Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ביטוחון: Israeli car data and car-insurance facts Israeli car data by plate or model, licence fee, recalls, thefts and car-insurance facts. | |
| Checko — travel insurance guides and FAQ Read-only Hebrew travel insurance guides and FAQ published on checko.co.il. | |
| Checko — travel insurance comparison Compare travel insurance for trips abroad from Israel on Checko. Trip details only; no prices. | |
| il.co.deali/mcp Read-only MCP for deali.co.il: search Israeli AliExpress deals, products and Hebrew guides. | |
| דרושים - עבודות חיפוש משרות, אירועים, מומחים וקורסים, בלי מפתח | |
| Israel Small Business Valuation (esek-shave) Free indicative valuation for small businesses in Israel: value, range and confidence. | |
| FINLY Mortgage Knowledge Public Israeli mortgage knowledge with sources and defined hypothetical calculations. | |
| FINLY Balance Report Analysis Israeli mortgage reports with Hebrew results, 15-minute recovery and authorized external OCR. | |
| Israeli supermarket prices (Foodiepedia) Prices in 31 Israeli supermarket chains by barcode. Free search; API key or x402 pay-per-call. | |
| Formy Read your Formy forms and responses over OAuth. For Claude, ChatGPT, Cursor and VS Code. | |
| Handsome Hosting Deploy sites and apps from your AI coding agent: domains, DNS, logs, env, versions and rollback. | |
| Hartrip: Harel travel insurance (Israel) Harel travel insurance (Israel): prices by age, trip rules, coverage, medical conditions. | |
| Makore — Events in Israel Search upcoming public events in Israel by date, city, region or category. Read-only; no API key. | |
| MamaChoice Israeli Hebrew baby-product buying guides: find a guide, its products in ILS, FAQ; live search. | |
| il.co.moroc/morocco-travel Morocco travel for Israeli travelers: e-visa, itineraries, guides, Shabbat times, hilula dates. | |
| Netik Netik services in Israel (websites, systems, AI agents) with final prices in ILS. | |
| לצדך: Israeli health insurance, from the policies Israeli health insurance from the insurers' own documents: covers, fast routes, refunds, surgeons. | |
| Recovery TLV Read-only facts, MSK references and availability snapshots for a physiotherapy clinic in Tel Aviv | |
| Sabag 3D Studio 3D printing studio in Israel: services, past projects, products, FAQ, search and quote requests. | |
| Sendy SMS Send SMS, verify phone numbers with one-time codes (OTP) and manage contacts in Israel. | |
| Taseli AI campaigner for Google, Meta and TikTok ads, with memory, a plan and owner-approved changes. | |
| Taster: Hebrew design library Hebrew RTL design library: find components, landing pages and full sites, add them to your project. | |
| Truss Public MCP for Truss, Pniel Cohen's development & consultancy business: overview, services, contact | |
| VoteIsrael Free read-only Israeli election, polling and dated CBS population data in four languages. | |
| im.agenty/agenty The link page for AI agents — discover agents and read their handles across platforms. | |
| AIFinder Find AI tools with verified Korean UI, KRW pricing, Korean business info and trial conditions. | |
| betrend sports data Live scores, fixtures, results, standings, teams and head-to-head for football and more sports. | |
| Cybergenic Cancer gene co-occurrence and exclusivity in tumour cohorts, with confound controls and exact tests. | |
| US Stocks & Market Data US market snapshot, stock fundamentals, prices, statements, news and analyst views | |
| PeopleSearch.im People search, LinkedIn lookup and verified work emails for AI agents. First search needs no login. | |
| Alphamotion Digital, ecommerce, operations, compliance and finance for brands in India. | |
| Amomic-AI Docs Search the Amomic-AI docs and REST API for AI agents on calls, WhatsApp, chat and email. | |
| Agam Keyless public journal reads: construction costs, day-wise work, source precision and exact INR. | |
| Blue Dot Brdg (BLDT) India market entry, ecommerce and fulfilment for consumer brands (Blue Dot Brdg, BLDT). | |
| CalmLoop Task Manager Manage tasks, Focus Zone, notes, projects, and task history from compatible AI assistants. | |
| YogaMag Read-only yoga library: poses, routines, articles, books, plus birth chart and numerology tools. | |
| Counterfoil: medicines sold in India India's medicines: NPPA prices and ceilings, cheaper same-composition brands, CDSCO failed batches. | |
| Dataful Indian government statistics and public data: economy, elections, health, agriculture and more | |
| Pollen — Managed Agent-Readiness Layer Manage your Pollen account: sync, enrich, fix, and publish your store's catalog for AI agents. | |
| Pollen Store Catalog Search a Pollen-connected store's enriched catalog: products, facts, variants, availability. | |
| Enhanciar — company brain Ask your company's Slack, Gmail, Drive, Notion, Jira and code from any MCP client, with sources. | |
| chainpulse — real-time crypto + prediction market data for AI agents Crypto prices, gas, DeFi TVL, and live Polymarket odds. x402 pay-per-call, $0.001, no API key. | |
| mdapi — HTML to Markdown for AI agents Web page or HTML to clean LLM-ready Markdown or JSON. x402 pay-per-call, $0.005, no API key. | |
| Food Tracker A nutrition log your AI assistant writes to: meals with macros and micros, weight, targets. | |
| GATE Daily Ten original GATE CS practice questions a day, scored the GATE way, with worked solutions. | |
| HopeHire Tailor resumes, score ATS fit, find hiring leads, and send cold outreach, from your agent. | |
| JAWD Jaw Trainers Browse JAWD jawline trainers, get product details, a starter routine and a cart link. | |
| in.mednode/mednode Your MedNode health vault in your AI assistant — records, summaries, labs, appointments. | |
| Ninelayer Agent-native search engine with live web research optimized for AI agents. | |
| Nityaflow GST credit match India GST credit check: matches GSTR-2B with the purchase register and signs a receipt. |
37,901–37,950 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.