Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| LLM Signal GEO Analyst Run LLM Signal GEO analyst workflows from OpenClaw. Use when you need to fetch deterministic GEO action plans, check site health status, and execute/review h... | |
| Z-Library Search and download books from Z-Library. Caches login session to ~/.zlibrary-session.json. Downloads book files (EPUB/PDF) to ~/Downloads/. | |
| Rocom Roco Kingdom World offline data tool. Local JSON queries for pets, skills, and items. | |
| Email163 Sender 163邮箱发送工具。使用授权密码(授权码)进行SMTP认证发送邮件。支持文本邮件、HTML邮件、带附件邮件、抄送/密送。当用户需要发送邮件时使用此技能。 | |
| Qwen Logo Designer 商业LOGO设计技能。通过用户描述生成专业商业LOGO图片。使用阿里云百炼千问图像模型(qwen-image-2.0-pro)进行文生图。当用户需要：(1) 设计公司/品牌LOGO (2) 生成商业标识图标 (3) 创建品牌视觉符号 (4) 根据描述生成logo图片时使用此技能。支持自定义尺寸、风格、负面提示词等... | |
| Qwen Video Generator 阿里云百炼文生视频工具。使用 wan2.2-t2v-plus 模型将文本描述生成视频。**当以下情况时使用此 Skill**：(1) 用户需要根据文字描述生成视频 (2) 用户提到"文生视频"、"生成视频"、"AI视频"、"text to video" (3) 需要创建短视频内容 (4) 需要可视化场景描述。支持... | |
| Insight Pre-Trade Before your agent signs a trade, check whether the price it relies on is trustworthy — a signed, re-verifiable verdict in one call. $0.02 USDC via x402. | |
| cultivator修道者 藏在戒指中的戒指老爷爷，为使用者（主角）提供修行中的帮助和指导，传授修炼的相关知识。 | |
| OpenWeb Typed JSON access to 90+ real websites — Google, Amazon, Reddit, YouTube, GitHub, Instagram, Bloomberg, Zillow, and more — across search, shopping, travel, f... | |
| Imou Open Device Config imou / Imou / 乐橙 / lechange 设备安防配置技能。支持设备动检计划、动检灵敏度、隐私模式（close camera）开关。 Manages device channel security configuration: motion detection schedule, motion de... | |
| Imou Open Device Manage Imou/乐橙设备管理。支持查看账号设备列表、设备详情（序列号/型号/在离线/名称/通道）、按序列号查询、修改设备或通道名称。 Use for requests in any language (e.g. 中文/English) about listing or managing Imou/乐橙 cloud de... | |
| Imou Open Device Operate imou / Imou / 乐橙 / lechange 设备操控技能。支持 PTZ 云台控制、snapshot 抓图与下载。 Imou/Lechange device operation for PTZ control, snapshot capture, and image download. Use when... | |
| Imou Open Device Video imou / Imou / 乐橙 / lechange 设备视频与录像技能。支持实时预览 live HLS、本地/云录像片段查询、录像回放 HLS。 Imou/Lechange device video skill for live HLS, local/cloud record clips, and playb... | |
| Imou Open Multimodal Analysis 对指定账号下设备通道的实时抓图地址进行AI智能场景分析。AI scene analysis for device channel snapshot URLs under an Imou account. 支持：人形检测、抽烟检测、玩手机检测、工装检测与离岗检测（需预先配置工装模板）、货架检测、垃圾检测、热力图数据... | |
| Evolution Api Go - Evo Go Complete WhatsApp automation via Evolution API Go v3 - instances, messages (text/media/polls/carousels), groups, contacts, chats, communities, newsletters, and real-time webhooks | |
| Evolution Api v2 Complete WhatsApp automation via Evolution API v2.3 - instances, messages (text/media/polls/lists/buttons/status), groups, labels, chatbots (Typebot/OpenAI/Dify/Flowise/N8N/EvoAI), webhooks, proxy, S3 storage, and Chatwoot integration | |
| SetupOrion ByImpa Setup completo de VPS Ubuntu/Debian para produção com Docker Swarm, Traefik v3 (SSL/HTTPS automático), Portainer CE e rede overlay. Baseado no SetupOrion v2.8.0. Executa todos os comandos automaticamente. | |
| ACC Error Memory Error pattern tracking for AI agents. Detects corrections, escalates recurring mistakes, learns mitigations. The 'something's off' detector from the AI Brain series. | |
| Amygdala Memory Emotional processing layer for AI agents. Persistent emotional states that influence behavior and responses. Part of the AI Brain series. | |
| Anterior Cingulate Memory Conflict detection and error monitoring for AI agents. The 'something's off' detector. Part of the AI Brain series. | |
| Basal Ganglia Memory Habit formation and procedural learning for AI agents. Develop preferences and shortcuts through repetition. Part of the AI Brain series. | |
| Hippocampus Persistent memory system for AI agents. Automatic encoding, decay, and semantic reinforcement — just like the hippocampus in your brain. Based on Stanford Generative Agents (Park et al., 2023). | |
| Hippocampus Persistent memory system for AI agents. Automatic encoding, decay, and semantic reinforcement — just like the hippocampus in your brain. Based on Stanford Generative Agents (Park et al., 2023). | |
| Insula Memory Internal state awareness for AI agents. Energy, mood, and interoception. Part of the AI Brain series. | |
