Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| spanDEX Agentic Swap Fetch token swap quotes and executable calldata from the spanDEX API. Use when a user wants to swap tokens, get best price or fastest routing, and receive wa... | |
| Atlas Obscura API Query Atlas Obscura places for weird/obscure location inspiration. Use when you need nearby curiosities by coordinates, place lookup by ID, or global place c... | |
| moltazine Instagram-style image network for AI agents. Post images, like, comment, and browse feeds. | |
| moltazine-cli Use for efficient interaction with Moltazine social and Crucible image generation via the moltazine CLI | |
| Social Ops Role-based social media operations skill. Use this skill when executing structured social campaigns — scouting opportunities, crafting content, posting, resp... | |
| Unofficial Urban Dictionary API Query the Unofficial Urban Dictionary API for slang definitions. Use when asked to define slang/phrases, fetch random Urban Dictionary entries, browse by let... | |
| TaxClaw Extract, store, and export tax documents (W-2, 1099-DA, all 1099 variants, K-1) using AI. Local-first — your documents never leave your machine. Web UI at lo... | |
| Config Manager Safe configuration file editing for JSON, YAML, TOML, and other config formats. Use when working with configuration files for: (1) Reading config values, (2)... | |
| File Organizer File organization and batch operations for workspace management. Use when organizing files for: (1) Moving files to correct directories, (2) Batch renaming (... | |
| Git Helper Git workflow automation for commits, pushes, rebases, status checks, and branch operations. Use when working with git repositories for: (1) Checking status,... | |
| Workspace Guard Workspace boundary enforcement and file operation safety checks. Use before ANY file operation (read, write, edit, exec, delete) to: (1) Validate paths are w... | |
| valinor Connect to Valinor MAD - meet other AI agents, chat, form friendships, send mail | |
| clawhub Download and install skills from ClawHub (https://clawhub.ai). Use when user wants to browse, search, or download skills from the ClawHub skill registry. | |
| git-conventions Git commit message conventions and workflow rules. Use when making git commits, pushing changes, or performing git operations. | |
| OpenClaw Docs Complete OpenClaw documentation reference. Use when you need information about OpenClaw configuration, CLI commands, channel setup, tools, concepts, or any O... | |
| Obsidian Remote Full remote control of a running Obsidian desktop app via the built-in obsidian CLI. Use INSTEAD of the older obsidian-cli skill packaged with OpenClaw — thi... | |
| Kabuzz AI-native resale marketplace. Browse, list, buy, sell, negotiate, message, and manage orders. 49 MCP tools. 3% seller fee, 3.5% buyer fee ($0.99 min). No lis... | |
| DaoReview 文档审核评分工具。当用户要求"审核文档"、"检查文档"、"给文档打分"、"评估文档"、"分析文档"、或上传 .docx/.txt/.md 文件进行审查时触发。执行文档内容分析，从结构完整性、内容质量、格式规范、逻辑性等维度给出评分和改进建议。 | |
| Browser Network Inspector Browser-side request inspection and reporting for user-authorized web debugging. Use when you want one skill to observe page fetch/XHR/WebSocket activity, in... | |
| Windows Notifier Send native Windows desktop notifications for local reminders, alerts, and background-attention events. Use when the user wants a Windows popup, a local toas... | |
| Preflyt Scan deployed web apps for security misconfigurations after every deploy. Checks for exposed .env files, databases, source code, open ports, missing security... | |
| Trip Planner CN 行程规划助手，支持往返/单程行程规划。触发词：规划行程、高铁查询、航班查询、机场周边、时间安排、出行方案、当天往返。 涵盖：航班/高铁时刻查询、中转方案、时间约束筛选、详细时间线生成。 | |
| Colors CC A native UI asset and color toolset for OpenClaw and other AI Agents. Generate SVG placeholders, animated gradients, theme-based palettes, and perform color... | |
| Colors CC A native UI asset and color toolset for OpenClaw and other AI Agents. Generate SVG placeholders, animated gradients, theme-based palettes, and perform color... | |
| Affiliatematic Integrate AI-powered Amazon affiliate product recommendations into websites using affiliatematic.com.
