Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| mixpeek-video-search Find the exact moment in video, images or audio by describing it, using Mixpeek. Use when the user wants to search inside their own video library, find a scene or clip by description, get start and end times for a moment, or index media fro | |
| 报销助手 智能管理业务招待费和差旅报销，自动识别发票和凭证，生成报销清单并重命名凭证文件。 | |
| VibeTrader Create and manage AI-powered trading bots via natural language. Paper & live trading, portfolio monitoring, backtesting, stock quotes, and options chains. | |
| Eternal Adaptive Brain Adaptive self-improving agent brain that detects patterns, predicts failures, adapts behavior, evolves skills, and tracks performance over time. | |
| Eternal Contract Analyzer Analyze contracts and legal documents to extract key terms, identify risks, flag red flags, and provide a clear summary with recommendations. | |
| Eternal Daily Briefing Generate a consolidated daily briefing with weather, calendar events, tasks, news, and market data. Use when the user asks for a morning briefing, daily upda... | |
| Eternal Expense Tracker Track, categorize, and analyze personal expenses via receipt scans, manual input, CSV imports, budget tracking, and detailed spending reports. | |
| Eternal Free Search (DuckDuckGo) Free web search using DuckDuckGo (no API key needed). Use when you need to search the web for any information — news, facts, research, people, companies, pro... | |
| Eternal Invoice Generator Generate professional PDF invoices, quotes, reminders, and recurring bills with customizable items, taxes, discounts, and payment details from the command line. | |
| Eternal Meeting Extractor Extracts summaries, decisions, action items, key points, questions, and attendees from meeting transcripts or notes. | |
| Eternal Network Diag Perform network diagnostics including ping, DNS resolution, TCP port checks, and traceroute for specified hosts. | |
| Eternal System Health System health monitoring and reports | |
| Eternal Task Board Simple CLI task/project board (kanban) | |
| OMNI — All-In-One Master Skill The all-in-one master skill — unified interface for every capability domain. Use when the user asks for anything that spans multiple domains or when no singl... | |
| Axion Forecast the probability of a future event with the Axion API. Use when asked the odds, likelihood, or a prediction for an uncertain or future event. | |
| Alexandrie CRUD operations for Alexandrie, a self-hosted Markdown note-taking app. Create, read, update, delete and search notes via REST API. | |
| Blogging A comprehensive AI agent skill for bloggers at every stage. Finds your niche, builds your content strategy, writes and edits posts, optimizes for search with... | |
| Content A comprehensive AI agent skill for creators, writers, and marketers who publish ideas. Builds content strategy, writes and edits across every format, maintai... | |
| Debt A relentless AI agent skill for destroying personal debt permanently. Maps every dollar you owe into a single battlefield view, builds a payoff strategy cali... | |
| Draft Professional first-draft generator. Trigger whenever the user needs to write anything from scratch: emails, reports, articles, proposals, memos, cover letter... | |
| Edit Professional editing assistant. Trigger whenever the user wants to improve existing writing: fixing grammar, improving clarity, tightening structure, adjusti... | |
| File A comprehensive AI agent skill for managing the files, folders, and documents that accumulate across your digital life. Organizes chaos into clarity, builds... | |
| Job Complete job search intelligence system for anyone looking for work, changing careers, or trying to advance professionally. Trigger whenever someone needs he... | |
