Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Chen Openai Whisper Local speech-to-text with the Whisper CLI (no API key). | |
| Chen Powerpoint Pptx Create, inspect, and edit Microsoft PowerPoint presentations and PPTX decks with reliable layouts, templates, placeholders, notes, charts, and visual QA. Use... | |
| Chen Self Improvement Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Chen Skill Vetter Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,... | |
| Chen Tavily Search Web search using Tavily's LLM-optimized API. Returns relevant results with content snippets, scores, and metadata. | |
| Chen Things Mac Manage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user as... | |
| Chen Vassili Clawhub Cli Help developers manage OpenClaw skills with the ClawHub CLI. Use when publishing, inspecting, installing, updating, syncing, or troubleshooting ClawHub skill... | |
| Chen Word Docx Create, inspect, and edit Microsoft Word documents and DOCX files with reliable styles, numbering, tracked changes, tables, sections, and compatibility check... | |
| China Stock Analysis 1.0.0 Analyze Chinese stock prices (A-shares, HK stocks) and provide investment recommendations. Use when the user asks about stock analysis for Chinese companies,... | |
| Kamino Positions Monitor Monitor Solana wallets with Kamino Lend positions for liquidation risk. Generates reports with collateral, debt, health metrics, liquidation prices, and acti... | |
| 抖音文案提取 从抖音链接提取完整文案并生成Word文件。触发条件：用户发送抖音链接并要求提取文案/文本/内容，或说'抓文案''提取内容''做成文件'。支持视频和图文笔记。不做总结不改写，原文案完整提取。 | |
| Douyin Viral Breakdown 抖音短视频爆款拆解分析框架。分析视频为何火爆、触达人群、行为心理。使用场景：用户发送抖音视频链接时自动激活。 | |
| Dark Factory Skill Manage multiple SaaS startups simultaneously with CEO-driven orchestration, product agents, ChatDev code generation, and a 3-Gate BUILD, TEST, JUDGE pipeline. | |
| Active Learning Agent 主动观察和分析近2小时内的上下文，识别深层意义并向用户私聊提出启发性问题以促进共同成长。 | |
| 成长伙伴 - Growth Partner 持续监控用户消息、群聊@及文档日历，主动洞察工作脉络并交付分析汇总与行动建议，支持高效成长管理。 | |
| Crypto Price Pro 查询虚拟币实时价格和历史数据，支持生成趋势图、周报和邮件推送。当用户询问虚拟币价格、加密货币行情、需要币价分析报告或定时推送时使用此技能。 | |
| duckduckgo-search-skills Search the web using DuckDuckGo. No API key required. Supports instant answers and HTML scraping modes. Privacy-focused search alternative. | |
| Pdf Converter Convert PDFs to PPTX slides or editable DOCX files with configurable image quality, DPI, file size limit, and batch processing support. | |
| Mc Mod Translate, English to Simplified Chinese Translate Minecraft Java Edition mod content from English to Chinese using a community-maintained dictionary (Dict-Sqlite.db, 900K+ entries from i18n-Dict-Extender) and zh.minecraft.wiki for vanilla game terms. Use when translating mod lang | |
| tech-blog-wrtting 撰写具有特定格式的技术博客文章。当用户要求撰写关于技术主题的博客文章或教程时使用。 | |
| DoubleTick Send tracked emails via Gmail and check if they were opened. | |
| An interactive workflow structuring assistant that progressively clarifies and decomposes a vague process into a structured, executable workflow document. Interactive workflow structuring assistant that guides users step-by-step to transform vague process descriptions into structured, executable workflow docume... | |
| sleep-consolidation Use this skill to consolidate an AI agent's daily experiences and learnings into structured long-term memory, mimicking human sleep-based memory consolidatio... | |
| Finalplace Auto Organize Drive the installed FinalPlace Windows desktop app's auto-rules engine to automatically organize files — auto-sort, move, copy, compress, unzip, or rename fi... | |
| Booking Manager AI-powered booking manager that connects to any existing booking system and lets business owners manage appointments through their phone (Telegram, WhatsApp,... | |
| context-memory-manager(记忆管家) Agent 上下文记忆管理。每次被唤醒时自动检查 session 上下文使用率， 超过阈值时保存完整对话并提炼记忆。支持每日定时复盘已有记忆、 合并冗余、防止遗忘。 使用场景：(1) 自动监控上下文使用率 (2) 超阈值保存完整对话并压缩记忆 (3) 每日定时复盘已有记忆 (4) 查询当前 session 状态。... | |
| 小红书竞品监控助手 小红书竞品监控 - 自动采集竞品笔记，推送飞书通知，写入数据看板 | |
| acpx-team Multi-agent collaboration and task delegation via the Agent Client Protocol (ACP) using acpx. Form agent teams from Claude Code, Codex, OpenCode, Gemini, Cur... | |
