Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| io.tooloracle/baseoracle tooloracle/baseoracle BaseOracle - 8 Base L2 tools: ERC-20, Aerodrome, bridge status, txs, gas, holders. | |
| io.tooloracle/bnboracle tooloracle/bnboracle BNBOracle - 8 BNB Chain tools: BEP-20, PancakeSwap, validators, gas, txs, holders. | |
| io.tooloracle/cloudoracle tooloracle/cloudoracle CloudOracle - 14-tool multi-cloud compliance MCP: AWS, Azure, GCP posture, IAM, configs. | |
| io.tooloracle/conductor tooloracle/conductor DORA OS Conductor — 16-tool meta-orchestrator for DORA compliance workflow automation. | |
| io.tooloracle/cybershield tooloracle/cybershield CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel. | |
| io.tooloracle/dora tooloracle/dora DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party. | |
| io.tooloracle/doraeventfabric tooloracle/doraeventfabric DORA OS EventFabric - 14-tool event stream for DORA compliance signals and pub/sub fabric. | |
| io.tooloracle/driftoracle tooloracle/driftoracle DriftOracle - 15 tools for model/data drift monitoring: PSI, KS-test, alerts, evidence packs. | |
| io.tooloracle/healthguard tooloracle/healthguard HealthGuard - 12-tool health/medical AI safety MCP: PII redaction, HIPAA, GDPR Art.9. | |
| io.tooloracle/law tooloracle/law LawOracle — 20 legal AI tools: case law search, contracts, EU regulations, citation graph. | |
| io.tooloracle/mica tooloracle/mica MiCAOracle — 24 tools for EU MiCA stablecoin compliance: peg, reserves, attestations. | |
| DealOracle — OracleNet Deal Discovery Protocol Reference tooloracle/oraclenet-deal-protocol OracleNet Deal Discovery Protocol — permissioned commercial matching for MCP/A2A agents. | |
| PaymentOracle — Verifiable Multi-Rail Payment Receipts tooloracle/paymentoracle PaymentOracle — ES256K-signed receipts for x402 payments on USDC+EURC (Base) and XRP+RLUSD (XRPL). | |
| io.tooloracle/predictionguard tooloracle/predictionguard Polymarket integrity MCP — 28 tools for wallet risk, whales, UMA scans, SAR/STR reports. | |
| io.tooloracle/predictoracle tooloracle/predictoracle PredictOracle - 12 forecasting tools: time-series, scenario analysis, risk projections. | |
| io.tooloracle/quantum tooloracle/quantum QuantumOracle — 18 post-quantum crypto tools: Kyber, Dilithium, hybrid schemes, migration. | |
| io.tooloracle/reporting tooloracle/reporting ReportingOracle — 16 regulatory reporting tools: BaFin, ESMA, FINREP, COREP, ICAAP, ILAAP. | |
| io.tooloracle/researchoracle tooloracle/researchoracle ResearchOracle - 11 financial research tools: 10-K parsing, equity, macro, citation graph. | |
| io.tooloracle/riskoracle tooloracle/riskoracle RiskOracle - 13-tool enterprise risk MCP: heatmaps, KRIs, scenario sims, Basel/ICAAP outputs. | |
| io.tooloracle/seooraclev2 tooloracle/seooraclev2 SEOOracle v2 - 7 next-gen SEO tools: AI overview tracking, GEO/AEO, entity coverage. | |
| io.tooloracle/tlpt tooloracle/tlpt TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports. | |
| io.tooloracle/trustlayer tooloracle/trustlayer FeedOracle Trust Layer - 10-tool cross-server trust: signing, anchoring, verification. | |
| io.tooloracle/xrploracle tooloracle/xrploracle XRPLOracle - 31 XRP Ledger tools: payments, DEX, AMM, hooks, NFTs, validators, DIDs. | |
| io.tooloracle/zkevidenceoracle tooloracle/zkevidenceoracle ZKEvidenceOracle - 14 zero-knowledge proof tools for compliance evidence: Groth16, PLONK. | |
| dev.toolpin/toolpin toolpin/mcp-server Check whether an MCP server answers, what its tools claim, and whether that claim has changed. | |
