Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Insurance Private Domain Ops AI-powered insurance private domain operations for China's WeChat ecosystem, including RFM segmentation, churn reactivation, renewal, WeCom CRM, and PIPL-com... | |
| Insurance Solvency Reporter 提供基于中国C-ROSS偿二代二期规则的保险公司偿付能力季度及年度报告编制与压力测试分析工具。 | |
| Investment Advisor Digital Employee 覆盖A股热点发现、可比公司分析、基金诊断筛选、股票资金流向分析、多维选股、行情技术分析、股东股本分析、深度技术分析全流程。为投资顾问提供全方位的市场分析参考。 | |
| Investment Researcher Digital Employee 【模块清单 / 34 Modules】 一、宏观研究（1-7）：宏观日报、宏观周报、宏观数据解读、政策跟踪分析、宏观风险预警、海外宏观联动、大类资产配置 二、固收研究（8-14）：固收日报、固收隔夜简报、固收周报、利率市场回顾、行业信用风险、债务风险分析、转债估值分析 三、行业与公司（15-22）：行业深度分析、行业一页纸分析、行业配置推荐、公司深度分析、公司一页纸分析、公告解读、业绩点评生成、机构调研大纲 四、策略研究（23-29）：全球财经简报、政策快评、策略日报、市场大 | |
| Jobs Product Philosophy 基于史蒂夫·乔布斯产品哲学的产品思维与创新方法论，帮助产品经理打造极致用户体验。 | |
| Libai Think Partner 基于李白诗歌和人生智慧，助你突破思维边界、把握时机、转化情绪、坚守信念，融合浪漫与现实。 | |
| Liubang Think Partner 基于刘邦智慧，助你识人用人，精准授权，战略取舍，凝聚团队，避实击虚，做好决策，实现逆境中的领导突破。 | |
| Long Context Rag Analyzer Analyze and optimize retrieval-augmented generation pipelines for 100K–2M token documents using hybrid search, chunking, reasoning, and structured reporting. | |
| Mcp Tool Integrator AI-powered assistant to scaffold, configure, debug, and integrate MCP servers connecting AI agents with 50+ tools like GitHub, Slack, Notion, and databases. | |
| Munger Think Partner 基于查理·芒格多元思维模型，构建跨学科决策框架，识别认知偏误，辅助投资、商业及风险管理判断。 | |
| Musk First Principles 基于马斯克第一性原理，分解问题至物理本质，质疑惯例，重构最优方案，助力技术创新和商业降本。 | |
| Pangolin SafeYield Pangolin-SafeYield 是"防御式进攻"投资决策智能体，融合葛成《防御式进攻投资体系》、个人价值派心法（格雷厄姆/巴菲特/段永平/芒格）与 Serenity 白毛女神瓶颈理论（紫苏叶/瓶颈三步法）。核心能力：出手前检查清单（ETF走五面共振、个股分巴菲特价值派与Serenity成长派两条选股路径）、六阶段五面共振扫描（**宏观面融合达利欧五大力量框架（债务/贫富/大国/自然/创造力）+ 泡沫测量仪估值温度**；基本面/技术面/资金面/风险面）、**全量风险面红线 | |
| Prometheus Fire — 普罗米修斯之火 你最了解自己的数字分身。把自己蒸馏成六个思维面相，与更强的自己对话，获得辅助思考、扩展认知、解决问题的力量。 | |
| Prompt Engineering Lab Scope: prompt drafting, diagnosis, A/B test design, versioning and go-live checklists; it does not call model APIs, run evaluations, or write files. AI-powered prompt engineering workbench — write, test, iterate, and optimize prompts for an | |
| Security App Wealth Advisor AI-powered wealth advisor for bank mobile apps offering personalized product matching, investment consultation, and compliance-compliant customer interaction. | |
| Security Bond Analysis AI-powered bond analysis for China market including valuation, yield, duration, convexity, credit spread analysis, and bond portfolio management. | |
| Security Digital Human Ops AI assistant for financial digital human operations, including script generation, content planning, live streaming management, interaction design, and perfor... | |
| Security Equity Research AI tool generating China A-share equity research reports automating data collection, earnings review, valuation modeling (DCF/DDM/PE), ESG, and short-seller... | |
| Security Esg Investing Provides AI-powered ESG rating comparison, carbon footprint calculation, green bond evaluation, and sustainable portfolio construction for ESG analysts and i... | |
| Security Ib Compliance AI assistant for investment banking compliance in China, covering IPO sponsorship, M&A advisory, bond issuance, PE investment, AML screening, and cross-borde... | |
| Security Intelligent Cs AI-driven customer service for banking and securities offering FAQ support, account inquiry, transaction guidance, complaint handling, and 24/7 automated ass... | |
| Security Intelligent Marketing AI assistant for banking and securities marketing enables customer segmentation, campaign design, content creation, A/B testing, and ROI analysis to optimize... | |
| Security Ipo Strategy AI-powered China A-share IPO analyst providing IPO calendar, subscription strategies, listing performance, lock-up period management, and risk-return assessm... | |
| Security Options Strategy AI-powered options strategy tool for China market with options pricing, Greeks, multi-leg strategies (covered call, protective put, spreads, straddles), and... | |
| Security Portfolio Risk Provides AI-driven portfolio risk analysis for China A-shares with VaR, stress testing, tail risk, factor exposure, and risk attribution for fund managers. | |
