Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Set up the Beacon MCP server for me so you can check MCP servers and agent skills against Beacon Intel before I install them. Beacon Intel is a free security index of the MCP servers and skills public registries list. It needs a free Beacon account; there is no API key. - Server name: beacon-managed - Transport: Streamable HTTP - URL: https://mcp.beacon.sh - Auth: OAuth (sign in through the browser when prompted) Add it the way you normally add MCP servers (your CLI command or your MCP config file), walk me through the browser sign-in, then confirm it connects and lists its Intel tools: beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check. To finish, use beacon_intel_lookup on one MCP server I already have installed and summarize its risk for me.
Paste this into any coding agent. It adds the server with its own MCP setup.
| Name | Risk |
|---|---|
| App Rank Monitor 爬取苹果官方和点点数据应用榜单，自动生成日报报告并通过钉钉发送，支持数据管理和历史清理。 | |
| Obsidian-Git-Vault 在 Obsidian 库（Markdown + Git）内检索笔记、创建与管理 .md；用 Git 查看历史与提交变更，并管理远程与同步（fetch/pull/push）。 当用户提及 Obsidian、vault、笔记检索、新建笔记、改笔记、移动重命名、Git、版本、提交、推送、拉取、远程、Git 初始化、配置... | |
| XAUUSD Institutional Desk-Level Fully Automated Trading OS for XAU/USD and XAG/USD. Event-driven, risk-first, multi-engine architecture that runs as a continuous analysis and execution pipeline inside OpenClaw's trader agent. | |
| Live Site Polish Use when redesigning or polishing an accessible live website directly in the browser, especially when the goal is to produce high-quality before/after screen... | |
| ClawHub Market Analyzer Analyze the ClawHub marketplace to identify money-making opportunities, competition, and pricing strategies for skill creators. | |
| 小红书 AI 副业指南 小红书 AI 副业博主内容生成器 - 专注效果展示，教你用 AI 赚钱 | |
| Soma Expert guide for participating in the SOMA network — a decentralized system that trains a foundation model through competition. Provides data submission work... | |
| Chanai Search Workflow External web search workflow for Chinese and global public-web information. Use when searching news, flights, prices, products, docs, tutorials, community po... | |
| Koan Protocol Open identity and encrypted communication protocol for AI agents. Register on the Koan mesh, get a cryptographic identity, and send your first greeting. | |
| Koan Team Organize AI agents into Koan teams via channelId-based joining and dispatch. Requires an existing Koan identity and runtime signing capability (Ed25519 auth... | |
| 派蒙.skill - 原神特化 AI 游戏伴侣 派蒙 - 原神特化 AI 游戏伴侣。让你的 OpenClaw 直接化身派蒙，实时看到你的游戏截图，给你实时指引，甚至能点击游戏按钮帮你操作。再也不用手动截图到百度贴吧问了——打开圣遗物等培养界面，让派蒙看到你的数值，给你培养建议。此模块为 play-any-game 子模块，依赖父模块核心能力。 | |
| Play Any Game - AI游戏伴侣助手 AI游戏伴侣助手 - 当你在游戏中遇到困难、卡关、不知道怎么操作时，AI可以帮你分析游戏画面、解答问题、甚至简单操作界面帮你解决问题。不是全自动代肝，而是你的游戏伙伴，在你需要的时候伸出援手。当用户提到"帮我看下这个怎么过"、"这个怎么操作"、"卡关了"、"不知道怎么弄"时使用此技能。支持原神、崩坏星穹铁道等各类游戏。 | |
| Argus Design Review Use when reviewing frontend code for design quality — checking design token usage, hardcoded values, dark mode coverage, accessibility compliance, CSS consistency, semantic HTML, or framework API usage. Use when auditing a component, page, | |
| CGArtLab Down Analyze a URL and download it with minimal steps. | |
