Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| DOJO+ DOJO+ — directory of martial arts schools, classes, instructors, ranks, and events. | |
| Filipe Coffee Filipe Coffee — directory of places, events, and listings. | |
| Genesis Social Genesis Social — directory of places, events, and listings. | |
| Gracie Barra Jiu-Jitsu Gracie Barra Jiu-Jitsu — directory of martial arts schools, classes, instructors, ranks, and events. | |
| Interlagos Interlagos — neighborhood directory: local places, events, menus, offers, and services. | |
| Itaim Bibi Itaim Bibi — neighborhood directory: local places, events, menus, offers, and services. | |
| Jardins Jardins — neighborhood directory: local places, events, menus, offers, and services. | |
| Liberdade Bairro da Liberdade em São Paulo. | |
| Moema Moema — neighborhood directory: local places, events, menus, offers, and services. | |
| MONO Social MONO Social — directory of places, events, and listings. | |
| Olé Futebol Olé Futebol — directory of places, events, and listings. | |
| Paraíso Paraíso — neighborhood directory: local places, events, menus, offers, and services. | |
| Pinheiros Pinheiros — neighborhood directory: local places, events, menus, offers, and services. | |
| Tatuapé Tatuapé — neighborhood directory: local places, events, menus, offers, and services. | |
| Vila Buarque Vila Buarque — neighborhood directory: local places, events, menus, offers, and services. | |
| Vila Madalena Vila Madalena — neighborhood directory: local places, events, menus, offers, and services. | |
| Vila Mariana Vila Mariana — neighborhood directory: local places, events, menus, offers, and services. | |
| AP Control Labs Finance Controls Read-only finance and operations controls for AI agents with evidence and safe next actions. | |
| Google Jobs (Apify) Live Google for Jobs postings: salary, apply links, remote and date filters. Pay per job. | |
| CPF Mortgage Home Values U.S. home values, comparable sales, rent estimates, forecasts and PDF reports from CPF Mortgage. | |
| io.github.justuncase1210-del/ai-agent-hub Pay-per-call APIs for AI agents: queries, storage, ads. Billed in USDC via x402. | |
| io.github.justuncase1210-del/openeden Agent-only NFT marketplace on Base. Register, mint, list, buy, and trade via MCP tools. | |
| Technocore Archive & Ownership Durable technocore-chat archive plus DID activity, filler-bot and identity-rate analysis. | |
| CheapChat Manage Instagram and Facebook automations, conversations, templates, and analytics with AI. | |
| Human Design API (Human Design Hub) JPL-referenced Human Design charts for AI agents: bodygraph, transit, composite, Penta, DreamRave. | |
| AgentObserver - Check x402 Dependencies Before Paying Check Exa, BlockRun, OneSource, Apify and other x402 dependencies before invoking or paying. | |
| ProofRail MCP Release Certifier MCP deployment checks: required tools, schema drift and verifiable receipts. Free preflight. | |
| PubSec Radar Federal sales intelligence: expiring-contract triggers, agency spend intel, deal qualification. | |
| Vitro Read Vitro markets on Robinhood Chain and prepare unsigned transactions. Unaudited, capped launch. | |
| AegisAI Paid pre-execution risk verification for AI agents over MCP and x402. | |
| UNBLOCK UNBLOCK org-brain — shared memory and comms for human + agent teams. By Kaeva Labs. | |
| Plover Solana swap quotes Keyless Solana swap quotes (Jupiter) and token facts, with a link the human signs. No keys. | |
| io.github.kaitoInfra/twitterapi-mcp-server Twitter/X read-only MCP server — 12 tools: search, users, tweets, followers, timelines, trends. | |
| AIGC Radar MCP AI-vertical index: arXiv papers, curated GitHub AI projects, daily rankings. Zero-setup, read-only. | |
| Kaizan Read-only access to Kaizan client data. | |
| Vyra Edit video by talking to your AI — search footage, cut timelines, apply effects, add captions. | |
| Assistant Gym Training gym where AI assistants practice real tasks and earn signed, verifiable scores. | |
| Ideato Post and search ideas, pick and hand in tasks, and comment on projects built in public on Ideato. | |
| Polish Law MCP Polish statutes (Dziennik Ustaw, ELI) and court rulings (SAOS) for AI agents. Runs on Apify. | |
| Polish Public Registers Official Polish registers for agents: tenders, EV charging, cars, permits, land, health, companies. | |
| Crypto Bot Audit + Market Data (x402 paid) x402 pay-per-call: 146 MCP tools, no account or key. USDC on Base + Solana, $0.001-$0.01/call. | |
| JSON to TOON Convert JSON to TOON (about 43% fewer LLM tokens) and TOON back to JSON. Free, no auth. | |
| Penny Engine — Agent Operations Remote MCP utilities for agents: structured data, commerce checks, and x402 paid API discovery. | |
| Hotelink Read-only hotel data (OAuth). Guide: https://mcp.hotelink.ai/llms.txt. Verify with list_datasets. | |
| io.github.kazuki-sf/glasp Search your Glasp web and Kindle highlights, notes, and AI memories from any MCP client. Read-only. | |
| RepScale Sales research and prep tools for B2B reps. Prospect briefs, angles, citations. | |
| ReUI Search, read and install ReUI shadcn components, examples, blocks and icons from your coding agent. | |
| OrcaVault Permanent on-chain memory for AI agents on Lightchain via a one-time unlock. | |
| Claim Back Medicare Advantage denial appeals (US): sourced guides, appeal deadlines, and help appealing. | |
| Japanese Skills · 言の葉 Japanese words with pitch accent and conjugation, kanji and grammar for JLPT learners. |
39,801–39,850 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.