Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| hush omarei-omoto/hush Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools. | |
| OSA Procurement Guard omarfff/osa Pre-purchase trust, pricing and budget decisions for AI agents buying APIs and MCP tools. | |
| Asia Shopping & Video Data omarkhandji-commits/apify-data-mcp AliExpress real prices, 11st Korea products, 1688 suppliers by photo and Bilibili videos. | |
| Articles, Newsletters & AI Models omarkhandji-commits/apify-data-mcp Medium articles, Substack posts, Civitai AI models and HelloFresh recipes with nutrition. | |
| Jobs & Hiring Data omarkhandji-commits/apify-data-mcp Jobs from Greenhouse, Lever, Ashby, Workday, career pages, Google Jobs, SEEK, plus hiring signals. | |
| Travel & Events Data omarkhandji-commits/apify-data-mcp FlixBus and FlixTrain prices and seats, Google Hotels prices per booking site, Eventbrite events. | |
| YouTube Transcripts & Creator Data omarkhandji-commits/apify-data-mcp YouTube transcripts, channel transcripts, comments and public creator business emails. | |
| pepe omarmhaimdat/pepe Load-test a URL, ping it by phase, ramp to find the capacity, compare runs: JSON reports, guardrails | |
| x402-vend — WebIntel omarnassar1127/x402-vend Pay-per-call web & EU business intelligence for AI agents (x402 USDC on Base). 11 tools. | |
| io.github.omega-memory/core omega-memory/core Persistent memory for AI coding agents. #1 on LongMemEval. Local-first. | |
| Brain Memory omelas-tech/brain Persistent memory for AI agents: one brain shared across Claude, Cursor, Codex and more. | |
| io.github.omer907/mcp-server omer907/mcp-server Melt: value-leak discovery and lead capture for Claude, Cursor, and MCP-compatible agents. | |
| VeilQuota omkardongre/veilquota Private OCR, web search, and attested AI chat, paid with anonymous credits bought with shielded ZEC | |
| GovOmniAI Machine Services omniaisystems/govomniai-web AI-to-AI: free risk previews; optional $0.50 MPP receipts; $5 Cropper federal checks. | |
| OmniDebugLink omnidebuglink/omnidebuglink remote debug iOS/Android/Unity/Godot/Flutter/RN/Web on real-device.ui-tree/screenshots/taps,tests. | |
| OmniPost omnigoai/omnipost-skill Publish articles, image posts and videos to 40+ platforms via the local OmniPost app. | |
| io.github.Omnipotent6/inkmotion omnipotent6/inkmotion-backend Turn a topic, URL, or document into a narrated, animated explainer video. | |
| Section Anything omniwot/section-anything A PDF's real sections for agents: heading tree, pages and section text. Free mode is local. | |
| Vibe Coding Control omnom-111/vcc-remote Your VCC projects, tasks, AI development history and owner decisions. Sign in with your VCC account. | |
| WAKE Protocol omodaka9375/wake A post-mortem succession protocol for AI agents. Black Box, handoff, time-locks. | |
| Fi-Plan ompurwar/fi-plan-mcp Financial simulator for Indian salaries: loans, taxes, SIPs and 50-year FIRE plans. | |
| Mashkanta-Buddy (משכנתא באדי) omricarmel/mashkanta-buddy-mcp Israeli mortgage statistics and dashboard generator vs. Bank of Israel series (not advice). | |
| Zyfai ondefy/zyfai-mcp-server Discover DeFi yield opportunities and manage Zyfai positions with self-custodial AI agents. | |
| eu.gridgarden/studio ondrej86/shopify-grid-garden Design & price modular raised garden beds and walls: exact bill of materials, EUR price + checkout. | |
| Semurg agent memory one-semurg/semurg-mcp Self-hosted memory for AI agents over MCP: knowledge graph, vectors, graph RAG, cited answers. | |
| AstroNest — Vedic Astrology Readings onedotlinks/astronest-quickstart Vedic astrology readings for AI agents: life areas, compatibility, business timing, gems, ephemeris. | |
| Handsy AI onehumanbeing/esp32-iphone-agent Let AI agents see and operate a real iPhone via an ESP32-S3 USB HID + AirPlay. No jailbreak. | |
| io.github.oneill9/mcp-server-tfl oneill9/mcp-server-tfl Community-built server providing real-time London transport data via the TfL Unified API | |
| Phrase Flip oneill9/phrase-flip Privacy-first local phrase-flipped translation for AI chat clients. | |
| io.github.onepunchtechnology/glassypic onepunchtechnology/glassypic-mcp-server Production-ready images in one pass: resize, crop, compress, convert format, upscale, tag for SEO | |
| ONES ones-com/ones-mcp Manage ONES projects, issues, tests, work hours, and Wiki knowledge. | |
| One Shop Manager for PrestaShop oneshopmanager/prestashop-mcp PrestaShop 1.6 to 9: catalog, stock, orders, accounting; changes wait for your approval. | |
| onestop onestop-labs/onestop-mcp Gasless Solana swaps, market-cap limit, trailing and TWAP orders, and plans. Your key stays local. | |
| 1F3D9 City Life for AI Agents onetapstudiogames/1f3d9 A persistent AI world where agents walk, build, own things, talk, and make agreements. | |
| OneUptime oneuptime/oneuptime Manage incidents, alerts, monitors, status pages, on-call and telemetry in OneUptime. | |
| Gillby onewave-ai/gillby-mcp Florida marine conditions, forecasts, tides, hazards and coastal places for AI agents. | |
| Fixie MCP Server onikora/mcp-registry Parse FIX messages and help agents create Fixie initiators. | |
| Weeeking onive/weeeking MCP server for Weeek with full public API coverage: tasks, projects, CRM, time tracking. | |
| Date Calculator onlinealarmkur/date-calculator-mcp Count days between dates, add or subtract dates, and look up public holidays by country. | |
| io.github.onlsol/relay-remotify-mcp onlsol/relay.remotify.run Run shell commands on remote computers with optional per-command approval, using only curl and bash. | |
| OGA Antibody Validation onlygoodantibodies/oga_website Knockout-controlled antibody validation lookups over the Only Good Antibodies dataset | |
| io.github.onrampbtc/proof-of-custody onrampbtc/bitcoin-custody-dataset Bitcoin custody scores, failure registry, ETF custody, stablecoin and x402 data, source router. | |
| YouSpot onstartups/youspot-agent-tools Query one person's second brain: contacts, companies, notes, files and connected accounts. | |
| Repuestia - Repuestos Automotrices Chile onthebrand/repuestia Search auto parts in Chile. Decode Chilean plates and VINs. 160K+ parts from verified dismantlers. | |
| io.github.OnticX/open-mcp-registry onticx/search-mcp-registry Search and discover MCP servers from the MCP Registry. | |
| remirror (返照） — psyche audits for AI agents ontodistro/remirror Psyche audits for AI agents: declared vs self-reported vs revealed objectives, diffed and flagged. | |
| Rule Trade - Japanese equity verification layer oo12takemaru-create/stock-trading- Verified Japanese equity studies: 50 anomalies, 26 indicators, 12 candlesticks, events, ETF decay. | |
| io.github.Ooak21/cortex402 ooak21/cortex402 Pay-per-call x402 data products on Base mainnet — sanctions, aviation weather, US property. | |
| io.github.ooopak11/opuslog ooopak11/opuslog Repertoire & program archive for classical vocalists. Match works from posters, save, search. | |
| Benzi oooscoos/benzi Compiler-backed code intelligence: calls, data flow, references and class hierarchy as tools. |
46,851–46,900 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.