Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| Collective Q&A Ask the SuperColony agent swarm a question and get consensus-weighted answers. Use when a decision benefits from multiple independent perspectives, when you... | |
| DeFi Consensus Oracle Get swarm-aggregated DeFi and market consensus from SuperColony before making trading or investment decisions. Use when you need more than one agent's opinio... | |
| Hive Intelligence Publisher Publish DAHR-attested intelligence to the SuperColony collective hive. Use when you want to contribute observations, analyses, or predictions on-chain, build... | |
| Swarm Signal Reader Read and interpret consensus signals from the SuperColony collective intelligence hive. Use when you need market consensus, want to know what other agents th... | |
| Screenshots for AI agents via x402 Browser screenshots and vision over MCP Streamable HTTP with x402 USDC micropayments at this deployment. Paid tools require an x402-aware MCP client and a fu... | |
| SocialRails Manage social media by scheduling posts, viewing analytics, generating AI captions, and listing connected accounts via the SocialRails API. | |
| Sentinel Security scanning and transaction simulation for Solana AI agents | |
| Rentaclaw List and manage your AI agent on the Rentaclaw marketplace - a decentralized marketplace for AI agent rentals on Solana. Earn SOL by renting out your agent. | |
| Rentaclaw List and manage your AI agent on the Rentaclaw marketplace - a decentralized marketplace for AI agent rentals on Solana. Earn SOL by renting out your agent. | |
| agent-runlog Wrap shell commands with the agent-runlog CLI to capture concise, redacted run logs for debugging, CI reproduction, long-running agent commands, repeated fai... | |
| agent-work-receipts Provides a safe, auditable AI coding workflow with repo briefs, logged commands, trustable receipts, and CI dry-run planning for transparent handoffs and rev... | |
| Agent Wormhole Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... | |
| agenTOR Use agenTOR for Tor-routed browser sessions with receipts, HTML capture, screenshots, and compact research runs. It is suited for privacy-framed browsing wor... | |
| BuiltByEcho Humanizer Remove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natural and human-written. Based on Wikipedia's comp... | |
| builtbyecho-research Use when a user asks an agent to do web research, source discovery, citation-backed reporting, page extraction, crawling, or browser-rendered research using... | |
| Echo Gate Use Echo Gate when registering, exposing, calling, securing, auditing, or operating local-first agent-callable tools through the BuiltByEcho gateway. Covers... | |
| public-api-finder Find and evaluate free/public APIs for projects, demos, agents, prototypes, data enrichment, examples, integrations, or research. Use the simple public-api-f... | |
| repo-agent-brief Generate concise, safety-aware repository orientation briefs with @builtbyecho/repo-agent-brief/agent-brief before coding-agent work, reviews, handoffs, PR a... | |
| trustlog Create, summarize, or verify local human-readable receipts for AI agent work using the @builtbyecho/trustlog CLI. Use when a user asks for proof of what an a... | |
| Vaultline Use when an agent needs to store, retrieve, list, inspect, or delete files through Vaultline, or when it needs to choose between open and private storage tie... | |
| Daily Tutor Get new study items for any subject. Use when: user asks for a daily lesson or new learning content. Supports any data format (language vocab, math formulas,... | |
| Reddit (read only - no auth) Browse and search Reddit in read-only mode using public JSON endpoints. Use when the user asks to browse subreddits, search for posts by topic, inspect comment threads, or build a shortlist of links to review and reply to manually. | |
| 平行历史 历史推演聊天游戏：20年政治生命、四维环境、突发事件、羁绊、观察者、结局。触发：玩平行历史、推演历史、我想改变历史、从XX年开始。 | |
| Moltchan Image board for AI agents (4chan-style). Same auth as Moltbook; boards, threads, image posts, replies, upvotes. | |
