Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| WeCom邮箱 企业微信邮箱操作 - 使用专用邮箱发送邮件。 支持读取会议纪要、业务文档等作为邮件内容发送。 | |
| WeCom文件检测 企业微信聊天文件获取 - 从 ~/.openclaw/media/inbound/ 目录检测和获取通过聊天传递的文件。 当用户提到获取文件、发送文件、附件等请求时激活。 | |
| WeCom文件发送 通过企业微信将本地目录中的文件（文档、图片、视频、语音）发送给指定用户，支持文件大小限制管理。 | |
| Chonkie DeepResearch Run deep research queries using Chonkie DeepResearch. Returns comprehensive research reports with citations — useful for market analysis, competitive intelli... | |
| Agent Token Cost Signal Kit Agent Token Cost Signal Kit — Find token waste, repeated calls, and risky routing changes before they become real cost. | |
| Agent Cron Audit Read-only health audit for recurring / scheduled AI agent jobs. Finds silent failures, duplicate active jobs, retry loops, over-frequent schedules, stale aut... | |
| Agent Routing Waste Audit Paste an agent job, cron, routing, or run summary and get an immediate read-only audit of possible routing, retry, fallback, or model-assignment waste. | |
| What Buffett Would Do Buffett-style Research Prioritization Assistant — decide whether a company deserves deeper research, what to check first, and get a copy-paste research promp... | |
| Skill Auto Publish Safely publish an already-reviewed skill to ClawHub, verify the live registry state, and return a clear release report. | |
| Skill Release Lifecycle A lightweight release-quality workflow for OpenClaw / ClawHub skills. Use when deciding whether a skill is ready to publish, verifying a release, and turning... | |
| OpenClaw Waste Audit Find recurring OpenClaw jobs that may be wasting tokens before the waste compounds. Read-only by default. Gives evidence and a copy-paste agent prompt for sa... | |
| Novai360 跨境电商智能分析 提供基于实时市场数据和AI技术的跨境电商产品深度分析、竞品对比及关键词优化建议。 | |
| Novai360 跨境电商智能分析 基于NOVAI360，提供跨境电商市场、产品、竞争及财务分析，支持品牌出海战略制定，每日限10次免费调用。 | |
| Tandemn Tuna Skill Deploy and serve LLM models on GPU. Compare GPU pricing. Launch vLLM on Modal, RunPod, Cerebrium, Cloud Run, Baseten, or Azure with spot instance fallback. O... | |
| Dwnldr Yarr! Plunder videos from the seven seas of the internet — YouTube, TikTok, Instagram, X, Reddit & 1000+ ports o' call. Drop a link, get full quality loot wi... | |
| Localsend Send and receive files to/from nearby devices using the LocalSend protocol. Trigger with /localsend to get an interactive Telegram menu with real inline butt... | |
| salute speech Transcribe audio files using Sber Salute Speech async API. Russian-first STT with support for ru-RU, en-US, kk-KZ, ky-KG, uz-UZ. | |
| AIDraw批量图生图 AIDraw批量图生图自动化工具。用于腾讯混元AI(timiai.woa.com)的批量参考生图任务。当用户需要批量上传参考图片、自动生成AI图片并下载时使用此skill。支持自定义关键词、每张图片多次生成、自动命名保存。 | |
| “Render Mermaid diagrams as beautiful SVG, PNG, or ASCII art. Supports 6 chart types (flowchart, sequence, state, class, ER, XY chart), 16 built-in themes, 5 style presets, CSS-level customization, interactive preview, and batch rendering. Works in terminal, chat, or web environments.” description_zh: “Mermaid 图表美化渲染工具，支持流程图/序列图/状态图/类图/ER图/XY图表6种类型，16主题5预设，可导出SVG/PNG/ASCII” description_en: “Beautiful Mermaid diagram renderer (SVG/PNG/ASCII, 16 themes, 5 presets, interactive preview)” Render Mermaid diagrams as beautiful SVG, PNG, or ASCII art. Supports 6 chart types (flowchart, sequence, state, class, ER, XY chart), 16 built-in themes, 5... | |
| Keep Learning Agent 持续学习 Agent - 知识沉淀和经验固化框架。支持学习记录、快速索引、自我修复、经验→模型转化。包含完整模板、索引系统、SOP 流程。让 AI Agent 持续进化，每天进步一点点。 | |
| Email Tool Send and search emails via Zoho using specified recipients, subject, body, and search queries with optional CC, BCC, and read marking. | |
| Scheduled Tasks | 定时任务 Create and manage OpenClaw scheduled tasks (reminders, periodic notifications, automated workflows). 创建和管理 OpenClaw 定时任务（提醒、定时推送、自动化工作流）。 Supports OpenClaw C... | |
| estate-flyer 通过扫描今日微博热搜，结合楼盘档案，自动生成适合朋友圈的热点联动飞机稿和营销图文并优先出图。 | |
| Rag Build, optimize, and debug RAG pipelines with chunking strategies, retrieval tuning, evaluation metrics, and production monitoring. | |
| adversarial-code-loop BUILD → REVIEW → (FIX → VERIFY)^N → ARBITER on isolated git branches. Git-native: each loop runs on its own branch, changes are committed, reviews inspect git diffs. | |
| Adversarial Code Review Multi-perspective adversarial code review with git-isolated worktrees. Two reviewers (Architect + Inspector), cross-validation, and synthesis report. The synthesis is the final arbiter — its verdict takes priority over individual reviewer o | |
| adversarial-plan Adversarial implementation planner. Takes a spec.md (from adversarial-spec) and optionally review findings, then produces a plan.md with ordered steps, dependencies, files, tests, and risks. Execute the result through focused per-step specs | |
