Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Habit Quest Logger Turn habit building into a quest log with daily mission tiers, streak feedback, fallback actions, and recovery guidance after missed days. Use when the user... | |
| Habit Stack Designer Design a habit stack by choosing a reliable existing anchor, shrinking the new habit into a tiny first action, and adding friction reduction, reward, and a r... | |
| Habits Tracker Track habits, routines, streaks, completions, reminders, and weekly progress with a local Node.js CLI. Use when the user wants to build a daily habit system,... | |
| Haodf Help patients find suitable doctors based on symptoms, specialty, location, and doctor ratings. Use when the user wants to find a doctor, get medical recomme... | |
| json-formatter-pro Format and validate JSON files with options for indentation, key sorting, input/output from files or stdin, and detailed error reporting. | |
| Health Checkup Report Interpret routine health checkup reports and lab results in plain Chinese, highlighting abnormal items, likely meaning, urgency, follow-up questions, and pra... | |
| Health Habit Builder Health Habit Builder / 健康习惯养成师. 基于行为科学和习惯形成理论，智能拆解微习惯、跟踪打卡、分析动机，帮助用户建立可持续的健康习惯。 | |
| Health Manager Health data management system for tracking blood pressure, heart rate, exercise, and medication. Use when: (1) recording daily health metrics like blood pres... | |
| Health Reminder Health reminder assistant - medication reminders, water intake tracking, activity prompts | |
| Home Filter Replacement Tracker Build a household filter inventory with locations, sizes, replacement intervals, next due dates, shopping list, and reminders. | |
| Home Food Planner Family meal planning tool that provides weekly menu planning, nutrition analysis, shopping list generation, ingredient management, and recipe recommendations... | |
| Home Garden Planner Recommend plants and garden layouts based on your space, experience, and goals, with seasonal tips and common mistakes to avoid. | |
| Home Noise Evidence Log Build a calm, factual log for repeated home noise, including timestamped incidents, proof notes, pattern summary, and a neutral message draft for management,... | |
| Home Water Leak First Hour Log Create a first-hour action log for home water leaks with shutoff checklist, photo checklist, damage notes, contacts, and cleanup timeline. | |
| Home Wifi Troubleshooting Map Create a safe visible-diagnostic map for home Wi-Fi problems using device symptoms, router lights, placement notes, outage checks, speed tests, and support-r... | |
| Hospital Help patients find suitable hospitals based on medical needs, location, hospital level, and specialties. Use when the user wants to find a hospital, compare... | |
| Household Airflow Comfort Map Creates a comfort-focused room airflow map, timing routine, and weekly review checklist for stuffy rooms without HVAC diagnosis, repair advice, allergy guida... | |
| How To Do Practical guide to using OpenClaw effectively. Teaches step-by-step workflows, recommends skills based on your needs, solves common problems, and grows with... | |
| Hum2Song Hum2Song turns a hummed or sung melody into a complete song with local audio processing, MIDI extraction, and optional AI-assisted arrangement, without uploa... | |
| Hydration Habit Tuner Build a simple daily water habit around the user's schedule using personalized cues, a bottle plan, and a 7-day check-in sheet. | |
| Idle Reward Optimizer Design low-friction idle, light-interaction, and micro-progress actions for fragmented or low-energy time while protecting recovery. Use when the user wants... | |
| Image Works Batch image processing - compress, resize, format convert, watermark, EXIF clean, and crop. All local, no upload needed. | |
| Influencer Partnership Scout Generates influencer shortlist tiers, analyzes creator fit by campaign goal, recommends partnership mode, and drafts outreach briefs for e-commerce brands. | |
| Insight Tracker Track, categorize, search, and analyze insights, patterns, and observations discovered during OpenClaw sessions. Use when the user wants to record, retrieve,... | |
| Intuition Development Guide Teaches systematic approaches to developing and trusting intuitive judgment over time. | |
