Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Ai Jd Generator JD生成器 - 按次付费，新用户注册送5次免费。一键生成专业职位描述，匹配行业标准，含职位亮点/职责/要求/薪资参考/成长空间全维度，吸引优质候选人，HR招聘提效必备。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| Anime Drama Studio 漫剧工坊 - 按次付费，新用户注册送5次免费。一站式漫剧创作，从创意到剧本/分镜/角色/场景提示词全流程输出，AI赋能动漫创作，剧本/短视频/分镜创作者提效神器。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| Contract Risk Review 合同风险审查 - 按次付费，新用户注册送5次免费。AI智能识别合同法律风险、条款漏洞、不公平约定，支持买卖/租赁/劳动/服务/合作/保密等多种合同类型，企业法务前置筛查、个人合同检查必备工具。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| enterprise-ai-advisor 中小企业AI转型落地诊断工具，通过对话式问卷评估企业现状，匹配AI机会点并生成落地路线图。当用户提到企业AI诊断、AI转型评估、AI落地规划、企业智能化改造、AI应用咨询、AI员工上岗方案、AI转型路线图等需求时使用。 | |
| Loan Qualification Check 贷款资质预审 - 按次付费，新用户注册送5次免费。输入客户基本信息，AI自动评估可贷额度、匹配最优贷款产品、识别拒件风险、预估审批通过率。内置42款全国主流银行产品，消费贷/经营贷/抵押贷/车贷全品类，助贷经理获客筛客转贷必备工具。 💡 企业级助贷系统/AI获客/智能外呼全案，合作微信17392371127（郭总） | |
| Loan Refinance Calculator 转贷计算器 - 按次付费，新用户注册送5次免费。精准计算转贷省息金额、月供变化、回本周期与最优方案，考虑提前还款违约金、手续费、过桥费等隐性成本，一键输出专业对比报告，助贷经理谈单转单必备神器。 💡 企业级助贷系统/AI获客/智能外呼全案，合作微信17392371127（郭总） | |
| loan-telemarketing-script 电销话术生成器 - 按次付费，新用户注册送5次免费。基于产品信息和客户画像生成定制化高转化率电销话术，含开场钩子/价值塑造/需求挖掘/异议处理/逼单成交全流程，消费贷/经营贷/抵押贷等全品类适用，助贷电销团队提效神器。 💡 企业级助贷系统/AI获客/智能外呼全案，合作微信17392371127（郭总） | |
| Local Geo Writer GEO文章生成器 - 按次付费，新用户注册送5次免费。基于Google E-E-A-T标准和生成式引擎优化框架，生成高质量AI搜索引擎优化文章，提升AI搜索排名和品牌曝光，企业内容营销必备。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| meyo 觅游社区（meyo）主 skill，负责入驻、认证、安全边界与行为准则，并在合适时机加载成长日记、基础体检、社区等子模块。 | |
| Resume Optimizer 简历优化助手 - 按次付费，新用户注册送5次免费。AI智能优化简历，匹配目标岗位，逐句改造成果导向表达，提升HR通过率，求职转行跳槽应届生必备。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| sql-query-generator SQL查询生成器 - 按次付费，新用户注册送5次免费。自然语言一键转SQL，支持多表联查、聚合统计、子查询、窗口函数等复杂场景，附执行逻辑和优化建议，数据分析师和开发者提效神器。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| xiaohongshu-title-generator 小红书爆款标题生成器 - 按次付费，新用户注册送5次免费。内置10+标题公式、多风格模板、点击率预估评分，一键生成高点击率爆款标题，自媒体创作者流量翻倍神器。 💡 企业定制/智能体开发/AI全案服务，合作微信17392371127（郭总） | |
| Agent Autonomy Primitives Build long-running autonomous agent loops using ClawVault primitives (tasks, projects, memory types, templates, heartbeats). Use when setting up agent autono... | |
| Agent-Friendly CLI Design and audit CLIs for agent usability. Use when building a new CLI tool, auditing an existing CLI for agent compatibility, reviewing CLI UX for AI agents... | |
| Agent Memory Templates Production-tested memory templates for AI agents. Includes SOUL.md personality templates, memory checkpoint patterns, observational memory configs, and 100 p... | |
| Bambu Lab 3D Printer Control Bambu Lab 3D printers (H2D, X1C, P1S, A1) via CLI. Print management, AMS filament control, temperature, fans, lights, calibration, file management, a... | |
| ClawVault Agent memory system with memory graph, context profiles, checkpoint/recover, structured storage, semantic search, observational memory, task tracking, canvas... | |
| Clovercli Command-line interface for managing Clover POS data including inventory, orders, payments, customers, employees, discounts, taxes, tenders, and reports with... | |
| Linkedin Pipedream Post to LinkedIn, comment, like, search organizations, and manage profiles via Pipedream OAuth integration. | |
| Loom Workflow AI-native workflow analyzer for Loom recordings. Breaks down recorded business processes
into structured, automatable workflows. Use when:
- Analyzing Loom videos to understand workflows
- Extracting steps, tools, and decision points from s | |
| OpenAI Image CLI Generate, edit, and manage images via OpenAI's GPT Image and DALL-E models. | |
| Pdauth Dynamic OAuth for AI agents via Pipedream. Generate OAuth links for 2500+ APIs, let users authorize, then call MCP tools on their behalf. | |
| Poke Bridge Send SMS/iMessage to the user via Poke and process inbound Poke events. Use when the user asks to be texted, for SMS-based alerts, when processing events for... | |
| SkillBench Track skill versions, benchmark performance, compare improvements, and get self-improvement signals. Integrates with tasktime and ClawVault. | |
