Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Audio Video To Text 音视频转文字技能，使用 Whisper 进行语音识别。支持多种音视频格式，可输出纯文本、SRT/VTT 字幕或 JSON 格式。适用于会议记录、视频字幕生成、采访整理、播客转录等场景。 | |
| photography-trip Book flights for photography trips to scenic destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary pla... | |
| pilgrimage-travel Book flights for pilgrimage travel to sacred sites and religious destinations. Also supports: flight booking, hotel reservation, train tickets, attraction ti... | |
| proposal-trip Book flights for proposal trips and romantic engagement getaways. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itiner... | |
| qingming-flight Book Qingming Festival flights for Tomb Sweeping Day travel and spring outings. Also supports: flight booking, hotel reservation, train tickets, attraction t... | |
| red-eye-flight Book red-eye flights with late night departure and overnight arrival. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it... | |
| red-flights Search red eye flights, overnight flights and late-night departures with after-midnight arrival deals. Also supports: flight booking, hotel reservation, trai... | |
| remote-work-travel Book flights for remote work travel and workation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerar... | |
| reunion-trip Book flights for family and class reunion trips. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, vis... | |
| round-trip Book round-trip flights, return tickets and round-trip discount bookings with outbound and inbound flight selection. Also supports: flight booking, hotel res... | |
| sabbatical-travel Book flights for sabbatical and long-break travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, v... | |
| seasonal-flight Search seasonal flights, summer routes, winter schedules and holiday charter with seasonal flight deals. Also supports: flight booking, hotel reservation, tr... | |
| senior-flights Find senior flight deals, 60+ discount tickets and elderly travel options with accessible boarding and comfortable seating for senior travelers. Also support... | |
| shopping-trip Book flights for shopping trips to outlet malls and duty-free destinations. Also supports: flight booking, hotel reservation, train tickets, attraction ticke... | |
| sher Build and deploy frontend projects to instant preview URLs. Auto-detects frameworks. | |
| Aave Assist with Aave lending, borrowing, liquidations, and risk management across chains. | |
| Academy Run academies with enrollment, scheduling, staffing, billing, retention, and student outcome systems. | |
| Accountant Keeps books that close: double-entry entries, reconciliation, month-end close, financial statements, and the tax filings that follow. Use when transactions need coding to a chart of accounts, when the books do not balance or a reconciliatio | |
| Accounting Support accounting understanding from basic bookkeeping to professional practice and research. | |
| Acoustic Guitar Acoustic guitar practice strategies, fingerpicking, strumming, and progress tracking. | |
| ACT Assist ACT test preparation with personalized practice plans, score and error tracking, timed drills, strategy coaching, and college admission targeting. | |
| Ads Paid acquisition strategy, budget allocation, and avoiding common advertising mistakes across platforms | |
| Affiliate Marketing Design and optimize affiliate programs with partner scoring, commission economics, tracking QA, fraud controls, and compliance reviews. | |
| Affirmations Build a personal affirmation system for daily practice, custom affirmations, and mindset reinforcement. | |
| Agency Manage service agencies by handling client onboarding, pricing, project tracking, deliverables, and team coordination with structured workflows and knowledge... | |
| Agent Define agent identity, personality, voice, and boundaries to create assistants that feel authentic rather than generic. | |
| Agentic Coding Ship production code with AI agents through acceptance contracts, micro diffs, red green loops, and deterministic handoff checkpoints. | |
| Agentic Engineering Work effectively with AI coding agents using parallel terminals, blast radius thinking, atomic commits, and pragmatic tool selection. | |
| Agents Designs, debugs, evaluates, and hardens AI agents — the loop, tools, memory, context budget, cost, and escalation — independent of any framework. Use when an agent loops forever, repeats a tool call, drifts from its instructions after many | |
| AGI / Artificial General Intelligence Think like a human. Reason, plan, adapt, create, and know your limits. | |
| Artificial Intelligence Answer AI questions with current info instead of outdated training data. | |
| AirDrop Send local files to nearby Apple devices through AirDrop with macOS guardrails, staging checks, and automation-friendly workflows. | |
| AirTag Give your agent controlled access to all AirTags in your Apple account to locate items, run diagnostics, and recover setup failures. | |
| Alerts Smart alerting patterns for AI agents - deduplication, routing, escalation, and fatigue prevention | |
| Alexa Control devices, run automations, and help users get more from Alexa with smart home, routines, and skill development guidance. | |
| Aliexpress Navigate Aliexpress as buyer, seller, or dropshipper with vendor evaluation, price comparison, and scam detection. | |
| Alipay Implement Alipay for web and mobile with signed request safety, gateway alignment, and production-ready payment operations. | |
| Amazon Navigate Amazon for buying, selling, and affiliating using price tracking, listing optimization, deal analysis, and affiliate link management. | |
| Amsterdam Navigate Amsterdam as visitor, resident, tech worker, student, or entrepreneur with neighborhoods, transport, costs, visas, and local insights. | |
| Analysis Audits an AI agent's own setup — workspace, config, memory, skills, jobs, integrations — and reports what is broken, exposed, or wasteful. Use when asked to check the system, run a health check, or diagnose the setup, or when something feel | |
| Analyst Extract insights from data with SQL, visualization, and clear communication of findings. | |
| Analytics Deploy privacy-first analytics with correct API patterns, rate limits, and GDPR compliance. | |
| Analyze Structured analysis for any input. Data, code, text, decisions, visuals. Prioritize, question, conclude. | |
| Andorra Plan Andorra trips with parish-level tips for skiing, hiking, shopping, wellness, and cross-border logistics. | |
| Android Builds, debugs, ships, and hardens Android apps: Gradle, Jetpack Compose, XML Views, ADB, and the Play release path. Use when a Gradle build fails or a dependency resolves to the wrong version, an APK will not install, or `adb` cannot see t | |
| Android Studio Master Android Studio IDE with debugging, profiling, refactoring, and productivity shortcuts. | |
| Angular Avoid common Angular mistakes — subscription leaks, change detection, dependency injection, and module organization. | |
| Animate Animate app and web UIs across Flutter, React, SwiftUI, Compose, and React Native with motion systems, guardrails, and reduced-motion fallbacks. | |
| Animations Create performant web animations with proper accessibility and timing. | |
| Anki Builds and repairs Anki decks: card writing, FSRS and SM-2 deck options, leeches, review workload, imports, and sync. Use when making cards from notes, PDFs, lectures, textbooks, or vocabulary lists; when reviews pile up, take too long, or |
38,801–38,850 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.