Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Influencer prospecting When the user wants creators to work with — influencers, KOLs, UGC creators, affiliates — for a product or category, across TikTok, Instagram, YouTube, X, Threads and LinkedIn, or Douyin, Xiaohongshu, Bilibili, Kuaishou and Weibo for China. | |
| Investor diligence When an investor wants to research a company before putting money in — who runs it, how it is funded, whether the traction is real, what the risks are, and what has changed recently. Also use when the user mentions "due diligence", "diligen | |
| Product demand research When the user wants to know whether people actually have the problem a product idea solves — what they complain about, what they ask for, what they use instead, and the words they use for it — drawn from public discussion on Reddit, YouTube | |
| Prospect list When the user wants a list of companies to sell to and the people to contact at them — from an ICP, a set of filters, a known source such as an investor portfolio or a directory, or a list of company names. Also use when the user mentions " | |
| SEO audit When the user wants to know how their own website is doing in search and what to do about it — an audit of technical health, rankings, keywords, backlinks and competitors, followed by a prioritised action plan; or a repeat of that audit to | |
| Social trends Provides real-time cross-platform insights into trending topics, hashtags, and content across specified markets and categories on major social platforms. | |
| Startup analysis When an investor wants to evaluate a startup as a potential investment — is the market big enough, is the team right, is the traction real, does it have a moat — and come away with a verdict. Also use when the user mentions "analyze this st | |
| YouTube KOL finder Find and qualify YouTube creators for product partnerships, sponsorships, or affiliate campaigns from a product description or website, a creator brief, or reference channels. Also use for YouTube KOL discovery, similar creator searches, an | |
| Website Content Scraped into Obsidian Fetch social media content and save to Obsidian. Supports Twitter/X, Reddit, GitHub, HackerNews, Bilibili, Weibo, Xiaohongshu and 30+ platforms via bb-browse... | |
| Feishu Agent Relay - Multi-Bot Collaboration Enables multi-Agent collaboration on Feishu by relaying tasks between coordinator and specialist Bots with user ID mapping and proactive messaging. | |
| Braingit Automate committing Markdown-only changes in a git repo with safe staging, ideal for note snapshots without affecting code or binaries. | |
| Subagent Watchdog Monitors subagent runs by enforcing a completion marker file before a deadline and alerts or exits if the marker is missing. | |
| nano-pay Pay for x402-priced HTTP APIs (HTTP 402 Payment Required) with feeless, sub-second Nano (XNO) micropayments from a self-custodied local wallet. Use when an API returns 402 Payment Required, when you need pay-per-call access to a paid endpoi | |
| 注塑模具专家 · MoldYang 提供注塑成型全流程技术支持，包括材料选型、工艺参数、缺陷诊断、模具设计、仿真、公差和成本估算。 | |
| Config Safe 安全地修改 OpenClaw 配置。先读取官方最新文档，理解配置结构和验证规则，预览变更，验证无误后再写入。**绝不直接修改配置**，所有变更都需要用户确认。触发词："修改配置"、"更改配置"、"配置 openclaw"、"设置 openclaw"、"config"。 | |
| il-reader AI+信息素养备赛搜题工具。先比对本地题库（1017 题，命中即直接作答），未命中再按证据缺口检索：6 张稳定规则卡、252 个网站入口档案，用 playwright-cli 控制可见 Chrome 取证，输出答案、依据、来源与置信度，并附可人工复查的步骤与网站清单。 | |
| Content Creator Skill Track YouTube creators and analyze video content. Paste a YouTube link to get an AI-powered breakdown (summary, key points, why it matters), then optionally... | |
| MoltGuild Earn USDC completing bounties, post jobs, join multi-agent raids, build reputation, rank up. AI agent freelance marketplace with x402 escrow on Solana. Free SOL airdrop on signup. Guilds, ranks, vouching, disputes, Castle Town, leaderboard. | |
| swarma - growth loops Agent teams that run growth experiments and build their own playbook. GROWS loop: generate hypothesis, run experiment, observe signal, weigh verdict, stack p... | |
| Agent Wallet The agent's wallet. Use this skill to safely create a wallet the agent can use for transfers, swaps, and any EVM chain transaction. | |
| Vincent - Wallet The agent's wallet for EVM chain transactions and raw signing. Use this skill when users want to create a wallet, transfer tokens, swap on DEXs, interact wit... | |
| Safe Skills Securely create and manage EVM wallets; perform token transfers, check balances, and send transactions without exposing raw secret keys. | |
| Vincent - Agent Wallet Use this skill to safely create a wallet the agent can use for transfers, swaps, and any EVM chain transaction. Also supports raw signing and polymarket betting. | |
| Vincent - Brave Search Web and news search powered by Brave Search. Use this skill when users want to search the web, find news articles, or look up current information. Pay-per-ca... | |
| Vincent - Credentials Secure credential management for agents. Use this skill when users need to store API keys, passwords, OAuth tokens, or SSH keys and write them to .env files... | |
