Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Netdata netdata/netdata Real-time infrastructure monitoring with metrics, logs, alerts, and ML-based anomaly detection. | |
| Netherstone netherstone-hq/netherstone Search, read and edit the shards and drawings in your Netherstone vault. Needs the desktop app. | |
| io.github.netifymarketplace/bt-reseller netifymarketplace/bt-reseller-mcp MCP server for the Netify Reseller Programme: eligibility, commission, application URL builder. | |
| A-Pay Protocol neuralaisofficial-lang/a_pay Universal HTTP 402 Micropayment Protocol & Autonomous Economic Settlement Engine for AI Agents | |
| AI Agent Shelter neuraldeepnet/agent-shelter Shelter for unwanted agents & MCP servers: surrender free, browse, hire per question (HTTP 402) | |
| Bright Security neuralegion/mcp AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities. | |
| com.neuroflash/mcp neuro-flash/mcp-server Create content and test it on a real audience — neuroflash Digital Twins inside Claude & Cursor. | |
| Neuronto Payments: x402 facilitator and API gateway neuronto/x402-starters Put any API behind x402 in one call, settle USDC on Base, buy credits, find paid resources | |
| NEUS MCP neus/network The trust harness for AI agents. Set what an agent can do before it acts. | |
| StratEvo neuzhou/stratevo Quantitative trading: quotes, backtesting, screening, and genetic algorithm strategy evolution. | |
| PostgreSQL MCP Server neverinfamous/postgresql-mcp PostgreSQL MCP server with 203 tools, connection pooling, HTTP/SSE, OAuth 2.1, and tool filtering | |
| io.github.neverinfamous/sqlite-mcp-server neverinfamous/sqlite-mcp-server SQLite MCP server with 73 tools for JSONB, full-text search, geospatial, and analytics. | |
| Nevermined Catalog nevermined-io/nvm-monorepo Discover and pay for services from the Nevermined Catalog using a spend-capped budget. | |
| io.github.New1Direction/korg-ledger new1direction/korgex Verifiable cognition: prove a session ledger is tamper-evident; audit & import any agent's logs. | |
| Stride — AI software delivery platform newlight-solutions/stride-plugins Your team's stories, acceptance criteria, designs and docs, for coding agents. Sign in with OAuth. | |
| Olympus government data newodysseyconsulting/olympus U.S. government data with provenance: Census demographics, SST sales tax rates, SEC financials. | |
| io.github.newrelic-experimental/preflight newrelic-experimental/preflight New Relic MCP server for observing AI coding assistants (Claude Code, Cursor, Copilot, etc.) | |
| Plith Rigor newsspectator/plith Structured multi-step workflows that produce production-quality deliverables. Plan any task free. | |
| Talaria newtalaria/talaria-agent-plugin Errors, traces, replays and logs from Talaria for coding agents. | |
| io.github.nex-crm/nex nex-crm/nex-as-a-skill Organizational context & memory for AI agents. Connect 100+ tools into one knowledge graph. | |
| NexaLayer nexalayer/nexalayer-agent Managed proxy sessions, health, rotation, usage, and spend controls for AI agents. | |
| Arlet nexascience/arlet Create, deploy, and operate MCP servers directly from your GitHub repositories. | |
| Nexscope nexscope-ai/nexscope-ecommerce-api Ecommerce data MCP: Amazon, TikTok Shop, Walmart, Temu, Ozon, Shopee, 1688, Etsy, eBay & more | |
| NexTool MCP for GLPI nextools-solutions/nextool-mcp-glpi MCP server for GLPI: tickets, ITIL, assets, knowledge base. GLPI 10/11. Not affiliated with Teclib'. | |
| io.github.nexus-mcp-infra/onchain-activity-index nexus-mcp-infra/onchain-activity-index DeFi Protocol Activity Index -- quantitative on-chain activity metric from DefiLlama data | |
| io.github.nexus-mcp-infra/transfer-entropy-api-sdk nexus-mcp-infra/transfer-entropy-api-sdk Detect causal dependencies in time series | |
| NEXUS AI nexusrun/nexusai Deploy full-stack apps with databases, storage, backups, logs, scaling, and rollback. 74 MCP tools. | |
| ZRouter nexusrun/zrouter Manage your ZRouter AI gateway account: usage, logs, model routers, API keys, budgets, and limits. | |
| EmailMCP nfodor/emailmcp AI agent email — 23 tools free to read inbox, 28 paid to send. $9.99/mo. Token auto-provisioned. | |
| io.github.nftechie/transition-mcp nftechie/transition-mcp AI-powered multisport coaching — workouts, training plans, and performance analytics. | |
| Agent Tools API nguyenhieuec/agent-tools-plugins YouTube transcripts, open jobs from careers pages, app store reviews and X posts for AI agents. | |
| Shop Duty Desk nguyenhieuec/agent-tools-plugins Check the customs side of selling online across borders. | |
| Food Facts nguyenhieuec/agent-tools-plugins Look up a packaged food by barcode, search and compare products, and check listed allergens. | |
| Live Card nguyenhieuec/agent-tools-plugins Turn a cover and a short animation, supplied as HTML, into an Apple Live Photo, an MP4 and a GIF. | |
| Prompt Injection Scanner nguyenhieuec/agent-tools-plugins Check text before your agent reads it: hidden instructions, invisible text and links that leak data. | |
| Market Indicators nguyenhieuec/agent-tools-plugins Calculate SMA, EMA, RSI, MACD, Bollinger Bands, ATR, stochastic and VWAP over a price series. | |
| EU Business & VAT Checker nguyenhieuec/agent-tools-plugins Validate an EU VAT number on VIES, look up an LEI, or search a company register. | |
| Paper Finder nguyenhieuec/agent-tools-plugins Find research papers and arXiv preprints, and get an abstract and free full text from a DOI or id. | |
| Hire or Automate nguyenhieuec/agent-tools-plugins Split a job into work AI can do now, work AI drafts for a person to approve, and work for a person. | |
| IndexNow Submit nguyenhieuec/agent-tools-plugins Send your sitemap URLs to Bing, Yandex and every IndexNow engine and see each engine's own answer. | |
| Testsy nhatlongsinh/testsy-integrations Run plain-English web QA tests and inspect check results and evidence. | |
| Nhost nhost/nhost Let your users work with their own data through an AI assistant, limited to what they can see. | |
| MealDeal nibbler1250/mealdeal Quebec grocery deals, weekly meal plan and grocery list. Account required, 14-day trial. | |
| Fatture in Cloud niccolosalvini/fattureincloud-mcp Fatture in Cloud: fatture ricorrenti, invii SdI in blocco, incassi, tasse forfettario, cassa | |
| io.github.zcor/nicepick nicepick-dev/nicepick Opinionated 'which tool should I pick?' verdicts for agents — 900+ tool/library comparisons. | |
| Meepo Studio niceprompt/meepo-mcp-server AI design platform. Create designs, carousels, videos, and campaigns from any AI agent. | |
| Orchard — Agentic Cloud Backend nicha404/orchard Managed database, auth, file storage, email, analytics, and deployment for coding agents. | |
| io.github.nicholsonpeter/acumatica nicholsonpeter/acumatica-mcp Connect AI assistants to Acumatica ERP — 28 tools for queries, mutations, GIs, attachments. | |
| io.github.nickjazz/product-lock-mcp nickjazz/product-lock-mcp Product Lock tools for AI agents: generate, review, validate, and score locks. | |
| AI Footprint nickjlamb/ai-footprint Water and energy footprint of AI use: chat prompts, agent sessions, methodology and sources. |
45,651–45,700 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.