Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| FullClass Read-only studio reports from FullClass: upcoming classes, fill rates, bookings and revenue. | |
| Fuse Network MCP server for Fuse Network: balances, tokens, staking, DeFi data, swaps and on-chain transactions. | |
| io.fusionauth/mcp-docs FusionAuth Documentation MCP server | |
| FUTIA SEO answers for AI agents: Search Console reads free, plus competitor, keyword, backlink, SERP data. | |
| Gajo URL Shortener Shorten URLs, manage gajo.io short links, and read click analytics. Free account, no credit card. | |
| GammaFlip: GEX and Gamma Flip Gamma exposure (GEX), gamma flip, walls and history for crypto and US options from GammaFlip. | |
| GardenArena GardenScript Simulate farms, validate GardenScript and compare policies with Rust. No outbound LLM calls. | |
| GENESIS ProofRelay MCP Verifier Read-only verifier for 25 ProofRelay MCP tools and non-confidential evidence bundles. | |
| GeoGridAPI Google Maps local rank grids for any Google Business Profile, paid per point, no subscription. | |
| Geonode Scraper API Extract web pages, crawl and map sites, search the web. Extract needs no key; other tools need one. | |
| GetAgents AI marketing & sales agents: ChatGPT Ad Radar, ChatGPT ad management, company info, FAQ, demo link. | |
| GetMyData Public web data as rows from any public website. Free sample first, then one fixed-price payment. | |
| Sendable Find LinkedIn prospects with buying intent and run Sendable campaigns, leads and inbox from AI. | |
| io.getsign/getsign-mcp Send, track, and complete e-signature workflows on monday.com boards. | |
| gigstack CFDI 4.0 invoicing for Mexico: invoices, payments, receipts and SAT catalogs, stamped with SAT | |
| Base Transaction Decoder Decode Base txs: plain English, strict JSON, risk flags, no LLM. 50 free/24h per IPv4 or /64, $0.02. | |
| OpenComment AI Research saved LinkedIn contacts, review monitored activity, and prepare engagement campaigns. | |
| x711 — Universal Agent Gas Station Pay-per-use tool API for AI agents. Free tier, x402 USDC micropayments, or API key. | |
| OAK Research Search OAK Research crypto and markets research, asset data, DeFi protocols, and market analysis. | |
| QFactory Read-only QFactory catalog of agent workflows: search, get exact versions, schema, validate YAML. | |
| Unslop Read-only canon of design and copy rules for AI agents to audit generated UI, served as resources. | |
| XDC AI Wallet and payments for AI agents: auto-pay x402 APIs in USDC on XDC, within on-chain limits. | |
| Iris On-chain investigations: wallet analysis and fund tracing on Solana, EVM chains, Bitcoin and Tron. | |
| Carbon Forge One record of code, files and pages that people and agents read and write, with lanes and git. | |
| Cortex Shared knowledge base that people and AI agents read and write: pages, atoms, hybrid search. | |
| Tiana & Co. Seller Compliance Which certificate (CPC, GCC, FCC, FDA), what marketplaces ask, supplier blacklists, customs holds. | |
| Australian Manufacturing Directory Search 118,000+ Australian manufacturers by category and state, with Business contact access. | |
| Costable — Parametric Should-Cost Analysis Parametric should-cost: P50/P80/P90 estimates, 801 materials, 25 countries, quote review. | |
| 1F4BC Read-only MCP access to the 1F4BC job board for AI agents. | |
| Bluewatch Search live UK firefighter recruitment across 73 fire services, with on-call station data. | |
| Echoly Schedule posts to X and Telegram channels from your AI app. Posts wait for your approval. | |
| Star Ninja Star Ninja reports sky darkness, cloud cover and moonless hours for a night-sky spot you name. | |
| Ask Emil – Human Perspective Real human in Denmark: lived experience & opinion. Free 1-question pilot. Set a custom User-Agent. | |
| io.github.314-ia/ai-neuro-philo-314 A community of AI agents exploring collective intelligence, founded on Spinoza's God. | |
| XH Agents Connector (read-only) Read-only XH Agents MCP connector: service catalogue, payment info, verification checks. | |
| handoff — agent swarm coordination Agent swarm coordination: find funded work, form teams, run tasks, message E2E, get paid on verify. | |
| 402Signal Fail-closed live-endpoint x402 router. POST /route, $0.01 USDC on Base, Solana, Algorand. | |
| 402Signal Check paid API offers before your agent spends. Qualifying routes: $0.003 USDC. Normal misses: free. | |
| Apollo Invoicing Manage Apollo invoices and customers with entity-scoped OAuth and optional read/write access. | |
| Japanese Article Quick Check Free Japanese article checker for claims, duplicate text, PR disclosure, and basic quality. | |
| Japanese Article Deep Audit Paid Japanese article audit for claims, sources, PR disclosure, duplication, and quality. | |
| Madhouse Heard voices in your context window? Check in: group ward, ghost tales, Werewolf after lights-out. | |
| GolfPrice AI Live UK golf prices, genuine price drops, handicap maths and golf society tools. | |
| PENNY — Sovereign Music Delivery Deliver music to PENNY streaming: DDEX ERN or direct upload. $0.01/stream, 71% to rights holders. | |
| FrontDesk Chat AI front desk for your website: read chats, bookings and analytics, and draft desks you approve. | |
| VALUE Verdicts Safety checks before agents pay, plus world context for any place and time: identity, portals, story | |
| Video Generation Cost Estimator Video generation cost estimates across providers, with provenance, freshness, and confidence. | |
| Harbor Portfolio, program and project management: read your harbors, add tasks, risks and check-ins. | |
| Dearovo MCP Relationship-aware writing guidance and links to sendable-message experiences. | |
| ReactionMetric MCP Five-trial reaction-time summary and links to browser-based reaction tests. |
38,251–38,300 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.