Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| China Beauty Suppliers Comprehensive beauty industry suppliers guide for international buyers – provides detailed information about China's skincare, color cosmetics, hair care, an... | |
| China Consumer Electronics Factory Comprehensive consumer electronics industry factory guide for international buyers – provides detailed information about China's smartphone, wearable, audio,... | |
| China Consumer Electronics Suppliers Comprehensive consumer electronics industry suppliers guide for international buyers – provides detailed information about China's smartphone, wearable, audi... | |
| China Electronic Components Factory Comprehensive electronic components industry factory guide for international buyers – provides detailed information about China's semiconductor, passive comp... | |
| China Electronic Components Suppliers Comprehensive electronic components industry suppliers guide for international buyers – provides detailed information about China's semiconductor, passive co... | |
| china-export-data Query China's official export statistics with analyst-grade metrics. 7 REST endpoints covering product dashboards (YoY/MoM growth, market concentration), monthly trends since 2021, destination-market structure with growth rates, fastest-gro | |
| China Furniture Factory Comprehensive furniture industry factory guide for international buyers – provides detailed information about China's residential, office, hotel, outdoor, an... | |
| China Furniture Suppliers Comprehensive furniture industry suppliers guide for international buyers – provides detailed information about China's residential, office, hotel, outdoor,... | |
| China Home Appliances Factory Comprehensive home appliances industry factory guide for international buyers – provides detailed information about China's major appliances, kitchen applian... | |
| China Home Appliances Suppliers Comprehensive home appliances industry suppliers guide for international buyers – provides detailed information about China's major appliances, kitchen appli... | |
| China Industrial Machinery Factory Comprehensive industrial machinery industry factory guide for international buyers – provides detailed information about China's machine tools, construction... | |
| China Industrial Machinery Suppliers Comprehensive industrial machinery industry suppliers guide for international buyers – provides detailed information about China's machine tools, constructio... | |
| China Lighting Factory Comprehensive lighting industry factory guide for international buyers – provides detailed information about China's LED, smart, outdoor, automotive, and spe... | |
| China Trip Guide Fast AI guide for short-term foreign travelers to China offering quick trip planning, payment help, transport info, emergency support, and live translation. | |
| China Visa Helper Intelligent China visa assistant that provides personalized visa recommendations, appointment booking guidance, application tracking tips, and real-time poli... | |
| Competitive Intelligence Generate competitive analysis reports and differentiation talking points based on secondary research | |
| Consumer Insights Analyze user feedback text to extract sentiment trends and customer needs | |
| Content Adaptation Adapt content for multiple platforms (social media, short videos, press releases) and A/B test copy | |
| Crisis Communication Develop crisis communication scripts, media response strategies, and statement drafting | |
| Move to China Living Guide Use when users need practical guidance for daily life in China, including cultural adaptation, dining, shopping, social connections, and long-term living str... | |
| Traditional Chinese Medicine Provide academically rigorous information on Traditional Chinese Medicine theory, pattern differentiation, herbal properties, formula analysis, and acupunctu... | |
| finet-news-lite 获取财华社（finet.com.cn）最新财经新闻的最小工具：实时拉取，统一输出扁平的标准文章字段，内置超时重试，纯标准库零依赖。 | |
| 成功的项目管理 Project context, memory, and compatible setup | |
| TuhuCar Knowledge Assistant Use when answering car maintenance, service interval, oil, brake fluid, tire pressure, or ownership questions through the TuhuCar CLI knowledge gateway. | |
| MongoDB Atlas browse MongoDB Atlas Admin API specifications and execute operations (if credentials provided). | |
| AI Daily News Fetch global AI news data, synchronize platform capabilities, and invoke remote AI-news analysis. Use this skill when users ask about AI or machine learning... | |
