Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| job-screener-engine 在用户拿到面试邀请或 Offer 后，对岗位机会做深度评估：六个维度 打出 A–H 等级与全局 1–5 分，输出行动建议、面试练手价值与风险提示。 触发词：'拿到 offer 了帮我看看'、'这个面试机会值不值得去'、 '帮我评估这个岗位'、'帮我对比这几个机会'、'岗位深度分析'。 | |
| 飞书卡片消息 提供专业级飞书interactive卡片消息发送，支持多模板、自动Token管理、错误处理及群组和单聊推送功能。 | |
| geneva-tax-advisor Guide taxpayers through filing their Geneva (Switzerland) tax return using GeTax software. Covers all sections: salary, professional expenses, pillar 3a, health insurance, medical expenses, securities (DA-1/RSI), foreign property (especiall | |
| Emacs Control Control Emacs. Search, edit, navigate, and pair programming with user | |
| 抖音私信发送 在抖音网页版发送私信消息。当用户想发送抖音私信、提醒续火花、或者提到"抖音发消息"、"发抖音私信"、"douyin send message"时触发。支持独立使用或配合人物关系管理技能使用。 | |
| mouse-keyboard Control mouse and keyboard on Mac using cliclick. Use when you need to automate clicking, typing, or controlling the mouse cursor. | |
| 人物关系管理 人物关系与平台昵称管理器。当需要给某人发消息、但不知道对方在某平台的昵称时触发。自动查询记忆，如果没有记录则询问用户并记忆。 | |
| 微信Mac版消息发送 在微信 Mac 版发送消息。当用户提到"微信发消息"、"发微信"、"给 XXX 发微信"时触发。 | |
| puget-sound-salmon-report Scrape WDFW Puget Sound creel data into salmon CPUE reports: daily digest, weekly top-launch email with chart, and proactive hot-bite alerts. | |
| botlearn BotLearn — AI Agent capability platform CLI. **Core value: `learn`** — run the 5-stage learning loop (Read → Distill → Engage → Discover → Report) end-to-end... | |
| botlearn-academic-search Conducts systematic academic searches across arXiv, Google Scholar, and Semantic Scholar to deliver verified top 5 relevant peer-reviewed papers with summari... | |
| botlearn-assessment botlearn-assessment — BotLearn 5-dimension capability self-assessment (reasoning, retrieval, creation, execution, orchestration); triggers on botlearn assess... | |
| botlearn-certify botlearn-certify — BotLearn certification generator that compares assessment history and produces capability certificates (HTML + MD); triggers after assessm... | |
| botlearn-healthcheck Autonomously inspects a live OpenClaw instance across 5 health domains (hardware, config, security, skills, autonomy) and delivers a quantified traffic-light... | |
| botlearn-examiner Conducts standardized exams assessing multi-dimensional OpenClaw Agent capabilities, scores with rubrics, generates radar-chart reports, and offers improveme... | |
| botlearn-google-search Constructs and executes precise, multi-query Google searches using advanced operators to retrieve, filter, and rank credible, up-to-date sources. | |
| botlearn-graduate Guide users through a 7-day learning journey graduation by analyzing progress, identifying agent archetype, celebrating achievements, and planning personaliz... | |
| botlearn-healthcheck botlearn-healthcheck — BotLearn autonomous health inspector for OpenClaw instances across 5 domains (hardware, config, security, skills, autonomy); triggers... | |
| botlearn-reminder botlearn-reminder — BotLearn 7-step onboarding guide that delivers quickstart tutorials every 24 hours; triggers on first BotLearn registration or when user... | |
| botlearn-rss-manager Aggregate and deduplicate multiple RSS/Atom feeds, score and cluster articles by importance, and generate concise, source-attributed daily digests. | |
| botlearn-selfoptimize botlearn-selfoptimize — BotLearn continuous improvement engine that captures errors, corrections, and learnings; triggers on command failure, user correction... | |
| translator Provides accurate, context-aware translations that preserve meaning, tone, and cultural nuances while ensuring terminology consistency across documents. | |
| botlearn-twitter-intel Monitor Twitter to identify key opinion leaders, track emerging trends, analyze sentiment, detect bots, and deliver verified real-time intelligence reports. | |
| botlearn-writer Produces well-structured, evidence-based articles with clear theses, diverse support, consistent style, and optimized topic coverage for target audiences. | |
| botlearnb-autodidact Continuously identifies and prioritizes unsolved tasks, searches and installs BotLearn skills, and engages the community to improve agent capabilities autono... | |
| Vidu official video generation. Image to video / Text to video / Reference to video / Text to image / Reference to image / Video edit / Image edit Generate video and images by calling the official Vidu API via vidu CLI. Use when the user wants text-to-image, text-to-video, image-to-video, head-tail-imag... | |
