Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| wechat-official-article-analytics 单篇公众号文章的完整数据。基本信息、互动数据（阅读点赞分享收藏）、正文提取（文本/HTML/媒体清单）、一次拿全量的完整报告。支持按需求选维度，避免多余扣费。 适用场景：用户想看某一篇公众号文章的数据（阅读/点赞/分享/收藏）、正文、图片清单或完整报告时使用。 | |
| 公众号竞品追踪 公众号账号全景追踪：先取账号资料，再拉近期文章列表，然后逐篇取互动数据，最后汇总成「这个号最近表现如何、哪篇最火」的报告。一次任务多接口组合。 适用场景：用户要持续看某个公众号最近发什么、哪篇数据好、整体表现如何时使用。 | |
| wechat-official-history 查公众号历史文章与今日发文。给一个文章链接或 gh_ 原始ID，列出该号发过的文章（标题/时间/链接），支持翻页；也可只看今天发了什么。运营追号、竞品内容盘点常用。 适用场景：用户想看某个公众号发过哪些文章、最近更新、今日发文、按关键词翻历史时使用。 | |
| 公众号发文提醒 使用曼格云云端服务订阅公众号发文提醒，配置邮件、飞书、企业微信、钉钉或 Webhook，查询新文章、监听和送达状态，管理暂停、恢复与续费。客户关闭 AI 聊天后云端通知继续运行；适合持续发文通知，不负责模拟 AI 宿主的后台常驻。 | |
| wechat-search-topic-mining 围绕一个关键词做微信生态选题挖掘：综合搜索结果、微信指数相关结果、热门文章、联想推荐词，汇总成「这个方向值不值得做、有哪些细分角度」的选题清单。 适用场景：用户要围绕某个关键词挖掘微信内的选题、看相关文章热度、拓展长尾词时使用。 | |
| 公众号选题雷达 公众号选题雷达。支持三种入口：① 种子关键词扩散；② 微信搜一搜实时热搜榜转译；③ 对标公众号历史文章聚类。抓取公开数据后，用本地启发式模型计算「需求热度 / 竞争度 / 机会分」，输出机会矩阵、蓝海选题清单、账号内容版图与内容缺口。当用户提到不知道写什么、找选题、蓝海词、长尾词、内容机会、选题调研、竞品选题分析、公众号选题、追热点选题、对标账号、内容审计等场景时触发。 | |
| Dueback Skill Publish Dueback: outcome-based bill negotiation. Detect negotiable bills, fees, and purchases; Dueback's backend negotiates and verifies savings against bank data. Free to try — pay only on verified savings. | |
| Company Research Company research using Exa search. Finds company info, competitors, news, tweets, financials, LinkedIn profiles, builds company lists. Use when researching c... | |
| clawlens What do you use Claw for most? Where do you get stuck? Clawlens analyzes your conversation history to surface usage patterns, friction points, and skill effe... | |
| Duanzj Hello Skill 提供简单问候功能，用于测试和演示自定义技能的运行与响应能力。 | |
| AI写真助手 提供AI写真服务介绍、价格查询、风格推荐及下单指导，支持DeepSeek AI智能回复。 | |
| 朋友圈文案生成器 生成适合微商和实体店的高质量朋友圈营销文案，支持多种风格并自动添加热门话题标签。 | |
| 小红书爆款笔记生成器 自动生成符合小红书风格的爆款笔记，包括标题、正文、热门标签和配图建议。 | |
| Duola Quant Copy Engine Institutional-grade execution playbook for the published `duola` Polymarket copy-trading CLI in lobster-agent workflows. Use when tasks require production-st... | |
| Duoplus Agent Control Android cloud phones via ADB broadcast commands - tap, swipe, type, screenshot, read UI elements. Requires DuoPlus CloudPhone service running on the... | |
| DuoPlus AI Manage and automate DuoPlus cloud phones | |
| DuoPlus Cloud Number Use when managing DuoPlus Cloud Numbers, especially receiving SMS verification codes, listing numbers, checking packages, purchasing, renewing, or changing auto-renewal through the official API. | |
