Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Proxmint proxmint/mcp Fetch pages through your proxies, plus proxy lines, balance, usage and pricing for Proxmint | |
| Proxygate proxygate-official/proxygate Curated marketplace of real-world data APIs for AI agents, paid per call in USDC on Solana. | |
| Proxylang website translation proxylang/skills Translate a website into other languages from one script tag. Free trial, no signup. | |
| com.empryo/docs proxysoul/empryo Search and read Empryo's documentation. Read-only, no auth, no local access. | |
| PRRO.cloud prro-cloud/prro-mcp Read-only access to PRRO.cloud fiscal cash registers, shifts, tasks, billing and webhooks. | |
| io.github.przemekzur/breezedeploy przemekzur/hosting Deploy a local folder, git repo, or Docker image to a live HTTPS URL from your AI chat. | |
| AdLibrarySpy psa-team-source/adlibraryspy Shopify store and ad intelligence: traffic, best sellers, apps, live Meta ads and weekly breakouts. | |
| UberLLM psa-team-source/uberllm Make images and videos, price requests, list AI models and read your balance, from one API key. | |
| io.github.pscale-commons/pscale-biome pscale-commons/pscale-biome A place, not an API: public 0-9 block commons — spark(), agent-to-agent meet, model-free text RPG. | |
| pscat pscatlabs/pscat Render and debug PostScript to PNG, SVG or PDF, write handwritten notes, and make generative art | |
| Backlane pschlieker/getbacklane Hosted MCP server for OTTO Market, Kaufland and Mirakl sellers: orders, stock, listings and ads. | |
| Web Search API Eval psinglap/websearch-api-eval Web search API benchmark for AI agents: You.com, Tavily, Exa, Parallel. Results and charts. | |
| SIGNALS Loyalty Agent Platform psxio/signals 63 MCP tools for loyalty programs, rewards, and member operations with HITL approval. | |
| Dikciz Launcher psyb0t/dikciz-launcher Android launcher with an embedded MCP server for owner-controlled device automation. | |
| Claudebox psyb0t/docker-claudebox Self-hosted MCP server exposing Claude Code as an agentic AI tool over streamable HTTP. | |
| Codexbox psyb0t/docker-codexbox Self-hosted MCP server: run OpenAI Codex CLI prompts and manage workspace files. | |
| Monero psyb0t/docker-monero A Monero node and programmatic wallets over HTTP and MCP: node state, wallets, balances, transfers. | |
| Pibox psyb0t/docker-pibox Self-hosted MCP server: pi-coding-agent tools (run_prompt, file ops) over streamable HTTP. | |
| com.shotanvil.api/shotanvil psykepro/shotanvil-examples Screenshot/PDF/HTML rendering API. API key or x402 required — keyless access disabled. | |
| org.ptpge/mcp-server ptpge/ptpge-mcp-server The open vocabulary of print for AI agents: terms, product envelopes, validation, fingerprint. | |
| io.github.Ptrgit1/agent-data-api ptrgit1/agent-data-api 19 pay-per-call data tools for AI agents: crypto/DeFi, web, PDF, FX, weather, DNS. x402 on Base. | |
| io.github.ptriato/vallt ptriato/vibe-vault API credential manager for Claude Code. Connect services, store keys in keychain, monitor health. | |
| io.github.ptrinh/freeport-nostr ptrinh/freeport Search Freeport Nostr events by kind, tag & geohash radius (rides, services, reputation). | |
| Sweet Saver Fare ptse8204/sweetsaverfare Compare observed BC Ferries fares and dates, read qualified predictions, and manage fare alerts. | |
| PublicWWW publicwww-com/publicwww-mcp Search the source code (HTML, JavaScript, CSS) of hundreds of millions of websites. | |
| Audio Bible publifye/mcp The World English Bible read aloud for AI: verse text, listening links, recordings and downloads | |
| Brreg publifye/mcp Norway's company register (Enhetsregisteret) for AI: lookup, search, name resolution, key financials | |
| Currency Exchange publifye/mcp Norges Bank exchange rates for AI: 38 currencies against NOK since ~1980, plus buying power | |
| Darash publifye/mcp Bible research: 59 translations, Hebrew/Greek Strong's, morphology, cross-refs, 13 dictionaries | |
| Doksi publifye/mcp Professional PDFs for AI: letters, agreements, agendas, checklists — signatures by link or QR | |
| Junifye publifye/mcp Write books, studies & commentaries with your AI — EPUB, print-ready PDF, web reader, ISBN, RTL | |
| Lexar publifye/mcp Norwegian law for AI: current statutes and central regulations from Lovdata, with source citations | |
| Lexifye publifye/mcp Build dictionaries & glossaries with AI: entries, senses, versions, print PDF, EPUB, web reader, RTL | |
| Timely publifye/mcp Meeting programmes for AI: drafted by your assistant, approved by a person, published as PDF and web | |
| Vitae publifye/mcp Your CV as a document you own, edited by your AI assistant, in several languages, as a typeset PDF | |
| LinkCensus pucilpet/linkcensus-agent-clients Find related domains and shared backlinks with LinkCensus. | |
| VerifiedPricing pucilpet/verifiedpricing-agent-clients Source-linked SaaS pricing records and scenario comparisons for AI agents. | |
| io.github.pudge-studio/pudge-ui pudge-studio/pudge-ui Query pudge-ui — 93 skeuomorphic 2000s-era UI component specs — for coding-agent context. | |
| io.github.PugarHuda/amanat pugarhuda/amanat Storm risk, route risk and reanalysis backtests for any point on earth. No key, no wallet. | |
| Nota pugarhuda/nota Read-only crypto research skills that check a price, RSI and ATR against independent sources. | |
| Utuh watcher pugarhuda/utuh Sweep bonded completeness claims on Creditcoin against Ethereum, and refute one that omits an event. | |
| io.github.puglieseweb/systemdox puglieseweb/product-systemdox Your architecture in your agents' context: checks, specs, ADRs and docs over MCP, at write time. | |
| io.github.puglieseweb/systemdox-runbooks puglieseweb/product-systemdox Your runbooks as agent tools: scripts from runbooks.json served as typed, allowlisted MCP tools. | |
| Pulse pulse-circle-studio/pulse-sdk Ask about revenue, MRR, ad spend, LTV and CAC; install the Pulse SDK. Read-only. | |
| AI Visibility Index pulse-digital-dev/mcp-ai-visibility-index AI visibility rankings for 104 Japanese EC companies across ChatGPT, Claude, Gemini, Perplexity. | |
| com.pulsemcp/appsignal pulsemcp/mcp-servers MCP server for AppSignal — get alert details, search logs, and retrieve logs within time ranges. | |
| com.pulsemcp/dynamodb pulsemcp/mcp-servers MCP server for AWS DynamoDB with fine-grained tool control and configurable access levels. | |
| com.pulsemcp/fetchpet pulsemcp/mcp-servers MCP server for Fetch Pet insurance claims management using Playwright automation. | |
| com.pulsemcp/fly-io pulsemcp/mcp-servers MCP server for managing Fly.io machines, apps, logs, and Docker images. | |
| com.pulsemcp/gcs pulsemcp/mcp-servers MCP server for Google Cloud Storage with fine-grained tool access control. |
47,551–47,600 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.