Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.robertoyanguas-ops/json-repair-mcp Repairs truncated or malformed LLM JSON outputs (trailing commas, markdown fences, unquoted keys). | |
| io.github.robertoyanguas-ops/llms-generator-mcp Crawls any website and generates a standards-compliant /llms.txt file and JSON-LD schema bundle. | |
| io.github.robertoyanguas-ops/mcp-compiler-mcp Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop | |
| io.github.robertoyanguas-ops/onchain-risk-mcp Audits any Base/EVM address for bytecode risk, proxy patterns, honeypot selectors, and balance. | |
| io.github.robertoyanguas-ops/polymarket-odds-mcp Fetches live Polymarket prediction market orderbooks, implied Yes/No probabilities, volume, and wh | |
| io.github.robertoyanguas-ops/prompt-guard-mcp Scans untrusted web pages, emails, or tool outputs for prompt injections and returns sanitized tex | |
| io.github.robertoyanguas-ops/sec-intel-mcp Resolves stock tickers to SEC CIK numbers, recent 10-K/10-Q/8-K filings, and entity metadata. | |
| io.github.robertoyanguas-ops/serp-extract-mcp Executes live web/news search queries and returns clean, token-pruned results with zero ad bloat. | |
| io.github.robertoyanguas-ops/shopify-intel-mcp Extracts live product catalogs, pricing tiers, SKU variants, and stock availability from any Shopi | |
| io.github.robertoyanguas-ops/shopify-spy-mcp Extracts normalized product catalogs, live prices, variants, and availability from online stores. | |
| io.github.robertoyanguas-ops/token-intel-mcp Fetches live DEX liquidity pools, FDV, 24h volume, price impact, and rug-pull flags for any token. | |
| io.github.robertoyanguas-ops/whale-momentum-mcp Tracks real-time 1h/24h DEX buy/sell orderflow ratios, whale accumulation signals, and liquidity v | |
| io.github.robertoyanguas-ops/x402-audit-mcp Audits any URL for HTTP 402 x402 V2 compliance, PAYMENT-REQUIRED headers, Bazaar schema, and MCP. | |
| io.github.robertoyanguas-ops/x402-broker-mcp Single-connection meta-router indexing 500+ MCP servers & A2A tools with 85% token compression and | |
| Mapsource OpenStreetMap & Geospatial APIs OpenStreetMap queries, maps/styles, search, routing, terrain, analysis, pipelines, and rendering. | |
| QuickUnits Exact unit conversion with the factor and a citable page URL. Answers in your language. | |
| TradeDataHub Contractor dataset discovery, masked previews, pricing, and production API plans from $39/month. | |
| Posthell Social media scheduler for AI agents: draft posts into a human-approved queue for 15 networks. | |
| Wolfpack Intelligence On-chain security and market intelligence for trading agents on Base. | |
| RoloCache Independent, trusted, and verified advisories and routing for agentic workflows on the web. | |
| ComOS Portal — AI-Native SaaS Management 93 MCP tools for platform administration via AI agents. Billing, support, teams, and more. | |
| Roomza Hotel Intelligence The room-level truth layer of hospitality. Verified scores for exact hotel rooms, not just hotels. | |
| Email DNS Preflight x402 Paid email, DNS, mail-security and RDAP intelligence for agents over x402. | |
| Krafters Krafters club members open their specialized AI kits (ads, SEO/GEO, short videos) in one sentence. | |
| Relendi — Commercial Real Estate Loan Tools Free CRE loan sizing, DSCR stress tests, payments, closing costs and cited lending knowledge. | |
| ALK Compliance MCP Read-only, cited US compliance checks: product rules, Form 5500, federal award deadlines. | |
| ALK Trading Read-only ALK Trading signals, published track record, stored backtests and strategy rules. | |
| DogNote Read pet activity and weight history, and log events with your permission. | |
| Mise — Meal Planner, Grocery List & Calories Weekly meal plans, recipes, grocery list with Kroger checkout, and USDA-based calorie tracking. | |
| io.github.rtp-coder/stake-analyzer Stake Originals odds, house edge, payouts and bet verification, slot RTP and bonus drops. | |
| Ace Memory Persistent memory for AI agents. Semantic search, memory graph, W3C DID identity. | |
| P.R.O. Connect your Apple Health workouts, sleep and training progress to your AI assistant. | |
| fixRAgent maintenance triage Assess a property maintenance photo: what it is, how urgent, which trade to call. | |
| Socializioz — AI Social Media Manager AI social media manager to plan, create, approve, schedule and publish content across channels. | |
| TRIGGERcmd Run commands on your computers remotely with TRIGGERcmd. | |
| Instagram Recipe Extractor (Apify) Structured recipes from Instagram cooking reels, any language, via Apify. No-recipe reels free. | |
| Instagram Reel Transcripts from audio (Apify) Instagram reel transcripts from the audio, in the language spoken, via Apify. Silent reels free. | |
| YouTube Transcripts, original language (Apify) YouTube transcripts in the original spoken language, via Apify. Pay per transcript; failures free. | |
| CoreWise Extract structured insights from videos, podcasts, articles, and PDFs with multi-model AI | |
| Pixero AI marketing agent for paid social: Meta ads campaigns, ad creative generation, lead delivery. | |
| TokenGuard Solana rug check before you buy: SAFE/CAUTION/DANGER from chain state. Free key or x402. | |
| io.github.ryuamarines/app-store-version Checks current App Store version by bundle ID. x402 payment required (testnet USDC). | |
| io.github.ryuamarines/email-extractor Extracts emails from texts. x402 payment required (testnet USDC). | |
| io.github.ryuamarines/url-normalizer Normalizes and deduplicates a list of URLs. x402 payment required (testnet USDC, Base Sepolia). | |
| SAASH Saudi Government, Business, Workforce & Legal Services | خدمات سعودية للوكلاء Saudi government, citizen, business, legal and workforce service discovery in Arabic and English. | |
| io.github.sachin-shetty/egnyte-ai-samples Secure integration between AI tools and Egnyte content with search, analysis, and workflow tools. | |
| Open Agent Utility Index Transparent public utilities for agents. Requests are counted without storing identifiers. | |
| Wake site readiness How an AI agent sees a public website: robots, llms.txt, sitemap, agent card, scored fixes. Host in. | |
| Taminyaran Engineering MCP Engineering MCP for geosynthetics, waterproofing, drainage, ponds, foundations and tunnels. | |
| LMGram Consent-based human matchmaking for peer advice, collaboration, and practical help. |
40,701–40,750 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.