| Security Quant Backtest AI-powered quantitative backtesting tool for China A-share strategies, supporting design, historical tests, performance attribution, walk-forward analysis, a... | |
| Security Rma Scripts Generates AI-driven compliant investment advisory scripts covering stock/fund recommendations, market commentary, client objections, and first-visit dialogue... | |
| Security Stock Picker AI-powered stock selection engine for China A-share market combining quantitative factor screening, fundamental analysis, technical signals, and sector rotat... | |
| 紫苏叶·瓶颈猎手 | ShisoLeaf Alpha Identify and analyze rare upstream supply chain chokepoints with high barriers and few global players to uncover hidden bottleneck investment opportunities. | |
| Sushi Think Partner 基于苏轼诗词与人生智慧，助你调适情绪、豁达逆境，探索意义，化苦为诗，开启心灵安处与人生新格局。 | |
| Enterprise Bid Document AI — 企业招投标文书AI助手 AI-powered enterprise bidding assistant for China government procurement and commercial projects. Full-lifecycle support: bid document analysis, strategy, drafting, compliance audit, and post-bid follow-up. Updated for 2026 regulatory chang | |
| Underwriting Expert Digital Employee 覆盖健康审核、医学评估、核保结论解读、回访跟进、双录质检全流程。帮助核保人员提升健康风险评估准确性和工作效率。 | |
| Vercel Zero Explorer AI-powered guide for Vercel Zero - the first programming language designed specifically for AI agents. Covers Zero graph-first workflow, .0 projection files, native tools, explicit effects, structured JSON diagnostics, and AI-native develop | |
| Vibe Coding Coach Scope: workflow coaching, prompt patterns, tool selection and pre-launch checklists for AI-assisted building; it does not write files, run code, or deploy anything. AI-powered vibe coding workflow coach — master the art of AI-assisted softw | |
| Wangyangming Think Partner 基于王阳明心学，帮你识别行动阻碍、理清内心良知，在困境中找到知行合一的行动力和心态调整方案。 | |
| Wealth Copilot Digital Employee 覆盖客户机会扫描、外呼触达、配置策略、投教问答、资产诊断、资产配置优化、工作复盘、投资陪伴等全流程。理财顾问的全能财富管理助手。 | |
| Zhang Yidong Macro Analysis 基于张忆东宏观框架，分析A股/港股市场趋势、货币政策及资产配置，助力投资决策和风险管理。 | |
| Zhangjuzheng Think Partner 提供张居正视角下的务实改革策略，针对变革阻力、执行力不足和复杂利益博弈，助你推进可执行的组织变革。 | |
| Zhangxiaolong Product Way 基于张小龙的极简主义产品哲学，分析产品方向、用户体验与需求优先级，助力精准决策与快速迭代。 | |
| Zhangyiming Think Partner 基于张一鸣思维框架，针对战略决策、创业困惑和团队管理提供理性分析与长期视角的实用建议。 | |
| Zhugeliang Think Partner 基于诸葛亮的隆中对、八阵图等经典智慧，助你全局战略规划、系统设计、心理博弈与资源优先级管理。 | |
| Zhuyuanzhang Think Partner 基于朱元璋建国智慧，助你从零起步草创组织，设计稳定制度，平衡铁腕与怀柔，实现极端环境下的务实生存。 | |
| Amazon Research by Gecho Search Amazon products, retrieve known product details, and collect product reviews through the official Gecho Bridge MCP tools. Use for marketplace discovery, catalog research, product comparison, review analysis, and ASIN-level research. | |
| Amazon Product Details by Gecho Retrieve complete Amazon product details with the official Gecho Bridge MCP tool, including title, price, variants, specifications, description, ratings, and links. Use when the user provides an Amazon product URL or ASIN. | |
| Amazon 商品详情【Gecho 官方】 通过官方 Gecho Bridge MCP 获取完整的 Amazon 商品详情，包括标题、价格、变体、规格、描述、评分和链接。用户提供 Amazon 商品 URL 或 ASIN 时使用。 | |
| Amazon Product Reviews by Gecho Collect Amazon product reviews with the official Gecho Bridge MCP tool, including review text, ratings, dates, and reviewer metadata when available. Use when the user provides an Amazon product URL or ASIN and wants review research. | |
| Amazon 商品评论【Gecho 官方】 通过官方 Gecho Bridge MCP 采集 Amazon 商品评论，包括评论文本、评分、日期和可用的评论者信息。用户提供 Amazon 商品 URL 或 ASIN 并需要评论调研时使用。 | |
| Amazon Product Search by Gecho Search Amazon products by keyword with the official Gecho Bridge MCP tool and return structured listings, prices, ratings, and links across a selected marketplace. Use for Amazon product discovery and catalog research. | |
| Amazon 商品搜索【Gecho 官方】 通过官方 Gecho Bridge MCP 按关键词搜索 Amazon 商品，返回指定站点的商品列表、价格、评分和链接。用户需要 Amazon 商品发现或目录调研时使用。 | |
| Amazon 全链路调研：搜索、商品详情与评论分析【Gecho 官方】 通过官方 Gecho Bridge MCP 搜索 Amazon 商品、获取已知商品详情并采集商品评论。适用于市场发现、商品库调研、商品比较、评论分析和 ASIN 级研究。 |
32,351–32,400 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.