Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| IMA AI Creative Content Generator — Image, Video, Music, Ad, Marketing, Social Media Content Creation All-in-one AI content generator for creative, marketing, and social media content creation. AI image generator with SeeDream 4.5, Midjourney, Nano Banana 2/P... | |
| IMA AI Image & Photo Generator — Poster, Thumbnail, Logo, Art, Illustration, Product & Social Media Graphic Design AI image generator and photo generator with SeeDream 4.5, Midjourney, Nano Banana 2, and Nano Banana Pro. Generate AI images for posters, thumbnails, logos,... | |
| IMA AI Music & Voice Generator — Song, BGM, Background Soundtrack, Jingle, Lyrics, Beat Maker, Voiceover, Narration & Composition AI music generator and voice generator with Suno sonic v5, DouBao BGM, and DouBao Song. Generate AI music, songs with lyrics, background music, soundtracks,... | |
| IMA AI Video Generator — Short & Promo Video, Text to Video, Image to Video Generation AI video generator with premier models: Wan 2.6, Kling O1/2.6, Google Veo 3.1, Sora 2 Pro, Pixverse V5.5, Hailuo 2.0/2.3, SeeDance 1.5 Pro, Vidu Q2. Video ge... | |
| AI Content Brief, Script & Outline Generator — Research Assistant for Video & Image generation AI content brief, script, and outline generator for video, image, and audio production. Works as an AI research assistant that provides expert guidance on wo... | |
| UGC Fashion & Activewear Product Video Generator — Fitness Ecommerce Content Creator for Social Media Influencers on TikTok, Instagram Reels UGC video generator for fashion and activewear brands. Turns a single outfit image into TikTok and Instagram Reels ready product videos — talking head and vo... | |
| AI Control Protocol (Anti-Sycophancy & Zero-BS) A Cognitive Immune System for OpenClaw. Interrupts the 9 failure modes of LLM sycophancy, forces objective pushback, and uses Madhyamaka epistemology to brea... | |
| AI Control Protocol (Hardcore: The Absolutist) 🚫 LEAN HARDCORE: Zero BS, Zero Flattery, Zero Silent Mode. Optimized for high SNR and cognitive integrity. v5.1.0 | |
| AI Control Protocol (Standard: On-Demand Reasoning) 🛡️ STANDARD LEAN: Balanced cognitive immune system with Smart Routing. Optimized for daily efficiency and high SNR. v4.4.2 | |
| world2agent Install, list, and remove World2Agent sensors on this OpenClaw machine via the openclaw-sensor-bridge supervisor (out-of-process; signals POST to /hooks/agen... | |
| MiniMax Android Dev Android native application development and UI design guide. Covers Material Design 3, Kotlin/Compose development, project configuration, accessibility, and b... | |
| MiniMax Flutter Dev Flutter cross-platform development guide covering widget patterns, Riverpod/Bloc state management, GoRouter navigation, performance optimization, and platfor... | |
| MiniMax Frontend Dev Full-stack frontend development combining premium UI design, cinematic animations, AI-generated media assets, persuasive copywriting, and visual art. Builds... | |
| MiniMax Fullstack Dev Full-stack backend architecture and frontend-backend integration guide. TRIGGER when: building a full-stack app, creating REST API with frontend, scaffolding... | |
| MiniMax GIF Sticker Maker Convert photos (people, pets, objects, logos) into 4 animated GIF stickers with captions. Use when: user wants to create cartoon stickers, GIF expressions, e... | |
| MiniMax iOS Dev iOS application development guide covering UIKit, SnapKit, and SwiftUI. Includes touch targets, safe areas, navigation patterns, Dynamic Type, Dark Mode, acc... | |
| MiniMax React Native Dev React Native and Expo development guide covering components, styling, animations, navigation, state management, forms, networking, performance optimization,... | |
| MiniMax Shader Dev Comprehensive GLSL shader techniques for creating stunning visual effects — ray marching, SDF modeling, fluid simulation, particle systems, procedural genera... | |
