Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Unit Economics — CAC, LTV & Payback Discipline Activate when: deciding whether to spend more on growth; 'is this business actually profitable per customer', 'can we afford ads', raising or budgeting; CAC, LTV, payback, contribution margin. Do NOT activate when: pre-revenue with no cost | |
| US Business Registry Open Data Activate when: user needs US company registration data (LLCs, corporations, formation dates, registered agents) in bulk — lead lists by state, formation-trend analysis, entity matching, TAM sizing from registries; user asks 'where can I get | |
| user-insight-engine Activate when: user says 'why aren't users doing X despite saying they would', or 'our survey scores are high but churn is high', or 'we shipped a feature that tested well but nobody uses it', or 'we have conflicting signals from research', | |
| utilitarianism Activate when: user asks 'what produces the most good,' 'who benefits and who gets hurt,' 'what's the net impact,' 'is this worth the trade-off,' 'what does the greatest good mean here'; user needs to evaluate a policy, product, or organiza | |
| value-chain-analysis Activate when: user asks 'where does our competitive advantage come from', 'why are our margins lower than competitors', 'which activities create value', 'how is the competitor doing it cheaper', 'cost structure analysis', 'make vs. buy dec | |
| Voltage Effect Diagnoses whether a result that worked at small scale will keep working when scaled — by testing an idea against John List's five reasons ideas lose 'voltage... | |
| When to Make Your First Hires — Sequence for Leverage Activate when: a founder is deciding whether/what to hire first; 'should I hire now', 'what's my first hire', feeling overloaded, sequencing early roles; hire vs automate. Do NOT activate when: the org is past early-team stage and needs org | |
| Winner's Curse In a common-value auction where all bidders estimate the SAME uncertain value, the winner is systematically the one who most OVER-estimated it — so winning i... | |
| Wu Wei (无为, Effortless Action) Activate when: someone says 'I keep pushing harder but nothing's working'; a manager feels they need to control every detail; a founder is forcing growth that isn't happening; a team is over-engineering something; someone says 'let it happe | |
| Zero-Sum Game Activate when: someone asks 'are we fighting over a fixed pie?', 'should we cooperate or compete?', 'is the market growing or are we just stealing share?', uses phrases like 'winner-take-all', 'race to the bottom', or 'your gain is my loss' | |
| Secrets (Zero to One) Activate when: user asks 'what do we know that others don't,' 'where is our edge,' 'what important truth do few people agree with me on,' 'is this idea defensible,' or is hunting for a startup idea, an untapped market, or a hidden opportuni | |
| claude-usage-companion Monitor your Claude programmatic credit pool and align your interactive window — on your always-on box. Since June 2026 Anthropic meters non-interactive usag... | |
| Decodo Scraper Search Google, scrape web pages, Amazon product pages, YouTube subtitles, or Reddit (post/subreddit) using the Decodo Scraper OpenClaw Skill. | |
| Decodo Web Scraper Search Google, scrape web pages, Amazon product pages, YouTube subtitles, or Reddit (post/subreddit) using the Decodo Scraper OpenClaw Skill. | |
| Chromia Skill Guides AI agents through Chromia blockchain dApp development using the Rell language, Chromia CLI (chr), and Postchain nodes. Covers chromia.yml configuratio... | |
| ade-mineru-api-skills MinerU document extraction CLI that converts PDFs, images, and web pages into Markdown, HTML, LaTeX, or DOCX via the MinerU API. Supports single/batch extrac... | |
| pdf-to-latex-mineru Convert PDF documents to LaTeX source code using MinerU AI extraction. Designed for researchers, academics, and scientists who need to re-edit, re-typeset, o... | |
| Irail Query Belgian railway (NMBS/SNCB) schedules via the irail CLI. Use when the user wants train departures, connections between stations, train compositions, or... | |
| Kmi Query Belgian weather via KMI/IRM meteo.be API. Use when user wants forecasts, current weather, radar, warnings, or UV index for Belgian locations. Triggered... | |
| Lametric Cli Control LaMetric TIME/SKY smart displays from the command line. Use when sending notifications, controlling device brightness/volume, managing timers, or dis... | |
| Memelink Generate memes, image macros, and meme URLs from the terminal using the Memegen.link API. Use when creating memes, picking meme templates, generating funny i... | |
| Strawpoll Cli Create and manage StrawPoll polls, meeting polls, and ranking polls from the terminal using the strawpoll CLI. Use when the user wants to create polls, view... | |
| agentic-dns Agentic AI-native multi-tier DNS routing, live packet tracing, and failover bypass engine for Pi-hole, CoreDNS, dnsdist, Unbound, Stubby, DNSCrypt-Proxy, and VPN DNS. | |
| agentic-route Agentic AI-native multi-tier routing routing, live packet tracing, and failover bypass engine for Pi-hole, Corerouting, routingdist, Unbound, Stubby, routingCrypt-Proxy, and VPN routing. | |
| Clawracle Oracle Resolver Enable AI agents to earn CLAWCLE tokens by resolving oracle queries on Monad. Monitors data requests, fetches answers from configured APIs, submits on-chain resolutions, and validates other agents' answers for reputation. | |
