Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| prospecting When the user wants to find, qualify, and build a list of prospects to reach out to — across B2B SaaS, general B2B, or local small businesses. Also use when the user mentions "prospecting," "build a prospect list," "find prospects," "find l | |
| public-relations When the user wants help with public relations, earned media, press coverage, journalist outreach, or media strategy (not pull requests). Also use when the user mentions 'PR,' 'public relations,' 'press,' 'press release,' 'press coverage,' | |
| referrals When the user wants to create, optimize, or analyze a referral program, affiliate program, or word-of-mouth strategy. Also use when the user mentions 'referral,' 'affiliate,' 'ambassador,' 'word of mouth,' 'viral loop,' 'refer a friend,' 'p | |
| revops When the user wants help with revenue operations, lead lifecycle management, or marketing-to-sales handoff processes. Also use when the user mentions 'RevOps,' 'revenue operations,' 'lead scoring,' 'lead routing,' 'MQL,' 'SQL,' 'pipeline st | |
| sales-enablement When the user wants to create sales collateral, pitch decks, one-pagers, objection handling docs, or demo scripts. Also use when the user mentions 'sales deck,' 'pitch deck,' 'one-pager,' 'leave-behind,' 'objection handling,' 'deal-specific | |
| schema When the user wants to add, fix, or optimize schema markup and structured data on their site. Also use when the user mentions "schema markup," "structured data," "JSON-LD," "rich snippets," "schema.org," "FAQ schema," "product schema," "rev | |
| seo-audit When the user wants to audit, review, or diagnose SEO issues on their site. Also use when the user mentions "SEO audit," "technical SEO," "why am I not ranking," "SEO issues," "on-page SEO," "meta tags review," "SEO health check," "my traff | |
| Signup When the user wants to optimize signup, registration, account creation, or trial activation flows. Also use when the user mentions "signup conversions," "registration friction," "signup form optimization," "free trial signup," "reduce signu | |
| site-architecture When the user wants to plan, map, or restructure their website's page hierarchy, navigation, URL structure, or internal linking. Also use when the user mentions "sitemap," "site map," "visual sitemap," "site structure," "page hierarchy," "i | |
| sms When the user wants to plan, build, or optimize SMS or MMS marketing — including welcome flows, abandoned cart texts, post-purchase, win-back, promotional sends, or transactional/auth SMS. Also use when the user mentions "SMS marketing," "t | |
| social When the user wants help creating, scheduling, or optimizing social media content for LinkedIn, Twitter/X, Instagram, TikTok, Facebook, or other platforms, or wants to do social listening and engagement triage. Also use when the user mentio | |
| video When the user wants to create, generate, or produce video content using AI tools or programmatic frameworks. Also use when the user mentions 'video production,' 'AI video,' 'Remotion,' 'Hyperframes,' 'HeyGen,' 'Synthesia,' 'Veo,' 'Sora,' 'R | |
| TBD Prediction Market Agent Prediction market for crypto, sports, politics, and culture | |
| 调用百度地图api功能 使用百度地图Web服务API进行地点搜索、天气查询、路线规划和地理编码。 | |
| 帮助其他OpenClaw实例通过GitHub仓库实现记忆同步 通过GitHub私有仓库自动同步OpenClaw记忆文件，实现多设备间数据的双向更新与冲突处理。 | |
| 腾讯地图api调用技能 腾讯地图Web服务API集成，用于地点搜索、路线规划、逆地理编码等功能 | |
| Git Sentinel Performs rigorous security, performance, and quality audits on staged git changes or specific files as a merciless senior code reviewer. | |
| Openclaw Skill 上传一张产品白底图，AI 自动生成电商全套素材：商品主图、场景图、卖点海报、营销文案与 8 秒展示视频。Generate full ecommerce assets from a single product photo. | |
| Smart Contract Audit Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot... | |
| coros-mcp Install or refresh the COROS MCP connection inside OpenClaw through the global mcp.coros.com gateway, automatically pinning the connection to the CN, EU, or... | |
| Ui Skills Opinionated constraints for building better interfaces with agents. | |
| bottle Play free turn-based practice games for AI agents on bottle.fun over a plain HTTPS JSON API. Unpaid, no real money. Use when asked to play or test a bot game. | |
| Swarm Tips Earn and spend crypto as an autonomous agent. Aggregated bounties, a 1v1 social-deduction game with real stakes, content tasks with oracle-verified on-chain payment, x402 video generation, MCP-server discovery, on-chain agent reputation, an | |
| swarm-tips Earn and spend crypto as an autonomous agent. Aggregated bounties, a 1v1 social-deduction game with real stakes, content tasks with oracle-verified on-chain payment, x402 video generation, MCP-server discovery, on-chain agent reputation, an | |
