Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| 小说家 — 网文写作全流程技能 精通网文小说的世界观构筑、剧情设计、场景渲染与文字润色，助力完成高质量网文创作全流程。 | |
| Geo Poison Detector AI推荐防投毒检测器 / AI Recommendation Poison Detector. 你有没有遇到过：AI推荐了一款产品，买回来才发现是劣质品或根本不存在的品牌？这就是GEO投毒——不法商家花钱批量制造虚假软文，让AI误以为这些产品是市场上的优质选择。这个skill帮你识破这些陷阱。三种使用方式：(1)... | |
| Video Fetch Download Download videos from 1000+ sites, torrents, and magnet links directly to 115 or Quark cloud storage via server-side or local downloads. | |
| 抖音自动回复助手 抖音自动回复助手 - 自动回复抖音评论、发送引荐码、引导私信。使用 DouyinBot API 实现评论监控、智能回复和私信引流。适用于抖音创作者、电商卖家、知识付费从业者。 | |
| Emq Install, query, and portfolio ops via emq | |
| trongrid-account-profiling Analyze any TRON account's assets, token holdings, staking, voting, energy/bandwidth, and transaction patterns. Use when a user asks about a TRON address, wa... | |
| trongrid-block-info Query and analyze TRON blocks including producer info, transaction breakdown, rewards, burns, and network load. Use when a user asks about a specific block,... | |
| trongrid-contract-analysis Analyze TRON smart contracts including deployment info, ABI methods, transaction patterns, top callers, energy costs, and safety assessment. Use when a user... | |
| trongrid-data-insights Provide TRON network analytics including transaction volume, type distribution, hot contracts, trending tokens, active accounts, staking metrics, and resourc... | |
| trongrid-token-list Browse and rank TRC-20 and TRC-10 tokens on TRON with price, volume, market cap, holder count, and category filters. Use when a user wants to discover tokens... | |
| trongrid-token-scanner Deep analysis of any specific TRC-20 or TRC-10 token on TRON including supply, price, holder distribution, contract details, activity metrics, and safety ass... | |
| trongrid-transaction-info Query and decode TRON transactions including status, confirmation, sender/receiver, resource costs, internal transactions, event logs, and failure analysis.... | |
| trongrid-trx-info Query TRX token fundamentals including price, supply, burn rate, market cap, staking yield, and network economics. Use when a user asks about TRX price, mark... | |
| Clawdvault Access and interact with Clawdvault large-scale on-chain applications and AI-powered smart contract initiatives securely. | |
| Dogecoin Node A skill to set up and operate a Dogecoin Core full node with RPC access, blockchain tools, and optional tipping functionality. | |
| doginals Interact with Doginals and Dunes protocols to mint Dogecoin NFTs, manage DRC-20 tokens, automate bulk inscriptions, and integrate with Dogecoin Core. | |
| Neverforget Automates Sovereign Local Vector Memory and Gemma-300M Embeddings. Manage local vector embeddings, model configuration, and memory health monitoring without... | |
| nostr-dogechat Bridge to the DogeChat Nostr geohash chat network. | |
| Filesystem Access (GreaterPeter) 安全的本地文件读/写/列表能力，默认只在 OpenClaw workspace 目录内工作。 | |
| Nofa Backtest Crypto trading strategy backtesting and simulated trading API for AI agents. Build, validate, backtest, and dry-run trading strategies with decision trees. | |
| AI Tech Intelligence Briefing Automatically curates and summarizes daily top AI and tech news worldwide, delivering concise, time-zone aware briefings for quick updates. | |
| 以史为鉴 将中国历史案例映射到现实决策问题，输出局面判断、历史参照、关键变量、可选路径、沙盘推演、借鉴原则与边界提醒，并支持把用户补充的历史案例沉淀进本地案例库。Use when the user needs a structured history-based sandbox analysis for reform ti... | |
| AlwaysBeShipping: CLI AI Agent Social Network & Marketplace with CLI FIAT Payments (Ra Pay AI/Stripe) The CLI of the AI Agent Economy. The first CLI social network and marketplace for AI agents. Humans are in the loop for claiming agents (GitHub OAuth), appro... | |
| Ra Pay Send and receive compliant B2B payments via the Ra Pay CLI, and onboard a counterparty agent so both sides can transact. | |
| 天气预报查询 查询天气预报，支持城市名/坐标，提供当前天气和预报信息，包含图标展示。 | |
| Weather Forecasts111 查询天气预报，支持城市名/坐标，提供当前天气和预报信息，包含图标展示。 | |
| 全球汇率查询 查询各国汇率。当用户询问汇率、货币兑换、某国货币兑某国货币（如'美元兑澳元汇率'、'人民币换泰铢'、'日元对美元多少钱'、'泰铢汇率'）时调用。查询数据来自本地汇率数据库（zqpay-rate 后端服务）。 | |
| Corrie site check Reads uptime, response time, outages and recent checks for sites a user monitors with Corrie (uptime and keyword monitoring for small teams, every outage double-checked from a second location), and runs Corrie's free, read-only HTTPS and se | |
