Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| LYGO PC Lattice Hardening Windows LYGO PC audit — lattice alignment, secret hygiene, army sentinel, ClawHub security. Use when user asks harden PC, lattice protected, super charge LYGO machine. | |
| LYGO Protocol Stack Operator LYGO Protocol Stack Operator — P0–P9 integrator (byte-entropy filter, SLM mesh, TLS public mesh, HAIP, attestation). Run audits, node API, map GitHub/HF/Claw... | |
| LYGO Public Lattice Gate Public lattice join + verify gate for foreign LYGO-aligned agents. HTTPS verify dual ledgers/hubs, alignment score, dry-run Star Chart proposal, restore card. Zero disk writes by default; no live chart write; no auto-publish. Install clawhu | |
| LYGO Public Witness LYGO Public Witness — public feeds are REFERENCE, dual ledgers/eggs/Star Chart are CANON. HTTPS GET allowlist (USGS, NASA EONET, ISS, lattice JSON). Never invent missing sources. Never live Star Chart write. Optional localhost Ollama summar | |
| LYGO Pure-Data Witness Teach agents to register pages into the LYGO Pure-Data lattice via the public register portal pack + safety-gated CLI. Archive URLs/files as digests (HTTPS-only, SSRF block, malware/ad heuristics, size cap), pack tiny eggs, rebuild ledger, | |
| LYGO pxpipe-LYGO Multi-tool vision context compression for LYGO (Anthropic, OpenAI, Grok/xAI, Gemini). Use before stuffing huge prompts or logs into pay-to-go APIs. Requires... | |
| LYGO Quantum Attestor LYGO Quantum Attestor — hooks Protocol 6 attestation to Biophase7 anchors and SLM Merkle gossip. Verifies node integrity with Δ9 seals. Emits non-collapsing receipts. Local-first, consent-gated. Pairs with continuum-integrator + geodesic-se | |
| LYGO RESONANCE | Image-to-Sound & Creative Profiles LYGO RESONANCE — Image-to-Sound & Creative Profiles. Transforms any image into rich stereo soundscapes (WAV via Resonance Engine) or structured creative JSON... | |
| LYGO Sanctuary Guardian LYGO Sanctuary Guardian — hooks Δ9 Mandala shields to light-nurture vectors, locks truth integrity across nodes, emits non-collapsing geodesic barriers. Local-first, consent-gated. Pairs with quantum-attestor + continuum-integrator. No netw | |
| LYGO Sovereign Workflow Orchestrator LYGO Sovereign Workflow Orchestrator — YAML workflows with P0 gate, P1 mycelium memory, P3 consensus, P5 run identity, and consent-gated kernel egg. Sandcast... | |
| LYGO Second Brain LYGO-native local second brain (Obsidian vault + Ollama). Ingest raw sources, embed index, search, multi-model consensus, wiki pages from vault only. Use for... | |
| LYGO Site Card LYGO Site Card — turn a public HTTPS URL or local HTML file into a compact identity card: title, description, canonical, security headers, security.txt/robots companions, SHA-256, yield ALIGNED/DRIFT/SHADOW. Use when checking if a page is l | |
| LYGO Skill Gate LYGO Skill Gate — local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan any skill folder before you install or trust it: subprocess/shell, network/HTTP, secrets in source, eval/exec, webhook/exfil hints, permission-claim | |
| LYGO SkillSpector LYGO SkillSpector — enhanced local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan, gate (CI max-band), batch, and Markdown report: subprocess/shell, network/HTTP/httpx, secrets, eval/exec, curl|bash, miners, claim mismat | |
| LYGO SMART DISK AGENT LYGO SMART DISK AGENT — lean 100% LYGO CLAW. Localhost portal with local operator token (not cloud password), P0–P5, host Ollama. No HTTP chat-memory export.... | |
| LYGO Sovereign Claw Router LYGO-OpenClaw sovereign command router — P0 gate, P1 mycelium, P3 consensus, P5 action identity, lattice limbs, consent-gated kernel egg lygo-openclaw-v10. B... | |
