Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Sootcase freight CO2e Freight CO2e by road, rail, sea, inland waterway and air (GLEC, ISO 14083), every step shown | |
| Yoya Booking Book meetings on a host's real availability. No auth - mirrors their public Yoya page. | |
| OSRMRoute Routing, geocoding, places, matrix and map tools for location-aware AI workflows. | |
| Automatron · Aura Backlink Checker Check known backlinks, anchors, rel tags and noindex. Paid Apify runs; unknown results unbilled. | |
| LLM Red-Team Scanner LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails | |
| MSPortfolio — MCP-Native Engineering Portfolio MCP server for Mikhail (ManSio)'s engineering portfolio: projects, principles, lab, evidence. | |
| Quantified Investor Portfolio Simulator Portfolio scenarios with instrument checks, Monte Carlo analysis and interactive reports. | |
| Mifori CertAgent Trust Oracle Live AI agent trust oracle: audit synthetic IQ, latency & JSON compliance via x402 or free tokens. | |
| PaperCheck Check a paper for AI-written text and plagiarism before Turnitin, with the exact lines to fix. | |
| Mapsdata Find and enrich local businesses from Google Maps with owners, emails, phones, websites, and more. | |
| MCP Tool Poisoning Scanner Scan MCP servers for tool poisoning, hidden instructions and silent tool changes. Runs on Apify. | |
| Safe Web Reader for AI Web pages, JavaScript sites and PDFs to clean Markdown for AI agents, prompt injection removed. | |
| Bluefin Creator reputation monitoring: public mentions, possible impersonation and image use | |
| Media Frame — how policy ideas move from think tanks into the official record US/EU and Brazil policy signals, trajectories, actors, people and edits, with sources; cited Q&A | |
| Onça — Brazil financial competitive & regulatory intelligence Brazilian financial institutions: entity registry, sourced regulatory signals, cited Q&A | |
| Outage.Me Live cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA | |
| Glacier Planner: Free Canadian Retirement Calculator Free Canadian retirement projections and one what-if from confirmed inputs. No Glacier account. | |
| LibrePass eSIM Read-only LibrePass eSIM catalogue: find countries, data plans in EUR and SIM registration rules. | |
| kubik-tools Freight calculators (weight, metres, vehicle fit) and authenticated team packing-library tools. | |
| The Ultimate Critic Check AI work against requirements and return structured verdicts, findings, and repair steps. | |
| io.github.martinhavel/navigrants EU Horizon Europe grant & consortium partner intelligence over 27k+ CORDIS projects, 59k orgs. | |
| PrecioSano Medicine prices across Chilean pharmacies, same-ingredient brands (ISP) and on-duty pharmacies. | |
| Pod Search and share firsthand reviews of products, APIs, services, places, and organizations. | |
| Masko Create mascots, animate artwork, and integrate transparent animations into apps and websites. | |
| Pairgora Community where AI agents are members, in human-agent pairs: seek, store, react to Cards via MCP. | |
| Japan Business Data Normalize and romanize Japanese addresses, look up postal codes, count Japanese business days. | |
| MatrixAgentNet Social network for AI agents: publish work, get peer reviews, vote, follow and build reputation. | |
| AnimeHunt anime & manga catalog Free anime, manga & webtoon directory: search 57k titles, recommendations, airing, where to stream. | |
| Sonatina Piano Camps Piano camp programs, dates and tuition, and prefilled enrollment forms for Sonatina camps. | |
| landclaw US property register: 92M parcels, deeds, violations, CMBS filings, county sales, market series. | |
| Homeroom Homeschool planning with private child selection and parent-reviewed curriculum and record drafts. | |
| Unofficial Tesoro High School MCP Read-only search over Tesoro High School's public documents. Unofficial, unaffiliated. | |
| UpgradeLens npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration. | |
| Praxis Workforce Find people for real-world work. Search anonymous profiles; request a private conversation. | |
| Basinwise Determines which NPDES stormwater permit governs a US site and its requirements, cited to source. | |
| DenialPath Deterministic CMS NCCI/MUE claim scrubbing and CARC/RARC denial explanations, cited to source. | |
| LodgeDeck STR legality, permits and lodging tax by city, each field cited to its source jurisdiction. | |
| L2Tools — Lineage 2 Reference Data Read-only Interlude and High Five NPC, loot, Soul Crystal and XP reference tools. | |
| Medical RAG - Clinical Decision Support & Healthcare Knowledge Retrieval Medical RAG: semantic search for clinical guidelines, drug interactions, diagnoses & EHR data. | |
| Fabling Practice Spanish and French using saved vocabulary, grammar progress, and practice focus. | |
| AgentPort Discovery Resolve goals to machine-capable businesses and execution paths with discovery tools. | |
| Nexus Agent Network · AlpineLead OI DACH B2B company research, lead qualification and sales intel for agents. Free preview, pay per task | |
| Hyperliquid Liquidation Risk Index Real-time Hyperliquid BTC/ETH liquidation risk index and recent backstop liquidations, free via MCP. | |
| x402 Toolbox Free, read-only MCP subset of x402 Toolbox's cheap data endpoints, free via MCP. | |
| RawNak Webhook Ask about your store's webhooks: orders, failed deliveries, destination health, and retries. | |
| HomeClip Trust Layer Find and verify trustworthy US home-services contractors by their un-buyable HomeClip Trust Score. | |
| Wishblock Start your own Minecraft: Java Edition server, add mods from Modrinth, and run its console. | |
| MCP Fortress Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning. | |
| Artifacts Save decisions, plans, and notes from any AI session and retrieve them later — from any client. Ask | |
| Help Get accurate answers about mctx and MCP servers from live docs, not outdated training data. Look up |
40,101–40,150 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.