| Language A comprehensive AI agent skill for language learners at every level. Builds personalized study plans, teaches vocabulary in context, corrects your writing an... | |
| Launch A comprehensive AI agent skill for founders, creators, and makers launching anything. Builds your launch strategy, prepares your messaging, sequences your pr... | |
| Leadership A comprehensive AI agent skill for leaders at every level. Navigates difficult conversations, builds feedback culture, supports better decisions under pressu... | |
| Messages A comprehensive AI agent skill for managing the full spectrum of incoming messages across email, chat, and other communication channels. Triages by urgency a... | |
| Prompt A comprehensive AI agent skill for writing prompts that get consistently excellent results from AI models. Teaches the principles behind effective prompting,... | |
| ProposalKit One-click business proposal package generator. Takes a brief project/service description and generates a COMPLETE ready-to-send package: proposal (.docx), pi... | |
| Retirement A comprehensive AI agent skill for retirement planning at any stage of life. Whether you are twenty-five and just starting to think about it or fifty-five an... | |
| Review Professional reviewer and critic. Trigger whenever the user wants structured feedback on anything: documents, plans, code, decisions, strategies, designs, pi... | |
| Salary A comprehensive AI agent skill for navigating compensation conversations. Researches market rates, builds negotiation strategies, prepares scripts, evaluates... | |
| Savings A comprehensive AI agent skill for building and growing personal savings systematically. Sets meaningful savings goals, builds emergency funds, optimizes whe... | |
| Tenant A comprehensive AI agent skill for renters navigating the full lifecycle of renting. Helps you evaluate apartments, understand lease terms before signing, do... | |
| Tool A comprehensive AI agent skill for finding, evaluating, and getting the most from the tools that run your work and life. Helps you cut through the noise of a... | |
| Will A comprehensive AI agent skill for estate planning and will preparation. Helps you understand what a will covers, what happens without one, how to inventory... | |
| Find Community 帮助识别和评估可以围绕其建立极简主义业务的社群。 当用户正在寻找商业创意、试图找到自己的社群，或想知道作为创业者从哪里开始时使用。 基于Sahil Lavingia《极简主义创业者》的方法论。 | |
| MVP Builder 指导以极简主义创业者的方式构建最小可行产品——先手动，再流程化，再产品化。 当有人准备构建第一个产品，或在产品范围上挣扎时使用。 核心：用一个周末发货。 | |
| Validate Idea 使用极简主义创业者框架验证商业创意。 当用户有一个商业创意，想在构建任何东西之前测试它是否值得追求时使用。 核心：验证通过销售而非构建来实现。 | |
| Find Community 帮助识别和评估可以围绕其建立极简主义业务的社群。 当用户正在寻找商业创意、试图找到自己的社群，或想知道作为创业者从哪里开始时使用。 基于Sahil Lavingia《极简主义创业者》的方法论。 | |
| Company Values 帮助定义极简主义业务的公司价值观和文化。 当有人在建立公司文化、准备招聘，或想要明确公司代表什么时使用。 核心：先定义文化，再招人。 | |
| Feasibility Study This skill should be used when the user needs to assess the viability of a project, business idea, or investment opportunity. This skill provides comprehensi... | |
| First Customers 使用极简主义创业者手册制定赢得前100个客户的策略。 当有人有产品需要找客户，或在早期销售方面挣扎时使用。 核心：跳过发布，专注于一对一销售。 | |
| Grow Sustainably 通过可持续、盈利增长的视角评估业务决策。 当有人在做关于支出、招聘、融资或扩张业务的决策时使用。 核心：盈利能力是超级能力，支出少于收入。 | |
| Mvp 指导以极简主义创业者的方式构建最小可行产品——先手动，再流程化，再产品化。 当有人准备构建第一个产品，或在产品范围上挣扎时使用。 核心：用一个周末发货。 | |
| Pricing 使用极简主义创业者原则帮助确定产品或服务的定价。 当有人在设定价格、考虑价格变化，或在收费多少上挣扎时使用。 核心：一定要收费，免费和1元之间有巨大差距。 | |
| Processize 将产品创意转化为可以从今天开始手动交付的流程。 当你有了一个创意，想在写任何代码之前通过手动方式交付价值时使用。 核心：先流程化，再产品化。 | |
| Minimalist Review 通过极简主义创业者框架审查任何业务决策、计划或策略。 当有人想对业务决策进行直觉检验、想简化方法，或需要在选项之间做决定时使用。 核心：用8个原则检验任何决策。 | |
| Validate Idea 使用极简主义创业者框架验证商业创意。 当用户有一个商业创意，想在构建任何东西之前测试它是否值得追求时使用。 核心：验证通过销售而非构建来实现。 | |
| Ping Me One-shot reminders via natural language. Auto-detects channel and timezone. Say 'remind me...' in any language and get pinged when it's time. Works with ever... |
29,451–29,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.