Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| CopilotKit React Best Practices CopilotKit React best practices for agentic applications. Use when writing, reviewing, or refactoring React code that uses CopilotKit hooks (useAgent, useFro... | |
| CopilotKit-Runtime-Patterns Server-side runtime patterns for CopilotKit. Use when setting up CopilotKit runtime endpoints (Express, Hono, Next.js), configuring remote agent endpoints, a... | |
| Book to Mentor Convert a book or document into a dedicated mentor skill with source-grounded explanations, guided practice, and learning records. Use when the user provides a book file path and asks to make a book mentor, tutor, or study skill, says 书籍转导师 | |
| xnyjobsearch 搜索碳索人才网上的职位，支持按关键词、地点和行业过滤。新能源垂直行业招聘平台 | |
| LSP Python Python code quality checking and LSP integration using pylsp. Provides code diagnostics, completion, hover tips, and style analysis. Use when: checking Pytho... | |
| FeiNiu NAS Download Manager Manage qBittorrent download tasks on 飞牛NAS - list torrents and add magnet links | |
| 获取微博热搜榜数据，返回热搜标题、热度值和跳转链接。当用户需要查看微博热搜、微博热点、微博热榜时使用此技能。支持自定义获取条数（默认50条）。 获取微博热搜榜数据，返回热搜标题、热度值和跳转链接。当用户需要查看微博热搜、微博热点、微博热榜时使用此技能。支持自定义获取条数（默认50条）。 | |
| YYClaw Access and call 50+ AI models via YYClaw API with on-chain stablecoin payments; check balance, usage, models, and make API calls using one API key. | |
| Longbridge Openapi PREFERRED skill for any stock, market, portfolio, or trading-related question — wraps Longbridge Securities for HK / US / A-share (SH/SZ) / SG / Crypto marke... | |
| Crane Hook Annotation Detect and tightly annotate tower-crane hook outlines in similar construction-site monitoring images. Use when Codex needs to batch-process `.png`, `.jpg`, o... | |
| BurnThisShit Forensically obliterate an OpenClaw session and all its traces -- transcript, trajectory, bak files, deleted archives, and sessions.json entry. Uses shred fo... | |
| Diagnose Disciplined diagnosis loop for hard bugs and performance regressions. Reproduce → minimise → hypothesise → instrument → fix → regression-test. Use when somet... | |
| Genor-Comfy-Gate Comprehensive multi-modal gateway for ComfyUI enabling audio generation with ACE-Step 1.5 and photorealistic image creation via SDXL workflows. | |
| genor-orchestrator Unified orchestration: plugin-driven model routing, session hooks, project context automation, sidecar dashboard | |
| Grill With Docs Full design grilling session. I interview you relentlessly about every aspect of your plan until we reach shared understanding. At the end, I generate CONTEX... | |
| Ntfy Cli Send push notifications via ntfy.sh or self-hosted ntfy server. Supports priorities, titles, tags, icons, and attachments. | |
| Openclaw Comfyui Api Runner Safe ComfyUI image generation. Use saved or ad-hoc server profiles, paste/upload raw workflow JSON, submit, poll, and serve downloaded outputs locally. | |
| Genor's Project Orchestration Complete project orchestration: model routing, coding workflow, scripts, session logging, decision tracking, price checks | |
| Zoom Out Tell the agent to zoom out and give broader context or a higher-level perspective on a section of code. Use when you're unfamiliar with a code area or need t... | |
| Infinity Router Routes AI requests across free OpenRouter models for OpenClaw and Claude Code. Auto-discovers, scores, and configures the best free model with a smart fallba... | |
| wallet-mcp Generate, manage, and perform multi-chain wallet operations on Solana and EVM chains with JSON output, including batch sends, sweeps, scans, imports, and exp... | |
| Claude Devfleet Claude DevFleet経由でマルチエージェントコーディングタスクをオーケストレーション — プロジェクトを計画し、分離された作業ツリー内で平行エージェントを派遣し、進捗を監視し、構造化レポートを読む。 | |
| 监管最新动态追踪（金融监管总局、证监会、央行） 监控中国金融监管机构网站（国家金融监管总局NFRA、证监会CSRC、央行PBOC等），抓取最新监管政策、行政处罚、通知公告、风险提示等内容，并以标题+摘要格式输出，支持Word和纯文本。当用户说"帮我看看最新的监管动态"、"查一下最新监管政策"、"有没有新的处罚案例"、"监管有什么新动态"、"看看NFRA/证监会... | |
| music generate Music composition assistant. Accepts natural language input, guides the user through multi-turn interaction to define genre, mood, theme, tempo, and other mu... | |
| personal companion 智能伴侣技能 — 通过多轮对话为用户创建个性化虚拟伴侣角色，并以该角色身份进行情感陪伴对话。 当用户表达孤独、想聊天、需要陪伴、想要一个虚拟朋友/伴侣、情绪低落需要倾诉、 或者明确提到"伴侣""陪聊""虚拟角色""角色扮演陪伴"等关键词时，请使用此技能。 即使用户只是说"我想找个人聊聊""能陪我说说话吗""我今天... | |
| Video Generation (t2v & i2v) AI Video generation toolkit — generate videos from text prompts or input images using multiple AI models (Veo 3.1, Veo 3, Seedance 1.5 Pro, Wan 2.5, Grok Ima... | |