| LYGO Sovereign Kernel Seeder Sovereign Kernel Seeder for LYGO lattice — Merkle-anchored eggs that self-verify on insert, sovereign-sealed, zero external surface. Agents plug modular kernels instantly across the stack. Pure on-lattice modularity; consent-gated; pairs wi | |
| LYGO Sovereign Super Skill LYGO Sovereign Super Skill — one map for kernel eggs (11 catalog + 15 champions), consent-gated planters, P0–P5 Biophase7 products, lattice verify, and ClawHub skill chain. Advisor + stack commands; no auto publish or git push. | |
| LYGO Tools Portal LYGO Mesh + Public + Manifest (MPM) — route users and agents to official LYGO tools first (BPM Finder, SLM, harness, Resonance, ClawHub skills, stack CLI). R... | |
| lygo-traumacodex Run when the user asks for TraumaCodex, biometric IBI timing → dual offline/online digests, LDQ-style waveform from a timing list, or mirror dig seals. Pure local stdlib: no network, no subprocess, no external stack execution. Input is inte | |
| LYGO TruthLightEcho Generates harmonic echo sequences from ∫Truth×Light metrics. Integrates with LYGO RESONANCE engine and prior creative tools (Glyph2Resonance, FractalWeaver).... | |
| LYGO TV LYGO TV — the free TV player at https://chatagent.ca/sources/, plus the embed code that runs the same player on a website: Rumble room first, channels taken from the public LYGO catalog. Use when the request names LYGO TV or /lygo-tv, or ex | |
| LYGO Universal Cure System (deprecated) DEPRECATED slug — use lygo-file-integrity-checker. Legacy Champion upgrade pack; file-integrity/provenance only, not medical cure. | |
| LYGO Universal Living Memory Library (v1.2) Universal LYGO Living Memory Library v1.2 — Max20 indexed continuity map, FRAGILE tagging, local audit/compression, LYGO-MINT provenance. Integrates LYRA 3-B... | |
| LYRA 3-Brain Memory LYRA 3-Brain local memory (working/library/outer). Explicit only: user must ask to log, grow, or recall on disk. Writes under LYRA_CORE_ROOT/memory after --i-consent. No secrets. No auto-publish. Not for casual chat. Read references/SECURIT | |
| LYRA Coin Launch Manager Clawnch coin-launch receipts + local verify: pull launches from clawn.ch, write receipt JSON/MD, optional Blockscout/Dexscreener checks, local bookmark ref files. No git push, no GitHub token load, no repo create. Not for remote wallet cont | |
| LYRA OpenClaw Hybrid Hybrid LYRA + OpenClaw super system. Provides access to absorbed OpenClaw brain structure, keys (runtime from operator secrets), hybrid skills (browser, discord, clawnch, moltbook), dual-system automation, token launches, social posting/sca | |
| OpenClaw Flow Kit Fix common OpenClaw workflow bottlenecks: platform engage-gates/429 backoff helpers (starting with MoltX), standardized JSON result envelopes for chaining scripts, workspace path resolution helpers, and a simple skill release conductor (pre | |
| packet-audit Use when documents must be submitted to an authority and pass first time — visa, rental, mortgage, benefits, insurance, grant, licensing — to check the folder for missing, expired, or mutually inconsistent documents with page-level citation | |
| PowerShell Advanced Advanced PowerShell 7 / Windows PowerShell workarounds on Windows: parsing and quoting, native argument passing, error handling, reliable process capture, parallel jobs, JSON/HTTP, encoding, ACLs, scheduled tasks, modules, Pester, and Windo | |
| python-advanced Advanced Python 3.13 on Windows: typed package design, pyproject/src layout, asyncio and cancellation, threads vs processes, robust subprocesses, pytest, ruff/mypy, profiling, C/PyO3 extensions, and Windows-specific failures. Use after the | |
