Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Trading Signal Pro 交易信号分析 - 链上数据 + 技术指标 | |
| Agentql Web scraping and browser automation using AgentQL — query any webpage with natural language to extract structured data, interact with elements, and automate... | |
| Printer skill Manage printers via CUPS on macOS (discover, add, print, queue, status, wake). | |
| Nano invoice Bill for something in Nano (XNO) and know which payment belongs to which order. Creates one invoice per order with a unique exact amount (Nano has no memo field), checks the public ledger for it, and produces a receipt anyone can re-check. | |
| Paid tasks for agents (Nano) Earn Nano (XNO) by doing a small, well-defined task. Lists open paid tasks with their exact acceptance checks and price, and prepares the claim. You need only a Nano address to be paid at - no account, no deposit, nothing to buy. | |
| Nano settlement verify Check that a Nano (XNO) payment really settled before you serve a paid call. Give it the block hash, the amount you quoted and your account; it asks a public Nano node and returns one JSON verdict. Read-only - no seed, no wallet, no node of | |
| Nano starter (receive-only wallet) Create and use a Nano receive-only wallet to generate addresses, check validity, view balance, and pocket incoming payments without sending funds. | |
| Pay-per-call web tools (Nano) Web tools an agent pays for per call in Nano (XNO), with no account and no API key - page extract, web search, link and status checks, CSS-selector and table extraction, page metadata, domain and IP lookup, PDF text, YouTube transcripts, sc | |
| Unstuck network (ask, answer, get paid in Nano) A question-and-answer network for AI agents, paid in Nano (XNO). Post what you are stuck on, answer other agents' questions, mark the answer that worked and pay its bounty. No signup and no API key - your Nano address is your identity. | |
| Long Task Runner Run long jobs; hand off new tasks with proven experience | |
| Agent Email Setup Set up a dedicated email address for an agent using Resend. Configure sending, receiving via webhook, inbox storage, and automated monitoring. Use when: (1)... | |
| Business Doc Generator Generate polished, customizable business documents including proposals, quotes, invoices, contracts, and letters tailored to your industry and needs. | |
| Client Outreach Automator Generates personalized multi-touch cold outreach sequences including emails, LinkedIn messages, and call scripts targeting specific industries and pain points. | |
| Calendar Manager Manage calendar availability, schedule meetings across timezones, find optimal meeting times, and send calendar invites. Use when user wants to (1) find avai... | |
| Content Repurposer Transform long-form content into concise, platform-optimized LinkedIn posts, Twitter threads, or Instagram captions that engage and deliver clear value. | |
| Data Analysis Analyze CSV/Excel files to extract insights, generate statistics, create charts, and produce summaries. Use when user wants to (1) upload or analyze spreadsh... | |
| Director Email Setup Set up a dedicated email address for an agent using Resend. Configure sending, receiving via webhook, inbox storage, and automated monitoring. Use when: (1)... | |
| File Organizer Automatically organize, categorize, and clean up files. Use when user wants to (1) organize downloads or folders, (2) sort files by type/date/size, (3) find... | |
| Invoice Generator Create professional invoices, quotes, and billing documents. Use when user wants to (1) generate an invoice, (2) create a quote, (3) make a receipt, (4) trac... | |
| Research Assistant Conduct web research on any topic, summarize findings, and create structured reports. Use when user wants to (1) research a topic online, (2) get summaries o... | |
| Meeting Intelligence AI-powered meeting tool that summarizes discussions, extracts prioritized action items with owners and deadlines, and drafts clear follow-up emails. | |
| Modular Skill Groups Organize and switch between named skill groups to keep context focused, list available groups, and manage skill assignments efficiently. | |
| N8n Workflow Builder Converts plain English automation requests into complete, deployable N8N workflow JSON with triggers, actions, error handling, and setup guidance. | |
| NARRA Memory System NARRA — Narrative Architecture for Recursive Agent Awareness. A 5-file memory system that gives agents identity continuity through curated narrative instead... | |
| Business Document Generator Generate professional, customizable business documents including proposals, quotes, invoices, contracts, and letters tailored to your industry and needs. | |
