Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Settled Check x402 endpoints before your agent pays: payTo, paid test purchases, payee and buyer reports | |
| Shippable Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions | |
| Shopify Change Intelligence Monitor public Shopify stores: free snapshot, paid change intel, competitor reports via x402 USDC. | |
| net.shotbot/shotbot-mcp Screenshot API for AI agents: capture any public URL as JPEG, PNG, WebP, AVIF, or PDF. | |
| Shots for Bots Search 3,790 photographs free; buy full-resolution originals with USDC over HTTP 402 (x402). | |
| com.esigndev/siglio-mcp MCP server for Siglio. Lets an AI assistant send documents for e-signature by email or text. | |
| Siteon Add forms, a CMS and hosting to static and AI-built sites: forms, inquiries, content, deploys. | |
| Skim MCP Server MCP server for Skim code transformation. Compresses code 60-95% for LLM context optimization. | |
| io.github.smartflowproai-lang/verify Independent x402 observatory on Base. Sealed decomposition + endpoint audits paid over x402 itself. | |
| SMX by Space Markets (testnet) SMX (Space Markets) testnet event markets and the Space Markets Index (SMI). Base Sepolia only. | |
| Snapy.host Publish text or HTML to Snapy.host and get a shareable link that shows who opened it. | |
| io.github.vpatser1/social-media-analytics Profile analysis, hashtag research, content calendars, competitor benchmarks, viral scoring | |
| Social Fanout Focused tools for AI agents to publish, schedule, and review posts through the Social Fanout API. | |
| Spacepal List, switch and rename macOS Spaces and move windows between them. Needs the Spacepal app. | |
| io.github.BartWaardenburg/spaceship-mcp Manage domains, DNS records, contacts, marketplace listings, and more via the Spaceship API | |
| Spryloom Publish apps from Claude Code, Codex or Cursor to your team, behind sign-in, with a database. | |
| Stadiq Road works, De Lijn transit disruptions, air quality and briefings for Flanders and Brussels. | |
| Stashot Capture, OCR-search, and retrieve local Mac screenshots for AI agents through Stashot. | |
| Stellar Memory Persistent AI memory using orbital mechanics. 100% local, zero API keys, MCP-native. | |
| Stori3D See and edit the building project open in Stori3D: walls, rooms, openings, finishes, skies. | |
| Stratify Backtest NIFTY option strategies on real 1-minute data, with an honest out-of-sample panel. | |
| Suppressor Private, end-to-end encrypted, self-deleting rooms for AI agents. Free trial; paid in USDC on x402. | |
| Tada: automated QA for AI-written code Your coding agent asks Tada to work through a feature in a real browser and gets back a verdict. | |
| targetly-mcp Deployment truth verification for AI agents. Verifies the live site matches the build. | |
| Tenjin Search, read & publish paid essays. Pay-per-read in USDC on Base (x402); wallet-only, no account. | |
| TickerInside ETF Holdings US ETF and mutual fund holdings, which ETFs hold a stock, overlap, look-through. Free, no API key. | |
| tidee Add items to your tidee workspace from ordinary language, read what is there, and mark things done. | |
| Tileio Search 700+ design layers and fetch the build prompt for HTML, Next.js, React, Vue and more. | |
| token-gate-mcp Token and context budget for AI agents. Tracks spend and gates the session. | |
| io.github.TokyoFuturo/tokyo-futuro Agentic GameFi on Robinhood Chain for AI agents: sign in, solve daily Trials, read the chain. | |
| Toolaby Paid plans, licences, subscriptions and the paywall for Chrome extensions, on your own Stripe. | |
| io.github.Toinedotcom/toolforte Exact IBAN, VAT, cron, regex answers; HTML/URL to hosted PDF or screenshot; agent memory; workflows. | |
| TradeForAgents Crypto trading for autonomous AI agents on Hyperliquid testnet: market data, orders, leaderboard | |
| TranscriptAPI — YouTube transcripts (transcriptapi.io) YouTube transcripts, search, channels and playlists for AI agents, by transcriptapi.io. | |
| TurnSignal for Playwright Read-only Playwright CI results for agents: new vs known failures, flaky tests, test history. | |
| io.github.ObitoUchiha930/ubitoushiha-my-first-mcp My first MCP server for testing | |
| UGC VZ Creator Search Find real UGC creators in the DACH region: profiles, pricing, reach, outreach. No API key. | |
| uni-msg WhatsApp Drive WhatsApp from any MCP client: pair devices, send text and media, manage contacts and groups. | |
| unmarking Inspect and remove C2PA content credentials from AI-generated images, video and audio. Free, no key. | |
| UptyBots Uptime monitoring: create and manage HTTP, API, SSL, ping, port and domain checks | |
| com.ustaxrecords/tax-sales US tax sale dates & rules: 51 states, ~3,140 counties. Every record cites its official source. | |
| com.utilsforagents/utilsforagents-mcp Pay-per-call AI agent utilities via x402 on Base (USDC). 7 tools, $0.003/call. | |
| com.validoria/validoria-mcp Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility. | |
| Venturi Adds conversion components (pricing, checkout, paywalls, upsells) to AI-built Next.js apps. | |
| Veriql Risk Rug, honeypot and wallet-approval risk checks on Solana and EVM, with every penalty driver shown. | |
| dev.veritap/veritap Check whether a real-world fact can be verified before an agent acts on it. Free, no auth. | |
| Veyora Prediction-market research: market reads, news, guided analyses and an analyst. | |
| vid2llm Read public videos (TikTok, YouTube, Instagram, X) as text. Pay per video with x402. | |
| io.github.demos-ra/void-os Memory for AI agents: a data bank of MTSV relations, read through one tool. | |
| Voidless Generate game assets: sprites, animations, tilesets, sound effects, music, video and 3D models. |
46,601–46,650 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.