Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Public Speaking Embodied Physical presence and delivery skills for public speaking and presentations. Use when someone needs to present at work, speak at an event, lead a meeting, or... | |
| Raising Livestock Practical small livestock management starting with chickens and progressing to goats. Use when someone wants to raise chickens for eggs, keep goats for milk... | |
| Record Keeping Documentation Personal record-keeping and documentation practices for legal protection and life management. Use when someone needs to organize vital documents, track work... | |
| Rocket Mass Heater Construction Use when facing unreliable grid power, high heating costs, or preparing for unstable times where efficient wood-based heat is needed without massive fuel con... | |
| Romantic Relationship Maintenance Practical relationship maintenance for couples. Use when a relationship feels stale, tense, or on autopilot, when communication has broken down, or when some... | |
| Safe Exit Planner Safety planning resources and procedures for leaving dangerous living situations. Use when someone mentions domestic violence, abuse, feeling unsafe at home,... | |
| Self Defense Fundamentals Personal safety awareness and basic physical self-defense techniques. Use when someone wants to feel safer in public, works late shifts, walks alone, or want... | |
| Sharpening Sharpening techniques for knives, tools, and bladed implements. Use when someone has dull kitchen knives, needs to maintain garden tools, axes, or shop tools... | |
| Shift Work Recovery Sleep and recovery protocols specifically for shift workers. Use when someone works nights, rotating shifts, doubles, or irregular schedules and is strugglin... | |
| Sleep Hygiene Overhaul Evidence-based sleep improvement protocol. Use when someone has trouble falling asleep, staying asleep, waking unrefreshed, or wants to optimize sleep qualit... | |
| Small Engine Repair Diagnosis and repair of common small engine problems. Use when a lawnmower won't start, a generator is sputtering, a chainsaw won't idle, or any small gas en... | |
| Soil Water Management Soil science, composting, and water management for food production. Use when someone wants to improve their garden soil, start composting, set up irrigation,... | |
| Someone Is Struggling How to talk to someone you're worried about — depression, substance abuse, self-harm, or suicidal thoughts. Use when a user is concerned about a friend, fami... | |
| Start A Micro Business Start earning income with no capital and no connections. Service-based and skill-based micro-businesses you can launch this week. Not "build a startup" — pra... | |
| Stoicism Daily Practice Practical Stoic philosophy applied to daily life. Use when someone is overwhelmed by things outside their control, needs a framework for resilience, wants a... | |
| Survival Basics Combined home repair, plumbing, and cooking survival skills. Covers the 15 most common home fixes, detailed plumbing troubleshooting, weekly budget meal prep... | |
| Tallow Candle Making Basics Use when commercial candles, lamps, or lighting become unreliable, expensive, or unavailable and you need long-burning, odor-controlled, non-toxic light sour... | |
| Teaching Physical Skills Methods for teaching physical/embodied skills to others. Use when someone needs to teach a child or adult a hands-on physical skill like riding a bike, swimm... | |
| Tenant Rights Housing Tenant rights knowledge and actionable defense templates. Use when someone has a landlord refusing repairs, is facing eviction, wants to recover a security d... | |
| Textile Clothing Repair Basic clothing repair and maintenance skills. Use when someone needs to fix torn clothing, replace a button, hem pants, patch holes, or wants to stop wasting... | |
| Tool Fluency Foundational tool knowledge and usage skills. Use when someone wants to become comfortable with basic hand and power tools, needs to know which tool to use f... | |
| Trades Longevity Training Use when you work (or plan to work) a physically demanding job like construction, delivery, caregiving, farming, warehousing, or any manual trade/gig work an... | |
| Traditional Bone Tool Making Basics Use when you need custom, durable, repairable tools like awls, needles, scrapers, harpoons, or fishing hooks made from local animal bones or antlers and comm... | |