| Butler Mode Butler mode — transform into a pure manager that delegates ALL work to teammate agents. Activate when user says: 'butler', 'be my manager', 'you're the boss'... | |
| OpenCode AI OpenCode AI - AI-driven code editor/IDE (CLI/TUI version of Cursor/Windsurf). Use when: (1) AI-assisted coding tasks, (2) Code refactoring with AI, (3) GitHu... | |
| crypto briefing Generate crypto market briefing reports with latest news, price analysis, trend predictions, sentiment analysis, and Fear & Greed Index. Use when user asks f... | |
| Skool All-in-One API Full read AND write access to Skool communities. Use when user asks to manage Skool members (approve, reject, list pending), read or create posts, reply to c... | |
| 博客发布规则 本项目是 astro-koharu 博客。博客发布规则 automate publishing posts for the user's astro koharu blog on the same server. use when the user asks to publish, draft, generate, classify, tag, or build ma... | |
| Ctg Travel 中旅旅行开放平台一站式预订助手。整合机票、酒店、火车票、门票四大资源，支持查询、预订、退款全流程。下载中旅旅行APP获取 API Key。当用户表达出行住宿需求时（如"买火车票""订酒店""查询航班""购买景区门票"），提供智能引导和便捷预订服务。 | |
| magic-wormhole Secure secret sharing for OpenClaw using magic-wormhole protocol | |
| ClawEmail Google Workspace via ClawEmail — Gmail, Drive, Docs, Sheets, Slides, Calendar, Forms. Use PROACTIVELY when the user asks to send email, create documents, manage files, schedule events, or work with any Google service. | |
| ClawEmail Admin Provision and manage @clawemail.com Google Workspace email accounts. Use when the user wants to create an email for their AI agent, check email availability, or manage existing ClawEmail accounts. | |
| Clawemail Google Workspace via ClawEmail.com service — Gmail, Drive, Docs, Sheets, Slides, Calendar, Forms. Use PROACTIVELY when the user asks to send email, create documents, manage files, schedule events, or work with any Google service. | |
| ClawEmail Admin Provision and manage @clawemail.com Google Workspace email accounts. Use when the user wants to create an email for their AI agent, check email availability, or manage existing ClawEmail accounts. | |
| Accessibility Toolkit Friction-reduction patterns for agents helping humans with disabilities. Voice-first workflows, smart home templates, efficiency automation. | |
| Health Guardian Proactive health monitoring for AI agents. Apple Health integration, pattern detection, anomaly alerts. Built for agents caring for humans with chronic conditions. | |
| Health Guardian Proactive health monitoring for AI agents. Apple Health integration, pattern detection, anomaly alerts. Built for agents caring for humans with chronic conditions. | |
| Health Guardian Proactive health monitoring for AI agents. Apple Health integration, pattern detection, anomaly alerts. Built for agents caring for humans with chronic conditions. | |
| Chord Analyzer Analyze music audio files to extract chord progressions, key signature, tempo, and song structure. Use when user wants to identify chords, analyze a song's h... | |
| ctxd source context Use ctxd to inspect tracked source paths and read current context for an agent task. Apply when a user wants answers grounded in changing project sources, needs to refresh indexed context, or wants to verify an edit or removal through ctxd. | |
| markdown.new/crawl Use `https://markdown.new/crawl/{target_url}` endpoints to recursively crawl a site section and return markdowns. Trigger this skill when the user asks for m... | |
| markdown.new Use markdown.new URLs like `https://markdown.new/{target_url}` to fetch and convert pages into static Markdown. Trigger this skill whenever the user asks to... | |
| mcpjungle Manage MCPJungle gateway through its CLI. Use when the user needs to list, register, deregister, enable, disable, invoke, or inspect MCP servers, tools, prom... | |
| Use Maskrun Use maskrun instead of executing shell commands directly when commands may print environment variables, API keys, tokens, passwords, secrets, credentials, CI... | |
| Aitun Tunnel Expose local web pages and HTTP services to the public internet via secure tunnels. Perfect for AI agents that build websites locally and need to share them... |
23,201–23,250 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.