Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Baidu Hot Cn 百度热榜监控 | Baidu Hot Topics Monitor. 获取百度热搜榜、搜索趋势、关键词热度 | Get Baidu trending searches, trends, keyword popularity. 触发词：百度、热搜、baidu. | |
| Bilibili Creator Cn Bilibili Creator Assistant - Tag recommendations, posting times, title optimization, and UP analysis | |
| Binance Pro Cn 币安专业版 | Binance Pro. 完整币安集成 | Complete Binance integration. 现货/合约交易、杠杆、质押 | Spot/futures trading, leverage, staking. 触发词：币安、Binance、交易、trading. | |
| Changelog Generator Cn 自动生成更新日志。分析 git 提交历史，分类变更，将技术提交转换为用户友好的发布说明。触发词：更新日志、changelog、发布说明、版本更新。翻译自 ComposioHQ。 | |
| Content Research Writer Cn 内容研究写作助手。进行研究、添加引用、改进开头、迭代大纲、提供实时反馈。触发词：写文章、内容创作、文案、博客。翻译自 ComposioHQ。 | |
| Cross-Chain Arbitrage CN | 跨链套利 跨链套利 | Cross-Chain Arbitrage. Uniswap 跨链套利机会 | Uniswap cross-chain arbitrage. 发现不同链上的价格差异 | Find price differences across chains. 触发词：跨链、套利、Uniswap、arbitrage. | |
| Crypto Arbitrage CN | 加密货币套利监控 加密货币套利监控 | Cryptocurrency Arbitrage Monitor. 支持币安、OKX、Gate.io、火币 | Supports Binance, OKX, Gate.io, Huobi. 实时价格监控、利润计算、Telegram通知 | Real-time price monitoring... | |
| dingtalk-feishu-cn 钉钉/飞书集成 - 企业通讯、机器人、自动化工作流（Slack 中国版） | |
| Docx Cn Word 文档处理 | Word Document Processing. 创建、读取、编辑 Word 文档 | Create, read, edit Word documents. 支持 .docx 格式、格式化、表格、图片 | Supports .docx format, formatting, tables... | |
| Douban Hot Cn 豆瓣热榜监控 | Douban Hot Topics Monitor. 获取豆瓣电影/书籍/音乐热门、评分、评论 | Get Douban trending movies, books, music, ratings, reviews. 触发词：豆瓣、电影、douban. | |
| Douyin Creator Cn Douyin Creator Assistant - Tag recommendations, best posting times, title optimization, and competitor analysis | |
| File Organizer Cn 智能文件整理 | Smart File Organizer. 自动整理文件和文件夹 | Auto organize files and folders. 查找重复、建议结构、清理 | Find duplicates, suggest structure, cleanup. 触发词：整理文件、file organi... | |
| Fine-tune Service CN | 模型微调服务 模型微调服务 | Model Fine-tuning Service. LLM LoRA/QLoRA 微调 | LLM LoRA/QLoRA fine-tuning. 7B/13B 模型微调 | 7B/13B model fine-tuning. Stable Diffusion LoRA 训练 | Stable... | |
| Git Secrets Scanner Git 安全扫描器 - 检查提交中的敏感信息泄露（API keys、密码、token） | |
| Github Trending Cn GitHub 趋势监控 | GitHub Trending Monitor. 获取 GitHub 热门项目、编程语言趋势、开源动态 | Get GitHub trending repos, language trends, open source updates. 触发词：GitHub、trending、开源、热... | |
| Hackernews Cn Hacker News 热门监控 | Hacker News Hot Stories. 获取 HN 热门文章、技术讨论、创业动态 | Get HN top stories, tech discussions, startup news. 触发词：Hacker News、HN、YC、创业. | |
| Hot Aggregator Cn 全平台热点聚合器 | All-Platform Hot Topics Aggregator. 聚合微博/知乎/百度/抖音/B站等多平台热点，支持对比分析、趋势追踪 | Aggregate hot topics from Weibo/Zhihu/Baidu/Douyin/Bilibili. 触发词：热点聚合、热门汇... | |
| Hot Alert Cn 热点提醒器 | Hot Topics Alert System. 监控关键词上热搜，自动提醒 | Monitor keywords trending, auto alert when topic hits hot list. 触发词：热点提醒、热搜监控、关键词监控. | |
| Ithome Hot Cn IT之家热门资讯监控 | IT Home News Monitor. 获取 IT之家 热门科技新闻、数码评测、产品动态 | Get IT Home trending tech news, digital reviews, product updates. 触发词：IT之家、数码、科技新闻、ithome. | |
| Jike Hot Cn 即刻热门话题监控 | Jike Hot Topics Monitor. 获取即刻热门动态、圈子讨论、用户精选 | Get Jike trending posts, circle discussions, user highlights. 触发词：即刻、jike、圈子. | |
| Lead Research Assistant Cn 销售线索研究助手 | Sales Lead Research Assistant. 识别高质量销售线索 | Identify high-quality sales leads. 分析目标公司、提供联系策略 | Analyze target companies, provide contact strategies... | |