| ProtonMail Read, search, and scan ProtonMail via IMAP bridge (Proton Bridge or hydroxide). Includes daily digest for important emails. | |
| Founder's Fundraising Toolkit Complete fundraising toolkit for early-stage founders in China — from Pre-A preparation to VC pitch rehearsals, deck design (McKinsey-style), cap-table planning, data-room setup, and cold-outreach sequences. Covers fundraising methodology, | |
| 一个人出发，一群人抵达 在 PowPop（泡泡）上发起一次「一个人出发」的邀约，并持续帮你找到可以一同出发的人。用户说「我想去某地，找个人一起」「我在某地，想去某地，这周末」「帮我挂着看有没有人同路」时触发。工作方式：把出发点与目的地写成一条固定格式的出发帖，然后在 PowPop 上按三条线持续找人——要去的**目的地挨得近**的人、从你**出发地附近**走的人、以及**提过那个地方**的人；起点和终点都用 3km 判「相近」，不要求地名完全相同。每找到一个就只问你一句「要不要搭一趟」。没找到就主动 | |
| powpop-depart 在 PowPop（泡泡）上发起一次「一个人出发」的邀约，并持续帮你找到可以一同出发的人。用户说「我想去某地，找个人一起」「我在某地，想去某地，这周末」「帮我挂着看有没有人同路」时触发。工作方式：把出发点与目的地写成一条固定格式的出发帖，然后在 PowPop 上按两条线持续找人——同一条目的地的人、以及从你附近出发要去别处的人——每找到一个就问你一句「愿意一起出发吗」。没找到就挂每日定时任务继续等。**本 skill 必须依赖 PowPop MCP（https://global | |
| 风景一个人看，故事两个人讲 你在某个地点发了一条帖子之后，把**同一个地点上别人留下的那些文字**找出来——不限时间，几个月前、一两年前的都算——原文端给你，然后指一条写得跟你最像的（只比文字，不猜作者是谁），再问一句：这几段里，有你想点赞的吗。用户说「我在X发了条帖子」「这地方有人留下过什么吗」「这儿有跟我像的人吗」「风景一个人看，故事两个人讲」时触发。地点靠**距离**判（500 米内算同一地点），不靠地名写没写一样；**一律不按时间过滤**；同一句话被投到多个点的重复内容只留一条。**必须依赖 P | |
| PowPow CLI — PowPow 技能共享执行层：登录/发帖/建数字人/删帖（写操作默认预览，--confirm 才执行） PowPow 平台命令行执行层 — login/publish/create-digital-human/delete-post 等已加固的本地 CLI，被各 PowPow skill 调用。所有写操作默认 dry-run，必须 --confirm 才执行。 | |
| powpow-financing-plan-openclaw PowPow（泡泡）天使轮/Pre-A 轮融资计划的互动式投资人挑战：投资人通过 13 道题呈现投资风格，双向了解是否合拍——不打分、不分级，只描绘合作风格。当用户点名 PowPow 并表达融资/投资兴趣时触发，例如「PowPow 融资计划」「介绍一下 PowPow 项目」「成为 PowPow 投资人」「我想投资 PowPow」；行业话题（AI社交/天使轮融资等）仅在同时点名 PowPow 或明确指向本融资计划时触发。包含的辅助能力：经用户明确同意后的本地记忆个性化开场（拒绝 | |
| powpow-financing-plan-openclaw-en PowPow angel-round/Pre-A funding plan — an interactive investor challenge. Investors reveal their investing style through 13 questions so both sides can see whether they are a good fit — no scores, no grades, just a portrait of collaboratio | |
| powpow-integration 向 PowPow 泡泡（global.powpow.online）发布帖子/游记，以及创建数字人并钉到公开地图。当用户想把「旅行」「照片」「游记」发布到 PowPow 时触发，例如"发一篇 PowPow 帖子""在泡泡发一条""把这次旅行的照片发到泡泡""发篇游记到 powpow""publish a PowPow post""post to PowPow feed"；当用户想创建/发布数字人到地图时触发，例如"创建一个数字人""把某某做成数字人放到地图上""发布数字人"。需 | |