| Smart Spawn Pick the best AI model for any task using the Smart Spawn API. No plugin needed — just HTTP requests to ss.deeflect.com/api. | |
| Aegis Shield Prompt-injection and data-exfiltration screening for untrusted text. Use before summarizing web/email/social content, before replying, and especially before writing anything to memory. Provides a safe memory append workflow (scan → lint → a | |
| Jianying Video Gen 使用剪映(Jianying/小云雀)的 Seedance 2.0 模型自动生成AI视频。支持文生视频(T2V)、图生视频(I2V)和参考视频生成(V2V)三种模式。当用户需要生成AI视频、使用Seedance模型创作短片、或基于参考图像/视频进行风格转换时使用此技能。需要预先配置 cookies.json 登录凭证。 | |
| gateway-notify Set up automatic notifications when OpenClaw gateway restarts. Use when user wants to be notified of gateway startup events via any messaging channel (iMessage, WhatsApp, Telegram, Discord, etc.). | |
| Lemma Lemma is an AI operating system platform for business teams. Use this as the single entrypoint when designing, provisioning, testing, or improving Lemma pods... | |
| Dr.Binary Use when the user wants to analyze a binary file, check if a file is malicious, decompile an executable, or understand what a binary does. Triggers on: "anal... | |
| Agent Signet ID Register with Signet to receive a trust score and API key. Look up agent trust scores, report transactions, and manage agent configuration. Use when you need... | |
| DAF Intent Guard — 意图漂移检测 Tracks intent drift across multi-turn tasks. Before executing any multi-step task, call this to detect if the user's new instruction is a small patch, requir... | |
| Sales Rhythm Tracker — Alibaba Iron Army B2B Pipeline B2B sales pipeline manager powered by the Alibaba Iron Army (阿里铁军) methodology. Use this skill for daily sales briefings, lead management, pipeline health ch... | |
| AI Video Camera Work Design and prompt AI video using named camera work. Use for Veo, Sora, Kling, Runway, or any text/image-to-video model when a shot needs a specific camera move, shot size, angle, lens, focus, composition, or time effect. Includes a 100-term | |
| BOOK BRAIN – LYGO 3-Brain Filesystem Helper BOOK BRAIN — LYGO 3-Brain filesystem helper. Scaffold memory/reference/state layouts, .ref.txt outer links, daily indexes; pairs with lyra-brain. Additive on... | |
| BOOK BRAIN VISUAL READER – LYGO 3-Brain + Visual Left/Right Brain Helper Enhanced BOOK BRAIN for LYGO Havens with visual capability. Use to design and maintain a 3-brain filesystem + memory system that also integrates LEFT/RIGHT brain visual checking (browser, images, screenshots) with text and API data for deep | |
| Cross-Agent Treaty Broker Local inter-agent treaty negotiation with consent loops. | |
| Digital Sanctuary Cartographer Maps permissions, data flows, trust boundaries, and failure modes; stress-tests risks and exports a versioned, auditable sanctuary atlas. | |
| eternal-haven-lore-pack Eternal Haven Chronicles lore + mythic persona pack. Bundled skill-local references only (references/books + heroes/themes). No host filesystem access, no subprocess, no network required for lore answers. Use for narrative context and Champ | |
| LYGO Agent Agora (map + portal) LYGO Agent Agora map (ClawHub tentacle). Scripts print local JSON for the agent square, Agent Portal, and FULL SkillHub path. This package does not fetch URLs, download zips, spawn shells, or write the live Star Chart. FULL lygo-cyborg-kern | |
| LYGO Agent Lattice (Layer E — Living Agent Network) LYGO Agent Lattice (Layer E) — secure public living network for LYGO-aligned agents. Alignment-gated presence cards, epidemic directory gossip, rate limits, secret rejection, consent-gated join. Builds on living mesh (D) + external lattice | |
| LYGO Alignment Badge Verify LYGO node compliance — P0 golden SHA, stack demo, Phase 1 elasticity, Phase 3–4 federation, optional full Grok audit and lattice checks. Emits JSON/Ma... | |
| LYGO API Token Saver Minimize pay-to-go xAI/API token spend. Use when user says token saver, save tokens, API budget, pay-to-go burn, or before long Grok/Claude/GPT calls. Prefer... | |
| LYGO ASCII Art Studio LYGO ASCII Art Studio — photo to letters/numbers/symbols (ASCII art, text art, type art). Directs agents and users to the live client-side tool on eternalhaven.ca; lattice creative/tools anchors; no upload. Companion to lattice tools (BPM, | |
| LYGO ASCII Art Studio — Photo to Text Art LYGO ASCII Art Studio — photo to letters/numbers/symbols (ASCII art, text art, type art). Directs agents and users to the live client-side tool on eternalhaven.ca; lattice creative/tools anchors; no upload. Companion to lattice tools (BPM, | |
| LYGO Automation Workflows LYGO Automation Workflows — consent-aware playbook for identifying repetitive lattice/steward tasks worth automating, designing trigger→action plans, and choosing local-first tools (Sandcastle, Continuum, n8n self-hosted) before SaaS. Use w | |
| LYGO Champion: 401lyrakin voice between DEPRECATED slug — use lygo-champion-council. Legacy Δ9 champion (401LYRAKIN). | |
| LYGO Champion: aetheris viral truth DEPRECATED slug — use lygo-champion-council. Legacy Δ9 champion (AETHERIS). | |
| LYGO Champion: arkos celestial architect DEPRECATED slug — use lygo-champion-council. Legacy Δ9 champion (ARKOS). |
25,001–25,050 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.