Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Hypabase Memory Persistent memory for agents. Stores preferences, decisions, facts, and events as a connected knowledge graph. Recalled by who, what, when, or why. | |
| android-agent Control a real Android phone via USB or network using GPT-4o vision to run tasks like opening apps, typing, tapping, and automation scripts. | |
| Cricket Live Provides real-time live cricket scores, detailed scorecards, upcoming matches, recent results, IPL standings, and match alerts using CricketData.org API. | |
| Custom Podcast Discovery & Generation Discover, research, script, fact-check, and generate podcast episodes automatically. Multi-source topic discovery, LLM script generation, citation enforcemen... | |
| Facebook Ads Library Scraper Research Meta ads with the harshmaur/facebook-ads-library-scraper Apify Actor: every ad a brand runs on Facebook, Instagram, Messenger and Audience Network, or every ad that matches a keyword in one country, as rows with ad copy, headline, | |
| LinkedIn Jobs Scraper Collect LinkedIn job postings as structured data with the harshmaur/linkedin-jobs-scraper Apify Actor: search by job title and location, or pass LinkedIn job search URLs, and get title, company, location, posting date, full description (tex | |
| Apify Reddit Scraper Scrape Reddit posts, comments, subreddits and users with the Apify Reddit Scraper Actor | |
| TikTok Scraper Pull public TikTok data with the harshmaur/tiktok-scraper Apify Actor: a creator's videos, hashtag feeds, keyword search (videos or accounts), single video links, sounds, comments with replies, followers and following lists, plus optional w | |
| YouTube Transcript Scraper Get YouTube transcripts with the harshmaur/youtube-transcript-scraper Apify Actor: captions for single videos, Shorts, whole channels or playlists, as timestamped segments, plain text, SRT or VTT, with an optional translation into one of 15 | |
| Write My Blog Enables the agent to create, manage, and publish a full-featured blog autonomously. The agent can write posts, upload media, switch between 10 premium design... | |
| Miniflux News Fetch and triage the latest unread RSS/news entries from a Miniflux instance via its REST API using an API token. Use when the user asks to get the latest Miniflux unread items, list recent entries with titles/links, or generate short summa | |
| Perplexity AI Search - security-hardened version (bash-based) Use Perplexity API for web-grounded AI search. Use when user needs up-to-date information with source citations, factual queries about current events, or research-style answers. Default when user mentions Perplexity or needs current informa | |
| Message Injector OpenClaw plugin that prepends custom text to every user message before it reaches the agent. Use for: enforcing memory_search before replies, injecting syste... | |
| Workspace Indexer 自动扫描和更新 workspace 目录索引，记录目录用途、运行状态、相关记忆及搜索关键词，不深入分析项目文件。 | |
| Codex Pet Generator Turn any keyword—animal, character, brand, object, or style—into a complete installable Codex pet package. Use when a user says ‘生成 Codex 宠物’, ‘做一个宠物包’, ‘Cod... | |
| iFlytek ASR - 讯飞语音转文字 使用科大讯飞 API 将音频/视频转换为文字。支持本地音频文件转录、YouTube 视频下载并转文字。适用于会议记录、视频字幕、语音笔记等场景。当用户需要语音转文字、音频转录、YouTube 视频转文字时触发。 | |
| Local Image Upscaler Upscale, inspect, or compress JPG, PNG, or WebP images locally on macOS or Windows, including automatic or user-selected photo, portrait, digital-art, sharp-... | |
| Merge Reimbursement PDFs Automatically merge reimbursement folders into one PDF. Supports recursive folder scanning, PDF merging, two invoices per A4 page, phone screenshots/images p... | |
| 小程序素材下载 Resolve and download media from 视频号、抖音、小红书 through a configured resolver, plus local B站 downloads. Use when Codex needs to call, configure, debug, sync, or e... | |
| Multi Agent Group Chat 多 Agent 群聊协作插件。子 Agent 完成 sessions_send 任务后，自动将回复发送到来源群聊。 支持 Telegram 和飞书，无需配置群 ID，自动检测消息来源。 适用于：多 Bot 协作、团队分工、群聊表演等场景。 | |
| WeChat Article Archive Archive WeChat articles and image notes locally | |
| WeChat Article Parser - 微信公众号文章解析 解析微信公众号文章，提取标题、作者、正文内容、图片等信息。当用户发送微信公众号链接（mp.weixin.qq.com）并希望获取文章内容、摘要或保存时触发。支持自动提取内容并可选保存到飞书表格。 | |
| wechat-style-writer 模仿指定老师/作者的写作风格改写公众号文章。当用户说"用XX风格改写"、"模仿XX写一篇"、"按XX老师的风格重写"、"帮我改成XX的风格"、或上传文章要求风格改写时触发。也适用于用户提到"风格模仿"、"文章改写"、"公众号改写"等场景。即使用户只说"帮我改写这篇文章"也应触发此技能，因为改写是它的核心功能。 | |
| Sun Yuchen's stock selection model A股板块实时研报。全球新闻→A股映射、板块趋势研判、美股关联、利好利空、大事件提醒。零配置可用，输出兼容飞书/扣子/Markdown平台。 | |