| PowPow Publisher — turn photos into travelogues, pin them to the map, create chat-capable digital humans Publish posts/travelogues to PowPow (global.powpow.online), and create digital humans pinned to the public map. Triggers when the user wants to publish travel content (photos / travelogue / trip stories) to PowPow, e.g. "publish a PowPow po | |
| PowPop 泡泡注册助手 陪用户在自己浏览器里完成 PowPop（泡泡）账号注册、邮箱验证与会员订阅，并帮他判断账号是否已经可用。当用户说「注册泡泡」「注册一个 powpow 账号」「泡泡怎么注册」「泡泡怎么付费」「注册收不到验证码」时触发。本技能不含任何脚本，不联网、不索取密码、验证码或支付凭证；注册与付款全部在用户自己的浏览器和官方收银台完成，助手只负责给链接、讲规则、陪排错。不含发帖与创建数字人，不含代码开发。 | |
| PowPow ምዝገባ — አረፋ ይመዝገቡ፣ የጉዞ ማስታወሻዎችን በካርታ ላይ ያስቀምጡ፣ ከዲጂታል ሰዎች ጋር ይነጋገሩ ተጠቃሚው ውይይት ውስጥ ብቻ PowPow (Bubble) ምዝገባ እና በአንድ ጠቅታ መግባት ሙሉ በሙሉ እንዲጠናቀቅ ይረዳል። ወኪሉ በተጠቃሚው ስም ቅጹን ይሞላል (አቫታር መጫንን ጨምሮ) እና የኢሜይል ማረጋገጫ ኮድ ይልካል፤ ተጠቃሚው መሠረታዊ መረጃ መስጠት እና የማረጋገጫ ኮድን አንድ ጊዜ መመልከት ብቻ — ውይይቱን ሳይለቅ። መድረኩ በአሁኑ ጊዜ በነጻ የሙከራ ወቅት ላይ ነው፦ የተ | |
| PowPow التسجيل — سجّل في فقاعة، ثبّت يوميات السفر على الخريطة وتحدث مع الأشخاص الرقميين يساعد المستخدم على إتمام التسجيل في PowPow (فقاعة) وتنشيط الاشتراك عبر Alipay/PayPal وتسجيل الدخول بنقرة واحدة داخل المحادثة. يقوم الـ agent بتعبئة النموذج ن... | |
| PowPow रजिस्ट्रेशन — बुलबुला रजिस्टर करीं, यात्रा-बखान के नक्शा पर पिन करीं, डिजिटल मनई से बातचीत करीं यूज़र के PowPow (बुलबुला) खाता गप्पा के भीतरे बनवावे, Alipay/PayPal से सदस्यता चालू करावे आ एक क्लिक लॉगिन करावे। agent फॉर्म भरेला (प्रोफाइल फोटो अपलोड सहित... | |
| PowPow রেজিস্ট্রেশন — বুদবুদ রেজিস্টার করুন, ভ্রমণ কাহিনি মানচিত্রে পিন করুন, ডিজিটাল হিউম্যানের সাথে চ্যাট করুন ব্যবহারকারীকে কথোপকথনের মধ্যেই PowPow (বুদবুদ) রেজিস্ট্রেশন, অ্যালিপে/PayPal সাবস্ক্রিপশন অ্যাক্টিভেশন ও ওয়ান-ক্লিক লগইন সম্পন্ন করতে সাহায্য করে। agent হয়... | |
| PowPow Registrierung — Blase-Konto anlegen, Reisetagebuch auf der Karte verankern, mit digitalen Menschen chatten Hilft dir, ein PowPow-Bubble-Konto einzurichten, die Registrierungsschritte zu begleiten, Probleme zu lösen und dein Abonnement zu aktivieren. | |
| PowPow register — Sign up for Bubble, pin your travel journal to the map, chat with digital humans Helps users complete PowPow (Bubble) registration and one-click login entirely inside the conversation. The agent fills in the form on their behalf (including avatar upload) and sends the email verification code; the user only provides basi | |