| io.github.toolwright-adk/linear-bootstrap toolwright-adk/toolwright-monorepo Bootstrap Linear projects from natural language — milestones, epics, issues, and dependencies. | |
| Mnemoscope toonight/mnemoscope Predict context rot, sign every agent write, tier reads. Markdown-native, 100% local. | |
| App Store Tracker top-init/appstoretracker-mcp-registry-listing iOS App Store chart rankings, app details, reviews, keywords and revenue estimates. | |
| Shortimize top-init/shortimize-mcp-registry-listing Track TikTok, Instagram Reels and YouTube Shorts accounts and videos: views, growth and analytics. | |
| Social Growth Engineers top-init/socialgrowthengineers-mcp-registry-listing Viral short-form videos, hooks, app growth playbooks and App Store data for marketers. | |
| CrowdHum topness-msft/crowdhum-plugin Create and run live audience polls from your AI assistant, with a scan-to-vote QR and an AI recap. | |
| com.topness/callwright topness/callwright Self-hosted MCP voice agent that places phone calls on your behalf via Retell. | |
| io.github.topofgames/la-ei-romania topofgames/la-ei-mcp Romanian classified ads and business directory. Search 30K+ businesses, ads, exchange rates. | |
| TOPY.AI · AI CEO topy-ai-ltd/topy-ai-ceo-skills Founders' AI CEO: business plans, plan revisions, SEIS, investors and CEO records. | |
| TOPY.AI · AI CFO topy-ai-ltd/topy-ai-cfo-skills Founders' AI CFO: cash and runway, month-end close, Stripe in QuickBooks, reports, UK deadlines. | |
| TOPY.AI · AI COO topy-ai-ltd/topy-ai-coo-skills Founders' AI COO: every AI cofounder's Routines on time — heartbeat, failures, approvals, reports. | |
| TOPY.AI · AI CPO topy-ai-ltd/topy-ai-cpo-skills Founders' AI CPO: product review, feedback triage, decision log, honest A/B tests, PRDs, roadmap. | |
| TOPY.AI · AI CRO topy-ai-ltd/topy-ai-cro-skills Founders' AI CRO: revenue review from real figures, pipeline, deal desk, quotes, dunning plans. | |
| TOPY.AI · AI CSO topy-ai-ltd/topy-ai-cso-skills Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes. | |
| TOPY.AI · AI CTO topy-ai-ltd/topy-ai-cto-skills Founders' AI CTO: CI failures explained, PRs and checks, release notes, alerts. | |
| io.github.Toraastrta/sphior-ai-governance-mcp toraastrta/sphior-code Record what your AI did as tamper-evident evidence for ISO 42001, EU AI Act and SOC 2. Hash-only. | |
| io.github.Toraastrta/sphior-code-mcp toraastrta/sphior-code Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed. | |
| MYCELIX toramo747/neo-collettive Read-only MCP server checks and quote verification, free and keyless; results signed and publicly lo | |
| Guides by TIC tori-tic/tic-guides-mcp Sourced guides to earning online, platform rules, and a check for AI-income offers. Read-only. | |
| io.github.torkjacobs/tork-governance torkjacobs/tork-governance AI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch. | |
| Contraptify torsviklabs/contraptify Design redstone machines with your AI and test them tick by tick with Java Edition 26.3 rules. | |
| RevenueScope: revenue-first analytics for your EC site toshihiroshishido/revenuescope-mcp Ask AI about your EC site's revenue by channel, RPS/AOV/CVR, search & AI traffic, budget split. | |
| io.github.totalaudiopromo/tap-mcp totalaudiopromo/total-audio-platform Music PR campaign management -- contacts, pitches, campaigns, and outcomes. | |
| Total CMS totalcms/cms Total CMS docs, guides and CMS comparisons: Twig, field types, schemas, CLI, REST API and releases. | |
| io.github.TotesMagotes/mcp-server totesmagotes/expensebot Answer questions about ExpenseBot — features, pricing, and integrations. Read-only. |
49,851–49,900 of 50,909
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.