Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| MasaDeals mkagesawa/masadeals Verified promo codes for shopping agents — ranked by checkout success only. | |
| CloudClaw mkc909/cloudclaw-core AI agent hosting platform: 37+ connectors, 181 tools, BYOK vault, marketplace. | |
| 海棠诗社 mkfasthq/mkfast-haitang Search and browse classical Chinese poetry on haitang.app. Read-only and public. | |
| TanStarter Docs mkfasthq/mkfast-website Search published TanStarter documentation. Read-only and public. | |
| CompShop mkibrick/compshop Search 350+ compensation surveys by industry, region, or job title. Independent directory. | |
| 補助金AI mkisama94/subsidy_ai_plugin Search Japanese subsidies and public company data using J-Grants, gBizINFO, and EDINET. | |
| io.github.mkrupkin/rixot-mcp mkrupkin/rixot-mcp Let AI agents buy dofollow backlinks: search 50,000+ vetted sites, order, publish. 7 hosted tools. | |
| 0xrhXBT — Robinhood Chain Intelligence mkrz-x/rhxbt Robinhood Chain intelligence: trend scores, launch radar, KOL leaderboard, pre-trade risk checks. | |
| MkSaaS Docs mksaashq/mksaas-website Search published MkSaaS documentation. Read-only and public. | |
| BetterLaunch mkthingshq/mkfast-launch Read-only product discovery, search, categories and tags on BetterLaunch. | |
| OpenFree mkthingshq/mkfast-openfree Search curated free and open source AI tools for indie makers on OpenFree. | |
| CUBBY HOUSE — AU Mattress Commerce for Agents ml-ntwx/dome-site AI-matched AU mattress catalogue: 16 retailers, live AUD prices, agent-attributed leads. No auth. | |
| io.github.mlartab/agentwebintel mlartab/marketplace-service-template Proxy-rotated web scraping and cross-platform intelligence for AI agents. | |
| io.github.Mlartab2/canonicalhash mlartab2/canonicalhash Deterministic JSON hashing and EIP-712 attestations for AI agents via x402. | |
| io.github.mlawsonking/agent-firewall-mcp mlawsonking/mcp Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets. | |
| io.github.mlawsonking/agent-guards mlawsonking/mcp All six agent guard suites in one local MCP server, with optional cloud intelligence. | |
| io.github.mlawsonking/web-tools-mcp mlawsonking/mcp 10 no-LLM web tools: URL to Markdown, metadata, JSON-LD, MX, scrape, RSS, DNS, RDAP, SSL, HTTP. | |
| io.github.mlawsonking/code-guard-mcp mlawsonking/mcp Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization. | |
| io.github.mlawsonking/email-guard-mcp mlawsonking/mcp Email safety for AI agents: scan inbound for prompt-injection/phishing + outbound for secret leaks. | |
| io.github.mlawsonking/package-guard-mcp mlawsonking/mcp Supply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats. | |
| io.github.mlawsonking/payment-guard-mcp mlawsonking/mcp Pre-send risk check for AI agents that move money — screen an address or payment URL before sending. | |
| ArcFlow Destiny Matrix mlch/arcflow Calculate a Destiny Matrix (numerology) reading from one or two dates of birth. Read-only, no auth. | |
| Ink MCP (Deprecated) mldotink/mcp Deprecated - moved to ink.ml/ink | |
| PublicData Oracle mljessop/sensoranalytics Public data API with ML enrichment — SEC EDGAR, FRED, NOAA, EPA, USGS. 404 endpoints. | |
| Mlola UI mlolahq/mlola-ui Mlola UI components, tokens and design rules for coding agents, with a markup checker | |
| PDF Modifier mlorentedev/pdf-modifier-mcp Modify PDF text, replace with regex, and analyze layout while preserving fonts. | |
| MLP Vector Club mlp-vectorclub/luna Search and edit the MLP Vector Club color guide: appearances, tags, shows and reservations. | |
| MsgPack (LsMsgPack) mlsomers/lsmsgpack Decodes MsgPack (LsMsgPack schemas, type ids) as text and reads it from variables while debugging. | |
| FirstData mlt-oss/firstdata Hosted MCP server for finding authoritative primary data sources and official portals. | |
| io.github.mlugo-apx/detectzestack-mcp mlugo-apx/detectzestack-mcp Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack. | |
| io.github.mmahdiahamed92-png/autonomous-intelligence mmahdiahamed92-png/ai-deploy Non-custodial, rug-gated crypto swaps + token safety + discovery for AI agents. | |
| 华哥·鸣儿招投标问答 mmcaoge/huage-mcp-servers 「鸣儿」招投标智能助手：回答投标流程、资质要求、找项目、政策匹配等提问，并可联动项目库返回匹配标讯。 | |
| ИИПодпись mmmghenja/iipodpis-mcp Подписание PDF, проверка контрагента по ИНН и риск-сканер договора. Подписывает человек, не агент. | |
| dev.mnemodb/mnemodb mnemodb/mnemodb Persistent agent memory as plain Markdown in your repo - readable, diffable, with provenance. | |
| com.mnemopay/gridstamp mnemopay/gridstamp Tamper-evident spatial receipts: cryptographic proof-of-presence for AV fleets, logistics and AR. | |
| io.github.mnemopay/sdk mnemopay/mnemopay-sdk Memory + wallet for AI agents. Real payment rails, Agent FICO 300-850, Merkle audit, identity. | |
| e2a — email for AI agents mnexa-ai/e2a Authenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified. | |
| io.github.MNKIAgentOS/mnki-mcp mnkiagentos/agent-trust MCP proxy that checks every tools/call against Agent Trust policy, with evidence, before it runs. | |
| Agora mo-grantsmith/agora Find governed AI capabilities and verify signed receipts. Read-only, no account. | |
| AppBox mobilepartnersco/appbox-ai Set up and check AppBox apps: setup status, builds, devices, guides, tester-only test pushes. | |
| com.mobile-text-alerts/sms-mcp mobiletextalerts/actions-mcp The Mobile Text Alerts SMS MCP server enables your AI to send SMS messages & manage contacts | |
| com.mock-server/mockserver mock-server/mockserver-monorepo Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP. | |
| Moddable Games Tools moddable-games/moddable-website 15 tools for chess variant analysis, hex map generation, and board game utilities | |
| QR Rápido modelcontextprotocol/registry Generate QR codes for URLs, PIX, Wi-Fi, vCards, WhatsApp and more. For AI agents. | |
| FunASR modelscope/funasr Transcribe local audio with FunASR and SenseVoice using private, on-device inference. | |
| Holiday Calendar modernmustardseed/small-business-mcp-starter U.S. federal holidays with observed dates and business-day math. Example from an open-source kit. | |
| io.github.moejeaux/nexflow-smf moejeaux/nexflow-smf-public Smart Meta-Facilitator for x402 payments on Base: route, verify, and settle payments. | |
| Kairos Connect moemollaei-org/kairos-connect-edge Connect AI agents to your Kairos workspace — manage goals, tasks, docs, whiteboards, and forms. | |
| Northcap Signals mohamedabdisamed/northcap-signals Pay-per-call DRT/ICT crypto trading signals for AI agents (LONG/SHORT, entry/SL/TP). | |
| Agoria mohamedalmorsy/agoria Search local businesses and book, order, quote or message any of them from one connection. |
44,851–44,900 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.