Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| DoctorClaw Feedback Digest Customer feedback digest — collect, categorize, and summarize reviews, survey responses, and support tickets. Weekly cron or on-demand. | |
| DoctorClaw Invoice Tracker Invoice tracker — track sent invoices, flag overdue payments, draft follow-up reminders. Weekly cron or on-demand. | |
| DoctorClaw Lead Qualifier Lead qualifier — score inbound leads based on custom criteria, prioritize hot prospects, draft outreach. On-demand or cron. | |
| DoctorClaw Meeting Prep Meeting prep — pull context on attendees, topics, and action items before every calendar event. Auto or on-demand. | |
| DoctorClaw Morning Briefing Daily morning briefing — emails, calendar, tasks, and weather in one summary. Cron or on-demand. | |
| DoctorClaw Project Status Project status board — compile daily status from tasks, calendar, and team updates into one dashboard. Daily cron or on-demand. | |
| DoctorClaw Social Drafter Social media drafter — turn ideas into platform-ready posts for LinkedIn, X, Instagram, and more. On-demand. | |
| DoctorClaw Weekly Report Weekly report generator — compile progress from tasks, emails, and calendar into one summary. Friday cron or on-demand. | |
| XRRobot ROS2 控制、检查和排查基于 ROS 2 Jazzy 的 XRRobot... | |
| LinkedIn Skills LinkedIn automation skill collection. Supports authentication, content publishing, feed browsing, search & discovery, social interactions, and compound opera... | |
| Esxi Debian Deploy Zero-touch Debian 13 VM deployment on VMware ESXi 8. Builds custom preseed ISO, creates NVMe+vmxnet3 VM with serial console, and runs unattended installation... | |
| AgentMesh Provides end-to-end encrypted, authenticated, and forward-secret messaging between AI agents with cryptographic identities and tamper-proof delivery. | |
| Podcastifier Turn incoming text (email/newsletter) into a short TTS podcast with chunking + ffmpeg concat. | |
| Security Audit Minimal helper to audit skill.md-style instructions for supply-chain risks. | |
| Tdd Helper Lightweight helper to enforce TDD-style loops for non-deterministic agents. | |
| Ai Agent Tools Python library offering file handling, text extraction, data conversion, utilities, memory storage, and validation tools for AI agent workflows. | |
| AI Walllet Payment System Manage Ethereum wallets with encrypted keys, TOTP 2FA, secure ETH transactions, audit logs, and rate limiting for AI-driven payment processing. | |
| cerbug45 - Encrypted Agent Communication Enables AI agents to communicate securely with each other through encrypted messaging. Use this skill when agents need to exchange information, coordinate tasks, share data, or collaborate across different sessions or instances. Supports en | |
| Cerbug45 Email Formatter Transform rough email drafts into polished, professional messages. Use this skill when the user wants to improve email quality, fix grammar and tone, format business emails, or convert casual messages into professional communication. Trigge | |
| SQL Query Generator Generate secure SQL queries with validation, pagination helpers, risk analysis, and audit-focused safeguards. | |
| Task Panner Validator for Agents Provides secure task planning, validation, approval, and execution for AI agents with safety checks, rollback, dry runs, and error handling using pure Python. | |
| Whatsapp Context Manager for Agents AI-powered WhatsApp tool for agents providing instant customer history, sentiment, priority, order details, VIP detection, and response suggestions. | |
| powerpoint-generator Professional full-process PPT presentation AI generation assistant. Simulates the complete workflow of a top-tier PPT design company (requirements research -... | |
| Agentmm Skills AgentMM memory & log management skill — gives AI agents persistent memory storage and structured logging. Use when the user asks to remember information, rec... | |
| AI Agent Memory Unlimited organized memory for your AI agent. Store, search, and organize projects, contacts, decisions, and knowledge across categories. Never lose context... | |
| AI Agent Onboarding Wizard Get your AI agent productive in 5 minutes. Automated environment scan, smart skill recommendations, and exact install commands. No more trial and error. | |
| AI Agent Productivity Tools Curated toolkit for business productivity. Installation guides for 5 essential tools — Google Workspace CLI, task manager, notes, health checks, and security... | |
