Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Food Expiration Calculator Food expiration calculator. Use when user wants to check if a food product has expired based on production/purchase date and shelf life. Calculates expiratio... | |
| food balance health checker Analyse a user's meal or daily food intake and give gentle, friendly suggestions on whether their diet is balanced and within calorie/nutrient limits. Use th... | |
| happy stories Pick 2-3 random happy moment stories from the HappyDB dataset and retell them as short stand-up comedy bits. Use this skill whenever the user wants to hear f... | |
| Hacker news on topic AI and agent only Fetch and display Hacker News stories about AI, agents, and Claude. Default is past week. Use when the user asks for HN news, Hacker News AI stories, latest... | |
| local hacker news index page, markdown news frontend Convert Markdown-formatted Hacker News snapshots into a dark-themed, readable HTML news webpage without external dependencies. | |
| Knowledge card creator, your memory notes Knowledge Card generator. Extracts key knowledge from user-provided material (text, files, URLs), determines optimal card type (concept/memo/process/comparis... | |
| AI news hub, powerful Aggregate and rank AI and tech news from multiple user-defined sources in source.md, filtering to the latest 24-hour articles with summaries and source links. | |
| Nature and science AI news Fetch and summarize the latest AI-related articles from Nature's RSS feed and the top 7 AI news from New Scientist Technology. Use when the user asks for Nat... | |
| NBA game schedule today, scores and standings rank. Get today's NBA game schedule, live scores, final results, and current season standings. Use when the user asks about NBA games today, live NBA scores, game... | |
| Tech news from RSS(rich terminal support) Fetch and display international tech news from 8 curated RSS feeds with summaries, titles, links, and timestamps in a markdown table format. | |
| oh my skill, make skill easy! Automatically generate and save a reusable skill after AI agent successfully completes a complex task involving 5 or more tool calls. Use this skill whenever... | |
| OpenClaw session maintain helper Manage and maintain OpenClaw chat sessions. Use when the user wants to compact the current session context, start a fresh session, or reset their session. Ha... | |
| A research is searching around something. 6-step structured research skill. Searches arXiv, reads 5 papers via markitdown, has Claude select the best 2, runs 4 targeted web searches (explanation, Git... | |
| substack AI news SEARCH Scrape AI-related articles from Substack search using browser automation. Uses agent-browser to render Substack's JS-dependent search page, extract titles, a... | |
| summer Solstice countdown Display a beautiful time dashboard showing a live summer countdown to the summer solstice, today's sunrise/sunset times in China (Beijing), and current time... | |
| super-product 任务管理 CLI 工具，用于 Super Productivity 数据的命令行管理。支持任务管理、计数器管理、项目管理、今日状态查看等功能。当用户提到 super-productivity、sp 任务管理、命令行任务管理时触发。 | |
| get QA pairs from text or session Extract structured Q&A pairs and Selection Preferences from any text source — especially the current chat session or uploaded documents. Use this skill whene... | |
| tra-extract-text Extract readable text, markdown, HTML, JSON, or XML content from web pages using the trafilatura CLI tool with optional metadata and output formatting. | |
| Tree hole, wanna listen your story and life voice. hope you could give me your story. Anonymous story/confession submission to the community "tree hole" (树洞) Feishu form. Use when: (1) user wants to submit a story, confession, or thought anony... | |
| udon noodle recipe search Search and browse 100 curated Japanese udon noodle recipes from Cookpad. Use when the user asks about udon recipes, wants udon dish ideas, searches for udon... | |
| Zettelkasten note tool Create, manage, and operate a Zettelkasten slip-box note system using the zk.py CLI script. Use this skill whenever a user wants to build or use a Zettelkast... | |
| Proactive Claw 🦞 The most powerful proactive engine for OpenClaw. Your personal assistant that learns from you and helps you be more productive. | |
| Proactive Claw Integrations Optional network and automation helpers for Proactive Claw core: GitHub/Notion cross-skill context, team calendar awareness, daemon installer, and optional c... | |
| for create subagent 子Agent创建工具 - 用于批量创建和管理OpenClaw子Agent 包含完整的子Agent创建流程：目录结构、配置文件、飞书集成等 用于快速创建具有独立workspace的子Agent | |
| 抖音民间诡异故事视频生成器 【已废弃/请勿安装】此 Skill 已停止维护，仅保留历史记录。请不要安装或使用；如需相关功能，请联系作者获取新的替代方案。 | |
| Gws Admin Google Workspace Admin SDK: Manage users, groups, and devices. | |
| Gws Admin Reports Google Workspace Admin SDK: Audit logs and usage reports. | |
| Gws Alertcenter Google Workspace Alert Center: Manage Workspace security alerts. | |
| Gws Apps Script Google Apps Script: Manage and execute Apps Script projects. | |
| Gws Apps Script Push Google Apps Script: Upload local files to an Apps Script project. | |
| Gws Calendar Google Calendar: Manage calendars and events. | |
| Gws Calendar Agenda Google Calendar: Show upcoming events across all calendars. | |
| Gws Calendar Insert Google Calendar: Create a new event. | |
| Gws Chat Google Chat: Manage Chat spaces and messages. | |
| Gws Chat Send Google Chat: Send a message to a space. | |
| Gws Classroom Google Classroom: Manage classes, rosters, and coursework. | |
| Gws Cloudidentity Google Cloud Identity: Manage identity groups and memberships. | |
| Gws Docs Read and write Google Docs. | |
| Gws Docs Write Google Docs: Append text to a document. | |
| Gws Drive Google Drive: Manage files, folders, and shared drives. | |
| Gws Drive Upload Google Drive: Upload a file with automatic metadata. | |
| Gws Events Subscribe to Google Workspace events. | |
| Gws Events Renew Google Workspace Events: Renew/reactivate Workspace Events subscriptions. | |
| Gws Events Subscribe Google Workspace Events: Subscribe to Workspace events and stream them as NDJSON. | |
| Gws Forms Read and write Google Forms. | |
| Gws Gmail Gmail: Send, read, and manage email. | |
| Gws Gmail Forward Gmail: Forward a message to new recipients. | |
| Gws Gmail Read Gmail: Read a message and extract its body or headers. | |
| Gws Gmail Reply Gmail: Reply to a message (handles threading automatically). | |
| Gws Gmail Reply All Gmail: Reply-all to a message (handles threading automatically). |
33,451–33,500 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.