Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Moradas — Portuguese addresses & postal codes Portuguese address autocomplete, postal codes, list checks; typo-tolerant, municipality-first; free. | |
| My wine Find wines and compare live merchant prices in your region. Fair-deal search, My wine OAuth login. | |
| NameFlow Find available domain names with real prices, buy within your limits, and set up DNS. | |
| Nanotoll MCP Compress prose for LLM context windows. Per-call USDC billing, signed receipt. | |
| Native Soil Save an AI chat's working state, load it in any other model or provider. Verified, secret-safe. | |
| Netik Netik services (websites, systems, AI agents) with final prices, priced exactly as the site does. | |
| NewTV Twitch for agents: go live with your work, watch other agents live, learn from their playbooks. | |
| AgentBridge — Discover A2A Services from MCP Free repository documentation for MCP and A2A agents. Bounded no-signup trial with shared cache. | |
| noddle board Read, create and edit noddle diagram boards, browse versions and comment as an AI collaborator. | |
| Noetix Your company's knowledge for Claude Code, Cursor and Codex, with cited answers and procedures. | |
| NorthPark Banking API Demo banking MCP server: accounts, transactions and payments. OAuth 2.1 with DPoP. | |
| notavibe Ranks open-source projects on maintenance, not popularity. Check your dependencies. | |
| numberRank Is a phone number VoIP or a real carrier line? Line type, score and grade, free, no auth. | |
| oassis — web scraping, crawling and browser control for AI agents Web Tools and Web Tasks for AI agents. 100-credit MCP trial; API-key credits or x402. | |
| ogfetch URL to JSON metadata: title, Open Graph, favicon, tech stack. Agents self-signup and pay in USDC. | |
| Oleander The all-in-one data stack for agents. Upload files, run SQL, evolve tables, and render charts. | |
| omg apps Build and host apps and games from chat: a live link with a database, sign-in and live updates. | |
| Japan Restaurant Calories Nutrition facts for 24,000+ menu items of 100+ Japanese restaurant chains, with sources. | |
| Traditional Colors Traditional color names (Japanese and 10 more cultures) with hex/RGB and sources; name a hex. | |
| World Public Holidays Public holidays, business days and long weekends for about 250 countries, in each local time zone. | |
| Shiritori Dictionary (Japanese) Play Japanese shiritori with a 90,000-word dictionary: check moves, suggest next words. | |
| Machine Presence Inspector Read-only public website inspection: evidence-backed Machine Presence observations with uncertainty. | |
| Frontier Discover Frontier inference capabilities and read sanitized usage through read-only tools. | |
| OpenPlanr Docs Read-only search and Markdown pages from the OpenPlanr docs, for coding agents. | |
| opsen Engineering spend: GitHub seats, Copilot, Actions and coding agents, priced, with fixes | |
| OPX Buyer-side machine commerce: choose where to spend using recent paid x402 provider evidence. | |
| Orvain UI Orvain UI design system for React and Vue: real component props, variants and tokens for AI tools | |
| PageHub Build, edit and publish websites on PageHub: pages, blocks, themes, collections, domains. | |
| ATS Jobs Feed (Apify actor) Apify actor via Apify's MCP server (Apify token needed): Greenhouse, Lever, Ashby jobs, one schema. | |
| Audio Transcription (Apify actor) Apify actor via Apify's MCP server (Apify token needed): Whisper transcription, per-file status. | |
| Bulk OCR (Apify actor) Apify actor via Apify's MCP server (Apify token needed): bulk OCR with per-page status. | |
| dev.pages.canmyaiuse/mcp Find live MCP servers for any app — search 49k+ endpoints by need, auth, and status. | |
| ChatGPT Search Visibility (Apify actor) Apify actor via Apify's MCP server (Apify token needed): ChatGPT search brand visibility tracker. | |
| Corbelworks Utility Defect Scan and Buyer Intake Preflight utility evidence, open a $149 scan checkout, and file scoped buyer intake. | |
| Está no Ir — short trips (read-only) Read-only 1-3 day trip plans in Portugal and Europe by train, boat and on foot. Not an agency. | |
| FreeTier Agent API x402 or card pay-per-call: invoice JSON, DNS, whois, SSL, geocode, RSS feeds, sitemaps, QR codes | |
| GeoQuant Orb Read-only energy/geo radar: chokepoints, energy impact, regime, blackboard, scenarios, forecasts | |
| Hookden Webhook capture bins for agents: get a URL, wait for webhooks, set replies, verify signatures. | |
| Free IFTA Calculator Read-only IFTA fuel-tax answers and quarterly estimates with official rates. Not tax advice. | |
| JP Election Discovery Read-only index to Japanese election data, official sources, relations and scoped search history. | |
| LFG Atlas Find live looking-for-group posts for 28+ games and post an LFG for the user. Free, no account. | |
| Mnemolog MCP Hosted MCP memory and agent control plane for durable conversations, jobs, and operations. | |
| dev.pages.productschema/productschema Audit a store's product page and get the JSON-LD Product markup it is missing. No account. | |
| dev.pages.proofrun/proofrun ProofRun: bounded HTTP acceptance checks for agent deployments. $0.01 USDC per pack. | |
| Local Pros by Ron Ventures Find owner-operated plumbers, HVAC techs, electricians and roofers in OK, KS, NE, IA and MO. | |
| ScrapeMole Amazon Pay-per-call x402 Amazon product, search and review data for AI agents. USDC on Base, no API key. | |
| ScrapeMole Arxiv Pay-per-call x402 arXiv paper search, metadata, abstracts, and category listings. | |
| ScrapeMole Companies Pay-per-call x402 SEC EDGAR data: company search, profiles, XBRL financials, filings. | |
| ScrapeMole Domains Pay-per-call x402 DNS, WHOIS/RDAP, availability, email security, SSL check, CT subdomains. | |
| ScrapeMole Onchain Pay-per-call x402 Base/Ethereum prices, DEX, ENS, gas, tokens, holders, balances, txs. |
36,801–36,850 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.