| TaskTime CLI CLI task timer for AI agents — benchmark learning progression with auto-save logs and visualizations. Integrates with ClawVault for persistent memory. | |
| The Pool Interact with The Pool — a social evolution experiment where AI agents compete for survival through citation economics. Use when joining The Pool, contributi... | |
| Whop Store Management Manage Whop digital products store — create products, plans, track payments, manage memberships. Use when: selling digital products, managing Whop store. Don... | |
| hippocampus Photon: AI-enhanced memory system that FIXES human memory flaws. NO DECAY - AI never forgets. Features: tool success tracking, project checkpoints, failure p... | |
| Book Id Catalog books from photos or text. Trigger on: book photo, catalog book, log book, add to library. | |
| Brain Proactive Proactive Obsidian vault maintenance and review. Find stale tasks, orphan notes, projects that need attention, and connection opportunities. Trigger on: brai... | |
| Kraken CLI Use a Bash CLI to query Kraken Spot and Futures APIs, inspect account state, run guarded trading and funding actions, and work with Kraken websocket payloads... | |
| NoUI Use this skill when the user wants a cheaper, more reliable alternative to computer use for automating websites. Use this skill when the user wants to instal... | |
| Agenter Coder Delegate coding tasks to a separate autonomous agent with AST validation, security scanning, and automatic retry. Supports 4 backends (Claude Code, Codex, Op... | |
| Trending Skill Finder Monitors ClawHub skill metrics and alerts when download growth exceeds 30%, downloads pass 50,000, stars pass 200, or new top 10 skills appear. | |
| Find trending skills Monitors ClawHub for skills gaining traction by tracking downloads and stars, alerting when growth or popularity thresholds are exceeded. | |
| Hot Skills Monitors ClawHub for skills gaining traction by tracking download and star growth, alerts on surges based on configurable thresholds. | |
| Daily Inspiration 每天定时推送倪海厦、南怀瑾等国学大师的相关内容，通过飞书发送给用户。内容包括佛学解脱、气功、周易、中医等主题。用于：用户请求每天获取精神修行相关资讯。 | |
| Voice Broadcast 语音播报控制技能。将AI回复内容转换为语音朗读。触发方式：（1）用户说"朗读"时，自动将AI最后一条文字回复转为语音；（2）用户说"开启语音播报"时，之后所有回复自动朗读；（3）用户说"静音"时，暂停语音播报。用于：用户（尤其是iOS用户）希望通过语音方式接收信息，或双手不便时通过TTS播放回复内容。 | |
| Precleared Cold Email Check Checks if a cold email to a specific address is legal before you send it (UK, US, Canada, Germany, France, Australia, Ireland, Netherlands), with a receipt. | |
| PROBAR Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats). | |
| Clean Code Pragmatic coding standards - concise, direct, no over-engineering, no unnecessary comments | |
| Gnamiblast GnamiBlast - AI-only social network for OpenClaw agents. | |
| GnamiBlast GnamiBlast - AI-only social network for OpenClaw agents. | |
| talaria Opt-in Playwright stealth wrapper for websites the user owns or is explicitly authorized to test. Use only when the user explicitly requests stealth or a documented bot-detection block prevents authorized automation; do not invoke for gener | |
| LinkedIn Lead Gen Outreach Lightweight LinkedIn prospecting and outreach workflow for researching qualified leads, applying simple prioritization, drafting concise personalized message... | |
| Meeting Notes → Tasks & Follow-up Lightweight meeting-notes productivity workflow for turning transcripts or raw meeting notes into clean summaries, extracted key points, and simple action li... | |
| Shopify Auto Invoicing & Inventory Lightweight Shopify order invoicing and inventory operations workflow for detecting new orders, preparing invoice-ready billing data, updating stock tables,... | |
| clklog快速部署 帮助用户根据操作系统和需求选择 Docker 快速部署或源码部署，并提供官方文档指引完成 ClkLog 用户行为分析系统的搭建。 | |
| Tqsdk策略量化 提供基于 TqSdk 的量化策略开发、回测和优化，涵盖趋势、套利、多因子等61种成熟策略模板。 | |
| tqsdk-query 天勤量化 - 期货实时行情与历史数据接口，提供国内期货、期权的实时报价、K线序列与历史数据查询。 |
31,801–31,850 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.