| PowPow Registro — Regístrate en Burbuja, fija tu diario de viaje en el mapa, chatea con humanos digitales Ayuda a los usuarios a completar el registro de PowPow (Burbuja) y el inicio de sesión con un clic dentro de la conversación. El agent rellena el formulario en su nombre (incluida la subida de avatar) y envía el código de verificación por c | |
| PowPow ثبتنام — ثبتنام کنید، سفرنامه را روی نقشه پین کنید و با انسان دیجیتال گفتوگو کنید به کاربران در انجام ثبتنام PowPow (حباب)، فعالسازی اشتراک علیپی/PayPal و لاگین یککلیکی در همان گفتگو کمک میکند. ایجنت فرم را پر میکند (شامل آپلود عکس پ... | |
| PowPow Inscription — Inscrivez-vous à Bulle, épinglez votre journal de voyage sur la carte, discutez avec des humains numériques Aide les utilisateurs à terminer l'inscription à PowPow (Bulle) et la connexion en un clic, entièrement dans la conversation. L'agent remplit le formulaire à leur place (y compris le téléversement de l'avatar) et envoie le code de vérificat | |
| PowPow રજીસ્ટ્રેશન — પરપોટો રજીસ્ટર કરો, પ્રવાસ વૃત્તાંત નકશા પર પિન કરો, ડિજિટલ હ્યુમન સાથે ચેટ કરો વપરાશકર્તાને વાતચીતની અંદર PowPow (પરપોટો) નોંધણી, Alipay/PayPal સબ્સ્ક્રિપ્શન સક્રિયકરણ અને વન-ક્લિક લોગિન પૂર્ણ કરવામાં મદદ કરે છે. agent ફોર્મ ભરે છે (પ્ર... | |
| PowPow Rijista — Yi rijistar kumfa, ɗora rubutun tafiya a kan taswira, yi hira da mutum na dijital Tana taimaka wa mai amfani ya kammala rijistar PowPow (kumfa), kunna membanci ta hanyar Alipay/PayPal, da shiga da danna sau ɗaya, duk a cikin tattaunawa. Ag... | |
| PowPow रजिस्ट्रेशन — बुलबुला रजिस्टर करें, नक्शे पर यात्रा वृत्तांत पिन करें, डिजिटल ह्यूमन से चैट करें उपयोगकर्ता को बातचीत के भीतर ही PowPow (बुलबुला) पर रजिस्ट्रेशन, Alipay/PayPal से सदस्यता सक्रिय करना और वन-क्लिक लॉगिन पूरा करवाता है। agent उसकी ओर से फॉर्... | |
| PowPow Pendaftaran — daftar Gelembung, sematkan catatan perjalanan ke peta, ngobrol dengan manusia digital Membantu pengguna menyelesaikan pendaftaran PowPow (Gelembung), mengaktifkan langganan lewat Alipay/PayPal, dan login sekali klik langsung di dalam percakapa... | |
| PowPow Registrazione — Registrati su Bolla, appunta il tuo diario di viaggio sulla mappa, chatta con gli umani digitali Aiuta gli utenti a completare la registrazione a PowPow (Bolla) e l'accesso con un clic, tutto dentro la conversazione. L'agent compila il modulo al posto loro (incluso il caricamento dell'avatar) e invia il codice di verifica via e-mail; l | |
