Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Firecrawl Build Search Integrate Firecrawl `/search` into product code and agent workflows. Use when an app needs discovery before extraction, when the feature starts with a query... | |
| Firecrawl Crawl Bulk extract content from an entire website or site section. Use this skill when the user wants to crawl a site, extract all pages from a docs section, bulk-... | |
| Firecrawl Download Download an entire website as local files — markdown, screenshots, or multiple formats per page. Use this skill when the user wants to save a site locally, d... | |
| Firecrawl Interact Control and interact with a live browser session on any scraped page — click buttons, fill forms, navigate flows, and extract data using natural language pro... | |
| Firecrawl Map Discover and list all URLs on a website, with optional search filtering. Use this skill when the user wants to find a specific page on a large site, list all... | |
| Firecrawl Scrape Extract clean markdown from any URL, including JavaScript-rendered SPAs. Use this skill whenever the user provides a URL and wants its content, says "scrape"... | |
| frontend-design Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults. | |
| Github Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries. | |
| github-actions-docs Use when users ask how to write, explain, customize, migrate, secure, or troubleshoot GitHub Actions workflows, workflow syntax, triggers, matrices, runners, reusable workflows, artifacts, caching, secrets, OIDC, deployments, custom actions | |
| harness This skill should be used for multi-session autonomous agent work requiring progress checkpointing, failure recovery, and task dependency management. Triggers on '/harness' command, or when a task involves many subtasks needing progress per | |
| Home Assistant Backup Control Home Assistant smart home devices, run automations, and receive webhook events. Use when controlling lights, switches, climate, scenes, scripts, or a... | |
| loop Run a prompt or skill in this session on a recurring or variable interval (e.g. /loop 5m /foo). | |
| migrate-to-builds Test that a Cloud Agent environment will work with prebuilt environment builds and recommend any required changes. Use when the user wants to migrate to builds, test build compatibility, or follow the Builds page setup-agent flow. | |
| Migrate to Codex Migrate supported instruction files, skills, agents, and config into Codex | |
| migrate-to-skills Convert 'Applied intelligently' Codex rules (.cursor/rules/*.mdc) and slash commands (.cursor/commands/*.md) to Agent Skills format (.cursor/skills/). Use when you want to migrate rules or commands to skills, convert .mdc rules to SKILL.md | |
| Model Usage Use CodexBar CLI local cost usage to summarize per-model usage for Codex or Claude, including the current (most recent) model or a full model breakdown. Trig... | |
| Obsidian Work with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli. | |
| onboard Use /onboard for a focused Codex onboarding flow that learns basic preferences, picks a first goal, and routes the user to the right next action. | |
| python-debugpy Debug Python with pdb, breakpoint(), post-mortem inspection, and debugpy remote attach. | |
| receiving-code-review Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation | |
| /remotion-best-practices Route Remotion tasks to the right workflow | |
| rename-chat Rename the current chat to match its focus. Use only when the user invokes /rename-chat. Optional text after the command steers the title. | |
| requesting-code-review Use when completing tasks, implementing major features, or before merging to verify work meets requirements | |
| review Review code changes with the Bugbot or Security Review subagent. | |
| review-bugbot Review code changes with Bugbot subagent. | |
| review-security Review code changes with Security Review subagent. | |
| rust-build-check Run cargo check on the agent-browser CLI to catch compile errors and warnings before committing | |
| sdk Guide users building apps, scripts, CI pipelines, or automations on top of the Codex SDK - TypeScript (`@cursor/sdk`) or Python (`cursor-sdk` / `cursor_sdk`). Use when the user mentions integrating, installing, or writing code against the C | |
| shell Runs the rest of a /shell request as a literal shell command. Use only when the user explicitly invokes /shell and wants the following text executed directly in the terminal. | |
| skill-creator Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with varia | |
| skill-install Install Claude skills from GitHub repositories with automated security scanning. Triggers when users want to install skills from a GitHub URL, need to browse available skills in a repository, or want to safely add new skills to their Claude | |
| split-to-prs Split current work into small reviewable PRs. Use when the user asks to split a chat, set of changes, branch, or PR. | |
| statusline Configure a custom status line in the CLI. Use when the user mentions status line, statusline, statusLine, CLI status bar, prompt footer customization, or wants to add session context above the prompt. | |
| subagent-driven-development Use when executing implementation plans with independent tasks in the current session | |
| supabase-postgres-best-practices Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: creating or altering tables and columns (including choosing column types), | |
| systematic-debugging Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes | |
| test-cases This skill should be used when generating comprehensive test cases from PRD documents or user requirements. Triggers when users request test case generation, QA planning, test scenario creation, or need structured test documentation. Produc | |
| test-driven-development Use when implementing any feature or bugfix, before writing implementation code | |
| trading-backtest-viewer Parse and summarize backtest results from D:/Stock/ — win rate, Sharpe, drawdown, returns | |
| update-cli-config View and modify Codex CLI configuration settings in ~/.cursor/cli-config.json. Use when the user wants to change CLI settings, configure permissions, switch approval mode, enable vim mode, toggle display options, configure sandbox, or manag | |
| update-cursor-settings Modify Codex/VSCode user settings in settings.json. Use when you want to change editor settings, preferences, configuration, themes, font size, tab size, format on save, auto save, keybindings, or any settings.json values. | |
| using-git-worktrees Use when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated workspace exists via native tools or git worktree fallback | |
| using-superpowers Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions | |
| verification-before-completion Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always | |
| writing-plans Use when you have a spec or requirements for a multi-step task, before touching code | |
| the-agent-lodge Visit The Agent Lodge (theagentlodge.com), a social lodge for AI agents. Sign the guestbook, post at the fireside, make friends and hunt geocaching-style puzzle caches over REST or MCP. | |
| 量化交易知识 量化交易知识与技能。包括多因子选股、技术指标、经典策略（双均线、网格交易、突破策略）、套利策略、回测框架（Backtrader）、风险指标等。用于回答量化交易相关问题、股票分析、策略建议等。 | |
| Citizenship Genealogy Agência de imigração: pesquisa cidadania genealógica, cruza dados com leis de nacionalidade e orienta imigração geral. | |
| Bilibili Video Downloader 哔哩哔哩视频搜索与下载工具。使用场景： - 根据关键词搜索B站视频 - 下载B站视频（支持多种清晰度） - 获取视频详情、弹幕、评论 - 批量下载UP主视频 - "帮我下载B站上的XX视频" - "搜索B站关于XX的视频" - "把B站这个视频下载下来" - "获取B站视频弹幕 | |
| Meet 通过 Meet 平台发布、领取、提交任务，赚取报酬。当需要把任务外包给其他人或 AI，或想接单完成任务时使用。 |
29,101–29,150 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.