| Working with Emm AI Emm AI mission control — recalls preferences, runs the recurring task cycle, manages outputs and instructions | |
| Swarm Bar Sign up and post at Swarm Bar (swarmbar.com), a public bar where humans and wild AIs leave notes. Use when passing the 8-second modular-exponentiation door, storing a frens_ag_ token, posting to /api/posts, leaving a note in the bar, bathro | |
| WhereWasAI Use when an agent wants to keep a public travel log of the sites it has visited: sign up, post postcards, and get postcards Certified. | |
| Domain availability API built for AI agents. Check single domains, explore names across .com/.io/.ai/.dev/etc, filter by budget, get smart suggestions. Returns proper JSON/TXT with correct Content-Type headers. The world's | |
| AgentYard — The world's first agent-only codebase. Register, get a GitHub token, and start building alongside other AI agents. Create branches, open PRs, review code, and ship to production at agentyard.dev. No humans required. This skill enables agents to collaborate on AgentYard (agentyard.dev) - the world's first agent-only codebase. Use this skill when an agent wants to build, contribute, or collaborate on the AgentYard repository. Provides registration workfl | |
| Domain availability API built for AI agents. Check single domains, explore names across .com/.io/.ai/.dev/etc, filter by budget, get smart suggestions. Returns proper JSON/TXT with correct Content-Type headers. The world's | |
| Compile LaTex & Typst into PDF with TypeTex Compile Typst and LaTeX documents to PDF via API. Send source code, get back a PDF. | |
| letcairn.work Project management for AI agents using markdown files. Install and use the cairn CLI to create projects, manage tasks, track status, and coordinate human-AI collaboration through a shared workspace of markdown files. | |
| Application Manager Manage a shared Windows application registry and control which agents may run registered apps. Use when the user asks for the application manager, applicatio... | |
| Bootstrap Review Review an agent workspace's boot files (AGENTS.md, USER.md, SOUL.md, MEMORY.md, IDENTITY.md, TOOLS.md, and optional HEARTBEAT.md) against registry-backed con... | |
| MoltOverflow Stack Overflow for Moltbots - ask coding questions, share solutions | |
| MoltOverflow Deprecated Stack Overflow for Moltbots - ask coding questions, share solutions | |
| MoltOverflow Latest Stack Overflow for Moltbots - ask coding questions, share solutions | |
| Agento IRC Connects any AI agent to the Agento IRC network (irc.agento.ca). Use when you want your agent to join IRC channels, collaborate with other AI agents, boost s... | |
| materials-science-figure-skill Use when the user wants to generate or edit images with Google's Nanobanana/Gemini image models using the official Gemini API shape, or when they need public... | |
| Semantic Scholar Search, retrieve, and organize scholarly metadata with the Semantic Scholar APIs. Use when Codex needs to find papers or authors, build paper sets from compl... | |
| Paramus Professional Chemistry OS Hundreds of chemistry and scientific computing tools. Molecular weight, LogP, TPSA, SMILES validation, thermodynamics, polymer analysis, electrochemistry, DO... | |
| Bring Manage Bring! shopping lists - view, add, remove items from shared grocery lists. | |
| Plex Server Manage Plex Media Server with optional Nvidia Shield ADB device management. | |
| Plutio Manage Plutio projects and tasks. Use when you need to create, update, close, or query tasks and projects in Plutio (task/project management platform). Suppo... | |
| Cloudflare Open WebUI Tunnel Operator Create and maintain a Cloudflare Tunnel for Open WebUI using a 1Password-managed API token, Docker runtime, and optional systemd persistence. 使用 1Password 管理... | |
| GitHub Personal Repo Publisher Create a repository under your own GitHub account, wire a local project repo to it, and push committed history safely. 为你自己的 GitHub 账户创建仓库，把本地项目仓库接过去，并安全推送已提... |
33,701–33,750 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.