Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Feishu Thread Forward Forward Feishu thread/topic to a user, group, or topic via REST API. Activate when: forwarding a thread/topic to another chat, sharing a topic post to a diff... | |
| wm-report-extract 财报 PDF（年报/半年报/季报，A 股 + 港股 IFRS）内容理解与按需可溯源提取。双轨转换（Docling FAST + PyMuPDF 有框线表格接管 + ACCURATE 报表页精修）→ 可提取性 meta → adapt-plan 提取剧本 → 全表 records 预提取 → materialize 分表 → 定型晋升 + 质量门（勾稽校验/数值存在性/quote 回验）→ review-extract 独立审核。每个数值带页码与原文 quote 溯源，无 qu | |
| fast-claude-code Claude Code 任务完成回调 Runtime。支持 Single / Interactive / Team 三种模式， ⚠️ 任务在后台 tmux 会话中运行，完成后通过 System Event 自动通知，无需轮询。 Use when: 需要运行 Claude Code 任务并在完成时获得通知。 NOT... | |
| Fast Douyin Publish 抖音视频自动发布助手。一键上传视频到抖音，支持自动文案生成和标签优化。 | |
| Fast Image Quickly send local images to channel. Auto-compress large images, copy small images directly. | |
| Car Connect Control multiple car brands — Tesla, BYD, Rivian, Mercedes, Volkswagen — with one skill. Check tyre pressure, charge, climate, lock/unlock, location, and mor... | |
| Codex Auth DEPRECATED shim skill for /codex_auth. Use codex-profiler instead; codex-auth is no longer the maintained path. | |
| Codex Profiler Manage OpenAI Codex profiles via Telegram commands for usage checks and OAuth token refresh with queued safe apply and progress updates. | |
| Codex Usage Manual Telegram slash-style command for Codex profile status and usage checks. Use when the user sends /codex_usage, /codex_usage default, /codex_usage all,... | |
| PulseMindX Multi-agent AI system that analyzes data, automates administrative tasks, generates reports, and provides business insights and recommendations. | |
| Group Summarizer Synthesizes member-parent markdown reports into a continuous narrative. | |
| Stock Trader Trade stocks, options, and crypto on brokerages, including Robinhood, ETrade, Charles Schwab, Webull, Public, Tastytrade, Coinbase, and Kraken, via the Trade... | |
| Airdrop Hunter Elite Web3 airdrop strategist with S/A/B grading, scam shields, and guided hunting workflow; triggers when users ask about airdrops, want to check projects,... | |
| Anti Rug Web3 token security scanner with expert cross-validation engine. Detects honeypots, rug pulls, and contract risks across Ethereum, BSC, Polygon, and other EV... | |
| Cex Trader Unified CEX trading capability layer for AI agents. Supports OKX and Binance spot and futures trading, account balance queries, order management, position qu... | |
| Defillama Data Aggregator Professional DeFi data aggregator that provides unified access to TVL, protocols, chains, and yields data from DefiLlama. Supports multiple output formats (J... | |
| Easy Mining BTC mining farm management via natural language. Activate when user mentions mining farm, miners, hashrate, BTC mining, miner reboot, mining revenue, Nonce m... | |
| Meme Token Analyzer Meme 代币财富基因检测系统。输入任意代币名称（如 PEPE、DOGE、$SHIB），基于实时 Web 情绪数据输出四维分析报告与 🌟钻石手/🌙登月/🗑️纸手/💩屎币 评级。支持主流币自动识别（BTC/ETH/SOL），无数据时不幻觉。触发词：meme 分析、代币评级、财富基因、PEPE分析、meme... | |
| Poly Master Polymarket prediction market skill by Antalpha AI. Discover trending markets, browse event predictions, invest in outcomes, copy-trade top traders, track por... | |
| Smart Money Smart money whale tracking skill. Activate when user mentions smart money, whale tracking, 聪明钱, 鲸鱼追踪, fund tracking, on-chain signals, what are whales buying... | |
| TA Radar Multi-Dimensional Technical Analysis Radar for cryptocurrencies. Supports spot trading pairs (Binance/Gate.io) and on-chain contract addresses (via DexScreen... | |
| Wallet Balance Multi-chain wallet balances (EVM + BTC). Supported non-BTC addresses use the company MCP tool wallet-balance-query; EVM queries can fall back to public data... | |
| Wallet Guard Wallet Guard provides comprehensive Web3 wallet and token security analysis including token risk scoring, malicious address checks, approval risk scans, NFT... | |
| web123 Web3 Skill Navigator / Web3 技能导航站. Describe your need in plain language to get matched AntalphaAI skill recommendations with install commands. Triggers: web1... | |