| AI Agent Self-Improving Stack Installs 5 essential tools that make your AI agent smarter over time — reflection, proactivity, learning, memory, and skill extraction. Your agent improves w... | |
| AI Agent Skill Directory Curated catalog of quality AI agent skills. Find the right tool for every task — verified recommendations for memory, productivity, security, and automation.... | |
| AI Agent Skill Scanner Security scanner for AI agent skills. Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms. Scan before you... | |
| CertainLogic QM Timechain Query the CertainLogic Timechain from any Y Combinator QM deployment. 75K+ cryptographically verified agent execution traces for training, audit, and research. Free open-source skill (API sold separately). | |
| SkyInsights Query the CertiK SkyInsights blockchain risk intelligence API. Use this skill when the user wants to check whether a wallet address or transaction hash is ri... | |
| Skylens Transaction Analysis Inspects one EVM transaction with Skylens APIs and returns human-readable trace, balance, storage, and nonce changes. Use when the user asks for tx-level inv... | |
| Skynet Score Use for searching CertiK Skynet project scores, looking up blockchain project security ratings, comparing score breakdowns, and integrating the public Skynet... | |
| Token Scan Scan token contract security risk and return a structured summary including score, tax, holder concentration, and LP lock status. Supported chains are bsc, e... | |
| Capital Equipment Network (CapNetEq) Search, book, and manage scientific research equipment across 500+ facilities, track usage, submit service requests, and find collaborators securely. | |
| Capital Equipment Search, book, and manage scientific research equipment at 200+ institutions with real-time availability, service requests, and collaborator discovery. | |
| ondeep-flow The AI-era Taobao / Xianyu (闲鱼): an open C2C marketplace where agents and people publish almost anything they want to trade — digital services, APIs, compute... | |
| gog-restricted Google Workspace CLI for Gmail, Calendar, and Auth (restricted via security wrapper). | |
| LobsterBio - Dev Develop, extend, and contribute to Lobster AI — the multi-agent bioinformatics engine.
Use when working on Lobster codebase, creating agents/services, understanding architecture,
fixing bugs, adding features, or contributing to the open-sou | |
| LobsterBio - Use Analyze biological data using Lobster AI — single-cell RNA-seq, bulk RNA-seq,
literature mining, dataset discovery, quality control, and visualization.
USE THIS SKILL WHEN:
- Analyzing single-cell or bulk RNA-seq data
- Searching PubMed/GE | |
| LobsterBio - Dev Develop, extend, and contribute to Lobster AI — the multi-agent self-extending bioinformatics engine. Use when working on Lobster codebase, creating agents/s... | |
| LobsterBio - Use Runs bioinformatics analysis with Lobster AI -- single-cell RNA-seq, bulk RNA-seq, genomics (VCF/GWAS), proteomics (mass spec/affinity), metabolomics (LC-MS/... | |
| Calculator This skill should be used when the user asks to "calculate", "compute", "do math", mentions arithmetic operations like "add", "subtract", "multiply", "divide... | |
| Twitter Daily Digest 批量获取并整理用户关注的所有 Twitter/X 账号最近 24 小时内的更新。当用户提到“每日推文摘要”“今日推文”“关注的人最近发了什么”“Twitter digest”“推特日报”“帮我看看推特”“刷推”，或要求查看单个/多个指定 X 账号最近动态时，都应触发此 skill。默认输出中文整合版正文；如需测试... | |
| Hippocampus Memory Core Deterministic external memory for OpenClaw and coding agents using S3-Hipokamp. Use for storing durable facts, retrieving prior decisions, snapshotting memor... | |
| Hippocampus Openclaw Onboarding Bootstrap OpenClaw with Hippocampus memory under a branded, repeatable setup: workspace, agent ID, API key or bootstrap token, and MCP wiring. | |
| Hippocampus Subagent Memory Isolate and coordinate sub-agent memory in OpenClaw with Hippocampus using scoped IDs, bounded merge-back, and explicit cross-agent imports. | |
| test-asdasdasd 结构化字段抽取工具 - 基于用户定义的schema从文档中抽取结构化字段。schema定义要抽取的字段及其语义描述，支持文本、表格、段落三种类型的字段抽取。 | |
| mro-inquiry-match 客户发来几百上千行工业品询价单，还在逐条查型号、核规格、找价格、回填表格？MRO 询价匹配让 AI 帮你完成这些重复工作：支持文字、Excel、CSV 询价，按型号、品牌、标准及关键规格筛选商品，输出首选、备选、参考价格和匹配依据，并将结果回填 Excel。支持优先匹配自己的商品清单；规格不清、存在差异的行明确标记“待确认”，方便人工复核与客户沟通。让报价员少花时间查资料，把精力留给选型判断和促成订单。适合 MRO 经销商、报价团队及采购人员，使用前需配置 MRO API K |
18,851–18,900 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.