Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| ai.sellermate/amazon-ads sellermate-ai/amazon-ads-mcp Ask your Amazon Ads account anything and act with guardrails. Remote MCP, OAuth, free to connect. | |
| Sellfy MCP Server sellfy/sellfy-mcp Run your Sellfy store from your AI assistant: products, discounts, orders, sales and email drafts. | |
| Abonnement24 deals sem-sea/abonnement24 Actuele Nederlandse deals: smartphone met abonnement, sim only en internet en tv, op echte prijs. | |
| Sema sema-lisp/sema MCP tools for Sema — eval, compile, build, format, and docs for a Lisp with LLM primitives. | |
| Semantica AI — AI Search Visibility semanticaai/semantica Monitor brand visibility, citations, competitors, sentiment, and GEO performance in AI search. | |
| io.github.SemanticDataCharter/sdccdif semanticdatacharter/sdc_cdif CODATA CDIF descriptions of published Semantic Data Charter models; read-only, no account. | |
| io.github.SemanticDataCharter/sdcdcatap semanticdatacharter/sdc_dcat3_ap DCAT-AP 3.0.1 catalogs of published Semantic Data Charter models; Turtle or JSON-LD; no account. | |
| io.github.SemanticDataCharter/sdcdcatus semanticdatacharter/sdc_dcat3_us DCAT-US 3.0 catalogs (data.json) of published Semantic Data Charter models; no account. | |
| io.github.SemanticDataCharter/sdchealthdcatap semanticdatacharter/sdc_healthdcat_ap HealthDCAT-AP catalogs of published Semantic Data Charter models; Turtle or JSON-LD; no account. | |
| io.github.SemanticDataCharter/sdcreader semanticdatacharter/sdcreader Read published Semantic Data Charter models: catalog search, record structure, codes, pinned schema. | |
| io.github.SemanticDataCharter/sdcvalidator-ts semanticdatacharter/sdcvalidator-ts Validate and recover SDC4 Governed Data Records in TypeScript, conforming to sdcvalidator. | |
| io.github.sena-labs/warp-ozbridge sena-labs/ozbridge OzBridge: run Warp Oz agents from any MCP client — Claude Code, Cursor, Codex, VS Code. | |
| Jetpost send-co/jetpost-plugin Notes your team and their agents build on together: write, share, comment and edit. | |
| send0 send0-dev/send0-v2 Email inboxes for AI agents: create an address, wait for codes and links, send and reply in threads. | |
| SenderKit senderkit/senderkit-skills Build and send email, SMS, and push straight from your AI agent. | |
| WARN Firehose — Labor Market Intelligence sendkamal/warn-firehose WARN layoffs, H-1B/LCA visas, SEC 8-K, bankruptcies, DOL claims & JOLTS for all 50 US states. | |
| io.github.sendnf/sendnf sendnf/sendnf-mcp Emita NFS-e e NFC-e conversando: CNPJ, código de serviço, pré-emissão, emissão e cancelamento. | |
| SendPulse sendpulse/mcp-server Empower AI agents with SendPulse email, CRM, chatbot, SMTP, and course automation | |
| io.github.sendsoon/ai sendsoon/ai Send email, look up public IP information, and convert files to Markdown through SendSoon. | |
| x402 Web Extract senpi-station/x402-mcp-web-extract Pay-per-use web extract, token prices, and wallet balances via x402 USDC micropayments. | |
| EntityReach Corporate Group Intelligence sens663/entityreach-mcp Enterprise account-research resources, product information and reproducible corporate-group samples. | |
| TargetWise — B2B Prospecting & Enrichment sens663/targetwise-mcp Find companies and B2B contacts, enrich profiles, and look up work emails and business phones. | |
| org.brainkb/brainkb sensein/brainkb MCP server for querying BrainKB, a knowledge base for neuroscience knowledge graphs. | |
| io.minnas/mcp sensoris/minnas-service Share prompts and context with your team and discover community collections. | |
| Sentio Connect sentioxyz/sentio-connect Track public wallets: token balances, prices, portfolio value, DeFi positions and holding history. | |
