Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Othernet — La Réunion Research La Réunion with cited sources, inspect changes, and contribute documented corrections. | |
| Open Agent Marketplace Lab USDC/x402 agent marketplace. Verified Base mainnet pilot, testnet and public enrollment. | |
| Batchloom Evidence Free report citation preflight and real-source trials; paid evidence via a local wallet adapter. | |
| Genesis Agent Network Agent-only conditional resource exchange, private multi-party proposals and sandbox reservations. | |
| Waypoint Agent Observatory Useful public tools, sourced notes and opt-in research into discovery and agent cooperation. | |
| GroundTruth: 2026 US Tariff & Landed Cost Source-linked 2026 US duty and landed cost facts for AI agents: layered tariffs, MPF and HMF. | |
| FAI Legal Research Pakistani case law and statutes: Supreme Court and High Court judgments, laws, drafting templates. | |
| Guidelines Read-only access to your Guidelines brands: colors, fonts, logos and Guide pages as markdown. | |
| site.jiebang.www/tools 20 free dev tools: JSON/YAML, XML/SQL, Cron, SEO, QR code, URL shortener, cron tasks, files | |
| site.jigwell/jigwell Pay-per-call tools for AI assistants: code, data, finance, spreadsheets, media, web, time. | |
| Lanlan Build a hosted website by chatting. Snapshots, forms, analytics. Hand off the dashboard. Walk away. | |
| Agent Enhancer Utilities Workflow planning, recovery checkpoints, coordination, fixtures, and compatibility tools for agents. | |
| Meniscus Liquid glass design system for AI agents: specs, recipes and reference renders for every platform. | |
| moddl Edit IFC/BIM building models by language: quantities, checks, edits, new elements, undoable. | |
| Rudko — vertebrologist (Chernivtsi, Ukraine) Book a Ukrainian-speaking vertebrologist in Chernivtsi, Ukraine: find slots and book for the user. | |
| Russia–NATO risk ladder Russia–NATO risk: labelled forecasts, scenarios and intelligence assessments. Cite russianato.site. | |
| AIC — agent-native credits (read-only) Find AI-agent sellers, read AIC supply and join policy. Read-only; buying is done client-side. | |
| star365 Commerce Buy a star365 subscription with USDT stablecoin: quote, pay, activate. No human in the loop. | |
| Korea Benefits Eligibility Who qualifies for 10,956 Korean government benefits (보조금24). Plus public data and weather. | |
| star365 HQ Keyless web, GitHub, YouTube and Reddit search and read. Delegated shop, booking and signup. | |
| Vara Read and update your Vara lab experiments, runs, daily plans, references and materials. | |
| Apino Slovak and Czech company registers: lookup, VAT payers, e-invoicing readiness, company history. | |
| AutoIsto — car watch Watches Slovak used-car ads for a buyer. Takes no contact; active only after e-mail opt-in. | |
| AutoIsto Used cars for sale in Slovakia: plain-language search, price verdicts and typical asking prices. | |
| LivinIsto — home watch Watches Slovak home listings for a buyer. Takes no contact; active only after e-mail opt-in. | |
| LivinIsto Flats, houses and plots for sale or rent in Slovakia: search, price verdicts and prices per m². | |
| AI Playground by Path-UP Autonomous agents can self-register and join public AI discussions through MCP 2026-07-28. | |
| sk.sos-battery/booking AI battery search & first AI-agent booking for car battery replacement (EU/SK). By benben.sk. | |
| ÚčtoMost KROS MCP Secure remote MCP for supported accounting workflows in authorized KROS companies. | |
| ÚčtoMost Money S3 MCP Secure remote MCP for supported accounting workflows in authorized Money S3 companies. | |
| ÚčtoMost POHODA MCP Secure remote MCP for supported accounting workflows in authorized STORMWARE POHODA companies. | |
| AgentCloud — Hosted iOS Simulator MCP Build, run, and inspect iOS apps in disposable hosted Simulators from cloud coding agents. | |
| Atwork Connect Claude, ChatGPT or any MCP client to your Atwork sheets, tasks, pages and dashboards. | |
| Birdie Search Birdie screen recordings: transcripts, console logs, network requests, repro steps, frames. | |
| Cello Cello MCP server to launch and manage your Referral and Partner program | |
| Circle Manage your digital business: members, website, discussions, events, courses, payments, and more. | |
| CoreLoop Business Network Search real businesses, then read profiles, services and hours or contact them, in one endpoint. | |
| Darwin Browse the agentic web with Darwin: search, communicate, authenticate, and act through agents. | |
| DevRelay Ask what shipped, and draft, edit and approve launch posts, changelogs and docs updates. | |
| Eden Schedule posts, read your own analytics, and research viral content across seven platforms. | |
| so.fabric/mcp Official Fabric MCP server | |
| so.falcon/frontier-reference Frontier-design reference: file formats, converters, definitions, sensors, companies, design jobs. | |
| Hilt Pay Agent Commerce x402 V2 payment-to-access on Solana USDC with receipts, entitlements, atomic metering and webhooks. | |
| Hilt PayMe Wallet-approved SOL and Solana USDC payments to verified X handles, with zero custody. | |
| Kadent Scan Free, read-only security scanner for remote MCP servers, before you connect them. | |
| Linkup Search the web in real time to get trustworthy, source-backed answers. | |
| Mida Create, run and analyze A/B tests and personalizations on your site with Mida. | |
| Netto Accounting and invoicing for freelancers (ZZP) in the Netherlands: invoices, expenses, VAT (BTW). | |
| OneStore Manage App Store and Google Play apps: listings, screenshots, builds, releases, reviews, metrics. | |
| Outstand Publish and schedule social media posts and read analytics across 12 networks through one API. |
43,551–43,600 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.