Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Auto Continue 任务自动续接技能。检测未完成的任务并提醒 Agent 继续推进。 通过读取 in_progress.md 和扫描 skills 目录判断任务状态。 Keywords: 继续, 没完成, 还没做完, 继续做, 继续推进. | |
| Cn Age Calculator 年龄计算器。精确计算年龄（年月日）、生日倒计时、星座生肖判定。支持多种日期格式输入，纯Python标准库，无需API Key。 | |
| Cn Ascii Art Ascii Art skill. 自动生成，无人工审查。 | |
| 多平台内容自动发布 多平台内容自动发布。支持知乎回答/文章、小红书图文笔记一键发布。 | |
| Cn Base64 Tool cn-base64-tool。纯Python标准库，无需API Key。 | |
| Cn Base64 Tools Base64编码解码工具。支持文本编码/解码、URL安全Base64、文件Base64转换。纯Python标准库，无需API Key。 | |
| Cn Batch File Renamer Batch rename files with customizable patterns. Support prefix, suffix, sequential numbering. Dry-run mode available. Pure Python, no API key required. | |
| Cn Batch Image Editor 批量图片处理工具。支持批量压缩、调整尺寸、添加水印、格式转换。一键处理整个文件夹，输出到指定目录。适用于电商图片、社媒素材、证件照批量处理。 | |
| Cn Bmi Calculator Calculate Body Mass Index (BMI) with health category assessment. Supports metric and imperial units. Pure Python standard library, no API key required. | |
| Cn Calendar Manager Calendar Manager skill. 自动生成，无人工审查。 | |
| Cn Case Converter Convert English text to uppercase, lowercase, title case, or camel case using a Python-based Chinese case converter. | |
| Cn Chinese Converter 支持简体与繁体中文互转，允许自定义词汇表，全部本地处理无需网络连接。 | |
| Cn Color Converter Color Converter skill. 自动生成，无人工审查。 | |
| Cn Color Picker 颜色选择与转换工具。支持HEX/RGB/HSL/HSV格式互转、调色板生成、渐变色预览。纯Python标准库，无需API Key。 | |
| Cn Color Scheme Generator Generate color schemes from a base color. Support complementary, triadic, analogous schemes. Pure Python standard library, no API key required. | |
| Cn Color Tool cn-color-tool。纯Python标准库，无需API Key。 | |
| Cn Countdown 中文倒数日/纪念日计算器。记录重要日子，自动计算距离今天还有多少天，或已过去多少天。 支持生日、纪念日、考试倒计时、农历转换、情感标签、彩色输出。 当用户说"倒计时"、"纪念日"、"还有多少天"、"生日倒计时"、"距离XX还有多久"时触发。 | |
| Cn Cron Generator Cron表达式生成器。图形化配置定时任务，支持中文自然语言描述转Cron，可视化预览下次执行时间。纯Python标准库，无需API Key。 | |
| Cn Cron Parser Cron Parser skill. 自动生成，无人工审查。 | |
| CSV转JSON转换器 Convert CSV files to JSON arrays with automatic type detection, custom delimiters, and optional formatting using Python standard library only. | |
| Cn Date Validator Validate date strings and check formats. Support YYYY-MM-DD, YYYY/MM/DD, DD-MM-YYYY. Pure Python. | |
| Cn Diet Tracker 中文饮食记录助手。记录每日饮食、计算热量、营养分析。 本地存储，无需账号。 当用户说"饮食记录"、"今天吃了什么"、"热量计算"、"营养分析"时触发。 Keywords: 饮食, 热量, 卡路里, 营养, diet, food, meal. | |
| Cn Diff Checker 文本差异比对工具。比对两段文本或文件的差异，支持逐行/逐词/逐字符模式。纯Python标准库difflib，无需API Key。 | |
| Cn Duplicate Remover Remove duplicate lines from text while optionally preserving order or sorting and counting duplicates. | |
| Cn Email Template Email Template skill. 自动生成，无人工审查。 | |
| Cn Emoji Tool 提供中文Emoji含义查询、中文关键词搜索Emoji及文本关键词自动转Emoji功能。 | |
| Cn Emoji Translator 支持中文和英文文本与Emoji表情的相互转换，纯本地处理无需网络依赖。 | |
