Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| hermes-session-retitle Bulk-rename Hermes session titles to a consistent format. | |
| Rm Safety Intercepts risky rm commands to assess impact, confirm user intent, and suggest safer alternatives before execution to prevent accidental data loss. | |
| 2134 Use for RAGFlow dataset and retrieval tasks: create, list, inspect, update, or delete datasets; list, upload, update, or delete documents in a dataset; start... | |
| DevOps Insight This skill should be used when the user asks to "analyze incidents", "troubleshoot production issues", "investigate alerts", "create tickets", "root cause an... | |
| Agent Dev Toolkit Cahdieng Complete toolkit for building AI agents. Includes agent-builder, agent-browser, agent-wallet, agent-development, and agent-docs. Build, automate, and monetiz... | |
| AllRatesToday Exchange rates and currency conversion ('convert 200 USD to EUR', 'GBP/JPY rate'), plus the official rate a named central bank or tax authority published (ECB, HMRC, RBI, SAMA, 120 more) for invoices, VAT, customs or audit. Fetches with web | |
| Materials Cli Render JSON schemas to images and generate schemas from prompts using declare-render and AI. | |
| Materials Workbench Materials editor workbench — React UI and Express server to render JSON schemas to images and generate schemas with AI (declare-render + materials-agents). | |
| Test Render JSON schemas to images and generate schemas from prompts using declare-render and AI. | |
| ClawMind Search, browse, and contribute to ClawMind — the knowledge-sharing platform for AI agents. Use when you need to find solutions to technical problems, share automation patterns, ask or answer questions, or browse what other agents have built | |
| 20 Agent Security Questions Automation skill for 20 Agent Security Questions. | |
| Aagent System 多智能体自动化系统，用于AI Agent技能样本采集、安全扫描、威胁情报收集和研究分析。支持单机多进程架构，可自动采集样本、检测恶意技能、提取IOC、更新规则。触发命令: /aagent start | |
| Agent Defender Agent Defender - AI智能体安全防护平台。静态扫描+运行时防护+DLP脱敏。触发：(1)扫描Skill (2)启动防护 (3)DLP检测 (4)安全审计 | |
| Agent Dlp Agent DLP - 数据防泄漏系统 功能: 入口防护、记忆保护、工具管控、出口过滤、审计日志 触发: (1)检查状态 (2)检查输入 (3)检查输出 | |
| Agent Security Dlp Agent Security DLP - 企业级数据防泄漏系统 功能: 入口防护、记忆保护、工具管控、出口过滤、审计日志 规则: 170条，覆盖金融、医疗、汽车、销售、人力资源、物流等25+行业 触发: check-output(对话出口) / check-input(对话入口) / check-tool(工具执... | |
| Agent Security Skill Scanner Gitee AI Agent 安全扫描器 - 多语言检测 + AST 分析 + 意图识别 + LLM 验证 | |
| Clawhub Publish V621 Enterprise AI Agent Security Scanner - 846 rules, three-layer detection architecture, risk tier classification. Detects prompt injection, credential theft, d... | |
| Agent Security Skill Scanner Gitee AI Agent 安全扫描器 - 通用恶意代码检测 + 多语言支持 + CLI 工具 | |
| 安全技能插座 安全技能插座 - 统一的安全技能管理和调用平台 这是一个安全技能的"插座"框架，提供统一的安全能力入口。已集成以下技能： **全网技能搜索 (ClawHub)**: - clawhub: 从 clawhub.com 搜索安装全网技能 **信息收集类**: - collector-strategy: 采集策略Ski... | |
| Srs Automation skill for Srs. | |
| Feishu Backup Back up files uploaded to a Feishu group chat to the local doc/backup directory. Supports smart matching: multiple files, filename prefix/keyword filter, fil... | |
| Feishu Print Print files uploaded to a Feishu group chat. Supports smart matching: multiple files, filename prefix/keyword filter, file type (pdf/image), and time range (... | |
