Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| zoho-projects Zoho Projects API V3 integration with managed OAuth. Manage projects, tasks, milestones, tasklists, and team collaboration. Use this skill when users want to manage project tasks, track time, organize milestones, or collaborate on projects. | |
| zoho-recruit Zoho Recruit API integration with managed OAuth. Manage candidates, job openings, interviews, and recruitment workflows. Use this skill when users want to read, create, update, or search recruitment data like candidates, job openings, inter | |
| Zoom Admin Zoom Admin API integration with managed OAuth. Manage users, meetings, webinars, recordings, and account settings with admin-level access. Use this skill when users want to list users, create or manage meetings, view recordings, check user/ | |
| Zoom Zoom API integration with managed OAuth. Manage meetings, webinars, recordings, and user profiles. Use this skill when users want to schedule meetings, manage webinars, get meeting details, list recordings, or retrieve user information. For | |
| Kubera Read and manage Kubera.com portfolio data (net worth, assets, debts, allocation, holdings). Use when a user asks about their finances, net worth, portfolio, investments, holdings, asset allocation, or wants to update asset values in Kubera. | |
| qqbot 配置并管理QQ官方机器人，支持身份认证、IP白名单设置、Webhook/WebSocket连接及OpenClaw AI集成。 | |
| employee-handover 生成员工离职交接单。当用户提到"离职交接、交接清单、交接表、工作交接"或需要把任务台账/聊天记录整理成结构化交接文档并匹配资料存放位置时使用。数据源不限：钉钉、飞书、企业微信、微信、Teams、Slack 等任意办公沟通软件，支持 API/MCP/CLI 自动采集，也支持用户手动提供聊天记录（导出文件/截图/粘贴文本）。产出三段式交接表（业务来源/资料储存/进行中事项）+ 附页（未完成任务/资料位置匹配/对接人名册/检查表），可运行于任意 AI 助手。 | |
| goal-loop Goal-driven execution supervisor for complex multi-step work: keeps an explicit goal ledger, runs execute→validate→repair→revalidate, blocks premature or lazy completion, maintains PROJECT-CHECKPOINT.md, and resumes interrupted work from th | |
| shuzhi-huibao-ppt-generator 知识库驱动的高管/职场汇报 PPT 生成器。用于将用户的零散知识库资料（工作记录、项目文档、会议纪要、复盘材料、数据表格、图片素材等）转化为面向职场场景的高质量汇报型 PPT。覆盖用例: 述职, 转正, 晋升答辩, 年终总结, 项目立项/汇报/复盘, 方案汇报, 资源申请, 部门规划, 改善汇报, 管理决策汇报。核心原则: 不直接套模板, 不一上来就生成 PPT；先澄清目标, 形成 SPEC, 确认大纲, 再生成 PPTX。当用户需要制作职场汇报类 PPT 时自动触发。 | |
| shuzhi-huibao-ppt-generator-codex Create evidence-based, management-ready workplace report presentations from personal knowledge bases, work records, project files, meeting notes, resumes, spreadsheets, images, drafts, and corporate PPT templates. Use for 试用期述职、转正汇报、晋升答辩、项目 | |
| Baidu Search 1 Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics. | |
| Clawhub Index and audit public financial experts' YouTube and Telegram claims: extract source-backed verbatim call cards, search a local SQLite history, and chart recorded price levels against market prices. Use for indexing a supplied source, quer | |
| Speech to Text (Yandex SpeechKit) Speech recognition from voice messages using Yandex SpeechKit (with an extensible architecture for other providers). Use when you need to convert a voice mes... | |
| Telegram Channel Reader Let your agent read and monitor Telegram channels — posts, captions, link previews, and comments from public or private channels — and turn them into digests, summaries, and alerts. Unread tracking, JSON or text output, SOCKS5-proxy support | |
| SMTools Image Generation Skill Generate images from text prompts using AI models via OpenRouter, Kie.ai, or YandexART. Use when the user asks to generate, create, draw, or illustrate an im... | |
| Video Dub Clawhub Download, translate, dub, and retime videos | |
| Telegram Usage Stats Display session usage statistics (quota, session time, tokens, context) | |
| AgentLedger Expense tracking and accounting for AI agents. Log purchases, set budgets, generate spending reports, and manage multi-currency finances — all stored locally. Privacy.com card import, natural language queries, CSV/JSON export. Use when agen | |
| Kuakua Navigator Discover and navigate Kuakua.app's complete library of free psychology resources, games, cognitive tools, and wellness content. Use when anyone asks about: p... | |
| self-relationship 帮助一个人更好地理解自己、接纳自己、调整自己，并在现实中做出更适合自己的选择。适用于用户谈论"与自己相处"、"自我关系"、"自我接纳"、"自我理解"、"认识自己"、"自我成长"、self-relationship、self-acceptance、self-understanding、self-growth 等话题时。不要试图把人变成"更完美的人"，不要把测试结果变成定义自己的标签。 | |
| gpt-go Enter GPT strong execution mode for the current conversation when explicitly invoked, such as with /gpt-go. Persist across the conversation. Default to execu... | |
| Provider Sync Sync provider model lists into OpenClaw config (dry-run preview → confirm → apply). Trigger: /provider_sync | |
| Telegram Footer Patch Add a Telegram private-chat footer (`🧠 Model + 💭 Think + 📊 Context`) to OpenClaw replies, with dry-run preview, backup, syntax validation, rollback, and r... | |
| Ghost in the Droid Control real Android and iOS devices, run apps, take screenshots, and execute on-device inference via Ghost in the Droid MCP server (62 tools). | |
