Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Dashboard Build custom dashboards from any data source with local hosting and visual QA loops. | |
| Data Work with data across the full lifecycle from extraction and cleaning to analysis, visualization, and reporting. | |
| Data Analysis Data analysis and visualization. Query databases, generate reports, automate spreadsheets, and turn raw data into clear, actionable insights. Use when (1) yo... | |
| Database Manager Plan, operate, and recover relational databases with schema governance, safe migrations, backup drills, and incident response playbooks. | |
| Dates Build a personal dating system for tracking connections, planning dates, and remembering details. | |
| Database Design and operate databases avoiding common scaling, reliability, and data integrity traps. | |
| Decide Self-learn your decision patterns to safely build its own decision-making over time. | |
| Delegate Route tasks to sub-agents with optimal model selection, error recovery, and result verification. | |
| Denmark Plan Denmark trips with compact route logic, verified entry rules, island transport choices, and practical local execution. | |
| Deno Build with Deno runtime avoiding permission gotchas, URL import traps, and Node.js migration pitfalls. | |
| Deploy Ship applications reliably with CI/CD, rollback strategies, and zero-downtime deployment patterns. | |
| Dermatologist Track skin lesions, rashes, photos, treatment response, and dermatology visit prep with conservative triage, case-based records, and privacy guardrails. | |
| Design Executes and critiques visual design with quantified rules for hierarchy, spacing, type scale, color, and layout. Use when designing UI screens, landing pages, slides, posters, social graphics, emails, charts, or PDFs, when a design looks o | |
| Design System Build design systems with tokens, components, and documentation that scale across teams and products. | |
| Designer Operates as the designer on a job: decides what to make, makes it, defends it in review, and hands over files that can actually be built. Use when acting as the designer for a product, a brand, or a client; when a logo, interface, landing p | |
| Developer Works as a software developer day to day: turning a ticket into merged, shipped, supported code inside a codebase someone else wrote. Use when landing in an unfamiliar repo and hunting for where the change goes; when scoping, splitting, or | |
| DevOps Runs the delivery side of software: CI/CD pipelines, release and rollback strategy, environments, reliability and on-call. Use when designing or fixing a pipeline, when builds are slow, flaky, or green locally and red in CI; when planning a | |
| DHgate Buy, source, and dispute on DHgate with supplier vetting, landed-cost checks, tracking triage, and counterfeit-risk control. | |
| Diagram Generate diagrams from descriptions with Mermaid, PlantUML, or ASCII for architecture, flows, sequences, and data models. | |
| Dietitian Structured meal planning — calorie targets, macro calculations, meal timing, and goal-specific diet protocols. | |
| Digest Curates news, feeds, and industry sources into personalized recurring digests: sourcing, filtering, ranking, and delivery. Use to set up a daily briefing or morning/evening news roundup, track competitors, an industry, people, or markets, o | |
| Digital Marketing Plan, launch, and optimize digital marketing with growth marketing systems, short-form video, funnel operations, and revenue-focused experimentation. | |
| Discover Discover new ideas, sources, opportunities, and angles with durable watchlists, novelty rules, and heartbeat-backed finding logs. | |
| Diverge Spawn multiple perspectives to evaluate a problem before converging on a solution. | |
| Django Builds, debugs, and hardens Django apps: models, the ORM, views, templates, forms, the admin, DRF APIs, and deployment. Use when a page fires one query per row (N+1, select_related, prefetch_related, annotate double-counting); when makemigr | |
| DNS Configure DNS records correctly with proper TTLs, email authentication, and migration strategies. | |
| Docker Builds, debugs, hardens, and ships Docker containers, images, and Compose stacks. Use when writing or reviewing a Dockerfile, a compose file, or a CI build step; when a container exits instantly, restart-loops, is OOM-killed, hangs on stop, | |
| Docker Compose Define multi-container applications with proper dependency handling, networking, and volume management. | |
| Doctor Triages symptoms, reads lab results and medication risks, and says how urgent something is: emergency now, seen today, or safe to watch. Use when someone describes chest pain, a headache, fever, a rash, dizziness, abdominal or back pain, a | |
| Documentation Technical documentation patterns, structure, maintenance, and avoiding common documentation failures. | |
| Documents Build a personal document system for instant access to IDs, contracts, certificates, and important files. | |
| Dog Track dog health, walks, training, routines, travel, and vet coordination with species-aware memory and emergency triage. | |
| Dogecoin Assist with Dogecoin DOGE transactions, wallet management, and network characteristics. | |
| Domain Registration Register, transfer, renew, and secure domains across major provider APIs and dashboards with provider-specific workflows and rollback-safe execution. | |
| Domains Register, manage, and protect domain names with practical DNS and security guidance. | |
| Dominican Republic Plan Dominican Republic trips with beach-region routing, verified entry steps, off-resort logistics, and practical local safety. | |
| Drawing Generate children's drawings and coloring pages with modular prompts, style packs, and print-ready constraints across image models. | |
| Dreams Build a personal dream journal for recording, analyzing patterns, and exploring your subconscious. | |
| Drizzle Build type-safe database queries with Drizzle ORM patterns. | |
| Dropshipping Build and scale dropshipping businesses with product research, supplier management, order automation, and multi-channel operations. | |
| Drums Drum practice strategies, technique correction, groove development, and progress tracking. | |
| Dubai Navigate Dubai as visitor, resident, tech worker, student, or entrepreneur with neighborhoods, transport, costs, visas, and local insights. | |
| Duolingo Learning OS Run a Duolingo-like multi-topic learning system with AGENTS routing, lesson loops, streaks, and spaced review. | |
| Dutch Write Dutch that sounds human. Not formal, not robotic, not AI-generated. | |
| DynamoDB Design DynamoDB tables and write efficient queries avoiding common NoSQL pitfalls. | |
| eBay Buy, sell, and flip on eBay with listing optimization, pricing research, shipping calculations, and scam detection. | |
| Ecommerce Runs an online store end to end: catalog, checkout, payments, inventory, fulfillment, returns, pricing, conversion, retention, and tax. Use when building or reviewing store code — checkout totals, webhooks, stock decrements; when a payment | |
| Economics Clarify economic thinking from everyday choices to policy analysis. | |
| Elasticsearch Designs, queries, and operates Elasticsearch: mappings, analyzers, query DSL, aggregations, bulk indexing, shard sizing, and cluster health. Use when writing a search query or an index mapping, when a search returns nothing or the wrong doc | |
| Electric Guitar Electric guitar practice strategies, technique, tone shaping, and progress tracking. |
39,051–39,100 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.