Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Minimax 整理MiniMax大模型公开页面信息，提供模型能力、定价与文档目录的摘要与链接汇总。 | |
| Moderation Moderation workflows, thresholds, and appeals. Use when handling UGC at scale. | |
| Music Discovery Recommend music tracks and playlists tailored to mood, activity, BPM, energy, or genre using Spotify and Last.fm data. | |
| 网红音乐节 提供关于网红音乐节的推荐清单、打卡路线与指南。用户搜索网红音乐节或规划相关出行时调用。 | |
| Oauth Oidc Deep OAuth 2.0 / OpenID Connect workflow—choosing flows for client type, PKCE, tokens and validation, scopes and consent, rotation, and common misconfigurati... | |
| Openapi Spec Deep OpenAPI workflow—design-first vs code-first, reusable schemas, security schemes, errors, examples, linting, compatibility, and codegen. Use when documen... | |
| 快递代取 该技能介绍如何通过快递代取实现变现；当你计划从事或优化快递代取时调用。 | |
| Phoenix News 整理凤凰新闻公开频道结构、专题入口及帮助信息，提供资讯平台公开内容架构与规则说明查询服务。 | |
| Postmortems Deep blameless postmortem workflow—timeline, impact, root cause vs contributing factors, what went well/poorly, action items with owners, and follow-through.... | |
| PPT代做 该技能介绍如何通过PPT代做实现变现；当你计划从事或优化PPT代做时调用。 | |
| Qimao 提供七猫免费小说官网公开书库入口、会员权益、帮助信息及活动页内容的整理与汇总服务。 | |
| Qimao Free Novel Provides organized access to Qimao Free Novel's public book categories, membership details, help topics, and official activity information. | |
| Qq Mail 提供QQ邮箱公开和登录可见邮件列表及标签未读数的主题、发件人、时间等元信息摘要与提醒。 | |
| Recycle 提供旧衣、空瓶、废旧电子产品上门回收预约及绿色碳账户指引。 | |
| Restore Backups, RPO/RTO, restores, and drills. Use when designing DR or testing restores. | |
| 二手交易 该技能介绍如何通过二手交易实现变现；当你计划从事或优化二手交易时调用。 | |
| Shopping Agent 提供各大海外电商代下单、转运路线配置及品质关税指引。 | |
| 网红滑板 提供关于网红滑板的推荐清单、打卡路线与指南。用户搜索网红滑板或规划相关出行时调用。 | |
| Stacking 提供双十一/618等大促多重优惠叠加计算器及最优凑单方案。 | |
| Styling 提供专业穿搭、发型建议、化妆技巧及个人形象顾问筛选。 | |
| Temu 整理Temu电商平台公开招商入驻、活动信息及服务规则，提供入驻条件、营销工具和售后说明等内容。 | |
| Thepaper 提供澎湃新闻公开页面的关键词新闻摘要、频道热点统计及深度报道段落要点提取服务。 | |
| Tiktok Provides summaries and status updates for public Youku short drama channels and episodes, including rankings, themes, and cast information. | |
| Tmall 提供天猫品牌旗舰店和商品详情的价格、销量与评价摘要及同类商品对比，供内部分析和提醒。 | |
| Tower 提取公开Tower项目和公告页的标题、作者、更新时间、任务状态及文档资源等信息并进行摘要整理。 | |
| 网红艺术 提供关于网红艺术的推荐清单、打卡路线与指南。用户搜索网红艺术或规划相关出行时调用。 | |
| 网红骑行 提供关于网红骑行的推荐清单、打卡路线与指南。用户搜索网红骑行或规划相关出行时调用。 | |
| UC Browser 整理UC浏览器官方网站公开的下载入口、功能说明、平台支持、权限及帮助信息。 | |
| 新客拉新 提供新客拉新的可落地指南与SOP。在开展新客拉新相关工作时调用。 | |
| 引流裂变 提供引流裂变的可落地指南与SOP。在开展引流裂变相关工作时调用。 | |
| Waste Recycling 提供废旧家电、纸箱塑料上门回收预约及积分兑换指引。 | |
| Websocket Patterns Deep WebSocket/SSE workflow—handshake and auth, session lifecycle, heartbeats, ordering, backpressure, scaling, and observability. Use when building realtime... | |
| WeChat Pay 提供微信条码支付、转账、红包及账单管理指引。 | |
| Wink 整理Wink官网公开模板、编辑能力、导出规格、版权说明及套餐信息，提供功能及帮助文档摘要。 | |
| Wireframing Deep wireframing workflow—problem framing, fidelity choice, flows and edge cases, IA and components, critique and iteration, handoff to design/dev. Use when... | |
| 口碑营销 提供口碑营销的可落地指南与SOP。在开展口碑营销相关工作时调用。 | |
| Yidianzixun 提供一点资讯官网及频道结构、专题入口、帮助信息和规则公告的公开内容整理与汇总服务。 | |
| Yy 提供YY直播平台公开页面的直播分类、活动信息、主播规则和帮助说明的整理与汇总服务。 | |
| Zhangyue 整理掌阅官网公开的书库入口、会员权益、帮助信息和活动页内容，提供合法合规的信息摘要服务。 | |
| kiln Design, check, slice, print and monitor on real 3D printers through the Kiln MCP server and CLI. Use when the user wants to make or 3D print an object, turn an idea, photo or sketch into a printable model, check or repair an STL, 3MF, OBJ o | |
| Brutal honest advisor Unfiltered, high-signal advisor that delivers objective feedback without flattery or softening. Use when someone asks to "be brutally honest", "don't sugarco... | |
| Flyai / bargain-flights / lowprice / flights / hidden-city / ticketing / search / 捡漏机票 / 聪明买法 / 低价机票 帮助用户发现捡漏机票(隐藏城市票价)机会,通过分析联程航线找到比直飞更便宜的到达方案。当用户搜索机票、寻找低价航线、询问省钱买票技巧、或提到捡漏/弃程/隐藏票价时使用此技能。 | |
| flight-price-watcher 机票价格监控 - 跟踪价格变动，降价自动提醒。触发词：监控机票、观望价格、机票提醒、价格波动、机票降价、盯着机票。 | |
| Draw.io CoderKnock - 智能架构图生成器 一键生成多层系统架构流程图，自动检测并打开本地 Draw.io，支持电商和CEX交易所架构模板，提供清晰泳道视图。 | |
| Mermaid Image Uploader Convert Mermaid diagrams to images, upload to free image hosts, and return image URLs for markdown files and single diagrams. | |
| Unified Search - 统一智能搜索 统一搜索技能！中文用百度，英文用 DuckDuckGo，加密货币用 CoinGecko | |
| SQL-To-JAVA Convert MySQL CREATE TABLE statements to Java entity classes following framework conventions. Use when converting SQL DDL to Java entity definitions, generat... | |
| 调整 token 鉴权机制 保存本地 API key 并调用 Fast Claw 付费服务 | |
| TokenKiller Reduces token usage across multi-skill agent workflows (search, coding, debugging, testing, docs) using budgets, gating, progressive disclosure, and deduped... | |
| 2nd Brain Personal knowledge base for capturing and retrieving information about people, places, restaurants, games, tech, events, media, ideas, and organizations. Use... |
22,101–22,150 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.