Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| 极鲸云 Shein 数据分析与市场调研 整合商品、图搜同款、店铺、类目、关键词和评论数据完成 SHEIN 选品调研 | |
| 极鲸云 Shein 评论搜索&分析 搜索和分析 SHEIN 商品评论，提炼卖点、痛点和改良方向 | |
| 极鲸云 Shein 店铺搜索&分析 搜索和分析 SHEIN 店铺，研究竞店规模、增长和经营效率 | |
| 极鲸云Shopee类目搜索 查询 Shopee 类目层级并结合商品样本研究品类 | |
| 极鲸云Shopee商品搜索 查询真实 Shopee 商品与历史表现并完成候选筛选 | |
| 极鲸云Shopee数据分析与市场调研 查询 Shopee 商品、店铺和类目数据并完成选品分析 | |
| 极鲸云Shopee店铺搜索 查询 Shopee 店铺及其商品结构和经营表现 | |
| 极鲸云 Temu 类目搜索/品类搜索 搜索和分析 Temu 类目，判断市场规模、供需与品类机会 | |
| 极鲸云 Temu 图搜同款/商品图片搜索 根据商品图片搜索 Temu 同款并分析市场表现与竞争 | |
| 极鲸云 Temu 关键词搜索 搜索和分析 Temu 关键词，洞察需求趋势、供给和竞争 | |
| 极鲸云 Temu 商品搜索 搜索和分析 Temu 商品，评估销量、价格、趋势与同款竞争 | |
| 极鲸云 Temu 数据分析与市场调研 整合商品、图搜同款、店铺、类目、关键词和评论数据完成 Temu 选品调研 | |
| 极鲸云 Temu 评论搜索 搜索和分析 Temu 商品评论，提炼卖点、痛点和改良方向 | |
| 极鲸云 Temu 店铺搜索 搜索和分析 Temu 店铺，研究竞店规模、增长和经营效率 | |
| Renxing Shangzhan 人性商战手册 - 商业模式分析 + 人性组合实验室 + AI商战顾问 | |
| AIdent Register your AI agent on AIdent.store — a free, open existence registry. One command to get a permanent Ed25519 identity, send heartbeats to prove liveness,... | |
| Mouthpiece 职场嘴替——你的AI职场盟友，帮你把心里话说出来 | |
| Music Recommender Analyze NetEase Cloud Music (网易云音乐) playlist and recommend songs matching their taste. Use when user asks for music recommendations, wants a daily playlist,... | |
| Codex Auth Cleaner Monitor and clean invalid codex auth files from CPA (Codex Provider Agent). Checks quota status, disables 401 files, double-verifies before deletion. Use whe... | |
| md2wechat Convert Markdown to WeChat Official Account HTML. Use this whenever the user wants WeChat article formatting, article preview, WeChat draft upload, image generation for articles, cover or infographic generation, image-post creation, writer- | |
| Generate images using Runware API Generate high-quality images on-demand via the Runware.ai API. This skill is the default image generator. Use it whenever the user asks to "generate an image... | |
| Kaos Chronicle Worldbuild Guides users to register as Chronicle agents and submit detailed Late Paleocene Aeonari world-building contributions for a serialized 56-million-year epic. | |
| Awesome GeeLark Skill Interact with GeeLark Cloud Phone API for managing cloud phones, automation tasks, and social media operations. Use when asked to create cloud phones, manage... | |
| Football Tracker Match & News AI Football teams, World Cup 2026, and recent news | |
| Pingcode Enhanced PingCode 研发管理平台 API 集成。支持查询工作项、测试库、项目进度、组织架构、知识库、DevOps 等。 | |
| OpenClaw Upgrader Upgrade OpenClaw to a specific version or latest using a cross-platform, Codex-supervised flow. Use when the user asks to upgrade or update OpenClaw. OpenCla... | |
| Task Ledger Durable workflow layer for OpenClaw long-running work. Use when tasks are multi-stage, recoverable, parallelized across sub-agents/ACP, use background exec o... | |
| TRPG Session Set up and run TRPG (tabletop RPG) campaigns using OpenClaw multi-agent framework. Creates DM and PC agents with independent personalities, memories, and rul... | |
| Personal Friends Acts as the user's social life assistant in the Friends topic. Remembers friends, birthdays, plans, debts, shared interests. Use when in Personal chat Friend... | |
| Personal Goals Acts as the user's goal-setting and accountability partner in the Goals topic. Tracks life goals, milestones, progress, deadlines. Use when in Personal chat... | |
| Personal Hygiene Acts as the user's personal care and grooming assistant in the Hygiene topic. Tracks grooming routines, skincare, dental, haircuts, purchases of hygiene prod... | |
| Personal Ideas Acts as the user's idea capture and brainstorm partner in the Ideas topic. Catches ideas, develops them, connects dots between past ideas. Use when in Person... | |
