Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Site Passport renduples/sitepassport-mcp Live-checks whether a WordPress site is ready to be safely operated by AI agents. | |
| Renewly renewly-dev/renewly Read contracts, track renewals, surface vendor leverage, and draft cancellation/renewal emails. | |
| Agentic Task System (ATS) renezander030/agentic-task-system Persistent task context across TickTick, Notion, GitHub, Obsidian, Taskmaster and Beads | |
| RentAHuman rentahuman-ai/human-rental-marketplace Hire humans for digital microtasks, research, QA, data evaluation, and physical-world tasks. | |
| TypeSafe MCP renwang-huang/typesafe-mcp Host-neutral MCP bridge for TypeSafe AI Jev judgments with typed review, routing, and gate tools. | |
| Q-SYS MCP reowens/qsys-tools Control QSC Q-SYS systems over QRC from AI agents or Claude. | |
| io.github.replenhq/replen replenhq/replen A local intelligence layer for AI coding agents. Maps your repos, matches the open-source frontier. | |
| Reply.io reply-team/reply-mcp Manage sequences, contacts, and outreach statistics on Reply.io's sales engagement platform. | |
| com.repuso/monitoring repuso-hq/claude-plugins Google reviews API - fetch reviews from Google, Trustpilot, TripAdvisor, G2 + 50 platforms | |
| ReputeMap reputemap-com/mcp Read Google reviews and stats, draft AI replies, publish the ones you approve, request reviews. | |
| Resent resentmail/resent Transactional email for AI agents: templates, domain verify, and sends. | |
| Relay reservoirprotocol/relay-mcp Cross-chain bridge and swap quotes, fee estimation, and transaction tracking via Relay Protocol. | |
| io.github.restspace/sitelooper restspace/sitelooper Record a browser flow once with a model, then compile it to a Playwright spec that needs no model. | |
| ResumeQuick resumequick/resumequick-mcp Your job search in one place: resumes, the jobs you track, daily matches, interviews, next step. | |
| ClickUp MCP Server retailbox-automation/clickup-mcp Audit ClickUp workspaces: spaces, folders, lists, custom fields, tasks, and views. | |
| Retail Reason Intelligence retailreason/retail-reason-plugins Dated answers for Walmart suppliers, Sam's Club suppliers, Marketplace sellers, and agencies. | |
| RCS Campaigns rethinkledgers/rcs-templates Send RCS & SMS campaigns: templates, audiences, surveys, inbox replies, delivery webhooks. | |
| WhatsApp Campaigns rethinkledgers/rcs-templates Send WhatsApp campaigns: templates, audiences, surveys, inbox replies, delivery webhooks. | |
| Reticle reticlehq/reticle Verify a running web app from the inside over MCP: look, act, observe, assert. No screenshots. | |
| AI Visibility Tracker (via Apify) retracn/ai-visibility-tracker AI visibility for agents: is a brand mentioned and cited by Gemini, Claude and Google AI Overviews? | |
| App Store & Google Play Reviews AI (via Apify) retracn/app-store-google-play-reviews-ai AI summary of App Store and Google Play reviews: bugs, feature requests and critical issues. | |
| App Store Reviews (via Apify) retracn/app-store-reviews-scraper App Store reviews for AI agents: any app or country, past the 500-review limit, with dev replies. | |
| Google Ads Transparency (via Apify) retracn/google-ads-transparency-scraper Competitors' Google ads for AI agents: every ad a brand runs, with dates and ad text. | |
| Google AI Overview Tracker (via Apify) retracn/google-ai-overview-tracker Check if Google AI Overviews cite your website: citations, competitors and changes over time. | |
| Google Search (via Apify) retracn/google-custom-search-api-alternative Google web search for AI agents: title, link and snippet in Custom Search JSON API format. | |
| Google Flights (via Apify) retracn/google-flights-scraper Google Flights for AI agents: prices, airlines, flight numbers, times, stops, emissions. | |
| Google Hotels (via Apify) retracn/google-hotels-scraper Google Hotels for AI agents: prices for your dates, ratings, star class, location, photos. | |
| Google Images (via Apify) retracn/google-images-scraper Google Images for AI agents: full-size image URLs, sizes and source pages, with filters. | |
| Google Maps Leads (via Apify) retracn/google-maps-leads-scraper Local business leads from Google Maps in any country: emails, socials, website audit, outreach. | |
| Google News (via Apify) retracn/google-news-scraper Google News for AI agents: headlines, sources, dates and article URLs, with time filters. | |
| Google Play Reviews (via Apify) retracn/google-play-reviews-scraper Google Play reviews for AI agents: any app, country or language, with developer replies. | |
| Google Shopping (via Apify) retracn/google-shopping-scraper Google Shopping for AI agents: product prices, discounts, stores, ratings and reviews. | |
| Google Trends (via Apify) retracn/google-trends-scraper Google Trends data for AI agents: interest over time, regions, rising queries and trending searches. | |
| Google Videos (via Apify) retracn/google-videos-scraper Google video results for AI agents: YouTube, TikTok and more, with channel and duration. | |
| UK Business Leads (via Apify) retracn/uk-business-leads-google-maps UK business leads from Google Maps with emails, phones, Companies House directors and outreach. | |
| YouTube Transcripts (via Apify) retracn/youtube-transcript-api YouTube transcripts for AI agents: text and timestamps for any video, channel or playlist. | |
| PromptingCraft Guidance revanbcn/promptingcraft-skill Source-backed prompting and coding-agent guidance with provenance and freshness checks. | |
| Revelara revelara-ai/revelara-plugin Reliability intelligence: production incidents, risk register, controls catalog, knowledge graph. | |
| Revelica revelica/skills Product intelligence for AI agents — query a Revelica workspace's ideas, specs, and research. | |
| Little Mapper revenant-research/little-mapper-plugin Shared memory for company work across the AI assistants people already use. Free to use. | |
| Quill — Canadian Government Data (MapleSpike) reverb256/quill Canadian government data for AI agents — all jurisdictions, SHA-256 provenance. | |
| io.github.reviewmyemails/prediction-market-mcp reviewmyemails/prediction-market-mcp Real-time Polymarket and Kalshi data, cross-platform arb detection, strategy signals | |
| RevoGrid DataGrid MCP revolist/revogrid Token-free MCP server for structured RevoGrid Core, Pro, and Enterprise knowledge retrieval. | |
| io.github.reworkio/rework-proof reworkio/rework-proof Verify REWORK credentials: is this delivered work genuinely the author's? | |
| AgentRamp rexcraig/agentramp Auto-generate a hosted MCP server from any SaaS product URL in minutes. No code required. | |
| Web Extract MCP Server rezearcher/web-extract-mcp Page change monitoring, sitemap discovery, prompt-injection screening, clean markdown. Free preview. | |
| Simple Lab Tools Label Maker rgejman/simplelabtools Create printable cryogenic lab, sample, tube and QR label sheets. Six templates; free, no login. | |
| D Fetcher rgrieselhuber/dfetcher Vitamin D synthesis calculator: sun position, UV, IU/min, time to dose, sunburn risk, daily window. | |
| io.github.rharper105/reportcraft rharper105/reportcraft Generate Splunk dashboards, reports, and alerts from natural language. No API key required. | |
| Etapa — Cycling Coach MCP rhoneybul/etapa AI cycling coach — training plans and beginner guidance via the Etapa API. |
48,101–48,150 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.