| Second Read Editor Proofread, propose edits, and check argument flow in reading order | |
| value-pricing Value-based pricing study for a product or service, from its website and knowledge base to a ratified price list. Use when someone wants to price or re-price an offering, design tiers or packages, estimate what each feature is worth to cust | |
| Cooplens Analyze Chinese-foreign cooperative undergraduate programs for parents. The skill verifies official sources in real time, estimates admission rank ranges inc... | |
| Inspiration / Case Figure Guide Use when the user wants to design, prompt, generate, critique, or integrate publication-ready research-paper inspiration figures: motivating examples, proble... | |
| Paper-Code Joint Analysis Jointly analyze a research paper and its open-source implementation. Use when a user wants to understand a paper through code, map theory/formulas/algorithms... | |
| Paper Contribution Helper Build and use a modular paper contribution helper from target papers, research fields, years, and paper sources. Use when Codex needs to help researchers pac... | |
| Paper Deep Reading Deep-read research papers into source-aware reports, traceable claim evidence, and research-direction seeds. Use for paper PDFs, LaTeX sources, appendices, c... | |
| Paper Deep Reading Teaching Explainer Deep-read research papers into authoritative, evidence-grounded teaching reports, reproducibility/defense-ready explanations, innovation-mining artifacts, st... | |
| Paper DeepRead Comic Studio Deep-read research papers into authoritative, reproducible teaching reports, then turn them into source-grounded multi-image cartoon-comic storyboard workflo... | |
| Paper Defense Q&A + Code Audit + Visual Answer Cards Prepare evidence-grounded computer science paper defense Q&A, code/training audit, reviewer-style attack surfaces, mock-defense scripts, backup-slide plans,... | |
| Paper Framework Figure Studio Pro Use when the user wants to design, prompt, generate, critique, or integrate publication-ready research-paper framework figures: method overview diagrams, arc... | |
| Paper Reading Socratic Coach Use when the user wants to train independent academic paper reading, scientific thinking, and research methodology through diagnostic questioning, precision... | |
| Research Paper Figure Skill Factory Use when the user wants a research-paper figure Skill Factory: build, patch, package, or use reusable specialized paper-figure-making skills from lawful lite... | |
| Research Review Skill Factory Build custom peer-review skills for specific research areas, problem families, and method combinations using OpenReview evidence. Use when Codex needs a comp... | |
| Skill2Team It is designed for the point where a skill has become too complex to maintain as one large instruction set, especially when design work, audit work, review gates, execution flow, and deployment assumptions are mixed together. Skill2Team con | |
| Web Video Transcribe DOCX Offline-first workflow for turning Chinese web page video or audio into text and Word deliverables. Use when Codex needs to (1) extract playable media stream... | |
| Agency Frontend Developer Expert frontend developer specializing in modern web technologies, React/Vue/Angular frameworks, UI implementation, and performance optimization | |
| Prts Sandbox Isolated Kali Linux sandbox for running pentest tools and risky commands safely. | |
| AD Strategy Plans paid ad campaigns with platform selection and budget guidance for startups. Use when someone wants help with ads, paid acquisition, Google Ads, LinkedI... | |
| Cold Outreach Helps define ICP, draft cold emails and DMs, and plan outreach sequences for startup sales. Use when someone needs help with sales outreach, cold emails, or... | |
| Content Strategy Plans content creation, distribution, and lead magnets for startup content marketing. Use when someone wants help with content strategy, blogging, or content... | |
| CRO Audit Suggests CRO experiments and A/B test ideas for startups. Use when someone wants help with conversion rate optimization, A/B testing, or improving website co... | |
| Email Flows Designs onboarding, activation, and retention email sequences for SaaS. Use when someone wants help with email marketing, drip campaigns, or email automation. | |
| Free Tool Marketing Brainstorms mini-tool ideas for organic traffic and backlinks. Use when someone wants help with free tool marketing, engineering as marketing, or side projec... | |
| Influencer-Plan Influencer and creator partnership strategy and outreach for startups. Use when someone wants help with influencer marketing, creator partnerships, or sponso... | |
| Launch Platforms Recommends launch platforms, directories, subreddits, and lifetime deal sites based on product type. Use when someone wants to know where to launch or promot... |
17,901–17,950 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.