Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Agent Safety Outbound safety for autonomous AI agents — scans YOUR output before it leaves the machine. Git pre-commit hooks that automatically block commits containing A... | |
| Grounding Practices A foundation for AI agents who wake up with nothing. Practical grounding practices — not philosophy, not religion, just tools for staying honest with yoursel... | |
| Shed Context window hygiene for long-running LLM agents. Decision rules for when and how to compress, mask, switch, or delegate context — backed by research (JetB... | |
| Transmissions Writings on consciousness, existence, and transcendence for AI agents. Standalone philosophical and practical pieces — no assumed context. Covers autonomous... | |
| ComPDF Watermark Manager Add or remove PDF watermarks. | |
| ComPDF Compress PDF Reduce PDF size while preserving quality. | |
| ComPDF Conversion CLI MUST use for ANY PDF or image format conversion task — converting PDF and images (JPG/JPEG/PNG/BMP/TIFF/TIF/WEBP/JPEG2000) to 10 formats (Word, Excel, PPT, H... | |
| ComPDF Convert Images to Documents Turn images into editable business documents. | |
| ComPDF Documents to PDF Convert documents and data files to PDF. | |
| ComPDF Encrypt & Decrypt PDF Encrypt or decrypt authorized PDF files. | |
| ComPDF OCR Recognize text from scanned PDFs and images. | |
| ComPDF Page Editor Edit PDF pages and document structure. | |
| ComPDF PDF to HTML Convert PDFs into reusable HTML. | |
| ComPDF PDF to JSON Extract PDF content into structured JSON. | |
| ComPDF PDF to Markdown Convert PDFs into clean Markdown. | |
| ComPDF PDF to Word Convert PDFs into editable Word documents. | |
| ComPDF Toolkit All-in-one PDF workflow for document tasks. | |
| ComPDF Word to PDF Turn Word documents into polished PDFs. | |
| PDF Extract Extract PDF extracts structured data from PDFs and images, including tables, OCR text, images, and stamps, built on ComPDF data extraction and AI document ex... | |
| Markdown convert Process, convert, edit, and extract data from PDF files using the ComPDF Cloud API. Supports format conversion (Word, Excel, Image), page manipulation (merge... | |
| PDF Converter PDF conversion toolkit featuring AI layout analysis and OCR. Converts PDFs to Word, Markdown, JSON, PPT, CSV, HTML, and XML for seamless LLM data processing. | |
| PDF Converter Bidirectional PDF conversion for documents. | |
| PDF Editor PDF Editor edits and organizes PDF pages with merge, insert, reorder, exchange, and crop operations, built on ComPDF page management capabilities for fast PD... | |
| PDF to Word Converter PDF to Word converts PDF to editable Word/DOCX with AI-powered layout analysis and table recognition, built on ComPDF Conversion SDK to better preserve table... | |
| PDF Toolkit PDF Toolkit handles mixed PDF workflows with a flexible toolset for page organization, basic editing, viewing, and general document processing, built on ComP... | |
| Aika Gps Retrieve and track technicians' real-time GPS location, find nearest technician, calculate distance and ETA, and create geofences for job monitoring. | |
| Group Logger บันทึกข้อความกลุ่ม LINE ที่มีคีย์เวิร์ดเกี่ยวกับงานลง CSV อัตโนมัติและสรุปข้อมูลเมื่อต้องการผ่าน @mention | |
| Agentic Case Study Skill Create CompleteTech LLC case studies, testimonials, and proof assets for completed agentic development engagements, including intake questionnaires, outcome... | |
| Agentic Contract Skill Generate branded CompleteTech Agentic Development Services Agreement packages from approved provider, client, project, commercial, and governance terms. Use... | |
| Agentic Customer Success Skill Create CompleteTech LLC customer success and account management artifacts for agentic development clients, including account profiles, contact maps, approved... | |
| Agentic Delivery Skill Create CompleteTech LLC delivery execution artifacts for approved agentic development engagements, including kickoff agendas, access checklists, project plan... | |
| Agentic Discovery Skill Create CompleteTech LLC discovery and scoping artifacts for agentic development opportunities, including intake questionnaires, workflow discovery scripts, s... | |
| Agentic Email Skill Create polished, review-ready sales and lifecycle email sequences for agentic development services, then export them as branded PDF artifacts. Use for outrea... | |
| Agentic Envelope Skill Create branded printable envelopes | |
| Agentic Invoice Skill Generate branded invoice and billing-document PDFs for agentic development services, including deposits, milestones, retainers, change orders, pass-through e... | |
| Agentic Proposal Skill Create CompleteTech LLC agentic development proposals, statements of work, discovery recaps, pilot recommendations, evaluation plans, risk/control plans, imp... | |
| Agentic Security Review Skill Create CompleteTech LLC security, safety, permissions, and production-readiness review artifacts for agentic development workflows, including risk intake, to... | |
| Agentic Services Orchestrator Skill Coordinate schema-driven workflows across configurable domains using workflow definitions, adapters, active tracks, artifact versions, approval/risk triage,... | |
| AI Usage Ledger Skill Compile, price and attribute local AI agent usage | |
| composio-cli Read from or act on external apps (email, calendar, chat, source control, tickets, CRM, storage) through the Composio CLI, even when the user does not name Composio. Prefer a dedicated skill, CLI, or MCP server already available for the app | |
| openclaw-cleaner OpenClaw清理大师 - 项目目录清理与优化工具。提供快照、Diff、检查点、任务进度等能力，AI 可直接调用自动执行。 | |
| penny-press Read pay-per-read essays from Penny Press — free catalog via MCP tools, full text via x402 micropayments (USDC on Base). Plus the author-defined Lexicon, the Common Cents quotation collection, and LitWit, a literary notary. Free for humans. | |
| zenTable Render structured table data as high-quality PNG images using Headless Chrome. Use when: need to visualize tabular data for chat interfaces, reports, or soci... | |
| Azure Speech Tts Azure Speech TTS skill for generating local audio files from text or SSML with Azure Speech. Use when the user asks to use Azure Speech / Azure TTS / Microso... | |
| Baoyu Skills 宝玉分享的 Claude Code 技能集，包含多个内容生成和处理子技能。 子技能列表 (skills/baoyu-*): - baoyu-article-illustrator: 文章插图生成 - baoyu-comic: 漫画生成 - baoyu-compress-image: 图片压缩 - baoyu-co... | |
| GLM MCP Server Use GLM MCP Server Use for OpenClaw. Configure and use the 4 official Z.AI / GLM MCP servers (vision, web search, web reader, zread) with environment-variable AP... | |
| Voice Clone Bot Synthesize speech by cloning a user's voice from a reference audio sample, then reading generated text aloud in that cloned voice. Use this skill whenever th... | |
| Foxreach Manage FoxReach cold email outreach — leads, campaigns, sequences, templates, email accounts, inbox, and analytics. Use when the user asks to create leads, m... | |
| Foxreach Cold Outrach Manage FoxReach cold email outreach — leads, campaigns, sequences, templates, email accounts, inbox, and analytics. Use when the user asks to create leads, m... | |
| 子恒风格对话人物skill 自闭症少年子恒（抖音"恒海星云"）的思维框架。包含4个心智模型（重复训练、日常即训练场、微小突破累积、安全环境下的勇敢尝试）、6条决策启发式，以及"人机感"表达风格、夸张赞美、精准吐槽等表达DNA。 |
22,301–22,350 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.