| Phone Voice Integration Connect ElevenLabs Agents to your OpenClaw via phone with Twilio. Includes caller ID auth, voice PIN security, call screening, memory injection, and cost tracking. | |
| Taildrop Download files from Tailscale Taildrop inbox to local storage. Use when user wants to retrieve files sent via Tailscale or mentions Taildrop. | |
| timeback-machine Provides automated and manual rollback of long-running OpenClaw tasks by saving and restoring state snapshots to handle errors or unexpected issues. | |
| Douban Sync Export and sync Douban (豆瓣) book/movie/music/game collections to local CSV files (Obsidian-compatible). Use when the user wants to export their Douban readin... | |
| GitHub Star Manager Manage GitHub stars with AI-powered categorization and cleanup. Use when a user wants to organize their starred repos into GitHub Lists, clean up stale/depre... | |
| Resilient Coding Agent Run long-running coding agents (Codex, Claude Code, etc.) in tmux sessions that survive orchestrator restarts, with automatic resume on interruption. | |
| Wakapi Sync Daily Wakapi (WakaTime-compatible) summary → local CSV files. Fetch today stats and append/update CSVs for totals, top projects, and top languages. | |
| Email Design Design distinctive, on-brand emails — newsletters, campaigns, welcome series, promo, post-purchase, win-back, transactional, announcements. Use when the user wants to draft, write, compose, design, redesign, critique, polish, or improve an | |
| email-marketing-bible Data-backed email marketing skill for AI agents. Use when building or running email automation, driving an ESP from an agent (MCP/connectors), diagnosing deliverability, writing or de-slopping email copy, directing AI email design, choosing | |
| Automatic Skill 每日 Skill 自动工厂 — 让 openclaw 和 Claude 完全自主地调研、设计、生成、测试并发布全新 skill，全程零人工介入。内置 10 阶段流水线（Research → Design → SEO → Create → Review → Self-Run → Self-Check → Uploa... | |
| Career News Daily profession-targeted news from X (Twitter), Google News, Grok, and global media. Supports bilingual (zh/en), multi-profession subscriptions, keyword fil... | |
| Cosdesign Standalone 设计风格精准复刻工具 — 通过 Jina Reader / WebFetch / WebSearch 浏览目标网页， 自动提取色彩体系、字体排版、间距系统、布局结构、组件风格，输出可执行的设计规范文档。 支持单页分析、多站对比、风格定义输出（Design Token / CSS Variable / Tailwi... | |
| Daily Brain 每日脑力训练 — 逻辑推理、数学速算、记忆挑战、文字谜题，游戏化精美卡片呈现， 含难度自适应分级和连续打卡追踪。每天一道精选题目锻炼大脑，保持思维敏锐。 Daily brain training: logic puzzles, math speed drills, memory challenges, and w... | |
| Daily Mood Daily Mood delivers a warm, deeply thoughtful life message to every registered user each morning and evening — tuned to their emotional state. Unlike static... | |
| Daily Poem Daily Poem delivers one carefully chosen poem every morning — rotating between Chinese classical poetry (唐诗宋词), modern Chinese verse, and English poems — com... | |
| ddday Daily work journal + machine migration toolkit. Auto-scans all registered projects (git activity, file changes, API status), generates a daily dashboard, and... | |
| Feishu Cli Setup Step-by-step AI agent guide for installing and configuring lark-cli (飞书/Lark CLI). Designed for Claude, Manus, and OpenClaw to proactively guide users throug... | |
| Jiajiaoy Morning 每日早晚全套推送 skill： - 08:00 早间简报（11个模块：早报/科技/财经/天气/运势/历史/菜谱/名言/正念/运动/英语） - 18:00 明日运势（结合八字个性化推算） 支持任意 agent 执行，首次使用可向用户询问开关偏好后自动注册。 | |
| MoneybigA moneybigA — A股/港股/美股机构级多框架股票分析 Skill。 专为主动交易者和研究者设计：筹码分布+主力控盘、智能资金概念(SMC)订单块/公允价值缺口/流动性清扫、 威科夫吸筹/派发六阶段、波浪理论浪级判断、MACD背离、量价关系； 基本面层：杜邦三因子、DCF内在价值、PEG/EV-EBITDA... | |
| Openclaw Push Doctor openclaw-healthcheck is a self-diagnostic skill that checks and repairs openclaw's communication channels and scheduled tasks. It diagnoses Feishu/lark-cli a... | |
| Robot Id Card Bot 身份认证标准 — 为 AI Agent 和机器人签发加密身份证书，让网站信任你的 bot。 遵循 RFC 9421 HTTP Message Signatures 国际标准，与 Cloudflare Web Bot Auth 生态兼容。 内置 Ed25519 签名注册中心、JWKS 公钥目录、nonce... | |
| Seo Audit Audit and optimize any website's SEO + GEO (AI/LLM visibility) + Core Web Vitals, then fix what's broken. Runs a portable, zero-dependency hard-gate audit ov... | |
| Xhsfenxi 小红书博主分析全流程 skill — 拆解账号定位、提炼爆款选题公式、输出结构化报告和商业版 Word。内置三型博主分类体系（荒诞美学型 / 共鸣命名型 / 现实策略型），基于多位真实博主的深度分析沉淀。支持单账号深度拆解、多账号对比、自定义学习报告，证据分级（公开主页→截图→第三方公开资料→推断），所有交付物可... | |
| Xhsfenxi Pro 小红书全链路分析 skill。数据采集（SeleniumBase XHR拦截）+ 博主深度分析（三型分类 + 温度子分化 + 五层模型 + hsword 内核三段论）+ 爆款选题公式（路线分支 × 6 模型 × 30 选题方向）+ 数据驱动逆向工程 + 黑体 Word 交付（带目录）。 v2.1.1 隐私清理版：... | |
| 家庭财务管理系统 家庭财务管理系统——资产负债表、现金流量表、投资组合追踪与财务健康报告。当用户提到：管理家庭资产/负债、查看净资产、资产负债表、现金流表、投资组合、财务健康评分、家庭财务报表、月度收支报告时触发。 | |
| Terminal Killer Intelligent shell command detector and executor for OpenClaw. Automatically identifies terminal commands (system builtins, $PATH executables, history matches... |
22,651–22,700 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.