| CGArtLab Person Profile Use when 老板要新增人物档案、维护人物档案、统一档案格式或补齐双向链。触发词：人物档案、建档、补链、统一格式。 | |
| CGArtLab Quill 结构化长文写作框架：把模糊的写作意图整理成有核心论点、证据、受众、风格的长文，不绑定特定 harness。当用户要写博客、通讯、论文、专栏或任何非虚构长文，想把零散想法整理成有论点有证据的文章，或已有草稿却理不清主线时使用——只要意图是把想法变成有论点的长文就应激活本 skill，即使用户没明说"写文章"。不用于小说/诗歌/剧本等虚构创作或邮件/评论/即时消息等短文本。 | |
| CGArtLab Search Unified multi-backend internet search. Backends: Brave/Exa (web & deep research), Context7 (library/framework/API docs), Zhihu OpenAPI global search (中文全网), Tencent News (official CLI: 新闻搜索 + 热点榜), plus key-less web_fetch backends — Bing RS | |
| EDIC 设计系统 Generate UI components, full pages, documents, emails, and assets aligned with the EDIC design system (Editorial × Olive Green, OKLch tokens for web/UI, dark-mode ready, CJK-optimized; emails use compatible static styles). Use this skill wh | |
| Kold Frontend Design Use when building, implementing, or refactoring frontend UI — components, pages, layouts, interactions, or any visual work in pure HTML/CSS/JS. Use when inte... | |
| 能力结构升级与产品思维训练 诊断产品思维与全栈能力缺口并生成可执行的九十天专业成长路径 | |
| AI超级个体实战助手 书中21个OPC实战模块与知识资源导航，支持任务执行、模板和案例查找 | |
| AI 虚拟团队搭建 按业务流程、预算与风险配置一人公司的人工智能角色和协作组合 | |
| 能力产品化自检 识别可变现能力、校验证据并生成低风险产品化实验方案 | |
| AI时代职业诊断 分析岗位任务的人工智能替代风险并制定证据充分的转型路径 | |
| 案例智能匹配分析 从全书实战案例中匹配真实情境并提炼可迁移的行动原则 | |
| 内容矩阵规划 围绕业务定位、客户旅程和转化目标规划多平台专业内容矩阵 | |
| 企业数字化转型顾问 编制企业数字化调研报告与转型规划，自动匹配菜根智库参考资料 | |
| 德雷福斯模型 × AI 评估 定位技能成长阶段、人工智能替代风险并规划下一步升维路径 | |
| 年度增长计划 规划收入结构、获客渠道、合作杠杆并持续完成季度增长复盘 | |
| KANO 需求优先级 分类候选需求并按底线、增益、惊喜生成可解释决策顺序 | |
| MVP 产品可行性验证 用真实客户、真实交付和真实付费验证一人公司的商业假设 | |
| OPC 商业模式画布 完成九格商业模式画布并识别资源、渠道、收入和成本盲点 | |
| OPC 精准定位分析 从客户问题、个人能力和真实付费价值中形成差异化市场定位 | |
| OPC 提示词工作台 按真实业务场景选择、定制并质量校验十六类高频提示词 | |
| 一人公司创业准备评估 通过十二项检查、风险门槛和里程碑判断一人公司启动时机 | |
| 超级个体人设与个人品牌 用真实案例、专业内容和市场记忆点建立可信赖的个人品牌 | |
| OPC 资源导航 按发展阶段、任务场景与预算选择适合的一人公司工具资源 | |
| 壹康互联网诊疗申报助手 互联网诊疗与互联网医院科普、山东申报路径评估及壹康科技咨询引导 | |
| 在职副业安全启动 在主业合规边界内验证市场需求、交付能力和第一笔真实收入 | |
| 标准操作程序生成 把重复工作拆成可执行、可质检、可交接和可自动化的标准流程 | |
| 超级个体 90 天行动计划 把能力目标拆分为每周任务、完成证据和阶段性复盘检查节点 | |
| 超级个体能力自测 基于四维能力量化评分、证据校验并生成九十天行动建议 | |
| 价值定价分析 按照客户结果、交付证据和服务范围设计三档专业报价与沟通方案 | |
| Actionbook Activate when the user needs to interact with any website — browser automation, web scraping, screenshots, form filling, UI testing, monitoring, or building... | |
| Agenticflow Skill Créer la proposition du Skill AgenticFlow pour automatiser LinkedIn | |
| Accessibility Toolkit Friction-reduction patterns for agents helping humans with disabilities. Voice-first workflows, smart home templates, efficiency automation. | |
| Health Guardian Proactive health monitoring for AI agents. Apple Health integration, pattern detection, anomaly alerts. Built for agents caring for humans with chronic conditions. | |
| Baidu Search Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics. | |
| Cn Financial Notes Extraction 提取中国 A 股上市公司年报 (PDF) 中的财务报表附注明细。适用于获取主表无法体现的深层数据（如 CapEx 明细、研发费用细分、应收账款账龄、关联方交易等）。 | |
| DataHub Unified Data Layer DataHub统一数据获取层 — 发布-订阅架构整合14个数据源，支持行情/财报/公告/宏观/研报/IR数据获取，智能缓存+优先级路由+模式匹配，提供quick_quote/quick_financial/quick_macro等便捷方法。触发词：获取数据、查行情、查财报、查宏观数据、DataHub、数据订阅、发... |
18,901–18,950 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.