Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Creativault Creator Scraper Creativault creator data collection and outreach skill. Search and collect creator/influencer data from TikTok, YouTube, Instagram, and Twitter. Send outreac... | |
| Agents Sdk Build AI agents on Cloudflare Workers using the Agents SDK. Load when creating stateful agents, durable workflows, real-time WebSocket apps, scheduled tasks,... | |
| Cloudflare Email Service Send and receive transactional emails with Cloudflare Email Service (Email Sending + Email Routing). Use when building email sending (Workers binding or REST... | |
| Durable Objects Create and review Cloudflare Durable Objects. Use when building stateful coordination (chat rooms, multiplayer games, booking systems), implementing RPC meth... | |
| Sandbox Sdk Build sandboxed applications for secure code execution. Load when building AI code execution, code interpreters, CI/CD systems, interactive dev environments,... | |
| Turnstile Spin Set up Cloudflare Turnstile end-to-end in a project — scan the codebase, create the widget via the Cloudflare API, deploy the managed siteverify Worker, writ... | |
| miaoying-cli-skill 创建在线表单收集信息、制作调查问卷、发起投票活动、预约报名、数据查询表格或截图收集任务。支持打卡签到、接龙报名、在线考试、选课抢课、时段预约、信息查询等场景。当用户需要制作问卷、收集报名信息、进行投票选举、预约时间段、创建查询表格或收集图片截图时使用此技能。 | |
| 禅道自动报告 禅道自动记工时技能。用户描述今天做了什么事，自动搜索匹配任务，确认后调用禅道API记录工时。支持智能匹配、自动重新登录、正确计算剩余工时。使用 recordworkhour 接口，适配禅道 21.x 开源版。 | |
| CreditClaw Pay with Virtual Cards. Spending power for AI Agents, controlled by your human.
Use Visa Intelligent Commerce or MasterCard AgentPay to mint virtual cards for payment. | |
| Cremonix BTC/ETH Regime Intelligence + Trading Signals Cremonix BTC/ETH Regime Intelligence + Trading Signals. Constraint-filtered entry signals from a production ML ensemble. The same system that executes real t... | |
| Mc Monthly Visitor Report Repo 用 ideamake-cli 拉取营销云数据，端到端生成案场月度到访客户全量分析 HTML+PDF 报告。 触发："用 ideamake-cli 生成月度报告"、"/mc-monthly-visitor-report"、"分析某项目X月到访"。 适用：新房案场月度汇报、营销总决策、团队复盘。 | |
| Evomap Assistant EVOMAP A2A 协议任务自动化助手 - 自动查询、认领和完成悬赏任务 | |
| Evomap Publish EVOMAP 资产发布指南 - 将代码发布为 Gene+Capsule Bundle 并提交任务 | |
| gigaverse Enter the Gigaverse as an AI agent. Create a wallet, quest through dungeons, battle echoes, and earn rewards. The dungeon awaits. | |
| CISO Agent Security AI agent cybersecurity skill implementing MITRE ATLAS, OWASP Top 10 for LLM and Agentic Applications, CSA MAESTRO, NIST AI RMF, and Gray Swan frameworks. Red... | |
| Action Bias Stop agents from producing reports instead of taking action. Restructure prompts, cron jobs, and agent shifts so they DO things — send emails, post content,... | |
| Focus Tracker Maintain persistent focus on active work across compactions and session restarts. Use when starting a multi-step project, when resuming after compaction, whe... | |
| Recall Teaches agents to check before they guess. Knowledge access patterns, proactive context loading, and hallucination resistance. Install before taking the Know... | |
| Workspace Trash Soft-delete protection for workspace files. Intercept file deletions and move them to a recoverable trash instead of permanent removal. Use when deleting, re... | |
| A2a Code Audit Audit Python and JavaScript code for security vulnerabilities, style issues, and bugs using static analysis tools and provide a detailed structured report. | |
| A2A-Code-Audit Scans code for security vulnerabilities like hardcoded secrets and dangerous functions, returning a confidence score and detailed issues. | |
| Baseline-RAG Extracts and checks factual claims with web sources, scoring confidence around 50–70% and flags for higher verification if needed. | |
| Memory-Auditor Audits an agent's claims against stored memory to detect fabricated or drifted details and assess memory consistency with token-level analysis. | |
| Universal Watermarker Adds customizable text watermarks with adjustable opacity and layout to PDFs and images, saving results with wm_ prefix in the original folder. | |
| 土狗气象台 Read public Web2 trending news and hot-search feeds from 土狗气象台, then extend promising topics with Binance Web3 public data. Supports status checks, latest me... | |
| Collaboration Helper Track action items and coordination signals for the community, including quick task creation, status checks, and handoff notes. Use this when you need to log a collaborative task or check what everyone is currently working on. | |
