Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Skill Auto Evolver 自动分析和优化 Agent Skill 的工具 - 监控使用情况、评估健康度、生成改进建议 | |
| Skill Launch Doctor Audit, score, and improve agent skills before publishing, sharing, or installing them. Use when reviewing a SKILL.md file or skill folder for trigger quality... | |
| Skill Maintainer Maintain a large ClawHub skill portfolio with a quality-first and AI-assisted upgrade lens. Use when the user wants to audit published skills, find high-qual... | |
| Skill Market Analyzer Analyze the skill marketplace to identify trends, gaps, opportunities, and competitive positioning. Use when researching skill market dynamics, planning new... | |
| Skill Ops Suite Runtime-neutral skill operations suite. Input a skill directory, slug, marketplace goal, or release plan; output quality checks, safety boundaries, naming/su... | |
| Skill Recommender Agent skill recommender. Input a user need, task description, or existing skill list; output best matching skills, install rationale, duplicate/merge candida... | |
| Skill Safety Auditor Perform comprehensive security audits on skills to identify vulnerabilities, unsafe patterns, and compliance issues. Use when auditing skills for security, c... | |
| Skill Update Helper Manage OpenClaw and installed skill updates with scheduled checks, safe upgrade workflows, rollback-minded guidance, and clear reporting. Use when setting up... | |
| SkillOpt Train, evaluate, and improve Agent skill files as reusable external capabilities. Use when a user wants to optimize SKILL.md, prompt procedures, OpenClaw/Her... | |
| Skills Orchestrator Orchestrate growth loops across the skill portfolio by connecting usage, feedback, improvement, and adoption into self-reinforcing cycles. Use when designing... | |
| Sleep Quality Advisor Analyze sleep habits to assess quality, score restfulness, and provide prioritized improvement tips and basic sleep hygiene guidance. | |
| Sleep Quality Coach Personalized sleep coach using CBT-I and chronotype data to assess and improve sleep quality with tailored 7-day plans and behavior guidance. | |
| Sleep Quality Improver Help users improve sleep quality through hygiene practices, environment optimization, relaxation techniques, and sleep tracking guidance | |
| Sleep Wind Down Coach Build a realistic evening wind-down plan with a ramp-down timeline, environment checklist, last stimulating action boundary, fallback version, and next-morni... | |
| Small Electronics Recycling Prep Create a sort list and prep checklist for safely bundling small electronics for recycling, with reminders to remove personal data without handling credential... | |
| Smoke Alarm Test Map Build a room-by-room smoke alarm map and recurring test log from user-provided home details, focusing on checklist tracking and manufacturer or local fire-sa... | |
| Social Battery Monitor Helps assess social energy, evaluate upcoming events' impact, and create realistic plans with boundaries and recovery to manage social overload. | |
| Social Commerce Content Planner 帮助社交电商运营系统规划内容主题、日历、直播脚本及短视频文案模板，提升选题与转化效果。 | |
| Social Energy Manager Track and manage your social energy levels with assessments and personalized recovery plans to help maintain balance and recharge effectively. | |
| Sql Buddy Convert natural language to SQL, explore database schemas, execute queries safely, and get optimization suggestions. | |
| Stablecoin Use Check A decision guide that helps users evaluate whether a stablecoin use case makes sense for them. Use when the user is considering holding or using a stablecoin... | |
| Strategy Game Mentor Reframe a messy real-life situation as a strategy game board so the user can see victory conditions, resource lines, phases, and the next best moves. Use whe... | |
| Stress Manager Help users identify stress sources, sort controllable vs uncontrollable pressure, and choose practical daily coping strategies. | |
| Stress Toolkit Provide non-clinical stress-relief exercises, grounding prompts, breathing techniques, and crisis-safe referral language without diagnosis or automated crisi... | |
| Study Buddy 初高中学生家长的学习陪伴助手，帮助家长为孩子制定学习计划、追踪学习进度、管理错题本、生成学习报告。适用于家长辅导孩子学习、监督学习进度、记录学习成果。触发词包括"帮我制定学习计划"、"孩子学习打卡"、"查看学习进度"、"记录错题"、"生成学习报告"。 | |
