Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Dayplanner 日程规划工具。周计划、月计划、时间块、会议安排、截止日期管理、工作生活平衡。Calendar planner with weekly, monthly, time-blocking, meeting scheduling, deadline management. | |
| Dbeaver Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Dbeaver concepts, best practices, and implementation patterns. | |
| Decision Maker 决策分析工具。利弊对比、加权决策矩阵、盲选消除偏见、决策框架推荐、风险评估。Decision maker with pros-cons analysis, weighted matrix, blind choice, decision frameworks. | |
| Deconsolidation Deconsolidation reference — container stripping, cargo breakdown, cross-dock operations, and LCL unpacking. Use when planning deconsolidation workflows or op... | |
| Design Tool Penpot: The open-source design tool for design and code collaboration design-tool, clojure, clojure, clojurescript, design, prototyping. | |
| Dev Setup Set up macOS dev environments with automated install scripts for tools. Use when provisioning Macs, installing dev tools, configuring shells. | |
| Dev Utilities Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Dev Utilities concepts, best practices, and implementation patterns. | |
| Dialog Generate dialog UI elements and design assets. Use when building interfaces, creating visual components, or styling web pages. | |
| Diet Track food and nutrition. Use when logging meals, checking calories, tracking protein/carbs/fat, or generating diet reports. | |
| Diskmon Watch disk space in real time and alert before storage runs low. Use when monitoring usage, finding large dirs, preventing disk-full events. | |
| Docker Helper Dockerfile生成、docker-compose编排、命令速查、调试排错、镜像优化、仓库配置. Use when you need docker helper capabilities. Triggers on: docker helper. | |
| Dockerfile Builder Generate and lint Dockerfiles for common languages and frameworks. Use when creating container configs. | |
| Docs Generator Automated documentation generator. API docs, README, CHANGELOG, contributing guide, architecture docs, tutorials, FAQ, reference manual. REST, GraphQL. | |
| Dpa Data Processing Agreement reference — GDPR Article 28, processor obligations, sub-processor management, and cross-border transfers. Use when drafting or revi... | |
| Dropship Helper Reference tool for business — covers intro, formulas, regulations and more. Quick lookup for Dropship Helper concepts, best practices, and implementation pat... | |
| Ebook Manage ebook collections, track reading progress, and export highlights using bash and Python. Use when cataloging books, logging reading sessions, or organi... | |
| Email Marketer Plan email campaigns with segmentation, A/B testing, and benchmarking. Use when designing campaigns, segmenting lists, benchmarking rates. | |
| Envcheck Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Envcheck concepts, best practices, and implementation patterns. | |
| Error Error handling reference — error types, exception patterns, HTTP status codes, retry strategies, and observability. Use when designing error handling, debugg... | |
| Error Analysis 错题分析助手。错题归类、知识点定位、薄弱环节分析、复习建议。Error analysis for study with categorization, knowledge gap identification. 错题本、考试复盘、学习分析。Use when analyzing exam mistakes. | |
| Event Event-driven architecture reference — event sourcing, pub/sub, CQRS, event buses, and stream processing. Use when designing event systems, implementing pub/s... | |
| File Converter File format converter. Detect formats, convert between JSON/YAML/XML/CSV/Markdown, minify and prettify code. Commands: detect, json2yaml, yaml2json, csv2md. | |
| File Finder A simple, fast and user-friendly alternative to 'find' Based on sharkdp/fd (42,080+ GitHub stars). file finder, rust, cli, command-line, filesystem, hacktobe... | |
| Finality Analyze finality operations. Use when you need to understand finality mechanisms, evaluate protocol security, or reference on-chain concepts. | |
| Finetune Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Finetune concepts, best practices, and implementation patterns. | |
| Fitlog Track workouts, log sets and reps, and build exercise streaks over time. Use when logging sessions, tracking progress, or reviewing weekly volume. | |
| Fitness Plan Track workouts, calculate BMI/1RM, and access exercise science guides. 支持科学健身计划制定、BMI/最大力量计算及运动解剖学参考。Use when planning gym sessions, calculating macro needs,... | |
| Flowdo Task and workflow manager with kanban-style status tracking. Use when you need flowdo. | |
| Focus Focus — a fast productivity tool. Log anything, find it later, export when needed. | |
| Font Pairing 字体搭配推荐、中文字体指南、Web字体加载、标题字体、系统字体栈、预览HTML生成。Font pairing recommendations, Chinese fonts guide, web fonts, heading fonts, system font stacks. | |
| Freeport Free-port and free-trade zone reference — FTZ regulations, bonded logistics, duty deferral, re-export procedures. Use when planning warehouse operations in f... | |
| Fund Advisor Cn 基金投资顾问。基金筛选、定投策略、资产配置、风险评估、收益计算、再平衡建议。Fund investment advisor with screening, DCA strategy, asset allocation, rebalancing. 基金理财、定投计划、投资组合、资产配置。Use when makin... | |
| Fund Invest Advisor 基金投资顾问。基金筛选、定投策略、资产配置、风险评估、收益计算、再平衡建议。Fund investment advisor with screening, DCA strategy, asset allocation, rebalancing. 基金理财、定投计划、投资组合、资产配置。Use when makin... | |
| Funnel Analyzer 漏斗分析工具。创建转化漏斗、诊断流失环节、行业对标、优化建议、分析报告、漏斗对比。Funnel analyzer with conversion funnels, diagnostics, benchmarks, optimization, reports. | |
| Furnace Furnace temperature and control manager | |
| Gallery Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Gallery concepts, best practices, and implementation patterns. | |
| Gaokao Essay 高考作文助手。议论文模板、素材库、开头结尾、审题技巧、满分作文分析。Gaokao essay assistant with templates, materials, scoring tips. 高考语文、作文素材、议论文、记叙文。Use when preparing for gaokao essays. | |
| Gcal Manager Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Gcal Manager concepts, best practices, and implementation patterns. | |
| Genai Toolbox Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Genai Toolbox concepts, best practices, and implementation patterns. | |
| Geo Seo GEO SEO — Generative Engine Optimization reference. Complete guide for optimizing websites for AI search engines. Covers llms.txt spec, GEO checklist, automa... | |
| Geoip geoip | |
| Git Toolkit Git Extras — Git Extras — extended git utilities. Automated tool for git-extras tasks. Use when you need Git Extras capabilities. | |
| Github Actions Gen Generate GitHub Actions workflow YAML files for CI/CD. Use when setting up automated pipelines. | |
| Gitlog View formatted commit history, author stats, and commit frequency patterns. Use when reviewing logs, comparing contributions, or generating repo reports. | |
| Goal Goal setting reference — SMART goals, OKRs, habit formation, accountability systems. Use when setting personal or professional goals, designing habit systems... | |
| Gpu Helper Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for GPU Helper concepts, best practices, and implementation patterns. | |
| Graphql Builder Build and validate GraphQL queries, mutations, and schemas. Use when working with GraphQL APIs. | |
| Gymlog Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Gymlog concepts, best practices, and implementation patterns. | |
| Habit Build daily habits with streak tracking, reminders, and progress charts. Use when starting habits, maintaining streaks, or analyzing completion rates. | |
| Haproxy HAProxy load balancer reference. Frontend binds with ACL routing, backend server pools with health checks, balance algorithms (roundrobin/leastconn/source),... |
21,101–21,150 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.