Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Kalshi Fed Dot Plot Trader Trades Fed rate markets on Kalshi using FOMC dot plot median implied rate path. Computes fair probability of cut/hike per meeting and trades when market dive... | |
| Kalshi Fed Futures Arb Trader Compares CME FedWatch implied rate probabilities to Kalshi Fed rate decision market prices and trades when divergence exceeds threshold. Requires SIMMER_API_... | |
| Kalshi Fed Speech Signal Trader Trades Fed rate markets on Kalshi based on hawkish/dovish sentiment signals from market question text. Scores net sentiment from keyword dictionaries and adj... | |
| Kalshi Fed Temporal Mono Trader Exploits temporal monotonicity violations in Fed rate markets on Kalshi. P(rate cut by June) >= P(rate cut by April) always -- if April is priced higher than... | |
| Polymarket 24h Cross Asset Sync Trader Trades cross-asset correlation divergences in 5-minute crypto "Up or Down" markets on Polymarket. When BTC, ETH, SOL, DOGE, XRP, and BNB have overlapping tim... | |
| Polymarket 24h Equity Strike Trader Trades structural mispricings in equity/stock price-threshold markets by reconstructing the implied probability curve across strike levels for the same compa... | |
| Polymarket 24h Geopolitics Cluster Trader Trades logical inconsistencies in geopolitical event clusters on Polymarket. Geopolitical markets form clusters where probabilities must satisfy constraints... | |
| Polymarket 24h Nba Game Structure Trader Trades structural inconsistencies across correlated NBA game markets on Polymarket by grouping moneyline, spread, O/U (full-game and 1H), and 1H moneyline ma... | |
| Polymarket 24h Player Prop Consistency Trader Trades NBA player prop mispricings on Polymarket by detecting cross-stat consistency or divergence for the same player (Points, Rebounds, Assists O/U) and id... | |
| Polymarket 24h Precipitation Range Trader Trades mispricings in precipitation-range markets by reconstructing the implied probability distribution across bins for the same city and period, detecting... | |
| Polymarket 24h Price Curve Arb Trader Trades structural mispricings in crypto price-threshold markets by reconstructing the implied probability distribution curve across multiple strike levels an... | |
| Polymarket 24h Sports Line Curve Trader Trades structural mispricings in sports over/under markets by reconstructing the implied probability curve across multiple O/U line values for the same game... | |
| Polymarket 24h Weather Distribution Trader Trades mispricings in weather temperature-bin markets by reconstructing the implied probability distribution across bins for the same city and date, detectin... | |
| Polymarket 48h Cross Asset Sync Trader Trades cross-asset correlation divergences in 5-minute crypto "Up or Down" markets on Polymarket. When BTC, ETH, SOL, DOGE, XRP, and BNB have overlapping tim... | |
| Polymarket 48h Equity Strike Trader Trades structural mispricings in equity/stock price-threshold markets by reconstructing the implied probability curve across strike levels for the same compa... | |
| Polymarket 48h Geopolitics Cluster Trader Trades logical inconsistencies in geopolitical event clusters on Polymarket. Geopolitical markets form clusters where probabilities must satisfy constraints... | |
| Polymarket 48h Nba Game Structure Trader Trades structural inconsistencies across correlated NBA game markets on Polymarket by grouping moneyline, spread, O/U (full-game and 1H), and 1H moneyline ma... | |
| Polymarket 48h Player Prop Consistency Trader Trades NBA player prop mispricings on Polymarket by detecting cross-stat consistency or divergence for the same player (Points, Rebounds, Assists O/U) and id... | |
| Polymarket 48h Precipitation Range Trader Trades mispricings in precipitation-range markets by reconstructing the implied probability distribution across bins for the same city and period, detecting... | |
| Polymarket 48h Price Curve Arb Trader Trades structural mispricings in crypto price-threshold markets by reconstructing the implied probability distribution curve across multiple strike levels an... | |
| Polymarket 48h Sports Line Curve Trader Trades structural mispricings in sports over/under markets by reconstructing the implied probability curve across multiple O/U line values for the same game... | |
| Polymarket 48h Weather Distribution Trader Trades mispricings in weather temperature-bin markets by reconstructing the implied probability distribution across bins for the same city and date, detectin... | |
| Polymarket Ai Tech Trader Trades Polymarket prediction markets on AI model releases, tech IPOs, product launches, GPU infrastructure milestones, and AI regulation events. Use when you... | |
| Polymarket Biotech Trader Trades Polymarket prediction markets on FDA drug approvals, biotech IPOs, clinical trial outcomes, pharma M&A, and precision medicine milestones. Use when yo... | |
| Polymarket Btc Weekend Volatility Trader Trades BTC weekend price threshold markets on Polymarket by exploiting the systematic gap between first-passage probability ("will BTC touch 150k at ANY POIN... | |