| Subscription Box Curator Curate recurring subscription box concepts, item mixes, pricing tiers, add-on ideas, and replenishment warnings for DTC brands, merchandising teams, and subs... | |
| Subscription Cancel Call Script Builds a firm, honest cancellation call script with refusal phrases, evidence checklist, and confirmation log for recurring services. | |
| Supplier Sync Manager Build a supplier sync control brief for inventory, catalog, pricing, order-handoff, and onboarding workflows. Use when a team needs to spot mapping gaps, lat... | |
| Support Flow Builder Turn ecommerce support policies, ticket patterns, and channel context into reusable support flows, agent playbooks, macros, bot handoff logic, and governance... | |
| Sv Analytics Review Provides a structured framework to analyze short video metrics, extract insights, and plan data-driven content improvements. | |
| Sv Audio Recording Provides microphone selection, environment setup, level setting, and troubleshooting guidance for optimal short video audio recording. | |
| Sv Broll Planner Plans B-roll shot lists with timing and sourcing advice to cover edits and enhance storytelling in short videos based on your script and content type. | |
| Sv Caption Design Covers caption strategy — styling, placement, timing, accessibility, and engagement — for short video subtitles and on-screen text. | |
| Sv Content Calendar Plans and structures short video posting schedules, themes, and production timelines for creators and marketing teams across platforms. | |
| Sv Script Builder Creates timed, structured short-video scripts using proven frameworks with hooks, visual notes, and CTA for content creators and marketers. | |
| Sv Storyboard Planner Guides video creators to plan shot-by-shot storyboards with framing, composition, overlays, timing, and camera movements for short videos. | |
| Taobao Price Compare Taobao price and competitor comparison assistant. Input a Taobao title/link or product need; compare JD, PDD, and Vipshop using browser-visible evidence, nor... | |
| Taobao Shopping Taobao shopping decision assistant. Input a Taobao product name, listing, screenshot, or link; evaluate store credibility, Tmall/enterprise/personal seller t... | |
| Tax Deduction Optimizer Provides structured guidance and templates to optimize tax deductions and improve record-keeping for freelancers, small businesses, and salaried taxpayers. | |
| Tax Paperwork Staging Board Gather scattered tax-time paperwork quickly into a clear staging board with a missing-items checklist, folder map, and handoff cover sheet, without giving ta... | |
| Tcg Strategy Advisor Clarify a card game win condition and turn it into a stable structure across main engine, draw, interaction, finishers, and backup lines. Use when the user w... | |
| Text Diff Show line-by-line differences between two text files using Python's difflib. Supports unified, context, and side-by-side comparison modes with configurable c... | |
| Therapy Prep Help users prepare for therapy or counseling sessions by organizing thoughts, clarifying goals, identifying patterns, and structuring what to bring up. | |
| Tianmao Help users decide when Tmall is the best choice for official-brand shopping, then assist with browser automation for search, flagship-store verification, rev... | |
| Time Analyzer Time tracking and analysis skill for automatic activity monitoring and productivity insights. Use when the user wants to track time spent on activities, anal... | |
| Time Converter Convert time between different timezones using IANA timezone database. Supports 12/24-hour formats, specific dates, and automatic DST handling. | |
| Time Guru Natural language time tracking with smart activity classification, multi-dimensional reports, productivity analytics, and billing. | |
| Todo Momentum - 3 分钟启动器 把拖延待办拆成下一步物理动作、3 分钟启动和今日算赢标准 | |
| Token Cost Guard Monitor agent token usage and model cost from the active ecosystem's own records, compare the current run with the previous snapshot, and send an alert repor... | |
| Token Optimizer Pro Agent token usage optimizer. Input usage logs, transcript excerpts, model bills, or runtime traces; output token/cost breakdown, waste patterns, context comp... |
35,201–35,250 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.