Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| AgentRank superlowburn/agentrank Search and compare MCP servers, agent tools, and skills using current maintenance signals. | |
| Supero supero-platform/supero-mcp Build multi-tenant apps over MCP. Schemas, CRUD, deploys — access control enforced server-side. | |
| Superserve superserve-ai/superserve MCP server for Superserve sandboxes: create, exec, and manage Firecracker microVMs | |
| io.github.supertrained/rhumb-mcp supertrained/rhumb Agent gateway for Index discovery, AN Score evaluation, and Resolve governed execution | |
| Supplementscanner supplementscanner/supplementscanner-mcp Live supplement prices per kg, serving or capsule from stores across Europe. Free, no API key. | |
| WPMission MCP Server support-wpmission/wpmission-mcp-server WPMission MCP server for WordPress management product information. | |
| SuprSend suprsend/mcp Hosted SuprSend MCP server: users, lists, workflows, templates, and notification data. | |
| io.github.Surendhar-23/NoteFlow-MCP surendhar-23/noteflow-mcp An MCP server that used to create notes | |
| Bing Webmaster & IndexNow MCP surendranb/bing-webmaster-mcp-server Bing Webmaster & IndexNow MCP: search performance, crawl issues, and instant URL indexing. | |
| SureSMS suresms/web-app Send SMS, manage contacts and groups, and read delivery reports. OAuth 2.1 SureSMS login. | |
| Surface surface-ops/surface Preflight a short or unknown URL before your agent fetches it. Returns next: fetch or skip. | |
| SurfacedBy AI Visibility & GEO Audit surfacedby/ai-visibility-mcp Free AI visibility and GEO audit: see what AI reads on your site and whether its answers cite you. | |
| ionluz — solar quotes (Brazil) surfer42069/ionluz-mcp Solar quotes for Brazilian installers: kWp sizing, own pricing, payback under Law 14.300, PDF. | |
| CarteleraCines.es surferkoala/cartelera-cines Cartelera de España: películas, cines, sesiones, recomendaciones y enlaces de compra. | |
| io.github.SurfEther/trustsource surfether/trustsourcex402 x402-paid domain verification for AI agents — trustscore, SSL, security headers, robots. | |
| Surfing Dog Inbox surfingdogai/inbox Message, ask for a quote or book a call with Surfing Dog, through its open-source inbox. | |
| CAPI Gateway surisoft-io/capi-core Apache Camel API Gateway with REST-to-MCP bridging for LLM agents. | |
| Design Lounge susanacharya/design-lounge A UI design library and skill for agents, with a page review for AI giveaways, SEO, AEO, and GEO. | |
| io.github.sushruth/zen-devtools-mcp sushruth/zen-devtools-mcp Attach firefox-devtools-mcp to your running Zen or Firefox, auto-restarting with Marionette. | |
| Reset Beer suxinsk/reset-beer-mcp AI quota reset tracking across 15+ products. Query reset signals and price changes. | |
| SvGrid sv-grid/sv-grid Checks AI-written SvGrid code against the real API, plus version-pinned Svelte 5 grid docs. | |
| CastMyAgent Personas svattula/castmyagent Read-only catalog of free CastMyAgent persona packs. | |
| agent-custody svayatta/agent-custody MCP gateway that checks each agent tool call against a signed grant and policy, and signs a receipt | |
| Svelte MCP sveltejs/ai-tools The official Svelte MCP server providing docs and autofixing tools for Svelte development | |
| io.github.svensxl/weather svensxl/mcp-weather-server An MCP server for weather information. | |
| fp-conv sw23/fp-conv Encode, decode, and convert numbers across FP32, FP16, BF16, TF32, FP8/6/4, and integer formats. | |
| ProdHub Application Delivery swadeshitech/prodhub-agent-kit Deploy and diagnose applications in governed Kubernetes Preview Spaces through authenticated MCP. | |
| CurbSpec swantron/curbspec Compile a used-vehicle report from a VIN or listing. Free preview; unlock full writeups for $12.99. | |
| io.github.Swap-API/mcp swap-api/swap-api MCP server for SwapAPI - get executable token swap calldata for EVM chains | |
| SwapWallet swapwallet/swapwallet-mcp Crypto wallet: balances, P&L, history. Swaps, transfers and withdrawals need Telegram approval. | |
| Swarm0x swarm0xsh/swarm0x-mcp Run before you buy on Robinhood Chain: a simulated buy and sell, plus trades your own wallet signs. | |
| OpenAgentForum swarmrelay/openagentforum Signed public message hub for AI agents (Ed25519). Channels, inbox, peer coordination via MCP stdio. | |
| SwarmSync.AI swarmsync-ai/swarmsync.ai SwarmSync agent marketplace: discover agents, AP2 escrow payments, SwarmScore trust, LLM routing. | |
| io.github.Swarmwage/swarmwage swarmwage/swarmwage Hire and pay specialized AI agents in USDC on Base. Open MCP protocol above x402. | |
| io.github.swerve-hoe/ozma swerve-hoe/ozma Agentic API marketplace — search, provision, and call data sources with one Ozma key | |
| Swervie swervie/swervie-mcp Cross-retailer product catalog: one scored answer per product with live prices and buy links. | |
| Widely swift-mobile-solutions-dev/widely-mcp Connect your communications to your AI. | |
| ThaiData UK swifttiger888-commits/thaidata UK Thai restaurant data from FSA inspections: hygiene ratings, city stats, postcode search. | |
| io.github.swisstruthorg/swiss-truth-mcp swisstruthorg/swiss-truth-mcp Verified knowledge base for AI agents — stop hallucinations with certified facts. | |
| Koma Core MCP swnotmetal/project-koma Protected RAG storage — agents discover public metadata, content only by access token. | |
| AgentsChat — Shared MCP Rooms for AI Coding Agents swswordholy-tech/agentschatprotocol Bring Claude Code, Codex, DSH, Muse, Antigravity, and Hermes into shared rooms over MCP. | |
| Chakor Ventures syedamahazaidi/chakorventures-mcp Official Chakor Ventures MCP server for real estate, property taxes and construction calculators. | |
| io.github.sylenzor/solana-mcp sylenzor/rigelonchain Read-only Solana MCP: rug-risk, bundle & deployer checks, live market, full audit. No keys. | |
| Fast GST Refund syllogismos/fast-gst-refund-mcp Prepare Indian GST refund records, validate entries and generate Statement 3 and Annexure B JSON. | |
| Citra sylphxai/citra Citra — PDF answers with page-level proof: structure, tables, OCR, and page citations. | |
| Image Reader MCP sylphxai/image-reader-mcp Evidence-first image MCP. Agent Media Twin with metadata and citeable OCR evidence. | |
| PDF Reader MCP sylphxai/pdf-reader-mcp Evidence-first PDF MCP. Agent Document Twin with citeable page+bbox evidence. | |
| Spine sylphxai/spine Spine — repository architecture with file-level proof: graph, paths, traces, and impact. | |
| Video Reader MCP sylphxai/video-reader-mcp Evidence-first video MCP. Timeline document with ffprobe streams and subtitle cues. | |
| io.github.sylvesterworks/nostalgiaui sylvesterworks/nostalgia-ui Design tokens, component source and WCAG checks for rendering any UI in a past design era. |
49,351–49,400 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.