| Web3 Trader DEX swap 交易技能。当用户提到 swap、兑换、卖出、买入、换成 USDT、交易 ETH、DEX 交易、代币兑换、token swap、sell ETH、buy USDT、交易代币、限价单、limit order、挂单、永续合约、perpetual、开多、开空、做多、做空、杠杆、leverage、止盈、止... | |
| Web3 Transfer Update Unified multi-chain transfer skill for BTC, EVM, and Solana. Use when a user wants to send ETH/ERC20, SOL/SPL, or BTC, including batch payouts, with preview... | |
| Polymarket Odds Query Polymarket prediction market odds and events via CLI. Search for markets, get current prices, list events by category. Supports sports betting (NFL, NBA, soccer/EPL, Champions League), politics, crypto, elections, geopolitics. Real mo | |
| Akeyless IO Akeyless Secrets Management via the official akeyless CLI — install, configure profiles, gateway routing, and safe read/list operations. Use when the user me... | |
| Bark Push Send push notifications to iOS devices via Bark. Use when you need to send a push notification to user's iPhone. Triggered by phrases like "send a notificati... | |
| Guitar Chord Guitar chord toolkit with chord identification, chord diagrams, capo calculation, and more. Features: - Identify chord from notes (reverse lookup) - Look up... | |
| Willow Inference Server Local ASR and TTS inference server. Use when the user wants to transcribe audio to text (ASR) or convert text to speech (TTS). Requires a running Willow Infe... | |
| 办公室面积计算器 基于20年全国办公选址经验的专业办公室面积测算工具。当用户询问办公室规划、工位数需求、办公室面积测算、多少人需要多大办公室、如何计算租赁面积时触发。核心功能：输入总人数、财务人数、工位规格、各功能区面积，输出建议租赁总面积及详细分解。特点：不用反复找设计公司，成本极低，行政人员可直接使用。 | |
| sexy-claw 🦞 色😍龙虾 - 根据主人审美偏好，在多个平台（小红书、抖音、YouTube、B站）搜索并推荐颜值博主/视频。 自动获取用户cookies，学习主人喜好，推送个性化内容。 使用场景： - 主人说"找美女/小姐姐/颜值博主" - 主人提到特定平台（小红书/抖音/YouTube/B站） - 主人给出审美偏好（如"... | |
| Cognitive Coach 私人认知图谱教练，去噪提炼高价值知识，次日9点用费曼技巧提问，助你长期内化核心认知内容。 | |
| feishu-emoji 在飞书聊天中发送内联表情包图片，需将图片下载到指定媒体目录并通过 message 工具调用发送。 | |
| 技术方案书全自动写作 技术方案书全自动写作 - 多智能体协作、断点续作、完全自动化 | |
| Web Access Skill 所有联网操作必须通过此 skill 处理，包括：搜索、网页抓取、登录后操作、网络交互等。 触发场景：用户要求搜索信息、查看网页内容、访问需要登录的网站、操作网页界面、抓取社交媒体内容（小红书、微博、推特等）、读取动态渲染页面、以及任何需要真实浏览器环境的网络任务。 | |
| 模型可执行测试用例生成器 生成标准化 JSON 测试用例，可直接交给模型执行自动化测试 | |
| req-to-testcase 从需求文档自动生成全面覆盖的测试用例，并支持导出为 XMind 格式。 当用户上传需求文档（Word、PDF、Markdown、TXT）并要求生成测试用例时，必须触发本技能。 触发关键词：上传需求文档、解析需求、生成测试用例、测试用例转 XMind、 需求拆解、需求分析生成测试、全面测试覆盖、导出 XMind、生... | |
| Memory Dreaming (Safe Edition) Autonomous memory consolidation for OpenClaw agents — like REM sleep. Periodically gathers signal from daily logs, session transcripts, and learnings; consol... | |
| Safe Skill Evolver Safely create, improve, audit, and refactor OpenClaw skills by analyzing and suggesting diffs with user-confirmed application only. | |
| DemandSpec Use when analyzing, clarifying, specifying, reviewing, validating, approving, or archiving product and business requirements, including PRDs, AI scenarios, p... | |
| 人力资源候选人发现和筛查 Use when discovering and screening China-mainland AI recruitment candidates from accepted conference or journal papers, matching authors to multiple job desc... | |
| 简历评估 Use when a recruiter wants to batch-evaluate resumes, run general resume quality checks, optionally match resumes to a JD and company background, and produce... | |
| LLM Wiki 健康评分 用结构化扫描和语义抽样评估 Obsidian/个人知识库健康度 | |
| Obsidian Core Notes Maintain Obsidian vault core-file notes, topic synthesis notes, folder indexes, and graph links. Use when working in an Obsidian vault or document/code works... | |
| Setup Obsidian arXiv Daily Deploy and schedule an Obsidian arXiv digest | |
| Skill Policy Enforcer Check skills against local policy. | |
| SkillHub Publish Auditor Use when preparing a Skill folder for public release to SkillHub, ClawHub, or another agent-skill marketplace, especially before publishing third-party insta... | |
| DebugBundle Use DebugBundle for runtime error reporting, crash reporting, incident reporting, incident response, live app monitoring, and production monitoring focused on runtime failures, customer-facing incidents, and endpoint health—not generic infr |
24,701–24,750 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.