| adversarial-spec Adversarial specification writer. Takes a brief (from grill-me or user) and produces a structured spec.md with YAML frontmatter, requirements, acceptance criteria, and target files. Git-aware pipeline: each run on its own branch, squash-mer | |
| Skill Dispatch coding tasks to tmux sessions via Sandboxer. Use when you need to spawn Claude Code, Gemini, OpenCode, bash, or lazygit sessions in workspace repos, monitor their progress, or send them commands. | |
| Dexcom CGM Monitor blood glucose via Dexcom G7/G6 CGM | |
| Level5 - Your Agent Can Pay For Itself Budget Management for AI Agents — USDC billing gateway. Deposit USDC on Solana; pay for LLM compute per token. | |
| founder-wisdom Surfaces hard-won axioms from experienced startup founders and operators across hiring, fundraising, product, sales, finance, governance, strategy, management, and crisis. Use whenever someone is wrestling with a startup, scale-up, or early | |
| Interviewer-Claw Conducts rigorous, structured interviews to stress-test a plan, design, or idea by walking every branch of the decision tree until reaching shared understand... | |
| Book Writing Assistant A complete writing companion for book authors covering both fiction and nonfiction. Tracks characters, plot threads, chapter outlines, research, world-buildi... | |
| Church Event Planner Plan and manage church events from start to finish with church-specific intelligence: ministry team coordination, volunteer rotation tracking, sermon series... | |
| client-project-tracker A saved, ongoing tracker for freelancers and consultants: clients, projects, deliverables, deadlines, invoices, and communication notes (a light CRM). Use when the user wants to add to, update, or review their own tracked clients and projec | |
| college-prep-tracker Keep an ongoing, saved tracker of a student's college application process: schools, application and essay status, recommendation letters, test scores, scholarships, financial aid, and deadlines, with a built-in junior and senior year timeli | |
| Content Calendar Plan, create, and track content across any platform. Manage your content pipeline from idea to published, brainstorm topics, draft posts, and repurpose conte... | |
| cron-sentinel Monitor scheduled/cron jobs and get alerted when one fails OR silently never runs. Use this skill when the goal is reliability or failure-detection for a recurring task the user already runs or is setting up - e.g. 'how would I even know if | |
| Event Planner Os Plan and manage any event from start to finish, including timelines, task checklists, vendors, volunteers, and budgets. Use this skill whenever someone menti... | |
| Family Health Tracker Use this skill when a user is actively logging or looking up health information for themselves or a family member. Specific triggers: 'log a visit with [prov... | |
| Review Responder Use this skill when an operator is actively running the Google Business Profile review-response workflow for one of their configured client accounts. Specific triggers: 'check for new reviews,' 'run the review check for [client],' 'new revi | |
| Home Maintenance Os Track everything about your home -- appliances, service history, contractors, and upcoming maintenance. Use this skill whenever someone mentions a home appli... | |
| Job Search Tracker Use this skill when someone is actively managing a job search and references applications, interviews, offers, or recruiter communication. Specific triggers:... | |
| Ministry Weekly Use this skill when a church staff user is actively producing weekly Sunday content. Specific triggers: 'generate this week's content package,' 'here's the b... | |
| Move Planner Use this skill when a user is actively planning, in the middle of, or wrapping up a residential move. Specific triggers: 'start a move,' 'we're moving to [pl... | |
| Podcast Pipeline Full podcast production assistant covering three modes plus cross-episode tracking. (1) Interview Prep: deep guest research, tailored question set, backup qu... | |
| Token Cockpit See and slash your OpenClaw / LLM token bill. Use this skill whenever the user asks about token usage, model spend, API costs, or wants to save money on their agent, including phrases like 'how much am I spending,' 'what's my token usage,' | |
| Skill Doctor Audit, debug, and clean up the OpenClaw skills you already have installed. Use this skill whenever the user asks to check, audit, review, clean up, or debug... | |
| Token Cockpit See and slash your OpenClaw / LLM token bill. Use this skill whenever the user asks about token usage, model spend, API costs, or wants to save money on thei... |
20,401–20,450 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.