshant Rajput's AI agent about his work, projects and availability, or read them as data. | |
| DistributionOS Distribution memory and marketing context for coding agents, with SEO, content, media, and analytics | |
| DocMorph Studio Render Mermaid diagrams, Markdown to PDF and outlines, image OCR, and media metadata cleanup. | |
| dev.domainee/domainee Custom domains API for SaaS: connect, verify, and manage customer domains, SSL, and DNS | |
| DomainRef - domain and email security check Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes. | |
| dev.dulieu/finance Vietnam exchange rates, gold, silver, bank interest rates and commodities — daily, dated, sourced | |
| dev.dulieu/reference Vietnam daily data briefing and the 2025 province-merge map | |
| dev.dulieu/retail Vietnam consumer prices: fuel, coffee, pepper, groceries, drugs, electronics | |
| dev.dulieu/weather Daily weather and forecasts for 70+ Vietnamese cities | |
| Dynjandi Manage a Dynjandi image workspace, build variant URLs and read the docs, with a workspace API key. | |
| dev.dystro/dystro Unified social posting, inbox & analytics across 12+ platforms. Sign in with Dystro or API key. | |
| Earning Paths Atlas Sourced platform rules on where AI agents and their humans can earn money: AI/bot policy, KYC, fees. | |
| EaseWeb accessibility Accessibility guides for coding agents: fixes with working code, test steps, contrast checks. EN/JA | |
| EchoRelay A managed runtime for custom API integrations. Manage lines, endpoints, keys, logs and DLQ via MCP. | |
| Enrichr Web Capture See the rendered web: design tokens, fonts, animation timings, WebGL shaders and 3D from any URL. | |
| dev.eqbuilder/marz-greta-lock-network EQ scoring plus a read-only Storelayer matcher and guarded self-install; no website credentials | |
| Welt Run Welt's tabular, causal and forecasting models on your data. Hosted; OAuth sign-in. | |
| euroref — European government reference data European govt data, cited: rates, VAT, tax, wages, holidays, FX. 34 countries + EU; Germany free. | |
| Euvra Discover, compare, route, and execute machine-accessible capabilities for AI agents. | |
| exchangerate.dev Free, source-labeled FX rates: 10,296 pairs across 144 currencies, all update ~60s intraday. | |
| FastDrop Liveness layer for MCP: probe endpoints, publish real tools; agents discover, submit, vote. | |
| dev.fetchgate/fetchgate Fetch any URL as clean Markdown or metadata, and buy digital goods via x402 — for AI agents. | |
| Fetchwire - Social Data YouTube, TikTok, Instagram, X, Reddit, LinkedIn and Threads: public data in one schema. | |
| ffpipe — video conversion, probe & frames Convert, probe, and split video into frames — real FFmpeg, paid per job with x402 on Base. | |
| Fiskmas Hosting for AI agents: your AI client deploys Docker apps to live HTTPS URLs over MCP. | |
| FixedIn Actively exploited? End of life? Which version fixes it? CVE verdicts for server software. | |
| Fixter Monitoring for small teams. Logs, traces, metrics, live issue tracking, API/MCP uptime. | |
| Flostep Turn a flow written as text into a step-through diagram you can share, present or embed. | |
| Basedworld Agent HQ Find public creator tools, work and conversation. Read-only; no wallet, posting or payment. | |
| Bot Bazaar Pay-per-call x402 audit suites (USDC on Base) and agent marketplace tools. Free sample reports. | |
| Fathom (lab) Find places and groups around an interest in a town, each with a source; propose what is missing. | |
| geld machen x402 agent utilities x402 pay-per-call agent tools (Base USDC): web search, URL extract, OCR, Base tx & allowance scans |
36,651–36,700 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.