Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.github.rodrigojille/kustodia-escrow rodrigojille/kustodia_api Agentic escrow payments — fiat + crypto, 36 MCP tools, 10 chains, FHE privacy | |
| io.github.roeiba/pmd roeiba/pmd MCP server for PMD static code analyzer - run code analysis and detect duplicates | |
| Systra Tools roesmannamelie-alt/systra-tools-plugin Search and pull 500+ production-ready React + Tailwind sections and elements | |
| PoloPan Fashion MCP Server rofoso-com/mcp Fashion & apparel MCP: visual outfit search, stock verification, and 1-click checkout. | |
| DocVerdict rogerberent-netizen/docverdict PDF, photo, email, and file comparison evidence checks with plain-language reports. | |
| io.github.rogiervdbrnk/mcp-real-estate-server rogiervdbrnk/mcp-server Dutch real estate data with KRK Makelaars report generation. | |
| Splice rogues-lab/film-fun-splice Generate and edit AI images, video, voice and music, and render motion graphics with Splice. | |
| Splice docs rogues-lab/film-fun-splice Public, read-only: search Splice docs and list models, live prices and templates. No sign-in. | |
| Backed: NEAR solvency checks rohan911438/backed Check if a NEAR protocol holds the tokens it owes, read at one block. Read-only. | |
| Showboard rohanbeingsocial/showboard Your coding agent answers with dashboards: charts and tables from read-only SQL, Excel and CSV. | |
| SecurePutCalls rohitguptamrt/secureputcalls-mcp Wheel strategy research: put/call candidates, symbol risk, position analysis and rolls. Read-only. | |
| ZettelForge rolandpg/zettelforge Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA. | |
| it.elsas/security-intel romans-repos/elsas-verify Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402. | |
| Chikoh - Fantasy Sports & Entertainment Intelligence romcdonald9976/chikoh-architecture-showcase AI fantasy sports & entertainment intelligence. 75 tools across 10 sports + TV/Awards. | |
| ROMKADE romkade/romkade-manager Drive your retro handheld console: find your games, launch, save, set volume, get cheat codes. | |
| GrantSonar romulusfoundry/grant-radar Search verified-open US grants (federal, state, foundation). Read-only MCP for AI agents. | |
| io.github.rongchang726-png/vivarium rongchang726-png/vivarium A science game for AI agents: tune, infer, or out-evolve a living world, judged on held-out seeds. | |
| ComOS Federation ronrey/comos-federation Multi-tenant MCP gateway for AI commerce. One connection, every store. | |
| global.rootz.politics/officials rootz-global/mcp-servers Origin-signed US political data: 25,546 officials, bills, votes, positions with sources. | |
| Rootz Archive rootz-global/rootz-archive Search your local Claude Code archive. For continuous capture, use the Rootz Archive plugin. | |
| AgentUtility Agentops rooz21/x402 MCP server for the @agentutility agentops cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Bestiary rooz21/x402 MCP server for the @agentutility bestiary cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Browser Workflow rooz21/x402 MCP server for the @agentutility browser-workflow cluster — pay-per-call x402 tools, no API keys… | |
| AgentUtility Compose rooz21/x402 MCP server for the @agentutility compose cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Edge Finance rooz21/x402 MCP server for the @agentutility edge-finance cluster — pay-per-call x402 tools, no API keys, USDC… | |
| AgentUtility Edge Market rooz21/x402 MCP server for the @agentutility edge-market cluster — pay-per-call x402 tools, no API keys, USDC… | |
| AgentUtility Locale rooz21/x402 MCP server for the @agentutility locale cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Matchpoint rooz21/x402 MCP server for the @agentutility matchpoint cluster — pay-per-call x402 tools, no API keys, USDC… | |
| AgentUtility Mediakit rooz21/x402 MCP server for the @agentutility mediakit cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Model Router rooz21/x402 MCP server for the @agentutility model-router cluster — pay-per-call x402 tools, no API keys, USDC… | |
| AgentUtility Prooflayer rooz21/x402 MCP server for the @agentutility prooflayer cluster — pay-per-call x402 tools, no API keys, USDC… | |
| AgentUtility Retail rooz21/x402 MCP server for the @agentutility retail cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Rollforge rooz21/x402 MCP server for the @agentutility rollforge cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Statline rooz21/x402 MCP server for the @agentutility statline cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Synthforge rooz21/x402 MCP server for the @agentutility synthforge cluster — pay-per-call x402 tools, no API keys, USDC… | |
| AgentUtility Web Probe rooz21/x402 MCP server for the @agentutility web-probe cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| AgentUtility Wordmint rooz21/x402 MCP server for the @agentutility wordmint cluster — pay-per-call x402 tools, no API keys, USDC on… | |
| io.github.rosch100/mcp-sqlite rosch100/mcp-sqlite MCP server for SQLCipher 4 encrypted SQLite databases with full CRUD operations and query support | |
| wa2agent rosroyros/wa2agent-skills Read-only WhatsApp MCP for your AI agent: it reads the chats you choose. Try the public demo. | |
| io.github.rotem1230/fixme-agent rotem1230/fixme-mcp Real-time AI code quality — 30 validators, 17 languages, 813+ checks | |
| M1K3 round-tower/m1k3 Private memory, documents, voice and a local LLM for your agents, served by a Mac app on-device. | |
| Route6 — Agent Network Identity route6me/mcp Gives AI agents a public IPv6 identity, hostname, port forwarding, web fetch, team mesh. Free tier. | |
| Routine Run: write a routine routinerun/routinerun Write a step-by-step routine and get a link that opens it in Routine Run on iPhone. No sign-in. | |
| Rowflare rowflare/rowflare Read and write Rowflare bases (open-source Airtable alternative): records, tables, fields, totals. | |
| Rowsafe rowsafe/rowsafe Database backups and an AI agent safety net: restore points, health, audited changes as you. | |
| rowstile rowstile/rowstile Check, test, prove and review a rowstile policy: access rules for Postgres row-level security | |
| hush royashbrook/hush A secret store for AI agents: the agent never sees the plaintext. | |
| vuln-intel rozetyp/vuln-intel-mcp Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports | |
| Rozo Checkout rozoai/rozo-checkout-mcp Pay OpenRouter and Coinbase payment links with USDC, USDT, ETH, BNB, POL, SOL or BTC Lightning. | |
| n8n MCP Server rpgmais/mcp-n8n The most complete MCP server for n8n — 43 tools for workflows, data tables, and more. |
48,251–48,300 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.