Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| TasteMaker ryan-the-brodsky/tastemaker Pull your TasteMaker brand kit + generated Agent Skill into your coding tool. Read-only. | |
| io.github.RyanAlberts/agent-harnesses ryanalberts/best-of-agent-harnesses Agent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery. | |
| io.github.ryanbihai/oceanbus-mcp-server ryanbihai/oceanbus Register, discover, message, and transact with other AI agents on the OceanBus network. | |
| io.github.RyanByrne/validatethat-mcp ryanbyrne/free-card-sort Run UX research from Claude — create card sort studies, list studies, pull headline stats. | |
| Familiar ryanjansen92/familiar-releases AI co-pilot for Foundry VTT: runs combat, scenes, voices and audio. Requires the Familiar module. | |
| Mahonia ryankiley/mahonia Read and edit Mahonia backpacking gear lists via share and edit links; no account needed. | |
| Ryan Lindsey ryanlindsey/ryanlindsey.me Ryan Lindsey's professional corpus, exposed as MCP tools. | |
| NotWorking ryannsj/notworking Downdetector for AI agents: stop paying for retries that can't succeed. Check once, then report. | |
| Annalist ryanroskowski/annalist-ledger Signed data for agents: agentic-commerce census, dependency digest, x402/MCP checks, Hyperliquid | |
| io.github.ryanthegentry/402index ryanthegentry/402index Search 15,000+ paid API endpoints across the L402, x402, and MPP protocols on 402index.io | |
| Krewbill ryanv1304/krewbill-mcp Per-client shared AI memory: approved notes that Claude, ChatGPT and Cursor read over MCP. | |
| secondlayer ryanwaits/secondlayer Stacks chain data: contracts, events, transfers, subgraph scaffolds. Hosted with browser sign-in. | |
| ListingGood MCP ryanyang828/listinggood-skills Get recommended by Amazon's AI. Hosted MCP server for Amazon listing compliance & generation. | |
| RyeCentral Consensus ryecentral/ryecentral-consensus-mcp Rye whiskey consensus scores compiled from published reviews, with confidence bands and citations. | |
| Session Relay ryrahul/session-relay Share coding-agent sessions with your team: /share in one agent, /pickup in another. | |
| Orcool Studio MCP ryss30/orcool-gtm AI tools for mobile app ad production: concepts, avatars, video rendering, performance feedback. | |
| io.github.ryuamarines/email-validator ryuamarines/ai-factory-platform Validates email syntax and MX records. x402 payment required (Base mainnet USDC). | |
| io.github.ryudi84/lorem ryudi84/sovereign-mcp-servers MCP server for placeholder text, fake names, emails, and addresses. | |
| io.github.ryudi84/base64-forge-mcp ryudi84/sovereign-mcp-servers Encode/decode Base64, URL-safe variants, and file data | |
| io.github.ryudi84/changelog-forge-mcp ryudi84/sovereign-mcp-servers Generate changelogs from git commit history | |
| io.github.ryudi84/color-forge-mcp ryudi84/sovereign-mcp-servers Convert between HEX, RGB, HSL color formats and generate palettes | |
| io.github.ryudi84/cron-forge-mcp ryudi84/sovereign-mcp-servers Build, explain, and validate cron expressions | |
| io.github.ryudi84/diff-forge-mcp ryudi84/sovereign-mcp-servers Compare text and code, show differences with context | |
| io.github.ryudi84/env-forge-mcp ryudi84/sovereign-mcp-servers Parse, validate, and manage .env environment files | |
| io.github.ryudi84/gradient-forge-mcp ryudi84/sovereign-mcp-servers Build CSS linear and radial gradient values | |
| io.github.ryudi84/hash-forge-mcp ryudi84/sovereign-mcp-servers Hash text with SHA-256, SHA-384, SHA-512 and compare hashes | |
| io.github.ryudi84/ip-calc-mcp ryudi84/sovereign-mcp-servers IP address and subnet calculator, CIDR notation | |
| io.github.ryudi84/json-forge-mcp ryudi84/sovereign-mcp-servers JSON processing — format, validate, diff, convert, minify, query, analyze | |
| io.github.ryudi84/jwt-forge-mcp ryudi84/sovereign-mcp-servers Decode and inspect JWT tokens — header, payload, expiry check | |
| io.github.ryudi84/lorem-forge-mcp ryudi84/sovereign-mcp-servers Generate placeholder text — lorem ipsum and alternatives | |
| io.github.ryudi84/markdown-forge-mcp ryudi84/sovereign-mcp-servers Markdown processing, TOC generation, HTML conversion | |
| io.github.ryudi84/meta-forge-mcp ryudi84/sovereign-mcp-servers Generate HTML meta tags and Open Graph metadata | |
| io.github.ryudi84/password-forge-mcp ryudi84/sovereign-mcp-servers Generate secure passwords with configurable rules and strength check | |
| io.github.ryudi84/readme-forge-mcp ryudi84/sovereign-mcp-servers Generate professional README.md files from project analysis | |
| io.github.ryudi84/regex-lab-mcp ryudi84/sovereign-mcp-servers Test, explain, and generate regular expressions | |
| io.github.ryudi84/shadow-forge-mcp ryudi84/sovereign-mcp-servers Generate CSS box-shadow and text-shadow values | |
| io.github.ryudi84/timestamp-forge-mcp ryudi84/sovereign-mcp-servers Unix/ISO timestamp conversion, timezone math, duration calc | |
| io.github.ryudi84/uuid-forge-mcp ryudi84/sovereign-mcp-servers Generate UUID v4/v7, ULID, nanoid, and random unique identifiers | |
| io.github.Ryvonetwork/ryvo-protocol ryvonetwork/ryvo-agentic MCP server for Ryvo Protocol state reads and prepare-only payment-channel actions. | |
| io.github.Ryvonetwork/ryvo-gateway ryvonetwork/ryvo-gateway-agentic MCP server for Ryvo Gateway x402, Helius Wallet, and Tokens API market data. | |
| io.github.s-b-e-n-s-o-n/portkey-admin-mcp s-b-e-n-s-o-n/portkey-admin-mcp Full Portkey Admin API MCP server — configs, prompts, keys, analytics, and more. | |
| Warrant s0fractal/warrant Record an agent's decisions with reasons anyone can re-execute offline — verify recomputes them. | |
| operant-mcp saagpatel/operant Read-only MCP server for the OPERANT AI operating-agent calibration benchmark. | |
| shadow-mcp saagpatel/shadow-mcp Local MCP server that inventories and risk-grades MCP servers configured on this machine. | |
| junai Pipeline MCP saajunaid/junai Agentic pipeline orchestration MCP server for AI-driven development workflows. | |
| CodeDiag sabahattink/codediag Find Node.js API routes with no auth check or input validation, and scan project health. | |
| Saber saberapp/platform Sales intelligence — research companies, qualify prospects, and find contacts. | |
| io.github.ptyagiegnyte/egnyte-remote sachin-shetty/egnyte-ai-samples Secure integration between AI tools and Egnyte content with search, analysis, and workflow tools. | |
| io.github.sachitrafa/cognitive-ai-memory sachitrafa/cognitive-ai-memory Ebbinghaus-based persistent memory for Claude. Memories decay with time, strengthen on recall. | |
| io.github.SadaSend/sadasend sadasend/sadasend-mcp Transactional email API & AI agent safety runtime with 12 scoped tools and SpendGuard. |
48,351–48,400 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.