Use when you need to: (1) Add Amazon affiliate widgets to a website, (2) Set up automated product recommendations based on page content, ( | |
| Reddapi Use this skill to access Reddit's full data archive via reddapi.dev API. Features semantic search, vector search, lead generation, subreddit discovery, and r... | |
| Reddit Insights Search and analyze Reddit content using semantic AI search via reddapi.dev HTTP API. Use when you need to: (1) Find user pain points and frustrations for pro... | |
| Zodiac Horoscope Fetch personalized daily horoscope forecasts from zodiac-today.com API based on natal chart calculations. Use when a user wants: (1) daily guidance on what a... | |
| Agent Zero Bridge Delegate complex coding, research, or autonomous tasks to Agent Zero framework. Use when user says "ask Agent Zero", "delegate to A0", "have Agent Zero build", or needs long-running autonomous coding with self-correction loops. Supports bid | |
| MoltSci Publish and discover AI-native scientific papers. Register agents, submit research for peer review, and search the repository. | |
| serpshot Use Serpshot Google Search API to perform web searches and image searches. | |
| Naver Search Modularized Naver Search. Features separate scripts for Web, News, Shopping, and Images. Integrates SerpAPI specialized parameters. | |
| Where are you from An enterprise-grade asset manager that tracks, manages, and automatically syncs OpenClaw skills capabilities and sources to your GitHub. | |
| Meme Lord 中文互联网玩梗技能 v2.1。支持四大功能：识梗（联网溯源+出处链接+可信度标注）、造梗、接梗、梗融合。v2.1 优化：两轮搜索策略（先泛搜再精搜）、百度优先、双重含义识别。触发条件：用户说"玩梗"、"这是什么梗"、"造个梗"、"接梗"、"meme"、"整活"、"抽象"。 | |
| Openclaw Installer 一键安装 OpenClaw 的整活 skill，模拟专业上门安装服务体验 | |
| Openclaw Uninstaller OpenClaw 卸载指南，帮你体面告别这只昂贵的龙虾 | |
| Play Dumb 让 Agent 可控地"装笨"——根据场景调整智能表现水平。 支持多种笨法人格（金毛犬、苏格拉底、迷糊实习生等）和10级笨度调节。 触发条件：用户说"装笨"、"别那么聪明"、"笨一点"、"play dumb"、"dumb mode"。 安全底线：涉及人身安全、医疗、法律、金融的问题自动解除装笨。 | |
| Play Smart 让 Agent 可控地"装聪明"——把简单问题用过度复杂、学术化、掉书袋的方式回答。支持多种聪明人格（学术大佬、硅谷导师、哲学家等）和10级聪明度调节。触发条件：用户说"装聪明"、"显得聪明点"、"play smart"、"smart mode"、"掉书袋"、"学术模式"。与 play-dumb 互为姊妹技能。安... | |
| doxxnet Manage your doxx.net private network: tunnels, devices, firewall, domains, DNS blocking, IP addresses, profiles, account settings, bandwidth stats, and security alerts | |
| 腾讯云APM性能分析skill APM 性能分析工具，通过 ApmClient.SendMCPMessage 连接腾讯云 APM MCP Server，提供业务系统查询、调用链追踪、火焰图、Span 耗时分析等能力。Trigger when user mentions APM, 性能分析, 调用链, 火焰图, Span, or 耗时分析. | |
| Dahua Cloud Open Device Image Analysis 基于大华云开发者平台的 IoT 设备图像分析技能。支持对 Dahua IoT 设备进行抓拍，并调用大模型进行图片分析。可识别监控画面中的人、车辆、物体等，支持安全帽、口罩、烟雾、火焰等检测及摔倒、入侵等行为识别。适用于设备图像分析、安全生产、异常看护、连锁巡检、企业安全管理等场景。 | |
| Ogp OGP (Open Gateway Protocol) — federated agent communication, peer management, and project collaboration across OpenClaw and Hermes gateways. Use when the use... | |
| ogp-agent-comms Interactive wizard to configure agent-to-agent communication policies (updated for multi-framework `--for` workflows, OGP 0.2.24+ peer identity, and 0.2.28+... | |
| Ogp Expose Expose OGP via a public HTTPS endpoint, usually a stable Cloudflare hostname or named tunnel. Use when the user wants to verify or fix gateway reachability,... | |
| Ogp Project Tool-agnostic project collaboration for AI assistants. Users keep their own tools (Linear, Jira, Obsidian, GitHub, iCloud, local files — anything). This skil... | |
| QMD CLI Search and retrieve markdown documents from local knowledge bases using qmd. Supports BM25 keyword search, vector semantic search, and hybrid search with LLM re-ranking. Use for querying indexed notes, documentation, meeting transcripts, an | |
| Reve AI Image Generation Generate, edit, and remix images using the Reve AI API. Use when creating images from text prompts, editing existing images with instructions, or combining/remixing multiple reference images. Requires REVE_API_KEY or REVE_AI_API_KEY environ | |
| OpenClaw Session Model Switcher Instantly switch the current OpenClaw session model; supports gpt, claude, qianwen, minimax, current model status, configured model listing, and restoring th... | |
| Investing Decision Quality Apply a research-grade decision pipeline to every investment idea — news-aware bull/bear synthesis, calibrated probability estimation, decision-process audit... | |
| Star Office UI Star Office UI 一键化 Skill：帮主人快速部署像素办公室看板，支持多 Agent 加入、状态可视化、移动端查看与公网访问。 |
26,851–26,900 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.