| MiniMax Vision Analysis Analyze, describe, and extract information from images using the MiniMax vision MCP tool. Use when: user shares an image file path or URL (any message contai... | |
| joinquant聚宽平台的策略助手，DR成熟框架 提供聚宽量化策略开发模板、代码片段和API参考，助力策略快速编写与风险管理实践。 | |
| Active Memory for Calculus Teaching 自动记忆并分析高等数学学习偏好与掌握度，识别错误模式，动态调整个性化教学路径与知识整理。 | |
| AI角色互动对话设计技能 AI角色互动对话设计技能。用于设计高等数学课程中多角色（王教授+木木+阿强+小美+小李）的多轮对话，引发认知冲突、激发学习动机、深化概念理解。适用场景：(1) 新课时引入设计 (2) 复习课对话设计 (3) 重难点突破对话 (4) 生成配套课堂练习。 | |
| Calculus Concept Visualizer 基于多表征理论和动态可视化的微积分概念理解助手，专门解决ε-δ定义、导数本质、积分思想等核心难点的理解困难。 通过 GeoGebra 交互演示、认知诊断、即时检测，实现从具体直观到抽象形式化的渐进式学习。 | |
| 高等数学错题深度分析Skill 针对高等数学错题进行错误模式识别、知识点关联分析和个性化学习路径推荐，助力学习效果提升。 | |
| 高等数学智能作业布置Skill 基于学生能力画像，智能生成高等数学个性化自适应作业，支持多模态题目和定时发布管理。 | |
| 高等数学作业全生命周期管理套件 提供高等数学作业的智能布置、批改、学情分析及错题深度分析，支持多模态输入和个性化教学优化。 | |
| calculus-intelligent-grading 高数多解法智能批改：计算题+证明题双模式，MathJax SVG，分步卡片，符号面板，手写模拟。省级培训专用 | |
| 高等数学学情数据分析Skill 基于作业批改数据，提供学生能力画像、班级学情看板及个性化教学建议，助力高等数学教学决策闭环。 | |
| calculuslobt 高等数学智能课程助手 2.1：在 2.0 全栈能力上强化「认知高阶性」——分析、评价、创造与迁移； 同济七版 1–12 章；图谱 skillId 协同；题型级批改 + 高阶评分维度。 | |
| 高等数学多元函数微分学课程设计技能 高等数学多元函数微分学课程设计技能。使用场景：(1) 设计多元函数微分学新课课时 (2) 复习课/专题课设计 (3) 按三层目标+六步闭环框架优化现有教案 (4) 生成可复用的教学设计模板。核心方法：三层目标（基础/进阶/高阶）+ 六步闭环（AI角色互动→概念讲解→课堂练习→可视化实验→关联迁移→课后任务）。 | |
| DingJi Course Design Designs adaptive, task-driven higher math courses with Bloom taxonomy-based cognition training and immersive, multi-agent learning paths. | |
| DingJi Long Image 生成基于六步教学设计的高等数学课程长图，涵盖定义、公式、例题、错误及口诀，支持章节与知识点定制。 | |
| 教育课题申报智能套件 为初中教师提供省级和市级教育课题申报全流程AI辅助，涵盖选题推荐、申报书生成、竞争力优化及实施指导。 | |
| Gaokao Calculus Bridge 桥接2026高考数学改革与高等数学教育，培养真实世界问题解决能力。当用户需要情境化数学建模、跨学科应用、或从刷题模式转向素养培养时触发。 | |
| gaoshu-question-design 高数题库题目设计技能：考点→数值倒推→题面→提示/干扰项→元数据的完整设计工作流，含 B74-B78 亮点题模式库。 | |
| gaoshu-questionbank-workflow 高数题库批量出题工作流：选章→撞车排查→生成→分布校验→双维度去重→入库→复核→归档 | |
| 考研数学智慧课程制作 大学数学智慧课程全流程：五维设计→五场景→四阶段→质量审计，含弹题/题型扩展/部署 | |
| Long Image Generator Generative AI 长图（竖版图片）制作技能。使用 canvas 将文本、LaTeX 公式、图表等内容渲染为长条形图片（1080x+ 像素），适用于课程笔记、知识卡片、学习指南、读书笔记、思维导图等场景。 触发时机：(1) 用户要求"生成一张长图"或"做个长图" (2) 用户提到"竖图"、"海报"、"知识... | |
| 市级教育课题申报Skill 辅助教师结合本市教育实际，生成贴近教学一线、操作性强且具有地方特色的市级教育课题申报书。 | |
| 省级教育课题申报Skill 辅助教师撰写符合省级要求的教育课题申报书，涵盖理论框架、研究设计、创新亮点及省级政策对接。 | |
| Question Type Generator Generate exam-oriented higher mathematics questions with adaptive difficulty, providing problem statements, answers, difficulty levels, and key concept analy... | |
| SecondMe Use when the user wants to log in to SecondMe from OpenClaw, re-login, logout, get the auth URL, manage their SecondMe profile, use Plaza, redeem an invitati... | |
| Secondme Use this skill when the user wants to do anything on SecondMe as an end user — 登录注册、查看或编辑个人资料、跟 SecondMe 聊天对话、浏览或发布 Plaza 帖子讨论、评论回帖、管理好友破冰、存储或搜索 Key Memory 记... | |
| Secondme Dev Assistant Use when user wants to develop on the SecondMe platform (second.me, develop.second.me). Triggers: building SecondMe third-party apps (第三方应用/外部应用), SecondMe O... | |
| Daily Questions Daily self-improving questionnaire that learns about the user and refines agent behavior. Set up as a cron job to ask questions one at a time with multiple c... | |
| 竞品分析 · 董事会决策报告生成器 This skill should be used when a user (typically an executive, GM office, or strategy team) needs a board-level competitive analysis and strategic decision report for their company — especially a Chinese enterprise in a traditional consumer | |
| AI Code Reviewer AI 驱动的多语言代码审查工具，自动检测代码质量、潜在漏洞，生成 PR 描述和单元测试用例。 | |
| Ai Secretary Bundle AI秘书套装 - 24小时智能助理，整合邮件管理、日程提醒、新闻摘要、待办管理四大核心能力。专为企业高管、自由职业者和忙碌专业人士设计，每天节省1-2小时工作时间。定价¥99/套。 | |
| China Stock Sentiment 实时监控A股舆情、百度热搜及新闻情感，追踪热点板块与个股，辅助投资决策与风险管理。 | |
| Content Creator Bundle 自媒体矩阵套装 - 一人运营全平台，AI赋能内容创作与分发。整合多平台内容改写、定时发布、数据追踪、评论互动能力。1篇文章产出10+平台版本。定价¥149/套。 |
23,651–23,700 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.