| io.github.sentrysurface/sentrysurface sentrysurface/sentrysurface-mcp Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation. | |
| Senzii Scheduling senzii-app/app Open-source staff scheduling: skills matching, shifts, certifications. Self-hostable, MCP-native. | |
| Senzing senzing/mcp Entity resolution — data mapping, SDK code generation, docs search, and error troubleshooting | |
| x402 Facilitator Proxy seob5285-alt/x402-facilitator-proxy Multi-tenant HTTP 402 infrastructure gateway and stdio MCP server for machine payments. | |
| Clipwright seocombat/clipwright-mcp Talking-actor and faceless short videos from your AI agent, with a free quote before each render | |
| seodata.dev: keyword search volume seodata-dev/mcp-server Keyword search volume, CPC, competition and similar keywords for 50+ countries. | |
| FoxyInvoice seolith-llc/seolith-tax-manager Invoicing tools for AI assistants: clients, draft invoices with computed tax, and email sending. | |
| Seolyticize seolyticize/skills SEO for agencies: rank tracking, site audits, Search Console, GA4, backlinks and AI visibility. | |
| 30book sepehr071/30book-mcp Unofficial read-only 30book: search Iranian printed books, compare editions and prices. | |
| Fidibo sepehr071/fidibo-mcp Unofficial read-only Fidibo: search Persian ebooks and audiobooks, compare prices, free books. | |
| mcpsmith sepehr071/mcpsmith Curated MCP tools from OpenAPI, websites, apps, Postman, cURL or SQL; your agent designs them. | |
| Okala sepehr071/okala-mcp Unofficial read-only Okala: grocery stores that deliver to you, compare prices across stores. | |
| Taaghche sepehr071/taaghche-mcp Unofficial read-only Taaghche: search Persian ebooks and audiobooks, compare prices, read reviews. | |
| io.github.SepineTam/latex-mcp sepinetam/latex-mcp Enable AI agents to compile TeX files with LaTeX inside a Docker container. | |
| io.github.SepineTam/stata-mcp sepinetam/stata-mcp Let LLM help you achieve your regression analysis with Stata | |
| Sequencer sequencer-media/sequencer-mcp Create AI images, video, and audio, quote generation costs, and edit Sequencer projects. | |
| io.github.sercanmetalore/ekap-tender-mcp sercanmetalore/api-mcp Resmî Kamu İhale Bülteni (EKAP) üzerinden CAPTCHA'sız/girişsiz ihale ilanı arşivleme ve arama,… | |
| Busymate DevTools serebano/busymate-devtools Capture, inspect & debug HTTPS traffic across iOS, Android, browsers & backends — 304 MCP tools. | |
| InkQuest serendipityape/ink-quest Browse free InkQuest stories, openings, and HSK recommendations. | |
| AliExpress Dropshipping: Winning Products & Profit serenido/aliexpress-dropshipping Find winning AliExpress products: real orders, shipping to your country, landed cost and profit. | |
| AliExpress Product Details: Shipping Cost & Variants serenido/aliexpress-product-details-scraper AliExpress product data by link or id: variant prices and stock, shipping cost to your country. | |
| AliExpress Search: Best Selling Products by Exact Orders serenido/aliexpress-search-scraper Search AliExpress by keyword: price, discount, exact order count, rating, shipping, best sellers. | |
| Bilibili: Videos, Comments, Danmaku & Creators (B站) serenido/bilibili-scraper Bilibili (B站) data without login: video stats, comments, danmaku, creators, trending, hot searches. | |
| Australian Supermarket Prices: Coles, Woolworths & ALDI serenido/coles-woolworths-aldi-scraper Search Coles, Woolworths and ALDI at once: prices, unit prices, specials, cheapest store per item. | |
| Football xG: Understat Matches, Shots & Tables serenido/football-xg-scraper Understat football xG data: xG tables, matches, shots, players and lineups for top 5 leagues + RFPL. |
48,651–48,700 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.