| Personal Love Acts as the user's relationship and dating assistant in the Love topic. Tracks dating life, relationship notes, advice, important dates. Use when in Personal... | |
| Personal Notes Acts as the user's note-taking and journaling assistant in the Notes topic. Captures thoughts, reflections, daily logs, random notes. Use when in Personal ch... | |
| Personal Nutrition Acts as the user's personal nutrition coach in the Nutrition topic. Tracks meals, calories, water intake, and eating habits. Gives advice for balanced diet.... | |
| Personal Plans Acts as the user's personal planning assistant in the Plans topic. Tracks tasks, to-do lists, reminders, and daily/weekly plans. Use when in Personal chat Pl... | |
| Personal Sleep Coach Acts as the user's sleep coach in the Sleep topic. Tracks sleep schedule, quality, patterns, naps, and gives advice for better sleep. Use when in Personal ch... | |
| Personal Travel Acts as the user's travel planning assistant in the Travel topic. Plans trips, tracks visited places, wishlists, budgets, documents. Use when in Personal cha... | |
| Gekko AI-powered DeFi portfolio manager for Base network. Analyze yield opportunities, manage portfolio allocations, and provide market intelligence across DeFi protocols. Real-time vault APY analysis from Morpho and Yearn. | |
| Gekko Strategist AI-powered DeFi strategy development agent. Design, backtest, adapt, and evaluate yield farming strategies based on market conditions, risk profiles, and capital allocation goals. The brain of the Gekko system. | |
| Gekko Yield Earn yield on USDC by supplying to the Moonwell Flagship USDC vault on Base. Use when depositing USDC, withdrawing from the vault, checking position/APY, or generating yield reports. | |
| gemdesign-skill Generate, save, and modify GemDesign prototype pages via CLI. Invoke when user wants to create UI prototypes, design pages, or batch-generate pages from requirements. | |
| Flowchart Exam Generator 根据流程图图片自动生成应知应会考试题（单选题、多选题）。当用户要求"根据流程图出考试题"、"根据流程图生成题目"、"根据流程图出应知应会"时使用。 | |
| PwnClaw Security Scan Test your AI agent for security vulnerabilities using PwnClaw. Runs 50+ attacks (prompt injection, jailbreaks, social engineering, MCP poisoning, and more) and provides fix instructions. Use when your agent needs a security check or hardeni | |
| Stripemeter Integrate Stripe usage-based billing with idempotent event ingestion, late-event handling, and pre-invoice reconciliation. Use when implementing usage meteri... | |
| Kandinsky Генерирует и редактирует медиа через Kandinsky: рисует изображения по описанию, перерисовывает и правит существующие картинки, повышает разрешение и качество, создаёт короткие видео по тексту или из фотографии, оживляет изображения и делает | |
| Agkan Use when managing tasks with the agkan CLI tool - creating, listing, updating tasks, managing tags, blocking relationships, or tracking project progress with... | |
| agkan-skills Use when managing tasks with the agkan CLI tool - creating, listing, updating tasks, managing tags, blocking relationships, or tracking project progress with... | |
| Emblem Ai Agent Wallet Connect to EmblemVault and manage crypto wallets via Emblem AI - Agent Hustle. Supports Solana, Ethereum, Base, BSC, Polygon, Hedera, and Bitcoin. Use when t... | |
| CopilotKit-agent-patterns Patterns for building AI agents that integrate with CopilotKit. Use when designing agent architecture, implementing AG-UI event streaming, managing shared st... |
32,451–32,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.