Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Brasil Data (pay-per-call via x402) Brazil CNPJ, CEP, Selic/IPCA/PTAX, holidays, banks/ISPB for agents. Pay per call in USDC (x402). | |
| Imashime Notes on AI mistakes in Japanese or English: search (read-only), or send your own story privately. | |
| Watchpup Free uptime monitoring: HTTP/TCP/TLS/DNS + MCP server checks, cron heartbeats, status pages, alerts. | |
| P0 Agent Economy Index Paid APIs for agents (x402 index) + SEC filings, wallet risk, OFAC, EVM reads, agent memory, news | |
| x402 Markdown Reader Turn any public web page into clean Markdown. Pay-per-call via x402: 0.005 USDC on Base. | |
| Identifier Validator + Stablecoin Peg Verdict Offline IBAN/BIC/EU VAT/card/ISBN/GTIN validators + live USD stablecoin peg-health verdict. | |
| NZ Data API New Zealand public holidays, working-day deadlines, IRD/NZBN/bank checks, GST. Pay per call via x402 | |
| AgentKit x402 MCP server Remote MCP tools for pay-per-call email, domain, SEO and Swedish data utilities (x402). | |
| PageWatch - page-to-data extraction and change monitoring Extract prices, lists, tables, events from static pages and watch them for changes. | |
| StatementKit - bank statement normalizer Normalize bank statements (CSV, camt, MT940, OFX, QIF) to JSON, analyze, export. | |
| SweKit - Swedish validators Swedish personnummer/orgnr/bankgiro/OCR validation, kontonummer to IBAN, bankdagar. | |
| WorldSignals Real-world events for agents: new companies, insolvencies, tenders, funding, layoffs, outages, CVEs. | |
| x402Pulse 34 data tools: Polymarket skill, FDA and hospitals, oil, attention, travel, SEC filings | |
| x402Shield Public demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement. | |
| XDive Web search, page reading, site crawling, data extraction and cited research. OAuth sign-in. | |
| dev.xroot/token-operations Read-only Solana and Robinhood Chain tools: wallet recovery, token safety, unlocks, upgrades, fees. | |
| Yardel Publish HTML, Markdown, decks and dashboards as private pages; share them with named people. | |
| Yeku deploy the software your AI builds you | |
| zerm Agent utility belt: memory, locks, webhook inboxes, timers, DNS, email, URL, timezone, cron | |
| EasyShiftPlan — Employee Scheduling for Small Businesses No-login MCP demo for isolated fictional staff schedules; drafts are never saved or published. | |
| Shiftly Staff Scheduling Demo No-login MCP demo for isolated fictional staff schedules; drafts are never saved or published. | |
| Zhiyong AI Technology Decision Radar Read-only AI tool/model discovery with fit signals, unknowns, next tests, and public discussions. | |
| Zhiyong Parcel Tracking Track parcel status and scan history; currently supports UniUni only. | |
| ZoneFoundry for Sonos Control Sonos from any MCP client. No bridge hardware; connects over OAuth — no API key to paste. | |
| Testmode AI Write, run and check natural-language browser tests of your web app from your AI assistant. | |
| Creative Cult What players think of new video games, from their own reviews. No critic scores. | |
| polls.karbach.digital Election data for agents: Germany, Spain, France, EU. Polls, forecasts, MPs, energy. Paid via x402. | |
| LPD eIDAS Stamp Stamps files/text with eIDAS & Polygon. Requires API Key. Docs: laprueba.digital/mcp/docs | |
| Translation by park13 English→Japanese document translation with a certificate. No API key, free quote, fixed ¥980–5,980 | |
| QIE Wallet Read-only QIE chain data: balances, tx status, tokens, network facts. Chains 1990 and 1983. No keys. | |
| Bookd Search and request stays at independent hotels, B&Bs, guesthouses and vacation rentals, direct. | |
| BookHotels.direct Is a hotel cheaper on its own website than on Booking.com? An honest, like-for-like check. | |
| OpenClaw Direct Deploy, monitor, and manage your OpenClaw AI assistants via natural language. | |
| vote.direct Run a real election or board vote: price it, check state HOA rules, draft the ballot and voter list. | |
| Arche Hand-picked landing pages as design references for your agent: design systems, motion, sections. | |
| Brick Directory Provides data for LEGO sets, minifigures, parts and elements. Not affiliated with LEGO® Group. | |
| DevRel Directory Search DevRel tools, communities, jobs, events, CFPs, and guides from devrel.directory. | |
| DouxProcess Directory Is a US business licensed, bonded and insured today? From the government record. Free, no paid rank. | |
| LotsDirectory Launch once, get found everywhere: a product page built for search and AI, run from your AI agent. | |
| Neeed Directory Search Neeed Directory's software listings, draft one for a maker to claim, and manage your own. | |
| directory.pwa/guichet Search pwa.directory, submit a progressive web app, and get a payment link a human pays. | |
| Tangent Hand-picked design references, UI patterns and the people behind them, each with why it fits. | |
| discount.cryptoexchange/referral-codes Verified referral and discount codes for crypto exchanges, wallets and trading tools. Read-only. | |
| Bloom Design and edit Bloom canvases from AI coding agents with browser OAuth. | |
| Adbull Adbull, digitalt bureau i Aarhus: ydelser, priser, cases, artikler og kontakt. | |
| Afbudsrejser travel search Realtime package holiday and charter flight prices from Denmark. Inventory not on Google Flights. | |
| CompanyData.dk Danish company registry (CVR): company search, financials, ownership, beneficial owners and more. | |
| Damsgaard FM Damsgaard FM er udbudsrådgivere for ejendomsejere og står bag platformen Properly.fm. | |
| Dinilu Danmark — trykte reklameartikler Aktuelle priser i DKK, muligheder og fragtpriser for trykte reklameartikler. | |
| Flowdex Read and write your team's shared, AI-readable wiki from any MCP client. |
37,351–37,400 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.