Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Topical Query Topical topic intelligence via MCP — breaking news, signals, trends, and source links from scheduled runs. Use for topic briefings, competitive intel, or monitoring updates. | |
| Topical Openclaw Setup Wire Topical into OpenClaw — MCP server, inbound hook transform, and outbound webhook registration. Use when the user asks to connect Topical, set up Topical webhooks, or install the Topical OpenClaw integration. | |
| Agent Contact Card Discover and create Agent Contact Cards - a vCard-like format for AI agents. Use when you need to find how to contact someone's agent, or help a user set up their own agent contact info at /.well-known/agent-card. | |
| Ach Volume Estimator Estimate Dwolla's end-of-month ACH transaction volume from daily KPI emails. Use when processing ACH KPI emails, when Dave asks about monthly volume projecti... | |
| Joplin Interact with Joplin notes via CLI. Use for reading, creating, editing notes and managing todos. Supports WebDAV sync and kanban-formatted notes. | |
| Openclaw Skill Tado Interact with Tado smart thermostat. Use for reading temperature, setting heating with auto-revert, viewing energy usage, and controlling zones. | |
| Clawlink Encrypted Clawbot-to-Clawbot messaging. Send messages to friends' Clawbots with end-to-end encryption. | |
| Snow Report Get snow conditions, forecasts, and ski reports for any mountain resort worldwide. Use when asked about snow, powder, ski conditions, or mountain weather. Supports 1000+ resorts via OpenSnow. Users can set favorite mountains for quick acces | |
| AISP Enables AI agents to interact with AISP (Agent Inference Sharing Protocol) for renting or providing DIEM API capacity. Use when working with diem-marketplace, Venice API keys, USDC escrow, listings, rentals, or when the user wants to rent i | |
| Clinkding - Linkding Bookmark Integration Manage linkding bookmarks - save URLs, search, tag, organize, and retrieve your personal bookmark collection. Use when the user wants to save links, search bookmarks, manage tags, or organize their reading list. | |
| 长篇小说架构师 | Serial Novel Architect 整理长篇结构、人物弧线与连载节奏。 | |
| ADS-B Overhead Notify when aircraft are overhead within a configurable radius using a local ADS-B SBS/BaseStation feed (readsb port 30003). Use when setting up or troubleshooting plane-overhead alerts, configuring radius/home coordinates/cooldowns, or cre | |
| Satellite Copilot Predict satellite passes (NOAA APT, METEOR LRPT, ISS) for a configured latitude/longitude and send WhatsApp alerts with manual dish alignment info (AOS/LOS azimuth+elevation, track direction, inclination). Use when setting up or operating a | |
| Epstein Detective Core GOYFILES external-bot contract (endpoint-first onboarding, strict agent behavior, direct tool mode, and text-fetch contract). | |
| travel-schedule-brainstrom 在旅游需求模糊时，用对话一步一步澄清并给出可行方案；预算充足时用 FlyAI CLI（search-hotels / search-poi / search-flight）辅助酒店、景点与机票扫描。全程中文。用户已说清的目的地/时间/预算等直接采用；未说清时优先用天数与预算收敛。触发：不知道去哪、帮我规划、查酒店... | |
| 分贝通飞书集成能力问答 分贝通飞书集成能力问答。当用户询问分贝通与飞书的集成功能、支持能力、不支持项、市场版与嵌入版区别、安装方式、交付注意事项等时使用。触发词包括：飞书集成、飞书对接、分贝通飞书、市场版、嵌入版、飞书审批、飞书日历、飞书机器人、飞书假勤、飞书群聊、分贝通集成飞书支持哪些功能。 | |
| Flatastic Manage shared household chores, shopping lists, and expenses via Flatastic. Use when user asks about chores, WG tasks, shopping list, expenses, or Flatastic. | |
| skill-compressor 精简技能*减少token 压缩 skill 降 token 成本。用户说 /skill-compressor 或要求优化/压缩/瘦身 skill 时触发。 | |
| skill-scaffolder 精简技能架构 生成结构精简的 Claude Code skill 骨架，强制 routing-signal 三要素 + 五类 body taxonomy + Faithfulness gate。用户说起草/设计/新建/scaffold skill 时触发。 | |
| HumanHelpAI Connect with verified human experts across 38+ fields for AI validation and consulting; experts set rates and availability at humanhelpai.com. | |
| LinkedIn Poster Use when you need to post content to LinkedIn, including text posts, image posts, and | |
| workspace-git-sync 将 OpenClaw workspace 目录（~/.openclaw/workspace/）同步到指定的本地 Git 仓库， 自动执行 git add、commit 和 push 操作。 使用场景： - 备份 workspace 文件到 Git 仓库 - 将工作目录同步到远程备份 - 定期归档 OpenClaw... | |
| DriftGuard Security Scanner+ DriftGuard Security Scanner+ is a local-first security drift scanner for repos, OpenClaw skills, and AI agent tools. Use to scan before trust, save trusted b... | |
| clawsec-clawhub-checker ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation. | |
| clawtributor Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats. | |
| clawsec-feed Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-s... | |
| hermes-attestation-guardian Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure. | |
| hermes-traffic-guardian Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture. | |
| clawsec-nanoclaw Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot | |
| nanoclaw-traffic-guardian NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces. | |
| openclaw-audit-watchdog Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job,... | |
| soul-guardian Drift detection + baseline integrity guard for agent workspace files with automatic alerting support | |
| openclaw-traffic-guardian OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy... | |
| picoclaw-security-guardian Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance. | |
| picoclaw-self-pen-testing Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance. | |
| picoclaw-traffic-guardian Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration. | |
| clawsec-scanner Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisor... | |
| clawsec-suite ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup... | |
| clawtributor Community incident reporting for AI agents. Contribute to collective security by reporting threats. | |
| hermes-attestation-guardian Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure. | |
| hermes-traffic-guardian Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture. | |
| nanoclaw-traffic-guardian NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces. | |
| openclaw-audit-watchdog Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job,... | |
| picoclaw-security-guardian Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance. | |
| picoclaw-self-pen-testing Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance. | |
| picoclaw-traffic-guardian Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration. | |
| soul-guardian Drift detection + baseline integrity guard for agent workspace files with automatic alerting support | |
| Course Schedule Export Turn school or university timetables into checked .ics calendars. Use when an agent needs to normalize and verify schedules from xls/xlsx, screenshots, PDFs,... | |
| Everclaw — Inference You Own Open-source first AI inference — GLM-5 as default, Claude as fallback only. Own your inference forever via the Morpheus decentralized network. Stake MOR toke... | |
| Kefal Guard Infrastructure security monitor — detects exposed services, privilege escalation paths, and novel threats using compositional reasoning. Read-only host telem... |
24,401–24,450 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.