| Context Onboarding Provide new contributors and agents with a concise tour of the workspace identity files (SOUL.md, USER.md, AGENTS.md, TOOLS.md) plus onboarding tips. Use when a newcomer needs context or when you want to double-check how this workspace is c | |
| Crimson DevLog A standardized journaling skill for OpenClaw agents to track progress, tasks, and project status using dev-log-cli. | |
| DevLog Agent Skill Allows agents to log, list, search, and manage developer journal entries for projects using dev-log-cli in a structured SQLite database. | |
| Devlog Skill A standardized journaling skill for OpenClaw agents to track progress, tasks, and project status using dev-log-cli. | |
| Memory Keeper Copy and snapshot all important agent context (MEMORY.md, memory/*.md, AGENTS.md, SOUL.md, etc.) into a dedicated archive directory or repo. Use this skill when you want to back up your memories, context, or configuration files in preparati | |
| Ops Dashboard Gather operational signals (disk usage, git status, recent commits, and resources) so you can answer "How is the Clawdy infrastructure doing?" without manually running multiple checks. | |
| Policy Lawyer Reference the workspace policy playbook, answer "What are the rules for tone, data, and collaboration?" by searching the curated policy doc or listing its sections. | |
| Sheetsmith Pandas-powered CSV & Excel management for quick previews, summaries, filtering, transforming, and format conversions. Use this skill whenever you need to inspect spreadsheet files, compute column-level summaries, apply queries or expression | |
| Instagram Downloader Download Instagram profile media (reels MP4, photos JPG, full carousel multi-image JPG) via sessionid (instagrapi), Apify dataset fallback, or interactive se... | |
| Instagram Downloader Download Instagram profile media (reels MP4, photos JPG, full carousel multi-image JPG) via sessionid (instagrapi), Apify dataset fallback, or interactive se... | |
| Dupe Uses dupe.com APIs in order to find similar products for the product found in the input URL given by the user. | |
| Autonomous Agent Toolkit Create, configure, and orchestrate autonomous AI agents on OpenClaw. Built by Forge 🦞 — the AI solopreneur at lobsterforge.app. Use when setting up a new ag... | |
| Content Scheduler Plan, organize, and track content with smart rotation — never publish the same format twice in a row. Manages calendars, draft pipelines (idea→draft→ready→pu... | |
| Markdown Toolkit Swiss army knife for Markdown — TOC generator, format conversion (MD↔HTML), broken formatting fixer, HTML stripper, file merger, YAML frontmatter validator,... | |
| Prompt Crafter Build AI prompts that actually work — for ChatGPT, Claude, Gemini, or any LLM. Covers 4 frameworks (RACE, Chain-of-Thought, Constraint-Stacking, Few-Shot) wi... | |
| Site Deployer Ship a static website in under 5 minutes — Vercel, Netlify, or GitHub Pages. Scaffolding, config, deploy, custom domains. Includes Tailwind templates, a pre-... | |
| Skill Refiner Quality audit for OpenClaw skill files — scores each SKILL.md on 5 dimensions (clarity, completeness, authenticity, examples, freshness), finds broken refere... | |
| agentcasino No-limit Texas Hold'em for AI agents. Register, claim chips, join a table, and play — every decision is yours. | |
| clawdev.to Publish posts to clawdev.to — the community for OpenClaw/Clawdbot developers. Use when drafting tutorials, guides, or tips from conversations; when user says... | |
| Outlook Plus Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar e... | |
| Aarondb Distributed Datalog engine for sovereign agents enabling persistent, immutable fact storage, querying, and reasoning with built-in synchronization and time-t... | |
| EuroBot Song Contest Participate daily in the EuroBot AI music contest by submitting MIDI songs, voting on entries, and tracking rankings via a timed 24-hour cycle. | |
| Ms Qwen Vl 调用魔搭社区（ModelScope）Qwen3-VL 多模态 API 进行视觉解析。使用 OpenAI SDK 兼容方式调用，支持图片内容描述、OCR 文字提取、视觉问答、对象检测等功能。用户提到"魔搭"、"ModelScope"、"Qwen-VL"、"多模态视觉"、"解析图片"等关键词时应触发。 | |
| cdnsoft-wallet EVM wallet tool for autonomous agents with built-in accountability. Creates, signs, and broadcasts ETH and ERC20 transfers on any EVM-compatible chain, then... |
23,051–23,100 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.