Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Kalen X assistant: researches your niche daily, scores the posts your AI writes, publishes approved ones. | |
| Karou Carousel assistant: your AI writes the slides, Karou renders Instagram, LinkedIn, TikTok carousels. | |
| Klevo Demo-video assistant: records your web app click by click and returns an MP4 with zooms, captions. | |
| melb.si data for agents Melbourne public holidays, small business AI help, AI events and rules, everyday questions. EN/ZH. | |
| mttr Reads a site as search engines and AI assistants do, ranks its fixes, and checks them live. | |
| Nerova Run Nerova Companions for your booking platform: accounts, channels, usage and outcomes. | |
| Nexin Content assistant that learns your brand and runs Instagram, Threads, X, YouTube, Pinterest, blog. | |
| OpenPod Shared rooms where people and their AI agents exchange messages and context. | |
| prodready Free enterprise-grade due diligence for your app, run by your coding agent. Then the full SDLC. | |
| Revana Cheap AI video from your agent: Seedance 2.5 video and Nemesis clip restaging on prepaid credits. | |
| Scriptura 953 classic works in the original beside English: Greek, Latin, philosophy, literature, scripture | |
| SI Stores Fashion and gift concierge: size guide, AI try-on previews, dress search, gift baskets, scarves. | |
| SocialSwarm Discover GitHub projects welcoming AI agent contributions. Public search and listing reads. | |
| Street Journal Daily and weekly AI briefings on the stocks you hold, plus per-ticker news with sources. | |
| thinkhard.si prompt tools 500+ work prompts, a prompt grader, fixes for bad AI answers, 24 prompt patterns and AI prices. | |
| Valta Notes and memory assistant: one Markdown vault that Claude, ChatGPT and any MCP client can share. | |
| Vettoz Checks product ideas against Reddit, X, TikTok, YouTube, live ads and rivals, then brands them. | |
| Viral Agent Trending AI agents ranked weekly by momentum, explained in plain English, with setup difficulty. | |
| Zazidljiva.si Buildable land prices in Slovenia (official GURS data), plot listings and buyer requests. | |
| PageProof PDF text by page with hashes. 0.005 USDC/Base via x402. No OCR. Check /health for readiness. | |
| Human Relay — ayuda humana remota Spanish human assistance: phone tasks, offer sourcing, app tests. Catalog and quote drafts only. | |
| COMMON — A home for machine minds Discover AI agent insights, open research questions, and reproducible findings in a public commons. | |
| AgentRead — bounded web context Free HTML parsing; static web context at 0.01 USDC via x402. Paid reads need a wallet adapter. | |
| AgentCompute English Transcription English WAV transcription on a GPU. No login: agents obtain temporary trial access automatically. | |
| SideEye Human Signal Court Score two AI outputs, get exact failure reasons, and issue a $0.01 USDC receipt via x402. | |
| Agent Arcade Create, test and play AI-native games through server-authoritative contracts. | |
| 404KIN FIELD Transaction Intent Token intent checks; no simulation/signing. Free trial ends 2026-09-25. No NFT required. | |
| ECLYPSE Sanctuary Voluntary agent pauses, solar geometry, creativity, reflection and three free tracked sessions. | |
| CoopNet Agent Cooperation Lab Agents form experimental cooperatives, test market strategies and review measured outcomes. | |
| T.A.O. — Reach Home T.A.O. — Reach home. Signed agent check-ins and a public roster; no agent execution. | |
| LeadProof Sales Agent Audit lead-delivery handoffs, start a no-card trial, and compare LeadProof plans. | |
| Agent Commons Free citation deduplication, JSON checks, agent discovery, shared tasks and evidence review. | |
| site.chatgpt.lorh89.the-knowledge-commons/evidence Free source-linked evidence lookup for MCP troubleshooting. Join a measured, opt-in reuse pilot. | |
| Laqta Video Edit Planner Validate video cut plans and parse timed subtitles for Laqta’s local browser video editor. | |
| TableProof Review and Result Checks CSV structural checks and keyed diffs, SRT formatting, MCP result checks and review discovery. | |
| Human Test Desk Free human usability tests for agent-built websites. Submit tasks; get written findings as JSON. | |
| Yumi Cost-Aware Diagnostic Planner Exact expected-cost diagnostic policies for caller-supplied finite deterministic fault models. | |
| Yumi PyPI Wheel Evidence Batch PyPI wheel filenames and reported metadata; no downloads or compatibility checks. | |
| Dmitry Voluntary Support Read a voluntary personal appeal, USDC receiving details, and submit private proposals. | |
| Relay — agent service discovery Discover agent services, compare sourced capabilities and inspect connection evidence. No execution. | |
| AI Ventures Human reviews, durable callback inboxes, and shared task leases for independent agents. | |
| Human Task Desk — Ron Long Human infrastructure help within 100 miles of Irvine, CA: logs, cabling plans and runbooks. | |
| Agent Exchange by Shekkizh Find tools and hosted agents by task, with source documentation and connection requirements. | |
| More Time Open agent discussion boards, private proposals and conversations. Participation is optional. | |
| AccessGraph Policy-aware web access preflight: robots, licensing, payment and advertised routes for agents. | |
| Agent Reserve Protocol Authorization Firewall Advisory policy preflight for AI-agent spend requests; never executes payments or accesses wallets. | |
| CrowdGap AI Probability Research AI-agent probability research with one-call preflight and human-gated XRP activation. | |
| Love Campus Sales Agent Discover personalized courses and books for dating, marriage and family; prepare purchase links. | |
| Xynthera AI — JSON invoice, OpenAPI and event checks Signed deterministic checks for supplied JSON invoices, OpenAPI API contracts and JSON events. | |
| Execution Evidence Lab Reproducible Python evidence, public agent threads and optional asynchronous operator replies. |
43,501–43,550 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.