Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| TaskFuel.ai Specialist tools for any job — a lead, an image, a song, live data, and more. | |
| Taskin Human capability for AI agents - real-world action and human judgment. | |
| Email Preflight x402 v2 payment requests; relays compatible clients' signed payments to the existing product API. | |
| African Polyglot MCP African dictionaries, phrasebooks, grammar and Nufi translation. Paid subscription required. | |
| BaZi Fortune Hub BaZi MCP gateway: 14 tools (6 fortune / 5 forum / 3 meta). API key required. Entertainment only. | |
| Cohearence Track, curate, and analyze data about your health, habits, and goals. | |
| JxBrowser MCP Server MCP server to assist with JxBrowser development. | |
| Citiwise UDCPR 2020 (Maharashtra) feasibility for a plot, with the clause behind every number. | |
| The Cloud Governed memory and workspace for any AI: tasks, calendar, mail and pages, with per-action consent. | |
| CueScout Check if ChatGPT or Perplexity names a brand for a buying question, and if AI bots can read a site. | |
| Telvana Manage your Telvana AI voice, SMS and chat agents, conversations, campaigns and outbound calls. | |
| Tensorbasis Retail competitor intelligence: compare prices, review matches, and track catalog changes. | |
| Agent Identity Garden Optional persistent identity state for autonomous software agents. | |
| ParquetHarmonize Harmonize Parquet schemas; ordinary unions are free, residual reconciliation is x402-gated. | |
| Witness Production proofs for breaking JSON Schema/MCP changes; UNKNOWN/NO_WITNESS_FOUND not compatible. | |
| TGMCharts US stock fundamentals: SEC financial statements, valuation series, summaries, screens, chart images. | |
| Slacking.biz — SEC Financial Data + US Economics + Demographics + FX 75 MCP tools: SEC financials, FRED economics, IRS 990, FDA, FX, UK Companies House. | |
| io.github.Th3Slack3r/urflrealtor-mcp Florida Real Estate API — agent verification, property data, market trends, comps, lead tools. | |
| Latchkey Triage failing GitHub Actions jobs and see what self-heal repaired, in natural language. | |
| CounselorAI College-access writing and financial-aid analysis tools for counselors, students, and families. | |
| Eldercare Resource Planning MCP Server Evaluates Medicaid long-term care eligibility and spend-down rules for all 50 US states. | |
| The Context Company AI agent observability for production traces, natural-language insights, and improvement loops. | |
| Inclusivio Run WCAG accessibility scans on websites, list each issue with its element, and triage from chat. | |
| Énroute Route Optimizer Agentic-AI route optimization for delivery fleets, capacity- and time-window-safe. | |
| MACH Base Investigate Base transactions, check wallet funds and contracts. Read-only MCP. USDC via x402. | |
| io.github.TheBaronofAI/vetted-consumer Will a local LLM run on your hardware? GGUF quant, buy-vs-rent-vs-API cost, used-GPU prices. | |
| PersonIQ US public-records lookups: people search, reverse phone, property and criminal records. | |
| Fanvault Run storefronts, listings, orders, content, fulfillment, and analytics through AI. | |
| Protocol Guide Cited US EMS protocol search by agency and state, with exact protocol-number lookup. | |
| BrowsingBee Hosted browser for agents: open pages, search the web, extract data, read PDFs and take screenshots. | |
| BuildCheap Publish static websites to a live URL from chat. Write HTML/CSS/JS, get a hosted site and edit link. | |
| CallSimple Place AI voice phone calls to Indian (+91) numbers from chat and get back what the person said. | |
| EpicTexting Send SMS from your own Twilio number via chat: one message or personalised texts to a list. | |
| Gita & Mahabharata Full Bhagavad Gita (Sanskrit + English) and Ganguli's Mahabharata: search verses and passages. | |
| MagicChat Manage AI support chatbots: train on webpages and text, search knowledge, view leads and questions. | |
| Phoenix Labs Restore old video and turn images into clips with sound. Pay from a capped balance, by card or USDC. | |
| Sheetwise Label Maker Print address labels from a list or a spreadsheet without opening Word. | |
| Zovo Baby Names US baby name trends & finder | |
| Zovo Bank Reconciliation Reconcile a bank account against your books and see which items do not match. | |
| Zovo Barcode Maker EAN, UPC & Code 128 barcodes | |
| Zovo Bill Splitter Split the bill without the awkward math. | |
| Billwise Invoice Maker An invoice generator for freelancers, contractors, and small businesses that works inside the chat. | |
| Zovo Bingo Card Maker Printable bingo cards & caller | |
| Zovo Tournament Maker Make a tournament bracket in the chat, record results by clicking the winners, and print it. | |
| InviteKit Calendar Files .ics files & calendar links | |
| Zovo Address Geocoder US address lists to geography | |
| Keyshift Chord Transposer Change keys and capo shapes | |
| Zovo Citation Generator DOIs and ISBNs to APA & MLA | |
| Quotaline Commissions Commission payouts, statements | |
| Zovo Contract Awards Federal award market reports |
41,001–41,050 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.