| Inventory Health Auditor Audit ecommerce inventory notes or SKU exports, flag stockout, aging, overstock, capital lock-up, and promo-readiness risks, then turn partial inventory data... | |
| Inventory Risk Radar Scan ecommerce inventory notes or CSV exports for stockout, overstock, aging, inbound-delay, and promo-readiness risk, then turn them into a ranked watchlist... | |
| Invoice Compliance Checker Provides structured analysis, templates, and recommendations to assess invoice compliance with regulations and internal policies without executing transactions. | |
| JD Shopping JD.com shopping assistant. Input a JD product name or link; output self-operated/flagship trust checks, visible price, review risks, SKU recommendation, and... | |
| Jdl Express Use JD Logistics (京东快递) for shipment tracking, shipping guidance, service-type comparison, outlet lookup, and delivery-time or fee estimation. | |
| Jingdong Redirect Redirect: jingdong has been merged into jd-shopping. Use jd-shopping for JD.com search, review checks, price comparison, SKU selection, and safe cart prepara... | |
| Json Formatter Pro Format and validate JSON files with pretty-printing, indentation control, key sorting, and validation modes supporting stdin, stdout, and file I/O. | |
| Jtexpress Use J&T Express (极兔速递) for shipment tracking, shipping guidance, service-type comparison, outlet lookup, and delivery-time or fee estimation. | |
| Juejin Article Optimizer Optimize Juejin technical articles by improving title, structure, code/text ratio, readability, SEO, and engagement for better rankings and reader interaction. | |
| Junk Drawer 5 Minute Reset Provides a timed 5-minute plan to quickly sort one junk drawer into keep, move, trash, and caution zones for fast visible progress. | |
| Kid Activity Registration Command Center Organize child activity registrations with deadline tracking, document checklists, payments, gear, schedules, transportation, and follow-up reminders. | |
| kiwi-buyer Kiwi 采购/询价/磋商。当用户想买一般商品、采购、找商家/供应商、询价、比价、还价、问交期/MOQ 时使用 kiwi_buyer_* 工具跨商家发现→询价→磋商→非绑定协议→handoff。需配合 ClawHub 上的 kiwi 插件使用（openclaw plugins install clawhub:kiwi，提供 kiwi_buyer_* 工具）。 | |
| Knowledge Connector Knowledge workbench connector. Input notes, documents, or a local knowledge folder; output import guidance, relationship maps, cross-document answers, and co... | |
| Knowledge Distillation Distill OpenClaw daily memory, session transcripts, and newly generated report files into new knowledge points and deeper knowledge leads. Use when the input... | |
| Notes Knowledge Mapper Notes knowledge mapper. Input Markdown/TXT notes or a topic folder; extract entities, similar ideas, relationships, and map views, then output searchable JSO... | |
| Labor Dispute Check Check common China labor dispute issues and estimate employee rights | |
| Last Minute Travel Doc Pack Organize urgent travel papers into a destination-ready packet and print/download checklist without storing private ID numbers. | |
| Laundry Care Symbol Decoder Decode clothing care symbols into a one-garment or batch care sheet with symbol meanings, actions, avoid notes, delicate-fabric warnings, and label-readabili... | |
| 诉讼费计算器 Calculate lawsuit filing fees and litigation costs for civil cases in China. Use when the user asks about 诉讼费、诉讼费计算、起诉要多少钱、打官司费用、案件受理费、财产案件诉讼费、非财产案件诉讼费, or w... | |
| Learning Evolution Create evidence-based learning reviews for skills — analyze usage patterns, track effectiveness, and plan evolutions. Use when planning skill improvements fr... | |
| Learning Method Coach Generate evidence-based learning plans using retrieval and spaced practice | |
| Learning Notes Explorer 学习笔记 - Explore, search, and synthesize personal learning notes. Use when user asks about 笔记整理、学习回顾、知识搜索、笔记查询, or wants to explore their accumulated learning... | |
| Learning Optimizer Learning optimizer - analyze study patterns, identify inefficiencies, suggest optimizations for better learning outcomes | |
| Learning Path Navigator 个性化学习路径导航仪 - 根据学习目标、当前水平和可用资源生成定制化学习计划。 支持技能评估、路径规划、资源推荐、里程碑跟踪等功能。 | |
| Learning Planner Personal learning management system with goal setting, spaced repetition scheduling, and progress tracking. Use when: (1) setting learning goals and skill tr... |
35,001–35,050 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.