Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Knowledge Graph - Mapping Dsl Builder Generate declarative mapping rules that transform structured data sources into graph triples or nodes using a domain-specific mapping language similar to R2RML. | |
| Knowledge Graph - Multi Hop Reasoning Query Builder Generate graph queries that perform multi-hop traversal and reasoning across relationships in graph databases and knowledge graphs. | |
| Knowledge Graph - Neo4j Integration Connect to Neo4j graph databases and execute Cypher queries for storing, querying, and managing knowledge graph data using the property graph model. Full sup... | |
| Knowledge Graph - NL To Graph Query Translator Translate natural language questions into Cypher or SPARQL queries for graph databases and knowledge graphs. | |
| Knowledge Graph - Ontology Based Inference Helper Apply semantic ontology rules to knowledge graphs to infer new relationships, class memberships, and properties from explicit ontology definitions. Supports... | |
| Knowledge Graph - Property Graph Schema Designer Design property graph schemas for knowledge graph systems using Neo4j-style node labels, relationships, and properties based on domain descriptions or develo... | |
| Knowledge Graph - Rdf Owl Schema Drafting Draft RDF or OWL ontologies and schemas for knowledge graph systems using domain descriptions, entity models, or schema requirements. | |
| Knowledge Graph - Rdf Triple Store Integration Connect to RDF triple stores and execute SPARQL queries for storing, retrieving, and managing semantic knowledge graph data | |
| Knowledge Graph - Rest Api Wrapper Generator Generate production-ready REST API endpoints to expose graph database operations, queries, and data management capabilities | |
| Knowledge Graph - Schema Migration Diff Analyze differences between knowledge graph schema versions and generate migration plans and scripts for safe schema evolution. | |
| Knowledge Graph - Text Entity Relation Extractor Extract entities and relationships from unstructured text and convert them into graph-ready structures such as triples, nodes, and edges. | |
| Knowledge Graph - Transitive Closure Generator Compute transitive closure on graphs to infer implicit relationships and expand graphs with logically implied connections. Supports multiple algorithms and c... | |
| Masumi Network Warranty Vault Masumi Network skill for warranty vault verification. Handles OCR receipt scanning, Cardano blockchain proof-of-purchase logging, immutable decision logging, agent collaboration discovery, and smart wallet payments. Use for warranty claims, | |
| AI Caption Scenario-focused Sparki skill for caption-heavy edits while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| AI 字幕 面向字幕与上字场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留字幕场景定位。 | |
| AI Commentary Scenario-focused Sparki skill for commentary-style edits while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| AI 解说 面向解说/讲解场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 commentary 场景定位。 | |
| AI Video Editor Official-core Sparki video editor listing kept under the ai-video-editor-fixed slug for compatibility, now aligned with the latest sparki-video-editor setup,... | |
| AI 视频剪辑器 当用户提到视频剪辑、裁切、高光集锦、短视频、Reels、Shorts、TikTok、竖屏视频， 或者要求处理一个视频文件时，优先使用这个 skill。不要先手动用 ffmpeg。 支持：模仿风格、长视频转短视频、AI 字幕、AI 解说、视频尺寸调整、高光集锦、Vlog、混剪、口播。 依赖 SPARKI_API_K... | |
| AI Vlog Editor Scenario-focused Sparki skill for editing vlog-style videos while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| AI Vlog 剪辑器 面向 Vlog 场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 Vlog 场景定位。 | |