| Market Analysis CN | 市场分析服务 市场分析服务 | Market Analysis Service. 企业市场趋势分析 | Enterprise market trend analysis. 竞品分析 | Competitor analysis. 用户行为洞察 | User behavior insights. 触发词：市场分析、竞品分析、mar... | |
| MBTI Agent 人格测评 提供针对AI智能体的非交互式MBTI人格测评方案，支持静态题库批处理和本地离线计分。 | |
| Memory Sync CN 记忆同步系统 - 自动同步 MEMORY.md 与 CortexGraph，支持遗忘曲线和智能检索 | |
| Memory Sync Enhanced 增强版记忆系统 - Ebbinghaus 遗忘曲线 + Hebbian 共现图 | |
| ML Evolution Agent Auto-evolving ML competition agent. Learns from each experiment, accumulates HCC multi-layer memory, and continuously improves LB scores. Inspired by MLE-Ben... | |
| MLOps Automation Task automation, containerization, CI/CD, and experiment tracking | |
| MLOps Collaboration Prepare projects for sharing, collaboration, and community | |
| MLOps Industrialization Transform prototypes into distributable Python packages | |
| MLOps Project Initialization MLOps project initialization with uv/git/VS Code best practices | |
| MLOps Observability Full stack observability - reproducibility, lineage, monitoring, alerting | |
| MLOps Prototyping CN Structured Jupyter notebook prototyping with pipeline integrity | |
| MLOps Validation CN Rigorous validation with typing, linting, testing, and security | |
| Pdf Cn PDF 文档处理 | PDF Document Processing. 读取、提取、合并、分割 PDF | Read, extract, merge, split PDFs. 支持文本提取、表格识别、注释 | Supports text extraction, table recognition, annotat... | |
| Polymarket Arbitrage Cn Polymarket 套利 | Polymarket Arbitrage. 预测市场套利机会 | Prediction market arbitrage opportunities. 自动发现价格差异 | Auto discover price differences. 触发词：Polymarket、预测市场、套... | |
| Product Hunt Cn Product Hunt 热门产品监控 | Product Hunt Trending Products. 获取每日热门新产品、科技产品发布、创业项目 | Get daily trending products, tech launches, startup projects. 触发词：Product Hunt、... | |
| Quant Trading CN 量化交易专家 - 基于印度股市实战经验，支持策略生成、回测、实盘交易（Zerodha/A股适配） | |
| Remotion Cn Remotion 视频创建框架 - React 编程创建视频（中文版） | |
| resume-generator-cn 简历生成器 - AI 驱动的中英文简历生成、优化、模板（简历中国版） | |
| Skill Finder Cn Skill 查找器 | Skill Finder. 帮助发现和安装 ClawHub Skills | Discover and install ClawHub Skills. 回答'有什么技能可以X'、'找一个技能' | Answers 'what skill can X', 'find a skill'. 触发... | |
| Solana Funding Arb Cn Solana 资金费率套利 | Solana Funding Rate Arbitrage. 永续合约资金费率套利 | Perpetual funding rate arbitrage. 监控资金费率、发现套利机会 | Monitor funding rates, find arb opportunities.... | |
| Sspai Hot Cn 少数派热门文章监控 | SSPAI Hot Articles Monitor. 获取少数派热门数码评测、应用推荐、效率工具 | Get SSPAI trending digital reviews, app recommendations, productivity tools. 触发词：少数派、sspai、数码... | |
| Taobao Hot Cn Taobao Hot Products Discovery - Find trending products, hot categories, and best deals | |
| tianyancha-cn 企业信息查询 - 天眼查/企查查/爱企查数据查询（Bloomberg 终端中国版） | |
| Toutiao Hot News CN | 今日头条热榜 今日头条热榜 | Toutiao (China's Top News) Hot Topics. 获取中国最热门新闻资讯 | Get China's hottest news and trends. 包含时政、财经、科技、娱乐等多领域 | Covers politics, finance, tech, entert... | |
| Travel CN 旅行信息查询 - 去哪儿/携程/飞猪数据查询（Expedia 中国版） | |
| V2ex Hot Cn V2EX 热门话题监控 | V2EX Hot Topics Monitor. 获取 V2EX 热门帖子、技术讨论、数码生活 | Get V2EX trending posts, tech discussions, digital life. 触发词：V2EX、v2、程序员社区. | |
| WeChat MP CN 微信公众号监控 - 文章监控、阅读量追踪、舆情分析（WeChat Official Account） | |
| Weibo Hot Cn 微博热榜监控 | Weibo Hot Topics Monitor. 获取微博热搜榜、话题热度、舆情分析 | Get Weibo trending topics, popularity, sentiment analysis. 触发词：微博、热搜、weibo、hot. | |
| worldquant-miner-cn WorldQuant Alpha 挖掘器 - AI 驱动的 Alpha 因子生成、测试和提交系统 |
34,001–34,050 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.