| Values Clarification Structured process for identifying personal values and life purpose. Use when someone feels directionless, is making a major life decision, suspects their li... | |
| Vehicle Survival Kit Practical vehicle maintenance and roadside emergency skills. Use when someone needs to change a tire, jump-start a battery, handle a breakdown, deal with a f... | |
| Village Blacksmith Starter Set up a basic coal forge using scrap and local materials, then learn the core hand techniques to repair farm tools, make simple hardware, and start earning... | |
| Village Carpenter Starter Build a basic portable carpenter bench from village scrap, master the core hand-tool techniques, and start repairing furniture, doors, windows, farm gates, a... | |
| Wage Theft Defense Tools for identifying, documenting, and recovering stolen wages. Use when someone suspects unpaid overtime, tip theft, minimum wage violations, off-the-clock... | |
| Water Safety Swimming Water safety, basic swimming skills, and emergency water rescue techniques. Use when someone can't swim, is taking children near water, wants to learn basic... | |
| Weather Reading Outdoor Awareness Practical weather observation and environmental awareness skills. Use when someone works outdoors, needs to make weather-dependent decisions without phone ac... | |
| Welding Basics Use when you need to repair broken metal tools, equipment, or structures; fabricate custom parts for home, farm, vehicle, or gig-work setups; or build from s... | |
| Woodworking Maker Basics Foundational woodworking skills for practical home projects. Use when someone wants to build simple furniture, make repairs to wooden items, start woodworkin... | |
| Workplace Injury Rights Workers' compensation navigation and workplace injury rights. Use when someone is injured at work, needs to file a workers' comp claim, is being pressured no... | |
| Defuddle (kepano) Extract clean markdown content from web pages using Defuddle CLI, removing clutter and navigation to save tokens. Use instead of WebFetch when the user provi... | |
| Obsidian Bases (kepano) Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of... | |
| Obsidian CLI (kepano) Interact with Obsidian vaults using the Obsidian CLI to read, create, search, and manage notes, tasks, properties, and more. Also supports plugin and theme d... | |
| Obsidian Markdown (kepano) Create and edit Obsidian Flavored Markdown with wikilinks, embeds, callouts, properties, and other Obsidian-specific syntax. Use when working with .md files... | |
| 微信公众号文章处理器 微信公众号文章处理工具 - 自动抓取、结构化整理、保存到飞书文档。触发词：处理公众号文章、微信文章转飞书、公众号链接 | |
| x-reader通用内容抓取 Universal content reader for WeChat/Bilibili/Twitter/YouTube/Xiaohongshu. Use when you need to fetch full article content from platforms that block simple HT... | |
| MAC OS screenshot to telegram Take a screenshot on macOS and send it to Telegram. Use when the user asks to capture their screen, take a screenshot, or send a screen capture to Telegram.... | |
| For using minimax mcp to generate audio, image, video to telegram. Generate images, audio, video using MiniMax MCP and send to Telegram. Use when user wants to create media with MiniMax and deliver it via Telegram. | |
| Tencent COS Uploader Upload files to Tencent COS and create signed links | |
| Claude 持久化记忆系统初始化 为任意项目初始化 Claude 持久化记忆系统（v3.0 搜索引擎模型）。自动扫描项目结构、技术栈、代码规范，生成完整的记忆文件和 CLAUDE.md 指令。 | |
| email-manager-pop3 查询和发送邮件，支持 POP3 协议收件、SMTP 协议发件 | |
| Mijia Control Xiaomi Mijia smart home devices. Use this skill when the user wants to control desk lamps, smart plugs, or other Mijia devices. Supports turning lights on/off, adjusting brightness, setting color temperature, switching modes, and mo | |
| Qveris Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically (weather, search, data retrieval, stock trading analysis, etc.). Requires QVERIS_API_KEY environment variable. | |
| videolink-to-article Use when the user provides a Bilibili or YouTube URL and asks for a transcript, article, or subtitle extraction. Downloads platform subtitles via BBDown / yt... | |
| Belief Assessor LLM-driven epistemic reasoning engine. Evaluates claims against evidence, outputs calibrated confidence and structured belief state (VERIFIED/CONTESTED/UNCER... | |
| Belief State Runtime LLM-driven epistemic reasoning engine. Evaluates claims against evidence, outputs calibrated confidence and structured belief state (VERIFIED/CONTESTED/UNCER... | |
| focusAI 本地监控屏幕活动，评估专注度并提供当天工作状态和历史视觉记录查询与分析服务。 |
36,601–36,650 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.