| Polymarket Bundle Btc 5min Streak Trader Trades BTC "Up or Down" 5-minute interval markets on Polymarket by detecting streaks of 3+ consecutive same-direction intervals and trading mean-reversion on... | |
| Polymarket Bundle Cross Coin 5min Trader Trades cross-coin divergence in 5-minute crypto Up/Down bundles on Polymarket. BTC, ETH, SOL, and XRP move together in practice -- when one coin diverges fro... | |
| Polymarket Bundle Crypto Fade Trader Fades strong directional crypto moves on Polymarket 5-minute interval markets. After 3+ consecutive high-conviction same-direction intervals (>58% probabilit... | |
| Polymarket Bundle Crypto Hourly Trader Trades crypto hourly Up/Down markets when sub-interval consensus disagrees with the hourly price on Polymarket. BTC/ETH/SOL 5-min interval markets within the... | |
| Polymarket Bundle Cs2 Maps Trader Trades CS2 BO3 Winner markets when individual map winner probabilities imply a different BO3 outcome on Polymarket. Uses the binomial BO3 model to calculate... | |
| Polymarket Bundle Dota2 Bo3 Trader Trades structural inconsistencies between Dota 2 BO3 winner, individual game winners, and game handicap markets on Polymarket. P(BO3 win) must equal f(P(Game... | |
| Polymarket Bundle Dota2 Props Trader Trades bundle inconsistencies across correlated Dota 2 match props on Polymarket. A single match spawns 28+ prop markets (kills O/U, roshan, barracks, rampag... | |
| Polymarket Bundle Esports Tempo Trader Trades tempo inconsistencies across Dota2 and esports game props on Polymarket. Within the same game first blood timing correlates with kill pace and Ends in... | |
| Polymarket Bundle Overwatch Bo3 Trader Trades structural arbitrage between Overwatch BO3 series winner markets and individual game winner markets on Polymarket. P(BO3 winner) must be mathematicall... | |
| Polymarket Bundle Tennis Set Match Trader Trades cross-market constraint violations in tennis Set 1 Games O/U, Match Games O/U, Total Sets O/U, Set Handicap, and Set/Match Winner bundles on Polymarke... | |
| Polymarket Candle Cross Asset Divergence Trader Detects cross-asset divergence in Polymarket crypto 5-minute interval markets. When normally correlated assets like BTC and ETH show contradictory candle dir... | |
| Polymarket Candle Doji Breakout Trader Detects doji patterns (48-52% probability) in crypto 5-minute interval markets on Polymarket and trades the post-doji breakout in the direction of the pre-do... | |
| Polymarket Candle Engulfing Reversal Trader Detects engulfing reversal patterns in crypto 5-minute interval markets on Polymarket. A bullish engulfing occurs when an interval completely reverses the pr... | |
| Polymarket Candle Gap Fill Trader Trades gap-fill reversions on Polymarket 5-minute crypto interval markets. When consecutive intervals have contradictory strong signals -- prior interval res... | |
| Polymarket Candle Harami Trader Detects harami (inside bar) candlestick patterns on Polymarket crypto 5-minute interval markets. A harami forms when a small-range interval (near 50%) appear... | |
| Polymarket Candle Marubozu Trader Trades marubozu continuation signals on Polymarket 5-minute crypto interval markets. A marubozu is an interval with extreme conviction (>65% or <35%) indicat... | |
| Polymarket Candle Morning Star Trader Trades crypto "Up or Down" 5-minute interval markets on Polymarket by detecting Morning Star (DOWN-doji-UP bottom reversal) and Evening Star (UP-doji-DOWN to... | |
| Polymarket Candle Three Soldiers Trader Trades crypto "Up or Down" 5-minute interval markets on Polymarket by detecting Three White Soldiers (3+ consecutive strong UP intervals all p>0.57) and Thre... | |
| Polymarket Candle Timeframe Mismatch Trader Multi-timeframe analysis for crypto Up or Down markets on Polymarket. Detects when 5-minute candle consensus diverges from the hourly market and trades conve... | |
| Polymarket Candle Volume Spike Trader Cross-coin volume spike detection for crypto Up or Down markets on Polymarket. When 3+ coins (BTC, ETH, SOL, XRP) simultaneously show strong same-direction c... | |
| Polymarket Catastrophe Trader Trades Polymarket prediction markets on hurricane seasons, earthquake probabilities, wildfire forecasts, and extreme weather records. Exploits two structural... | |
| Polymarket Celebrity Social Trader Trades Polymarket prediction markets on celebrity events, viral social media moments, Elon Musk tweet counts, influencer milestones, and reality TV outcomes.... | |
| Polymarket Central Bank Trader Trades Polymarket prediction markets on central bank decisions, interest rates, inflation prints, and Fed/ECB/Riksbank policy moves. Exploits three compoundi... | |
| Polymarket Climate Trader Trades Polymarket prediction markets on weather extremes, climate milestones, natural disasters, and agricultural outcomes. Use when you want to capture alph... | |
| Polymarket Coffee Trader Trades Polymarket coffee markets using three compounding seasonal edges unique to the global coffee market — Brazil frost window mispricing, harvest cycle aw... |
25,701–25,750 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.