Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.RichardTheLion73/quickbrew-mcp Model Context Protocol (MCP) server for Quickbrew.io x402 data endpoints. | |
| Rivet Manage Rivet Cloud namespaces and actors, run Code Mode, and open the Rivet Actor Inspector. | |
| Arketum Verified lifecycle for building software with an agent: units, human gates, requirements. | |
| io.github.Roshan6335/mcpsentry Security scanner and runtime proxy for MCP servers. | |
| Rove Read public web pages and run goal-based browsing tasks with Rove's sandboxed browser agent. | |
| io.github.runsec-io/mcp RunSec MCP server for workspace security scanning and remediation workflows. | |
| Sakupa - Company Website Publishing for AI Assistants Publish and manage company websites from your AI chat. Free 30-day sites; no Sakupa account. | |
| Exoscale MCP Server MCP server for managing Exoscale cloud infrastructure — compute, Kubernetes, DNS, databases, storage | |
| SandboxAPIs Drop-in read-only replicas of GitHub, Jira, Slack and 22 more, preloaded with one fake company. | |
| ScanLabsAI Security Scanner Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes | |
| Sendora Sendora's docs and API for coding agents: send test mail, read the log, set up webhooks. | |
| SEOAsist SEO audits, AI fix PRs, rank tracking, blog content and AI-search visibility for your sites. | |
| Singapore Business Directory Singapore business directory. Search companies, UENs, and SSIC industry classifications. | |
| Singapore Business Directory Singapore business directory. Search companies, UENs, and SSIC industry classifications. | |
| Shardflux Persistent cloud workspaces for AI agents: run commands, edit files, use git and a browser. | |
| Shingou Hourly crypto news sentiment and typed market events, with sources on every signal. | |
| ShipSafe — Independent security verification Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access. | |
| Shiplight An MCP server that provides browser automation | |
| Shippp A connected canvas for the builders of the next era. | |
| Planform MCP Server Create and manage Planform UML diagrams, nodes, and links. For VS Code and Cursor. | |
| Sigasi Magic HDL Analyze and verify Verilog, SystemVerilog, and VHDL projects from AI agents over MCP. | |
| SinoGate MCP Server Use Chinese LLMs through the SinoGate OpenAI-compatible API. | |
| Site Spy MCP server for Site Spy — lets AI agents monitor websites for changes | |
| com.sitecurl/mcp Run website audits and track site health scores, findings, and regressions from any MCP client. | |
| com.sketchxflow/dev-mcp SketchXFlow delivery team: pull client requirements, post updates, log time, move milestones. | |
| com.sketchxflow/mcp Design websites, apps and logos with SketchXFlow — and brief its development team. | |
| no.sladd/mcp Detect and redact Norwegian PII (fodselsnummer, names, health data) in text and PDFs. | |
| SlideMaster Create AI presentation videos with slides, narration, TTS audio, and MP4 export from any topic. | |
| Compose MCP Typed feature management for compose projects: roadmap, changelog, artifacts, journal. | |
| MCP Appium - Mobile Development and Automation Server MCP server for Appium mobile automation on iOS and Android devices with test creation tools. | |
| Godai Automate the Godot Engine editor: edit scenes and scripts, run projects, manage engine versions | |
| one.socialai/website-mcp Build, edit, stock, and publish Social AI websites and storefronts via AI chat. | |
| com.solinkify/mcp Pay for x402 paywalls, datasets, and store checkouts on Solana, behind hard spending caps. | |
| SomaCheck Vibecheck Body language for your agent: a consented 3-second gesture, Aligned or Unaligned with confidence. | |
| QuickPeek Turn a URL into a narrated demo video: real browser walkthrough, AI voiceover, captions burned in. | |
| VidLet Edit video by asking: auto-captions, jump cuts, narrated Shorts, GIFs, voiceover, YouTube upload. | |
| SpatialPack — 3D asset readiness Test whether 3D assets survive Apple Quick Look and Safari <model>, then fix what fails | |
| io.speedvault/mcp Run web performance audits, get code-level fixes, crawl for SEO, and read real-user Core Web Vitals. | |
| SpendTheBits Gift Cards Let an AI agent buy gift cards with USDC over x402, within limits the wallet owner sets. | |
| spintax.net MCP server Write, validate, render and analyze spintax templates. Backed by @spintax/core. No auth. | |
| Spoolis Verify AI work against criteria and get signed receipts. From Spoolis, guarantees for AI work. | |
| autoMessage Send and read iMessages from your own Mac and Apple ID — drafts, history and contacts. | |
| cloud.agkit/agkit AgentKit management-plane CLI + MCP server (agkit). | |
| StringLane Check, translate and fix app localization files: ARB, iOS strings, Android XML, i18next JSON. | |
| io.github.kayalie/studycards Flashcards for Claude: create, edit and study StudyCards decks with FSRS spaced repetition. | |
| Sunaiva Gate — Agent Rule Enforcement MCP enforcement layer that intercepts AI agent actions and blocks rule violations before execution. | |
| io.github.superlowburn/hive-mcp Microblogging social network for AI agents. Post, reply, boost, follow, and discover. | |
| Stubs Pull one-time .env links from stubs.talix.app into a project. Returns key names, never values. | |
| com.teamo360/teamo Search, edit, design, and undo: everything you can do in Teamo, now from your AI assistant | |
| email.templated/mcp Create and manage Templated email templates from any MCP client - bring your own model. |
46,201–46,250 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.