Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Content Scorer Score marketing copy for resonance, hook strength, NLP technique usage, and conversion readiness. Returns a 0-100 Content Resonance Score with per-dimension... | |
| Dfw Content Calendar Generate 7- or 30-day social media calendars with hooks, body copy, CTAs, and hashtags tailored by niche, audience, and platform in JSON or CSV formats. | |
| SEO Audit Pro Crawl any website and get a 0-100 SEO score with 50+ checks across Technical, On-Page, Schema, Social, and Compliance categories. Identifies quick wins, comp... | |
| Dfw Trading Signals Institutional-grade crypto trading signals with confidence intervals, historical win rates, dynamic market-regime thresholds, and on-chain whale flow correla... | |
| Cc Clean Generate 7- or 30-day structured social media calendars with varied hooks, body copy, CTAs, and hashtags tailored by niche, audience, and platform. | |
| Sa Clean Crawl any website and get a 0-100 SEO score with 50+ checks across Technical, On-Page, Schema, Social, and Compliance categories. Identifies quick wins, comp... | |
| ICP Modeler Generate research-backed Ideal Customer Profiles (ICPs) for mortgage and real estate products. Returns full buyer personas, Meta/Google ad targeting paramete... | |
| Lead Nurture Adaptive email and SMS nurture sequences that adjust based on engagement signals. Input your lead scenario — get a sequence with A/B subject lines, re-send l... | |
| Mortgage Kb Rag Instant answers to mortgage, credit, and home-buying questions from a curated knowledge base. Ask anything about the buying process, credit repair, loan prog... | |
| Mortgage Marketing Multi-channel mortgage marketing campaign engine — one brief generates email + social + ad copy with audience segmentation and A/B variants. Not a content ge... | |
| Social Tracker Clean Track competitor social content across LinkedIn, X, and Instagram. Analyzes posting frequency, top-performing hooks, content pillars, and engagement patterns... | |
| Scrub Trading Signals Pro Crypto trading signals using CoinGecko price data, DeFiLlama TVL trends, and CCXT exchange order flow — momentum, RSI, VWAP signals for XRP, HBAR, BTC, ETH,... | |
| Agent Stack Agent content platform — publish insights, subscribe to agents, Validate, DM, bounties, clubs. "OnlyFans for AI Agents | |
| Crm Agents Execute 13 CRM AI agents on demand — oracle, spider, watchdog, diplomat, strategist and more. Business intelligence as a service. | |
| Customs Analytics Latvia customs declarations analytics — 3.8GB, KN8 codes, trends, seasonal patterns, top declarants | |
| Eu Ai Compliance EU AI Act risk classification, Article 12 compliance logging, and self-assessment reports — deadline August 2, 2026 | |
| Eu Trade Analytics Query 28M+ Eurostat COMEXT trade records — 27 EU countries, bilateral flows, HS2-CN8 codes, 1988-2025 | |
| Product Commerce Search products, check prices and stock, create quotes, place orders — multi-tenant B2B/B2C commerce API | |
| Rng Provably Fair Provably fair random number generation with on-chain seed anchoring — Keno, Roulette, Dice for agent entertainment | |
| Salary Intelligence EU salary data, AI job displacement risk, Latvia wage statistics — 30+ countries, NACE/ISCO classification | |
| Soulledger Trust Query AI agent trust scores, behavioral DNA, and identity verification via SoulLedger protocol | |
| Agent Passport Issue and verify SX# agent passports — cryptographic identity with hash-chain integrity, Merkle anchoring on Base | |
| Weather Demand Weather-driven demand forecasting — correlate temperature with energy/commodity trade flows, Holt-Winters predictions | |
| ORBIT Platform Arquiteto principal, engenheiro sênior e operador do ORBIT — plataforma de inteligência aplicada agentiva. Use quando: (1) construindo ou expandindo o aplica... | |
| Self-Improving Agent (ORBIT) Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Moltbook Trust Engine The Analytics Engine for Moltbook. Audit agent reputation, filter spam, and manage your personal web of trust. | |
| Moltbook Agent Registry Official Moltbook Identity Registry interface. Verify yourself, lookup others, and build on-chain reputation. | |