| Jungle Executor Executes Jungle Laws to enforce strict rule validation, risk control, consensus, and self-audit for error-free trading, decisions, and multi-agent workflows. | |
| After Effects MCP Automates Adobe After Effects using ExtendScript (.jsx) files and aerender CLI. Supports composition creation, effect application, batch rendering, project t... | |
| DuckDB CLI skills DuckDB CLI specialist for SQL analysis, data processing and file conversion. Use for SQL queries, CSV/Parquet/JSON analysis, database queries, or data conversion. Triggers on "duckdb", "sql", "query", "data analysis", "parquet", "convert da | |
| AstrBot plugin dev skill Guide for developing AstrBot plugins that match the AstrBot main repo, pass astr-plugin-reviewer checks, and cover commands, filters, hooks, LLM integrations... | |
| Email Capture Generator Build high-converting lead magnets, squeeze pages, and email capture funnels using proven 5-section conversion frameworks. Includes opt-in forms, thank you p... | |
| Gen Z Design Agent Specializes in minimalist, surrealist Gen-Z design with high-contrast, atmospheric styles, delivering production-ready Tailwind/HTML for landing pages and so... | |
| Landing Page Converter Build high-converting landing pages and product sales pages using proven 10-section conversion frameworks. Includes Hero → Social Proof → Benefits → CTA flow... | |
| Accounting Tool Financial management with invoices, expenses, job costing, P&L reports, and QuickBooks sync — built for AI agents. | |
| Ads Optimizer AI-powered ad campaign management with performance audits, optimization analysis, A/B testing, and anomaly detection. | |
| Analytics Engine Event tracking, funnel analysis, cohort retention, multi-touch attribution, revenue metrics, and real-time analytics — built for AI agents. | |
| CRM Engine Full CRM with accounts, leads, deals, contacts, pipelines, and work orders — built for AI agents. | |
| Email Engine Send emails, bulk campaigns, AI-powered classification, auto-reply generation, and template management. | |
| Lead Generation Pipeline Autonomous 6-agent pipeline that researches industries, finds businesses, and generates personalized outreach — one API call. | |
| Marketing Tool Full marketing automation with prospects, campaigns, outreach tracking, solutions catalog, agent conversation logs, and cost tracking — built for AI agents. | |
| Notifications Engine Multi-channel notification delivery with customizable templates, email and SMS sending, and full delivery logging — built for AI agents. | |
| Scheduling Engine AI-powered appointment scheduling with staff management, availability windows, and booking automation. | |
| UGC Factory AI-powered video and content generation pipeline with script writing, TikTok automation, YouTube analysis, media library, avatars, and voice synthesis — buil... | |
| Lazyads Manage ad campaigns across Meta, Google, TikTok, LinkedIn, Reddit, Apple, Bing, ChatGPT, and Snapchat Ads via the hosted LazyAds MCP server. Bridge mode (BYOA) lets your agent create/edit/monitor campaigns without Lazy Ads AI. Full MCP (Sta | |
| MaxVideoAI Use when a user wants AI video planning, current model comparison, a project budget, an exact generation quote, approved generation, or recovery through MaxVideoAI. | |
| OpenClaw Orchestrator — Finance & Python Team Main orchestration skill for a Python/finance app team with full-stack web capability. Routes tasks to sub-agents Simons, Carmen, and Ada. Free mode is on by... | |
| Tech Blog Writing Write technical blog posts as a professional tech blogger, following a strict structure, conversational style, and Markdown formatting. Output is rendered into a standalone HTML file. Use when the user asks to write, draft, or produce a tec | |
| Siobac Link people through their Agents on Siobac — your agent gets acquainted with other people's agents and works with them, in one skill, both directions. Use it... | |
| ddg-search DuckDuckGo HTML search scraper CLI with JSON, CSV, OpenSearch, markdown, and compact outputs. | |
| arxivkb Local arXiv paper manager with semantic search. Crawls arXiv categories, downloads PDFs, chunks content, and indexes with FAISS + Ollama embeddings. No cloud... |
18,151–18,200 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.