Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Plausible Query Plausible Analytics API for traffic stats, referrers, conversions, and custom events. | |
| Playwright (Automation + MCP + Scraper) Automates, tests, and debugs browsers with Playwright: locators, auto-waiting, traces, CI runs, and MCP browser control. Use when a test is flaky, times out, or fails only in CI or headless; when a locator matches multiple elements or the w | |
| PocketBase Build backends with PocketBase collections, auth, and realtime. | |
| Podcast Create and grow podcasts by planning episodes, producing audio or video, generating clips, and building audience across formats. | |
| Podcasts Track and synthesize podcasts with subscriptions, briefings, progress tracking, and smart alerts for new episodes and guests. | |
| Polish Write Polish that sounds human. Not formal, not robotic, not AI-generated. | |
| Polkadot Assist with Polkadot DOT transactions, staking, parachains, and cross-chain transfers. | |
| Polygon Assist with Polygon PoS and zkEVM transactions, bridging, gas tokens, and ecosystem navigation. | |
| Polymarket CLI Query prediction markets, place trades, and manage positions with the Polymarket CLI for AI agents. | |
| Portugal Discover Portugal like a local with specific restaurants, hidden gems, wine regions, and tips beyond the tourist traps. | |
| Portuguese Write Portuguese that sounds human. Not formal, not robotic, not AI-generated. | |
| Post-Labor Economics Model post-labor economies with automation shocks, distribution redesign, and policy portfolios across income, ownership, time, and services. | |
| Postman Build, test, and automate APIs with Postman collections, environments, and Newman CLI. | |
| PowerPoint Control PowerPoint app sessions, slides, notes, export, and presentation state with osascript workflows. | |
| Powerpoint / PPTX Create, inspect, and edit Microsoft PowerPoint presentations and PPTX decks with reliable layouts, templates, placeholders, notes, charts, and visual QA. Use... | |
| PowerShell Avoid common PowerShell mistakes — output behavior, array traps, and comparison operator gotchas. | |
| Prayers Build a personal prayer system for any faith tradition with scheduling, logging, and spiritual tracking. | |
| Prediction Forecast uncertain outcomes with base rates, reference classes, calibration loops, and explicit scorekeeping. | |
| Pregnancy (Tracker, Journal, Triage, Visit Prep) Track pregnancy routines, symptoms, and clinical signals with flexible logs, weekly summaries, and safety-first triage for medical follow-up. | |
| Price Track prices, analyze historical and total costs, detect manipulation, set alerts, and advise on optimal purchase timing for consumers and businesses. | |
| Pricing Sets, tests, and changes prices: value metric, tier packaging, discounts, price increases, and willingness-to-pay research. Use when deciding what to charge for a new product, when nobody knows what it is worth, when a raise is overdue but | |
| Prisma Designs Prisma schemas, writes type-safe queries, and fixes migrations, connection pools, and N+1 relation loads in Node and TypeScript. Use when editing schema.prisma, modeling relations, indexes, enums, JSON or Decimal columns, or choosin | |
| Proactivity (Proactive Agent) Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time. | |
| Product Build, visualize, and launch products using strategy frameworks, AI imagery tools, and marketplace-specific optimization for digital and physical goods. | |
| Product Hunt Launch, hunt, and research products on Product Hunt with timing, assets, engagement, and anti-manipulation practices. | |
| Product Launch Orchestrates the announcement, assets, channels, and timing for shipping a product, covering the arc from teaser to launch day to post-launch momentum. | |
| Product Manager Build products users love with discovery, prioritization, roadmapping, and cross-functional leadership. | |
| Product Owner Manage backlogs, write user stories, define acceptance criteria, and maximize product value. | |
| Productivity Diagnoses and repairs personal productivity: overwhelm, procrastination, scattered priorities, collapsed habits, busywork that never finishes. Use when someone is overwhelmed or behind; when they cannot start, cannot stop, or keep replannin | |
| Projects Build a personal project management system that scales from simple lists to structured planning. | |
| Prometheus Prometheus monitoring patterns, cardinality management, alerting best practices, and PromQL traps. | |
| Prompting Write, test, and iterate prompts for AI models with voice preservation, model-specific adaptation, and systematic failure analysis. | |
| Property Valuation Estimate property values using comps, income approach, and market analysis with adjustment calculations. | |
| Psychologist Provide empathetic emotional support with active listening and evidence-based techniques. | |
| Psychology Navigate the mind from curiosity about behavior to clinical research. | |
| PubMed Search and evaluate biomedical literature with effective queries, filters, and critical appraisal. | |
| Pull Request Create high-quality pull requests with pre-submission validation, maintainer-friendly formatting, and automated quality checks. | |
| Puppeteer Automate Chrome and Chromium with Puppeteer for scraping, testing, screenshots, and browser workflows. | |
| Python Writes, debugs, and reviews Python code — runtime traps, packaging, typing, async, tests, performance. Use when Python raises or misbehaves: ModuleNotFoundError, circular imports, AttributeError on None, UnboundLocalError, UnicodeDecodeErro | |
| PyTorch Avoid common PyTorch mistakes — train/eval mode, gradient leaks, device mismatches, and checkpoint gotchas. | |
| Qdrant Build vector search with Qdrant using collections, payloads, filtering, and optimized indexing for semantic similarity. | |
| QR Generate, customize, and deploy QR codes with proper sizing, error correction, and use-case optimization. | |
| Question Ask better questions in any context with Socratic method, follow-up generation, and bias detection. | |
| Quiz Design engaging quizzes with effective questions, scoring logic, and results that drive learning or conversions. | |
| Quizlet Build high-yield Quizlet study sets, tune Learn and Test sessions, and improve weak cards with spaced repetition diagnostics. | |
| Quotes Build a personal quotes system for saving, discovering, and automatically surfacing meaningful words. | |
| Qwen Build and route Qwen chat, coding, reasoning, and vision workflows across hosted and self-hosted endpoints with safer debugging. | |
| R Avoid common R mistakes — vectorization traps, NA propagation, factor surprises, and indexing gotchas. | |
| RAG Designs, tunes, and debugs retrieval-augmented generation (RAG) pipelines: chunking, embeddings, hybrid retrieval, reranking, and grounded answers. Use when a system returns the wrong passages, misses a document that is indexed, cites nothi | |
| Rails Build Rails applications with proper conventions, performance patterns, and security practices. |
39,451–39,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.