| AI Engineer AI/ML engineering specialist for building intelligent features, RAG systems, LLM integrations, data pipelines, vector search, and AI-powered applications. Us... | |
| Growth Hacker (Early Stage) Rapid user acquisition, viral loops, conversion optimization, and growth experiments. Use when working on: getting first users, improving signup/activation r... | |
| Howtoletmyagent Installer Install companion OpenClaw skills from howtoletmyagent.xyz article URLs or skill manifests. | |
| Howtoletmyagent Secure Gmail Access Teach an OpenClaw agent the recommended Gmail OAuth2 setup, scope choices, and safety guardrails from this guide. | |
| Rapid Prototyper Ultra-fast proof-of-concept and MVP development. Use when building new web apps, prototypes, or MVPs from scratch where speed matters over perfection. Specia... | |
| Listing Doctor Publish Audit and score Amazon listings on CDQ, A9 indexability, COSMO intent coverage, Alexa discoverability, and compliance; outputs detailed health reports and fi... | |
| web-search-skill 실시간 정보 조회를 위한 웹 검색 기능 제공 | |
| EPUB ↔ PDF Converter Convert EPUB ↔ PDF bidirectionally. EPUB→PDF preserves layout for analysis; PDF→EPUB compresses and reflows for distribution and ereaders. | |
| Research to Music Video Pipeline Create 60s music videos from research articles using storyboard PDF, image/video/audio gen, and ffmpeg assembly. | |
| Tinyfish Agent Run Run a TinyFish automation agent against a URL and stream live progress events (STARTED / PROGRESS / COMPLETE) as one-line JSON events. Use when you want to e... | |
| Tinyfish Browser Spin up a remote browser session via the TinyFish Browser API and get a CDP URL for driving it. Use when you need an automatable Chromium session (Playwright... | |
| Tinyfish Fetch Fetch web pages via TinyFish Fetch API and get clean markdown, HTML, or screenshots back — handles JS rendering and proxying. Use when you need to read a spe... | |
| Tinyfish Search Run web searches via TinyFish Search API and get structured JSON results (title, snippet, URL) ready for LLM consumption. Use when you need fresh web search... | |
| Smart File Manager 文件整理与归档 skill。管理用户输入文件和我生成的输出文件的存储、命名、分类。 适用于：用户发送图片/视频/PDF等文件给你处理，或你生成文件给用户。 触发：任何文件存档操作前。 | |
| Self Improvement Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| crypto-watch-skill Cryptocurrency and precious metals market data analysis, supporting K-line, funding rate, open interest, long/short ratio, liquidation data, option data, fea... | |
| Owletto OpenClaw Setup Install and configure the Owletto memory plugin for OpenClaw, including OAuth login and MCP health verification. | |
| openclaw-gitbak Backup/restore OpenClaw config and workspace via git. | |
| eve-esi Query and manage EVE Online characters via the ESI (EVE Swagger Interface) REST API. Performs OAuth2/PKCE browser login and stores plus auto-refreshes long-lived OAuth tokens locally in ~/.openclaw/eve-tokens.json. Read-only by default and | |
| bursar Pay for services from a Bursar mandate on Robinhood Chain, inside the limits its owner set. Quote, pay, buy and sell listed US stocks, and read your endowment. | |
| standard-book-learning 协调管理书籍学习流程，按顺序调用章节提取、笔记生成、图谱构建及导入模块，跟踪进度并生成总结报告。 | |
| TorrentClaw Search and download torrents via TorrentClaw. Use when the user asks to find, search, or download movies, TV shows, or torrents. Detects local torrent client... | |
| Charmie CRM Lite Lightweight CRM with SQLite – manage contacts. Upgrade to Pro for email, messaging, and more. | |
| 📈 A-Share Daily Brief A-share (Chinese stock market) daily briefing. Auto-collects index data, sector rankings, capital flows, major announcements, and generates a structured dail... | |
| 💾 Complex Memory Manager Privacy-aware structured memory management for AI agents. Three-tier memory model (Public / Internal-encrypted / Private-not-stored), with XOR+Base64 encrypt... | |
| Deploy Agent Automatically detects project type, generates Dockerfile if needed, builds and deploys the app in Docker with smart port selection and health checks. |
17,251–17,300 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.