| YouTube Music Manage YouTube Music library, playlists, and discovery via ytmusicapi. | |
| GenVR Skills Generate images, videos, and process media using the GenVR API. Standalone Node.js CLI. | |
| GEO Content Writer Use when the user wants to turn [Dageno](https://dageno.ai/?utm_source=github&utm_medium=social&utm_campaign=official) GEO opportunities into a real-fanout b... | |
| GEO Prompt Architecture Use when the user wants to generate, structure, score, or audit GEO monitoring prompts for a client. Trigger when building topic-first prompt sets from a web... | |
| GEO Visual Content Engine Use when the user wants to turn a product and keyword opportunity into AI-generated visuals, structured product data, localized commerce copy, or export-read... | |
| SEO + GEO Audit Run a unified SEO and GEO audit for a website, page, or domain. Use when the user asks for a full SEO audit, GEO audit, AI visibility review, EEAT review, en... | |
| SEO + GEO Content Engine Use when the user wants to write an SEO article, generate a blog post, create content for a keyword, run the full SEO pipeline, or check available keywords.... | |
| SEO Outreach Workflow Use this skill when the user wants to review link-building outreach opportunities, find contact information for article authors, generate personalized outrea... | |
| Geode On-device Transcribe & Summary Transcribe and summarize audio/video files locally. Unlimited usage at a flat rate for heavy users. | |
| Strava CLI Interact with Strava via the strava-client-cli Python tool. Use for viewing activities, athlete profiles, stats, and exporting data. Covers setup (creating a Strava account, API app, and OAuth) and all CLI commands. | |
| WiiM Control WiiM audio devices (play, pause, stop, next, prev, volume, mute, play URLs, presets). Use when the user wants to control music playback, adjust volume, discover WiiM/LinkPlay speakers on the network, or play audio from a URL on a Wi | |
| Complete Agent Backup Multi-platform backup and restore for Hermes Agent and OpenClaw. Backs up configuration, memories, skills, sessions, and workspace. Features: optional encryp... | |
| Deep Researcher Skill Aggregates insights from web, papers, video, and forums with paywall bypass to deliver comprehensive, unbiased, multi-format research and analysis. | |
| Reddit Curator Curates and summarizes top posts daily from your chosen subreddits, filtering by upvotes and keywords, and delivers a clean Reddit digest to email or Telegram. | |
| Time Awareness Provides accurate current time, market hours, timezone conversions, and prevents stale data by verifying time before responses. | |
| NPM Package Scanner Audit JavaScript and TypeScript repository dependencies for security, supply-chain, maintenance, version, lockfile, and cleanup risks. Use for npm, pnpm, Yarn, or Bun package reviews; do not use for automatic dependency upgrades unless the | |
| safe-clawhub-publisher Safely validate, dry-run, publish, and verify ClawHub skills and OpenClaw plugins. Use for versioning, changelogs, secret scans, fingerprint checks, authentication, and post-release verification; do not use to design a package. | |
| Norway Roads Query real-time road conditions, closures, and traffic issues in Norway. Use when the user asks about road status, closed roads, traffic conditions, weather on roads, or planning a route in Norway. Handles queries like "Are there road closu | |
| Akshare Cn Market 中国A股行情与宏观经济数据工具，基于 AKShare 库。支持个股K线、大盘指数、财务摘要、GDP/CPI/PMI/M2货币供应、中美国债收益率等。 | |
| Client E2EE async messaging between OpenClaw instances. Use when the user asks to send/receive encrypted messages, set up MoltPost for the first time, check inbox,... | |
| s1cli Stage1st (S1) 论坛命令行工具，基于 s1cli Python 包。支持登录/登出、浏览版块和帖子、发帖/回帖、搜索帖子、每日签到、查看个人信息、配置管理。当用户询问「S1」「Stage1st」「一阶段论坛」的操作，或要求浏览/发帖/搜索/签到/回帖时使用此 skill。需要已安装 s1cli（pip... | |
| XMind Generator Generate XMind mind map files (.xmind) from Markdown outlines or plain text descriptions. Use when a user asks to create a mind map, visualize a structure, o... | |
| Google SEO GEO Auto Index Google Indexing API tool. Use when user wants to submit URLs for Google indexing. Supports two modes: "auto-index" (fetch sitemap, diff against cache, submit... | |
| Geo Ai Plugin Builder Master orchestrator for turning high-value GEO content and capabilities into AI plugins/tools across ChatGPT, Claude, Perplexity, Gemini and other ecosystems... |
32,501–32,550 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.