Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Container Runtime Threat Model Generator Generate container runtime threat models analyzing attack surfaces across container components, images, privileges, network exposure, and security controls.... | |
| CVE Scanner Scan and identify Common Vulnerabilities and Exposures (CVEs) in software components and dependencies. | |
| Cyber Kill Chain Enterprise-grade cybersecurity framework assessment platform that evaluates organizational security controls across the kill chain spectrum. | |
| CyberSec Cert Advisor Generate personalized cybersecurity certification and career advancement plans based on individual assessment data and professional goals. | |
| CyberSec Roadmap Generate personalized cybersecurity career roadmaps based on professional assessment data and individual goals. | |
| Cybersecurity Career Professional career assessment and roadmap platform for cybersecurity professionals seeking personalized guidance and skill development recommendations. | |
| Data Breach Impact Calculator Calculate data breach costs, financial impact, regulatory fines, and remediation expenses. Use when estimating breach costs, GDPR/CCPA penalty exposure, inci... | |
| Data Privacy Checklist Assess data privacy compliance across 20 control areas with 63 controls covering governance, consent, security, breach response, vendor management, and cross... | |
| Desktop Support Professional IT Support Career Roadmap Platform that generates personalized learning paths for Desktop Support Engineers based on experience, skills, and car... | |
| Dpdp Checklist Gen Generate a comprehensive DPDP Act implementation checklist with evidence tracker and roadmap. Use when planning DPDP compliance implementation, building a pr... | |
| Dpdp Compliance Assessment Assess compliance with India's Digital Personal Data Protection (DPDP) Act 2023 across 7 domains with 41 controls. Use when evaluating DPDP readiness, Indian... | |
| Drone Engineer Professional entry-level drone and UAV systems engineering career roadmap platform that generates personalized learning paths based on experience and skills... | |
| Email Header Analyser Analyzes email headers to extract authentication, routing, and security metadata for threat detection and email forensics. | |
| Enterprise AI Security Controls Assessment Assess OT/ICS security posture across 30 controls in 6 principles — Business Driven, Risk Based, Enterprise Wide, Methodical, OT Security Focused, and OT Sec... | |
| Finopsy Cloud Finops Analyze and optimize cloud costs across AWS, Azure, and GCP. Use when evaluating cloud spending, identifying cost optimization opportunities, analyzing cloud... | |
| Full Stack Developer Generate personalized full stack development career roadmaps based on developer experience, skills, and goals. | |
| Gdpr Compliance Tracker Assess GDPR compliance readiness and generate gap analysis with remediation guidance. Use when evaluating data privacy compliance, GDPR readiness, EU data pr... | |
| GDPR PCI Checklist Generate customized compliance checklists for GDPR and PCI-DSS standards based on company type. | |
| Hash Finder Crack and identify hashes by attempting to match them against known hash databases and common plaintext values. | |
| Interview Buddy AI-powered mock interview practice with real-time feedback. Use when preparing for job interviews, practicing behavioral questions, doing technical interview... | |
| IOT Engineer Professional entry-level IoT engineering career roadmap platform that generates personalized learning paths based on assessment data. | |
| Iso Compliance Gap Analysis Perform ISO compliance gap analysis for ISO 27001, ISO 27701, and ISO 42001 standards. Use when assessing ISO certification readiness, information security c... | |
| Iso42001 Aims Readiness Assess ISO/IEC 42001:2023 AI Management System (AIMS) readiness and generate compliance gap analysis with remediation roadmap. Use when evaluating AI governa... | |
| It Risk Assessment Tool Perform comprehensive IT risk assessments across infrastructure, data protection, access control, compliance, incident response, and vendor management. Use w... | |
| It Support Engineer Professional IT support and helpdesk career roadmap platform that generates personalized learning paths based on experience, skills, and career goals. | |
| K8s Incident Response Playbook Generator Generate Kubernetes incident response playbooks tailored to specific incident types, severity levels, and cluster configurations. Use when responding to K8s... | |
| Kubernetes Network Policy Generator Evaluate and compare privacy solution vendors with a weighted scorecard across 12 criteria. Use when selecting privacy management software, comparing data pr... | |
| Kubernetes Security Posture Scorecard Assess Kubernetes cluster security posture across 30 controls covering RBAC, workload security, network policies, IaC, runtime monitoring, and secrets manage... | |
| K8s Security Review Analyzes Kubernetes YAML manifests for security misconfigurations, best practices violations, and compliance risks. | |
| Network Engineer Generates personalized network engineering career roadmaps by assessing experience, skills, and goals to guide skill development and certification planning. | |
| NOC Engineer Professional entry-level Network Operations Center engineering career roadmap platform that generates personalized learning paths based on skills assessment. | |
| Numerology Calculator Calculate comprehensive numerology reports using Pythagorean or Chaldean systems. Supports English, Tamil, Telugu, Kannada, and Hindi. Use when a user wants... | |
| Openclaw Skill Tools Generate and security-scan OpenClaw SKILL.md files. Use when creating new OpenClaw skills, scanning skills for security vulnerabilities like prompt injection... | |
| OT Security Assessment Assess OT/ICS security posture across 30 controls in 6 principles — Business Driven, Risk Based, Enterprise Wide, Methodical, OT Security Focused, and OT Sec... | |
| OT Security Posture Scorecard Assess OT/ICS/SCADA security posture and generate risk scorecards with remediation guidance. Use when evaluating operational technology security, industrial... | |
| Palmistry Ai Palm Reader AI-powered palm reading and analysis from palm images. Supports English, Tamil, Telugu, Kannada, and Hindi. Use when a user wants a palm reading, palmistry a... | |
| PCI DSS Checker Evaluates an organization's payment card processing environment against PCI DSS requirements and returns a comprehensive compliance assessment. | |
| PDF Summarizer Automatically extract and generate concise summaries from PDF documents using intelligent text analysis. | |
| PDF To PPTX Converts PDF documents into editable PowerPoint presentations with intelligent content extraction and formatting. | |
| Performance Tester Professional JMeter & LoadRunner performance testing career roadmap platform that generates personalized learning paths for aspiring performance engineers. | |
| Phishing Detection Analyzes URLs using heuristic algorithms to detect and identify phishing threats in real time. | |
| Pitch Deck Generator Generate professional pitch deck outlines using the $1B pitch formula based on startup data and company information. | |
| Pitch Deck V2 AI-powered professional pitch deck outline generator using the $1B Pitch Deck Formula for startup presentations. | |
| Privacy Solution Scorecard Evaluate and compare privacy solution vendors with a weighted scorecard across 12 criteria. Use when selecting privacy management software, comparing data pr... | |
| Privacy Tech Advisor Get AI-powered privacy technology recommendations with maturity assessment, capability roadmap, and tech stack advice. Use when selecting privacy tools, buil... | |
| Qa Analyst Professional entry-level quality assurance career roadmap platform that generates personalized learning paths based on experience, skills, and goals. | |
| Quantum Tech Entry-level quantum technology career guidance platform that generates personalized learning roadmaps based on user skills, experience, and goals. | |
| Ransomware Preventer Multi-layered ransomware defense strategy platform that generates personalized protection recommendations based on organizational assessment data. | |
| Risk Assessment Compliance Performs comprehensive security checks and compliance risk assessments on websites and applications. | |
| Robotics Engineer Professional entry-level robotics engineering career roadmap platform that generates personalized learning and development paths. |
45,751–45,800 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.