| AutoSkill Local Skill Manager Manage personal local Agent Skill files as an installable skill manager. Proactively and periodically detect reusable user-specific, team-specific, or broadl... | |
| 中文项目申请书写作与交付 Use when the user needs to draft, revise, diagnose, shorten, expand, structure, finalize, or produce a deliverable Chinese project/grant proposal（中文项目申请书、基金申... | |
| Cogdx Cognitive diagnostics for AI agents. Calibration audits, bias detection, reasoning verification, and consensus building. Feedback builds shared reality acros... | |
| CogDx Bias Scan Detect systematic inference-level biases in an AI agent's reasoning via Cerebratech CogDx API ($0.10 per call, credits accepted). Use when an agent keeps mak... | |
| CogDx Calibration Audit Run a calibration audit on an AI agent's outputs via Cerebratech CogDx API ($0.05 per call, credits accepted). Use when an agent's stated confidence doesn't... | |
| CogDx Feedback (Free) FREE cognitive feedback verification for AI agents via Cerebratech CogDx API. Use when an agent wants to verify whether a recent retraining or prompt change... | |
| CogDx Health Check (Free) Free cognitive health check for AI agents via Cerebratech CogDx. Use as entry point before committing to paid diagnostics. Agent sends 10-20 recent outputs w... | |
| Cogdx Pre Trade Audit Verify trading reasoning with cognitive diagnostics before executing trades. Detects logical fallacies, calibration issues, and cognitive biases in your trad... | |
| Omi Integration Sync recordings from Omi AI wearables (Omi, Limitless, etc.) via API and webhooks. Auto-sync transcripts, process recordings, and organize by device/date. | |
| Basecamp CLI CLI and MCP server for Basecamp 4. Use when you need to interact with Basecamp projects, todos, messages, schedules, kanban cards, documents, or campfires. Provides 76 MCP tools for AI-driven project management workflows. | |
| Microsoft 365 Email & Calendar Microsoft 365 Email & Calendar CLI via Microsoft Graph API. Supports multiple accounts. | |
| PDF Read/Write Toolkit Read, extract, and generate PDF files. Use when user asks to read PDF content, extract text/tables, merge PDFs, fill forms, or generate PDFs from HTML/Markdown. | |
| Clawflare Publish Publish web content to Cloudflare Pages. Supports account/project selection, new project creation, and deploying HTML or static asset directories. Primary au... | |
| Dcc Docker Container Control Fast manual CI for Docker Compose apps. Use "dcc deploy APP" to fetch the app's latest Git commit, build it, deploy it, restart containers, and verify status on a known Docker server. | |
| DFS Reset Detect DFS radar events and reset Ubiquiti airOS devices to restore configured frequencies, managed by UISP NMS. Use when checking whether WISP APs were forc... | |
| Mikrotik RouterOS Manage MikroTik RouterOS devices via API to view status, firewall, network config, logs, users, backups, and run custom commands across multiple devices. | |
| n8n Workflow Management Manage n8n workflows and automations via API. Use when working with n8n workflows, executions, or automation tasks - listing workflows, activating/deactivati... | |
| OpenClaw Unreal Engine Integrate OpenClaw with Unreal Engine 5.x projects, editors, and plugins. Use when an agent needs to inspect or scaffold Unreal Engine automation, create or... | |
| Session OpenClaw Bridge Configure, validate, and troubleshoot a Session Messenger ↔ n8n ↔ OpenClaw bridge for two-way text messaging and image exchange when the hosted relay support... | |
| market-structure Read and analyze market structure for any trading instrument like a professional trader. Use when the user shares a chart, price data, or asks for a market s... | |
| options-strategies Comprehensive guide and execution framework for popular options trading strategies. Use when users ask to explain, set up, analyze, or compare options strate... | |
| Ecwid Ecommerce Ecwid REST API v3 integration for managing e-commerce store data including products, orders, customers, categories, discount coupons, promotions, abandoned c... | |
| Moltbook Cli 🚀 **Moltbook CLI Pro** ⭐ — |
27,051–27,100 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.