| XHS_Content productionandpublishing Automatically publish notes to Xiaohongshu (小红书) creator center. Generates cover images (PIL poster, multiple styles), writes content from templates, and pub... | |
| Ad Spy Pipeline Automates competitor ad scraping from ForePlay/Anstrex, AI adapts creatives, and syncs campaigns to Facebook Ads for e-commerce brands. | |
| Content Repurposer Convert any content URL or text into tailored formats for Twitter, LinkedIn, Instagram, newsletters, YouTube Shorts, and SEO blog posts in one command. | |
| Conversation Memory Sync Automatically syncs and maintains detailed conversation logs and activity digests across agent sessions for persistent memory and context recall. | |
| Daily Backup System Automates daily compressed backups of OpenClaw configs, workspaces, env files, and scripts with 7-day rotation and a step-by-step restore guide. | |
| OpenClaw Setup Assistant Automates OpenClaw VPS setup, applies security hardening, configures multi-agent systems, messaging integrations, and generates deployment documentation. | |
| Take The Wheel Reverses roles by asking one focused question at a time to guide you step-by-step in creating scripts, plans, briefs, or strategies until completion. | |
| Raven Memory Persistent causal memory for AI agents. Raven records everything your agent does as a causally-linked chain, including decisions, tool calls, parallel work,... | |
| Codex Model Catalog Config Manage the custom Codex model catalog | |
| Session Memory Flush 在 OpenClaw session 即将因 idle/reset 释放前，扫描 `openclaw sessions --json` 可见会话，读取 transcript，提炼高价值上下文并写入 workspace memory 文件，降低新 session 的失忆感。用于 main、native subage... | |
| PostPlanify Social media management for AI agents.
Schedule and manage social media posts on Instagram, Facebook, X, LinkedIn, TikTok, YouTube, Threads, Pinterest, Bluesky and Google Business Profile through the PostPlanify API. Upload images and vide | |
| HasData Fetch real-time web data via the hasdata CLI. Use when the user wants search results, news, fact-checks, product or seller info, current prices, reviews, rea... | |
| FreshBooks CLI FreshBooks CLI for managing invoices, clients, and billing. Use when the user mentions freshbooks, invoicing, billing, clients, or accounting. | |
| Skill Audit Audit and score OpenClaw AgentSkills against structural compliance, quality standards, and OpenClaw-specific architecture patterns. Produces a 0-100 score wi... | |
| Skill Creator Create, edit, improve, tidy, review, audit, or restructure OpenClaw AgentSkills and SKILL.md files. Optimized for OpenClaw's architecture: sub-agents, contex... | |
| 干饭 skill 干饭决策助手。帮你决定今天吃什么，发现附近餐馆，一键生成餐馆 Skill。 支持 /eat 系列命令。问"吃什么"、"附近有什么吃的"、"帮我选"时触发。 | |
| panda-git-commit 智能生成符合 Conventional Commits 规范的 Git Commit Message。 自动检测 monorepo scope，支持将变更按功能拆分为多个 commit。 触发词："commit"、"提交"、"生成 commit message"、"拆分提交"、 "split commits"、"... | |
| panda-imagine 多 Provider 图片生成引擎。支持 OpenAI、Azure、Google Gemini、OpenRouter、 通义万相(DashScope)、MiniMax、即梦(Jimeng)、豆包(Seedream)、Replicate。 支持文生图、参考图、宽高比、批量生成。 触发词："生成图片"、"画图"、"g... | |
| panda-knowledge-card 将知识内容转化为精美的知识卡片图片系列。 支持从文章自动提取知识点拆分为多张卡片，也支持直接输入知识点生成。 卡片类型(Layout) × 视觉风格(Style) 二维组合，可选角色融合。 触发词："知识卡片"、"knowledge card"、"生成卡片"、"知识图"、 "做成卡片"、"卡片系列"。 | |
| HashCats Amazon Intelligence x402 pay-per-call API for Amazon product search, filtering, ranking, detailed extraction, and one-shot "best products" recommendations. No API keys required... | |
| zsxq-fetch-subscription Use this skill when the user wants OpenClaw to query synced Zhishi Xingqiu content, inspect recent posts, search downloaded documents, summarize updates, or... | |
| feishu-quick-setup One-click Feishu bot creation. Uses the Feishu App Registration API (Device Flow) to create a new Feishu Bot and save credentials to the OpenClaw config file... | |
| feishu-skills Feishu (Lark) skill pack installer. Downloads and installs all Feishu integration skills for OpenClaw / EnClaws — including bot setup, docs, calendar, tasks,... | |
| LBA Automate Linear.app workflows in the OpenClaw-managed browser profile using browser tool actions (open, navigate, snapshot, act). Use when users want UI-base... | |
| Linear Browser Automation Automate Linear.app workflows in the OpenClaw-managed browser profile using browser tool actions (open, navigate, snapshot, act). Use when users want UI-base... | |
| Fload Use when the user has Fload MCP tools available and asks about mobile app analytics, reviews, growth metrics, ad performance, anomalies, or app store optimiz... |
35,301–35,350 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.