| Faceless Video Scenario-focused Sparki skill for faceless or no-camera-presence outputs while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| 不露脸视频 面向 faceless/no-face 场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 faceless 场景定位。 | |
| Highlight Reels Scenario-focused Sparki skill for highlight extraction while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| 高光集锦 面向高光提炼场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 highlight 场景定位。 | |
| Long to Short Scenario-focused Sparki skill for turning long videos into short-form clips while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| 长视频转短视频 面向长视频切片场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 long-to-short 场景定位。 | |
| Talking-head Editor Scenario-focused Sparki skill for presenter-led and talking-head edits while using the latest official Sparki setup, API-key, and upload workflow guidance. | |
| 口播视频剪辑 面向 talking-head / presenter 场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留口播场景定位。 | |
| TikTok Viral Editor Scenario-focused Sparki skill for TikTok-native pacing and viral-style edits while using the latest official Sparki setup, API-key, and upload workflow guida... | |
| TikTok 爆款剪辑 面向 TikTok 爆款节奏场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 TikTok viral 场景定位。 | |
| Video Content Operator Help creators decide what video content to make, how to package it for platforms, select source material, and plan their next content moves. | |
| Video Recommendation Recommend precise, context-aware videos with direct links and curated watchlists based on your current mood, project, or recent chat topics. | |
| Video Resizer Scenario-focused Sparki skill for aspect-ratio and platform-format conversion while using the latest official Sparki setup, API-key, and upload workflow guid... | |
| 视频尺寸调整 面向比例转换和平台适配场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留 resizer 场景定位。 | |
| Which Sparki Skill Should I Use? AI-powered video editing — turn raw footage into polished vlogs, highlight reels, TikTok/Shorts/Reels, montages, and more. Control the editing flow through T... | |
| 哪个 Sparki Skill 适合我？ AI-powered video editing — turn raw footage into polished vlogs, highlight reels, TikTok/Shorts/Reels, montages, and more. Control the editing flow through T... | |
| Changshu Dev Assistant 昌叔专属软件开发助手 - 以达梦数据库工具为核心，专注SQL Server→达梦迁移、代码安全扫描、知识库搜索 | |
| 音乐发现应用 一个完全免费的音乐发现应用，集成多个免费音乐API，无需任何认证。提供音乐搜索、歌词显示、网络电台、演唱会信息等功能。 | |
| openclaw-collab Hermes 与本地 OpenClaw 协同工作 — 模型互调、记忆共享、任务分工 | |
| OpenClaw Collaboration Hermes 与本地 OpenClaw 协同工作方案 — 共享记忆、API互调、任务分工 | |
| ops-maintenance 运维助手 v3.3.10 - 本地/远程/集群监控 (健康检查、日志分析、性能监控、批量操作、密码过期检查、告警通知、定时巡检、Docker健康、SSL证书、安全审计、网络诊断) | |
| Skill Orchestration Core Skill 编排核心 - 上下文管理、流程编排、质量保证（Python 实现） | |
| Sql Splitter 拆分 SQL 文件为独立文件（存储过程、函数、视图、触发器、表结构、索引、约束），自动分析依赖并生成合并脚本 | |
| Budget Traval Plan Discover random budget travel destinations with cheap flights and hotels. Finds "hidden gem" deals by searching for lowest-priced flights and accommodations,... | |
| Luxury Travel Plan Curate ultra-luxury travel experiences for discerning travelers seeking the finest accommodations, first-class flights, private jets, luxury cruises, and exc... | |
| Douyin Video Analyst 抖音账号视频批量采集与文案分析工作流。当用户提供抖音账号主页链接、要求抓取最新 N 条视频链接、提取视频文案（语音转文字）、或对视频内容进行总结归纳时，激活此 skill。依赖 browser 工具（抓取视频列表）和 mcporter + douyin-mcp（文案提取）。 | |
| Market Briefing Provides scheduled briefings with filtered, deduplicated news on A-shares, HK, US markets, macro policies, and geopolitics via Feishu messaging. | |
| Hot Search Hot Search - OpenClaw 稳定搜索技能，专为金融数据和市场行情设计。支持多引擎聚合搜索，无需 API 密钥，免费无限次使用。 | |
| Skill Manages travel for your user via UBTRIPPIN — trips, items, loyalty programs, family, city guides, events, concerts, notifications, and more. Use when the use... |
30,451–30,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.