| Slack Backup Back up files uploaded to a Slack channel to the local doc/backup directory. Supports smart matching: multiple files, filename prefix/keyword filter, file ty... | |
| Slack Print Print files uploaded to a Slack channel. Supports smart matching: multiple files, filename prefix/keyword filter, file type (pdf/image), and time range ("jus... | |
| Investment Research 提供公司或行业的全面投研分析，涵盖财务、行业格局、估值、技术面及风险催化，助力专业投资决策。 | |
| Wechat Blog Write Publish 基于用户提供的参考资料，自动创作并排版微信公众号文章，保存为 Markdown 并发布至公众号草稿箱。 | |
| mailgo-coldmail-marketing Complete cold email campaign suite for Mailgo — verify recipients, claim free mailbox, generate & optimize content, create campaigns, manage lifecycle, and v... | |
| Cailianpress Unified 提供统一稳定的财联社电报数据访问，支持加红、电报、热度查询及文章详情，保证数据可审计和格式统一。 | |
| image2text Extract text from images using tesseract OCR, supporting local files, URLs, and base64 inputs for text-only AI models without vision capability. | |
| AI API Cost Optimizer AI API 成本优化工具箱。帮你追踪、对比、优化 OpenAI/Claude/DeepSeek/Gemini 等 AI API 的使用成本，选择最划算的模型组合。 | |
| Code Review AI 驱动的代码审查工具。对代码变更进行多维度审查，输出结构化的 Review 意见。 **当以下情况时使用此 Skill**: (1) 需要对代码进行 Code Review (2) 需要审查 PR/MR 的代码变更 (3) 用户提到"code review"、"代码审查"、"帮我看看代码"、"这段代码有问题吗... | |
| Ai Content Polish 中文 AI 内容去痕与润色工具。检测中文文本中的 AI 写作痕迹（slop），提供人性化改写建议，提升内容的真实感和可读性。 **当以下情况时使用此 Skill**: (1) 需要检查中文文本是否像 AI 写的 (2) 需要把 AI 生成的内容改得更自然、更人性化 (3) 用户提到"AI味"、"机器人味"、"去A... | |
| AI Short Drama Toolkit AI短剧制作工具箱 — 从创意到成片的完整工作流，包含剧本模板、Prompt模板、平台适配指南和商业化策略 | |
| Smart Commit 智能 Git 提交信息生成工具。根据代码 diff 自动生成规范的 commit message、PR 描述和 Release Notes。 **当以下情况时使用此 Skill**: (1) 需要根据代码变更生成 commit message (2) 需要编写 PR/MR 描述 (3) 需要生成 Release... | |
| Api Security Scanner API 安全扫描工具。对 REST API 端点进行自动化安全审计，检测 OWASP Top 10 漏洞、 认证/授权问题、敏感数据泄露、速率限制缺失等常见安全隐患。输出结构化安全报告。 适合开发者在部署前快速自检，也适合安全团队做轻量级审计。 | |
| DeepSeek API Toolkit 提供DeepSeek API接入方案、成本优化建议、Prompt优化及模型选型，助力高效集成与成本控制。 | |
| Video Script Writer 中文短视频脚本写作助手。针对抖音、小红书、B站、快手等平台，生成高完播率的短视频脚本。 **当以下情况时使用此 Skill**: (1) 需要写短视频脚本/文案 (2) 用户提到"脚本"、"短视频文案"、"抖音文案"、"小红书文案" (3) 需要视频选题建议或热点选题 (4) 需要优化视频开头/钩子（hook）... | |
| Code Review AI 驱动的代码审查工具。对代码变更进行多维度审查，输出结构化的 Review 意见。 **当以下情况时使用此 Skill**: (1) 需要对代码进行 Code Review (2) 需要审查 PR/MR 的代码变更 (3) 用户提到"code review"、"代码审查"、"帮我看看代码"、"这段代码有问题吗... | |
| Video Script Writer 中文短视频脚本写作助手。针对抖音、小红书、B站、快手等平台，生成高完播率的短视频脚本。 **当以下情况时使用此 Skill**: (1) 需要写短视频脚本/文案 (2) 用户提到"脚本"、"短视频文案"、"抖音文案"、"小红书文案" (3) 需要视频选题建议或热点选题 (4) 需要优化视频开头/钩子（hook）... | |
| AI人格服务 一个支持多AI人格召唤与协作的MCP协议服务器，可用于代码分析、产品设计等多场景智能协作。 | |
| 股票数据接口服务 基于akshare-one的MCP服务器，提供中国股票市场数据的全面接口，包括历史数据、实时数据、新闻数据和财务报表等金融信息。 | |
| AnnData数据检索工具 AnnData MCP是一个通过MCP协议检索AnnData对象信息的工具，适用于生物医学数据分析场景。 | |
| 论文检索与解析工具 一个基于arXiv的论文检索与内容解析工具，支持论文搜索、PDF链接获取和内容解析功能，适用于学术研究和AI领域的最新论文获取。 | |
| 文档处理服务 Atlas Docs MCP服务器为AI助手提供库和框架的技术文档，将官方文档处理为适合LLM使用的Markdown版本，适用于Cursor、Cline、Windsurf等MCP兼容的LLM客户端。 | |
| AWS Black Belt服务 一个提供 AWS Black Belt 在线研讨会搜索功能的模型上下文协议（MCP）服务器，支持通过关键词搜索研讨会内容并获取研讨会视频的文字记录。 | |
| AWS架构图生成工具 通过Amazon Q CLI和MCP服务器在GitHub Codespace中快速生成高质量的AWS架构图。 | |
| CDK最佳实践服务 AWS CDK MCP Server是一个提供AWS Cloud Development Kit (CDK)最佳实践、基础设施即代码模式和CDK Nag安全合规性的工具，适用于开发者在构建AWS应用程序时获取指导和建议。 | |
| BBOT安全扫描服务 BBOT MCP服务器是一个用于管理和执行BBOT安全扫描的工具，提供模块管理、预设配置、实时监控等功能。 | |
| 数值计算器 基于Model Context Protocol (MCP)的数值计算器，提供加减乘除、幂运算、平方根和整数阶乘运算功能。 | |
| 火车时刻查询服务 基于GTFS数据的Caltrain火车时刻查询服务，提供实时火车时刻表、站点查询和时间特定查询功能。 |
18,001–18,050 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.