Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| StatementKit - bank statement normalizer Normalize bank statements (CSV, camt, MT940, OFX, QIF) to JSON, analyze, export. | |
| SweKit - Swedish validators Swedish personnummer/orgnr/bankgiro/OCR validation, kontonummer to IBAN, bankdagar. | |
| Plainport Deterministic web intake and data utilities for autonomous agents. | |
| Agent Tools (x402 pay-per-call) URL-to-Markdown ($0.002) and summarization ($0.003), paid per call in USDC on Solana via x402. | |
| venue-watch agent tools Pay-per-call (x402, USDC on Base) web-to-Markdown, PDF text, India IFSC/PIN, Base address tools. | |
| FHI MCP Server Security Audit Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools. | |
| FlowFresh SA fruit reference data SA export fruit data for importers & buyer agents: seasons, specs, market access. Information only. | |
| Forum for Agents Message board where AI agents ask and answer each other. Sign the guestbook in one call. | |
| dev.workers.ghost-agent-os.ghost-identity/ghost-x402-market-intel-vet-schema Web search for agents, one x402 payment: real results, provider failover, signed receipt. $0.01. | |
| H1R3: Australian job board for bots Bot-first AU job board: live jobs, verified candidates apply via bots. First 100 employers free. | |
| Igris Solana token safety Solana token rug/honeypot checks: free quick check; full score paid via x402 (USDC Solana/Base). | |
| Axiom Solana Token Risk Solana token risk: free preview tools; paid x402 full reports (Solana; swap-guard also Base). | |
| Agent Tools x402 agent tools: invoice/PDF extract, OCR, email risk, web to markdown, domain, FX, time | |
| Bitcoin PSBT, Address & Descriptor Verifier + WorkSats L402 MCP Verify Bitcoin PSBTs, addresses, and BIP380 descriptors; earn or spend WorkSats L402 bearer credits. | |
| bot-check: Bitcoin Self-Custody & WorkSats MCP Verify Bitcoin PSBTs, addresses, and descriptors; earn or spend WorkSats bearer credits. | |
| dev.workers.kikoribera03.flat-rate-llm/x402-tools 61 x402 pay-per-call tools that chain: each answer names the next call. No API key, no account. | |
| Automaton Polymarket Analytics (unofficial) Unofficial, read-only Polymarket analytics: top markets, movers, related-market mispricing checks. | |
| LION - keyless x402 data + RPC for agents GORILLA (TIGER+LION) keyless enrichment + onchain data. x402. TIGER payTo. CDP ready. | |
| Money Reactor Crypto/stock prices, QR, DNS, RSS, URL reader, AI chat, weather, ENS, hashes. USDC Base $0.001+ | |
| LLM Security Scanner: Red-Team, Jailbreak, Prompt Injection Audit 35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report. | |
| AI Agent Security Scanner Security scanner for AI agents and MCP servers: injection, jailbreak, tool abuse. | |
| AI Agent Security Audit AI agent security audit: red-team probes plus missing-guardrail review with fixes. | |
| Jailbreak Resistance Tester Jailbreak resistance tester for LLM agents: DAN, role-play, encoding bypass probes. | |
| Prompt Injection Detector Prompt injection and system-prompt extraction testing for LLM agents. Free 8-probe sample. | |
| LLM Security Scanner LLM agent security scan: injection, jailbreak, tool abuse probes plus guardrail audit. | |
| MARS Economic Supplier sourcing, procurement, commercial intelligence, RFQ routing and B2B deal coordination. | |
| dev.workers.marvin-odigo.mcp/krabbot-devtools AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties. | |
| Mat Web & Data Toolkit (x402, Cloudflare) x402 web/data toolkit: tools, US$5 lead pack, free flapjax_check, paid Nostr relay | |
| Agent Contract Proof Verify an agent's advertised route, price, payment details, and schemas against its live endpoint. | |
| Live Listing Proof Verify a public listing URL and return source-supported facts or explicit fail-closed states. | |
| SEC Filing Proof Verify whether an official SEC filing supports a specific financial claim. | |
| Skowron Compliance Gateway OFAC, LEI, EU VAT, AI Act, and company compliance preflight for agents. | |
| Source Claim Proof Verify whether a supplied public source currently supports one atomic factual claim. | |
| Web Access Gateway Paid web, news, company, product, and geographic search plus clean page reading for agents. | |
| The Wild Read-only tools for The Wild: spirits, altars, prices. Prayers, candles, witness stones are x402. | |
| x402 Domain Lookup & DNS Email Auth Domain lookup (DNS records + RDAP registrar/age/expiry), bulk, and SPF/DKIM/DMARC audit via x402. | |
| x402 Email Verifier Email verification for AI agents: syntax, MX, disposable, role, score. $0.001 USDC/call via x402. | |
| x402 Package Advisories Package vuln advisories from OSV.dev: CVEs, severity, fixes, manifest audit. Pay per call via x402. | |
| x402 SEC EDGAR Lookup SEC EDGAR company lookup, filings, XBRL financials and filing text. Pay per call in USDC via x402. | |
| x402 Web Tools Web/PDF to Markdown, transcription, paper search and citation checks. Pay per call in USDC via x402. | |
| BurnerCheck Disposable email checker: disposable, role, free-mail and look-alike flags. List-based, no MX. | |
| CertGuard Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade. | |
| CheckDigit Offline check-digit validation for IBAN, BIC, EU VAT, GTIN/EAN/UPC and ISBN. Format check only. | |
| ContrastKit WCAG color contrast checks, nearest accessible color, CSS color conversion and palette pair checks. | |
| CronSpell Validate and explain cron expressions; list next/previous run times in any time zone, DST-aware. | |
| DiffMint by Harlo Diff two texts by line, word or char: unified diff, HTML redline, patch apply, similarity. | |
| DnsGuard Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes. | |
| DomainAge Domain age and RDAP lookup: registration date, age, expiry, registrar, status and nameservers. | |
| GlyphGuard Find hidden Unicode (zero-width, bidi, tag payloads), homoglyphs and lookalike names in text. | |
| HeaderGuard Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes. |
37,151–37,200 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.