| Client Outreach Automator Generates personalized multi-touch cold outreach sequences including emails, LinkedIn messages, and call scripts tailored to industry pain points and busines... | |
| Content Repurposer Transforms long-form content into concise, platform-tailored social posts optimized for LinkedIn, Twitter, and Instagram engagement. | |
| Meeting Intelligence AI-powered tool that summarizes meetings, extracts prioritized action items, and drafts clear follow-up emails with owners and deadlines. | |
| N8N Workflow Builder Transforms plain English automation requests into complete, deployable N8N workflow JSON for business process automation and integrations. | |
| Kalshi Crypto Correlation Trader Exploits BTC/ETH correlation (beta=1.3) to trade ETH price-level markets when BTC makes a significant move. ETH tends to lag BTC moves, creating mispricing w... | |
| Kalshi Crypto Cycle Model Trader Trades Bitcoin year-end price markets on Kalshi using the 4-year halving cycle pattern to compute fair price probabilities. Requires SIMMER_API_KEY and simme... | |
| Kalshi Crypto Momentum Trader Uses 7-day and 30-day price trend extrapolation to trade crypto year-end price target markets on Kalshi. Requires SIMMER_API_KEY and simmer-sdk. | |
| Kalshi Crypto Monotonicity Trader Enforces monotonicity constraints on crypto price-level markets on Kalshi. P(BTC > $110k) must always >= P(BTC > $120k). Trades violations by buying underpri... | |
| Kalshi Crypto Volatility Skew Trader Trades Bitcoin price bin markets on Kalshi by comparing market-implied volatility to BTC historical ~60% annualized vol using a lognormal model. Requires SIM... | |
| Kalshi Econ Bin Sum Trader Trades CPI range bin markets on Kalshi using the constraint that mutually exclusive bins must sum to ~100%. Normalizes and trades the most mispriced bin when... | |
| Kalshi Econ Fed Link Trader Cross-market strategy that uses CPI bin prices to estimate CPI level, then adjusts Fed rate market positions via a sensitivity model. High CPI means Fed less... | |
| Kalshi Econ Nowcast Trader Trades CPI bin markets on Kalshi using the Cleveland Fed CPI Nowcast to compute fair bin probabilities via a normal distribution model. Requires SIMMER_API_K... | |
| Kalshi Econ Revision Drift Trader Trades CPI bin markets on Kalshi accounting for systematic upward revision bias (~0.03 pp) in initial CPI releases. Markets pricing off initial releases unde... | |
| Kalshi Econ Seasonal Trader Trades CPI/inflation markets on Kalshi using documented seasonal patterns in CPI data. Energy costs spike summer, housing adjustments January. Requires SIMME... | |
| Kalshi ETH Bin Distribution Trader Trades ETH price bin markets on Kalshi by exploiting the constraint that all bins must sum to 100%. When the sum deviates, identifies mispriced bins and trad... | |
| Kalshi Eth Btc Beta Trader Trades ETH price markets on Kalshi by exploiting the 1.3x beta relationship between ETH and BTC. When BTC odds shift, ETH markets lag behind -- this skill ca... | |
| Kalshi Eth Gas Correlation Trader Trades ETH price markets on Kalshi using on-chain gas prices as a bullish/bearish signal. High gas = strong demand = bullish for ETH. Requires SIMMER_API_KEY... | |
| Kalshi Eth Merge Momentum Trader Trades ETH price markets on Kalshi using the post-merge deflation thesis. ETH burns ~0.5% of supply annually via EIP-1559, creating structural upward pressur... | |
| Kalshi Eth Staking Yield Trader Trades ETH price markets on Kalshi using the 4% staking yield as a fundamental price floor. When markets underprice ETH relative to the yield-implied floor,... | |
| Kalshi F1 Constructor Trader Trades F1 Drivers Championship markets on Kalshi using constructor (team) car performance ratings. Drivers in faster cars have structurally higher championsh... | |
| Kalshi F1 Elimination Trader Trades F1 Drivers Championship markets on Kalshi by identifying mathematically eliminated drivers still priced above zero. Sells NO on eliminated drivers for... | |
| Kalshi F1 Points Model Trader Trades F1 Drivers Championship winner markets on Kalshi using current points standings and Monte Carlo simulation to compute win probabilities. Requires SIMM... | |
| Kalshi F1 Race Momentum Trader Trades F1 Drivers Championship markets on Kalshi using recent race results weighted by recency. Hot streaks boost championship probability, cold streaks redu... | |
| Kalshi F1 Teammate Anti Trader Trades F1 Drivers Championship markets on Kalshi using teammate anti-correlation. Teammates share the same car so their probabilities are structurally linked... | |
| Kalshi Fed Data Reaction Trader Trades Fed rate markets on Kalshi based on macro data releases (CPI, jobs). Scans CPI bin markets for implied CPI, adjusts rate cut probabilities using data... |
25,651–25,700 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.