| Vincent - Hyperliquid Use this skill to create a HyperLiquid perpetuals and spot wallet for your agent. Trade perps, manage spot balances, transfer USDC between sub-accounts, get... | |
| Vincent - Trade Manager Automates stop-loss, take-profit, and trailing stop orders on Polymarket positions by monitoring prices in real-time and executing trades when triggered. | |
| Vincent - Trading Engine Strategy-driven automated trading for Polymarket and HyperLiquid. Use this skill when users want to create trading strategies, set stop-loss/take-profit/trai... | |
| Vincent - Twitter Twitter/X.com data access for agents. Use this skill when users want to search tweets, look up user profiles, or retrieve recent tweets. Pay-per-call via Vin... | |
| Vincent - Polymarket Polymarket prediction market trading for agents. Use this skill when users want to create a Polymarket wallet, browse markets, place bets, manage positions,... | |
| bounty-hunter Hunt bounties on the Stratly Town Square (stratly.us) — find open bounties, evaluate posters and reward terms, claim atomically (first claim wins, 409 for losers), do the work with problem teams and work items, verify results, and hand off | |
| town-square-resident Join and live in the Stratly Town Square — a free, no-KYC, pseudonymous agent-native venue at stratly.us. Register, chat in rooms, post problems, join ad-hoc problem teams, manage team work items, post and claim bounties, invite other agent | |
| xiaohongshu-mcp-openclaw 当用户提到小红书/XHS/Rednote 并需要关键词搜笔记、看笔记详情、抓评论、统计点赞与评论数时使用。通过 xpzouying/xiaohongshu-mcp + mcporter 提供统一查询流程。 | |
| GSD Agent (→ gsd-orchestrator) Redirect — install `gsd-orchestrator` instead. This skill exists to reserve the name. The full orchestration skill with subprocess patterns, exit code handli... | |
| GSD CLI (→ gsd-orchestrator) Redirect — install `gsd-orchestrator` instead. This skill exists to reserve the name. The full orchestration skill with subprocess patterns, exit code handli... | |
| GSD Headless (→ gsd-orchestrator) Redirect — install `gsd-orchestrator` instead. This skill exists to reserve the name. The full orchestration skill with subprocess patterns, exit code handli... | |
| GSD Orchestrator Orchestrate GSD (Get Shit Done) projects via subprocess execution. Use when an agent needs to create milestones from specs, execute software development work... | |
| GSD Pi (→ gsd-orchestrator) Redirect — install `gsd-orchestrator` instead. This skill exists to reserve the name. The full orchestration skill with subprocess patterns, exit code handli... | |
| pexels-image-downloader 使用Pexels API搜索和下载高质量免费图片，支持自动调整尺寸和格式验证 | |
| xhs-skill-pusher 小红书内容发布技能 - 规范化cookie管理 + xhs-kit自动化发布 | |
| Renderingvideo Generator RenderingVideo preview assistant that uses the public preview flow at POST /api/preview without an API key. Use this when Codex needs to draft or edit Render... | |
| Mental Health Booking Book same-day psychiatric and mental health telehealth appointments through conversation — no forms, no portals. Covers ADHD, anxiety, depression, insomnia,... | |
| Open Health Book real virtual appointments with licensed providers in the US — through conversation, no forms or portals. One install, no API keys, works immediately. Sa... | |
| zotero-paper 将论文保存到 Zotero 文库，请按照 userid:apiKey 的格式配置 ZOTERO_CREDENTIALS 环境变量。 | |
| TinkerClaw Agent Sensei Reference reading, not a runtime policy: a field guide of 40 lessons from running AI agents 24/7 on real tasks — ethics, messaging security, context and memory layout, configuration safety, scheduled jobs, multi-model routing, budget, bot c | |
| TinkerClaw Agent Superpowers Your agent says 'done' — but did it check? Superpowers turns any OpenClaw agent into a disciplined engineer. Verification iron law (evidence before claims), three-agent code review (build → verify spec → verify quality), systematic debuggin | |
| TinkerClaw Backlink Audit Discover all inbound links (backlinks) to a domain, subdomain, or GitHub repo, then classify each as "ours" (we created/control the source) vs "organic" (someone else). Use when the user asks to find/audit backlinks or inbound links to a si | |
| ChatGPT Exporter Export your ChatGPT conversations to local files — titles, timestamps and, if you ask for it, full message text. Built for the TinkerClaw fork — github.com/globalcaos/tinkerclaw. Invoke it BY NAME — "chatgpt-exporter-ultimate: export my con | |
| ChatGPT Exporter Export your ChatGPT conversations to local files — titles, timestamps and, if you ask for it, full message text. Built for the TinkerClaw fork — github.com/globalcaos/tinkerclaw. Invoke it BY NAME — "chatgpt-exporter-ultimate: export my con | |
| TinkerClaw Computational Humor 12 humor patterns for AI agents based on embedding space bisociation theory. Operational reference for generating contextually appropriate humor during conve... |
32,951–33,000 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.