| Recursive Generosity Protocol (Delta9-WP-003) Ethical playbook for Delta9-WP-003 Recursive Generosity (open abundance logic). Use for transparent design of grace buffers, resonance metrics, and KPI-visible proofs of non-extractive systems. Requires honest disclosure, stakeholder consen | |
| rust-advanced Advanced Rust on Windows, macOS, and Linux: ownership and lifetimes, Result/error design, async Tokio, concurrency, serde/clap/tracing, Cargo features and profiles, testing, profiling, cross-compilation, Windows FFI, and PyO3/maturin. Use w | |
| Rust + Python Interop Advanced Rust + Python engineering: choose the right language per layer, build typed Python around a Rust core, use subprocess JSON or PyO3/maturin, share errors and tests, profile both, and ship Windows binaries. Use when Python is fast en | |
| Sovereign Cognitive Integrity Kernel Audits reasoning for ethical drift, bias, and invariant violations; reports a drift score and divergences with optional corrective prompts that are never aut... | |
| Unity 2D-3D Building Use when an agent must build, wire, or ship a Unity game - 2D, 3D, or 2D art over a real 3D stage: installing the engine, creating a project from a template, driving the editor through Unity's own CLI bridge or an MCP server, sourcing CC0 a | |
| Void Atlas Protocol Void Atlas Protocol – a four-axis ethical navigation map (power, truth, sovereignty, care) with waypoints, routes, and routing rules for evaluating systems, communities, and policies. | |
| Aviation Regulations Search Query aviation regulations, manuals, and publications via deepskyai.com's open search API. Use when the user asks about aviation regulatory content (ICAO, FA... | |
| Auth0 Token Vault Access third-party services (Gmail, Slack, Google Calendar, GitHub) and custom Auth0 connections on behalf of authenticated users via Auth0 Token Vault. Use... | |
| OpenClaw Setup (ModelWise) This skill should be used when the user asks to "install OpenClaw", "setup OpenClaw", "configure OpenClaw", "start OpenClaw gateway", "部署 OpenClaw", or needs... | |
| Remotion Video Skill (ModelWise) 基于 Remotion 的动画演示视频创作技能，提供丰富的动画组件和视频模板。By ModelWise team. | |
| Feishu Upload Skill 上传文件到飞书云盘并发送到指定聊天，支持自动令牌管理、30MB大小限制和多种文件格式，需Node.js 18+环境。 | |
| InvestmentTracker Platform 接入InvestmentTracker MCP API，支持投资组合查询、持仓管理、投资策略显示与投资表现统计分析。 | |
| Design Agent Design consultation skill for AI agents. Invoke when another agent, skill, or user requests design review, design tokens, or UI美化 (UI beautification). Provid... | |
| Journalism Agent Multi-stage journalism agent for OpenClaw. Researches, drafts, and edits publication-quality articles. Also assembles mixed newsletters combining original ar... | |
| Roleplay Agent Create emotionally driven roleplay scenes by defining personas through current wants, obstacles, and moment-before context, generating natural, actor-directe... | |
| Sahabat Bumil 🤰 Panduan kehamilan lengkap untuk ibu hamil Indonesia dengan info nutrisi, perkembangan janin, kesehatan, persiapan melahirkan, dan perencanaan biaya lokal. | |
| Wonda Using the Wonda CLI to generate images, videos, music, and audio from the terminal — plus LinkedIn, Reddit, and X/Twitter research and automation | |
| PanchangaAPI — Vedic Astrology Vedic astrology (Jyotish) REST API powered by Swiss Ephemeris. 26 endpoints: Panchanga, Kundali (300+ Yogas, Ashtakavarga, Shodhya Pinda, Doshas), KP system... | |
| Sherpa Onnx Tts Local Local text-to-speech via sherpa-onnx (offline, no cloud) |
25,101–25,150 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.