| Cn Excel Formula Excel公式助手。自然语言描述需求，自动生成Excel公式。支持VLOOKUP、条件统计、日期计算、文本处理等200+常用公式。附带公式解释和示例数据。 | |
| Cn Expense Tracker 中文个人记账助手。随手记、查统计、设预算、看趋势。 本地存储，无账户、无云端、隐私安全。 当用户说"记账"、"花了多少钱"、"本月支出"、"预算提醒"时触发。 Keywords: 记账, 支出, 预算, 花费, expense, 收支, 月统计. | |
| 批量文件重命名 Batch rename files by adding prefixes/suffixes, find-replace with regex, or adding numbered sequences; preview changes before applying. | |
| Cn Habits Tracker 中文习惯打卡追踪器。每日打卡、连续天数、习惯统计。 本地存储，无账户，隐私安全。 当用户说"打卡"、"习惯"、"连续多少天"、"今天完成了吗"时触发。 Keywords: 打卡, 习惯, 追踪, streak, habit, 日签, 坚持. | |
| Cn Hash Generator Hash生成器工具。支持MD5/SHA-1/SHA-256/SHA-512/BLAKE2b哈希、Base64编解码、UUID生成、HMAC签名。纯Python标准库，无需API Key。 | |
| Cn Hex Decoder Hex十六进制编码解码工具。文本与十六进制互转，支持批量处理、颜色码解析，常用于调试和逆向工程。纯Python标准库，无需API Key。 | |
| 6大平台热搜聚合 中文全平台热搜聚合。一键获取知乎、微博、百度、B站、抖音、头条6大平台热搜榜单。 中文优先，无需API Key，开箱即用。 当用户说"热搜"、"热点"、"今日热点"、"什么火"、"热搜榜"、"全平台热搜"、"趋势"时触发。 Keywords: 热搜, 热榜, 热点, 趋势, trending, hot searc... | |
| Cn Id Validator cn id validator | |
| Cn Image Watermark 图片水印工具。为图片添加文字或Logo水印，防止内容被搬运。 支持批量处理、九宫格定位、透明度调节。 当用户说"水印"、"图片水印"、"添加水印"、"防伪"、"版权"时触发。 Keywords: 图片水印, 添加水印, 防搬运, 版权保护, watermark, image. | |
| Cn Join Lines Merge multiple lines of text into a single line with a customizable separator using a Python command-line tool. | |
| Cn Json Diff Compare two JSON files and show differences. Support nested structures, arrays, and value changes. Pure Python standard library, no API key required. | |
| Cn Json Tools JSON工具箱。格式化、比对、提取、压缩、验证JSON。 中文优先，无需API Key，开箱即用。 当用户说"格式化JSON"、"JSON比对"、"JSON提取"、"JSON压缩"、"JSON验证"时触发。 Keywords: JSON格式化, JSON比对, JSON提取, JSON压缩, json, diff. | |
| 中文快递追踪 中文快递追踪助手。根据快递单号自动识别快递公司，查询实时物流状态。 支持国内外主流快递，使用快递100免费接口，无需API Key。 当用户说"快递"、"查快递"、"物流"、"单号"、"包裹到哪了"时触发。 Keywords: 快递, 物流, 单号, 追踪, 包裹, delivery, tracking | |
| 快递追踪助手 快递追踪助手。输入快递单号查询物流状态，自动识别快递公司。 | |
| Cn Line Counter Count total lines, non-empty lines, words, and characters in Chinese text from input string or file using a Python script. | |
| 文本行排序工具 对文本文件行进行排序、去重、反转或乱序，支持字典序、数字序及按行长度排序，纯Python标准库实现。 | |
| Cn Loan Calculator Calculate loan payments (mortgage, car loan, personal loan). Support equal principal+interest and equal principal methods. Pure Python standard library, no A... | |
| Cn Lorem Ipsum cn-lorem-ipsum。纯Python标准库，无需API Key。 | |
| Cn Lorem Zh cn lorem zh | |
| Cn Markdown To Html Convert Markdown to HTML with basic styling. Support headers, bold, italic, links, code blocks. Pure Python standard library, no API key required. | |
| Markdown目录生成器 自动扫描 Markdown 标题并生成带 GitHub 风格锚点的多级目录，支持层级控制和插入文件顶部。 | |
| Cn Math Calculator 数学表达式安全计算器。支持四则运算、科学函数、常量、单位换算。纯Python标准库，无需API Key。 | |
| Cn Math Expression cn math expression |
31,201–31,250 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.