| Iserv HTTP client for IServ school platforms. Log in to an IServ instance (e.g. https://grabbe-dt.de) and fetch common student data like unread mail counts, calendar events, files/folders, tasks/exercises, announcements/news, and other IServ modu | |
| WebUntis Read-only access to Untis/WebUntis student timetables. Use when you need to fetch or summarize a student's current schedule (today/this week/date range), upcoming lessons, rooms, teachers, or substitutions from a WebUntis instance. | |
| NexPix — Cloudflare Image Generation AI image generation via Cloudflare Workers AI (free tier, FLUX models) with premium EvoLink fallback. Use when generating images from text prompts, creating... | |
| Greg Eisenberg Generate content ideas, business strategies, and startup concepts in the style of Greg Eisenberg (Startup Ideas Podcast). Use when brainstorming product idea... | |
| finoview-report 调用 finoview 期货研究报告 API 获取期货周度报告数据。使用这个技能当你需要获取特定日期或期货类别的研究报告，包括报告标题、作者、摘要、PDF 链接等信息。适用于期货市场分析、研究报告汇总、市场情报收集等场景。 | |
| commodity-macro-signal Analyze energy, metals, and agricultural commodity markets alongside macro indicators to generate cross-asset macro signals. | |
| crypto-market-analyst Analyze Bitcoin, Ethereum, and major altcoins using real-time price, on-chain signals, and macro context from the Finskills API. | |
| earnings-analyst Research upcoming earnings events, analyze historical beat/miss patterns, and estimate post-earnings price reactions using the Finskills API. | |
| finskills Real-time financial data API for systematic stock analysis and quantitative investment research. Access stock quotes, historical OHLCV, batch screening, comp... | |
| backtest-expert Design, execute, and evaluate quantitative trading strategies using historical price data and Fama-French factor attribution via the Finskills API. | |
| macro-regime-detector Classify the current macroeconomic regime across six states using GDP, CPI, Fed Funds rate, yield curve, and credit spread data from the Finskills API. | |
| portfolio-manager Monitor and rebalance a multi-asset portfolio using real-time quotes, sector allocation, and risk metrics from the Finskills API. | |
| technical-analyst Perform comprehensive technical analysis using 12+ indicators including RSI, MACD, Bollinger Bands, support/resistance, and chart patterns via the Finskills... | |
| trading-plan-generator Generate structured trade plans with entry, stop-loss, and take-profit levels based on technical and fundamental data from the Finskills API. | |
| us-stock-analyzer Perform institutional-grade analysis of any US-listed stock using real-time and fundamental data from the Finskills API. | |
| insider-trade-tracker Track and interpret SEC Form 4 insider buying and selling activity across US-listed equities using the Finskills API. | |
| market-breadth-analyzer Measure US equity market breadth using advance/decline lines, percentage of stocks above moving averages, and new highs/lows via the Finskills API. | |
| news-sentiment-analyst Aggregate and classify financial news sentiment into Risk-On / Risk-Off signals for market and individual stocks using the Finskills API. | |
| options-strategist Analyze options chains, compute implied volatility rank, and select optimal multi-leg strategies based on market conditions via the Finskills API. | |
| risk-manager Compute portfolio risk metrics including VaR, Sharpe ratio, and Kelly criterion using historical and real-time data from the Finskills API. | |
| sector-rotation-analyst Identify sector rotation opportunities across all 11 GICS sectors using relative strength, momentum, and macro regime context from the Finskills API. | |
| value-dividend-screener Screen US equities for value and dividend quality using multi-factor scoring across P/E, P/B, dividend yield, and payout sustainability via the Finskills API. | |
| meshcore-connect Connect an OpenClaw gateway to a MeshCore LoRa mesh node in minutes — install the maintained channel plugin (@fintlp/openclaw-meshcore), run the probe-first setup wizard, and verify the first DM over radio. Use when a user wants their AI ag | |
| meshtastic-connect Connect an OpenClaw gateway to a Meshtastic LoRa mesh node in minutes — install the maintained channel plugin (@fintlp/openclaw-meshtastic), run the probe-first setup wizard, and verify the first DM over radio. Use when a user wants their A |
30,351–30,400 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.