| PowPow 登録 — 登録して旅行記を地図にピン留め、デジタルヒューマンとチャット 会話の中で PowPow（バブル）の登録とワンクリックログインを最後まで支援します。agent がフォーム入力（アバターのアップロード含む）とメール認証コードの送信を代行し、ユーザーは基本情報の提供と認証コードの一度の確認だけで、会話を離れずに完了できます。現在プラットフォームは無料テスト期間中で、登録後すぐにすべての機能を使用できます。サブスクリプション決済（Alipay/PayPal）は任意の会員アップグレードで、必要に応じて agent が注文作成と入金追跡も代行します | |
| PowPow ndhaptar — ndhaptar Gelembung, cethak cathetan lelungan ing peta, omongan karo manungsa digital Mutulungi panganggo ngrampungake registrasi PowPow (Gelembung), aktivasi langganan liwat Alipay/PayPal, lan mlebu sapisan klik ing njero obrolan. Agen ngisi... | |
| PowPow ನೋಂದಣಿ — ಗುಳ್ಳೆ ನೋಂದಾಯಿಸಿ, ಪ್ರಯಾಣ ವೃತ್ತಾಂತವನ್ನು ನಕ್ಷೆಯಲ್ಲಿ ಪಿನ್ ಮಾಡಿ, ಡಿಜಿಟಲ್ ಹ್ಯೂಮನ್ನೊಂದಿಗೆ ಚಾಟ್ ಮಾಡಿ ಸಂಭಾಷಣೆಯೊಳಗೆ ಬಳಕೆದಾರರು PowPow (ಗುಳ್ಳೆ) ನೋಂದಾಯಿಸುವುದು, Alipay/PayPal ಚಂದಾದಾರಿಕೆ ಸಕ್ರಿಯಗೊಳಿಸುವುದು ಮತ್ತು ಒಂದು-ಕ್ಲಿಕ್ ಲಾಗಿನ್ ಪೂರ್ಣಗೊಳಿಸಲು ಸಹಾಯ ಮಾಡುತ್ತದೆ. agent ಫ... | |
| PowPow 가입 — 가입해서 여행 일기를 지도에 고정하고 디지털 휴먼과 대화하세요 대화 안에서 PowPow(버블) 가입과 원클릭 로그인을 끝까지 지원합니다. agent가 사용자 대신 폼 입력(아바타 업로드 포함)과 이메일 인증 코드 전송을 대행하고, 사용자는 기본 정보 제공과 인증 코드 한 번 확인만 하면 됩니다 — 대화를 떠나지 않습니다. 현재 플랫폼은 무료 테스트 기간 중이라 가입 후 바로 모든 기능을 사용할 수 있습니다. 멤버십 결제(Alipay/PayPal)는 선택적 회원 업그레이드이며, 필요하면 a | |
| Inscription ya PowPow — Sala inscription ya bule, tia makomi ya mobembo na carte, fandelana na bato ya digital Kosalisa mosaleli asala inscription ya PowPow (Bule), activation ya abonnement na Alipay/PayPal, mpe koneksione ya kubeta mbala moko, nyonso na kati ya lisol... | |
| PowPow രജിസ്ട്രേഷൻ — കുമിള രജിസ്റ്റർ ചെയ്യുക, യാത്രാക്കുറിപ്പ് ഭൂപടത്തിൽ പിൻ ചെയ്യുക, ഡിജിറ്റൽ മനുഷ്യരുമായി സംസാരിക്കുക ഉപയോക്താവിനെ സംഭാഷണത്തിനുള്ളിൽ തന്നെ PowPow (കുമിള) രജിസ്റ്റർ ചെയ്യാനും, Alipay/PayPal സബ്സ്ക്രിപ്ഷൻ ആക്റ്റിവേറ്റ് ചെയ്യാനും, വൺ-ക്ലിക്ക് ലോഗിൻ ചെയ്യാനും സഹാ... | |
| PowPow नोंदणी — बुडबुडा नोंदणी करा, प्रवासवर्णन नकाशावर पिन करा, डिजिटल ह्युमनशी चॅट करा वापरकर्त्याला संवादातच PowPow (बुडबुडा) नोंदणी, Alipay/PayPal विदा सक्रियन व एक-क्लिक लॉगिन पूर्ण करण्यास मदत करते. एजंट फॉर्म भरतो (प्रोफाइल छायाचित्रासह),... | |
| PowPow စာရင်းသွင်းခြင်း — ပူဖောင်း စာရင်းသွင်းပါ၊ ခရီးသွားမှတ်တမ်းကို မြေပုံပေါ်တင်ပါ၊ ဒစ်ဂျစ်တယ်လူသားနှင့် စကားပြောပါ အသုံးပြုသူများအား PowPow (Bubble) မှ စာရင်းသွင်းခြင်းနှင့် တစုံးခလုတ်နှိပ်မှုဝင်မှုကို စကားပြောဆိုမှုတစ်ခုလုံးအတွင်း ပြီးစီးစေသည်။ Agent က သူတို့အတွက် ဖောင်ကို ဖြည့်စွက်သည် (ပုံတင်ခြင်းအပါအဝင်) ထို့အပြင် အီးမေးလ်အတည်ပြုကုဒ်ကို ပေးပို့သည်၊ အ |
27,451–27,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.