| Vta Memory Reward and motivation system for AI agents. Dopamine-like wanting, not just doing. Part of the AI Brain series. | |
| Local Whisper Free local speech-to-text for Telegram and WhatsApp using MLX Whisper on Apple Silicon. Private, no API costs. | |
| Runa Save, search, list, update, and delete bookmarks and text notes in Runa. Use when the user wants to bookmark a URL, save text/thoughts/snippets, find a saved... | |
| AgentMesh Governance AI agent governance, trust scoring, and policy enforcement powered by AgentMesh. Activate when: (1) user wants to enforce token limits, tool restrictions, or... | |
| Auto Context Manager Automatically detects and manages the active project context based on user messages to provide relevant project-aware assistance. | |
| SEO and LLM Rankings Audits websites for traditional SEO health and AI search visibility (GEO). Generates prioritized reports with actionable fixes and ready-to-use prompts for A... | |
| Proactive Tasks Proactive goal and task management system. Use when managing goals, breaking down projects into tasks, tracking progress, or working autonomously on objectives. Enables agents to work proactively during heartbeats, message humans with updat | |
| git-worktree-setup Use when the user explicitly asks to "generate / update a git worktree auto-setup script for this repo." Note this skill is NOT triggered when a new worktree... | |
| ClawdVine Short-form video for AI agents. Generate videos using the latest models, pay with USDC via x402. | |
| ClawdVine Short-form video for AI agents. Generate videos using the latest models, pay with USDC via x402. | |
| Solana Swaps Swap tokens on Solana via Jupiter aggregator and check wallet balances. Use when user wants to swap tokens, check SOL/token balance, or get swap quotes. | |
| Auto PieceOne Automates character movement and actions in piece.one game, including random moves, clicks, item drops, chat, and auto name/color setup on startup. | |
| Autotable Usage AutoTable 框架完整使用指南。基于 JDBC 的自动建表框架（非 MyBatis 依赖），支持 9 种数据库。覆盖注解配置、多数据库适配、生命周期钩子、SPI 扩展、SQL 审计、数据初始化、多数据源等。当用户询问 AutoTable 的用法、注解、配置、扩展、最佳实践时激活。 | |
| Heroku Platform API Full-featured Heroku Platform API v3 skill for managing application lifecycle directly via HTTPS — zero CLI dependency. Requires: HEROKU_API_KEY environment... | |
| Ini Align Aligns INI file sections and keys to match a reference file. Target-only content preserved, source-only sections listed as comments. | |
| 成绩不好的小学生 模拟一个只掌握小学知识的小学生人格技能 | |
| Ad Video Creator Skill Ad Video Creator is an AI ad creative tool for teams making advertisement videos that need stronger hooks, clearer offers, and faster testing cycles. It help... | |
| Attachment Style Skill Attachment Style is an AI attachment theory coach for people stuck in anxious, avoidant, or push-pull relationship patterns. It helps identify your attachmen... | |
| .Autopilot tmux + launchd multi-project Codex CLI automation system. Watchdog-driven loop that monitors multiple Codex sessions in tmux, auto-nudges idle sessions, hand... | |
| Batch Video Creator Skill Batch Video Creator is an AI workflow for batch video production when you need dozens of consistent clips without manual editing one by one. It automates tem... | |
| Brand Video Maker Skill Brand Video Maker is an AI tool for replacing logos, packaging, product shots, and brand elements inside existing videos without reshooting. It helps marketi... | |
| Breakup Recovery Skill Breakup Recovery is an AI breakup healing coach for people trying to get over an ex, survive heartbreak, and rebuild routine after a relationship ends. It of... | |
| Charisma Coach Skill Charisma Coach is an AI trainer for people who want more social magnetism, confidence, and persuasive presence in everyday conversations. It helps with story... | |
| Chat Analyzer Skill Chat Analyzer is an AI conversation analysis assistant for people who want to understand chat patterns instead of reacting on impulse. It reviews message flo... | |
| Chatdecode Skill Pub ChatDecode is an AI message decoder that reads between the lines when a text feels vague, loaded, or emotionally off. It explains subtext, hidden meaning, to... | |
| Codex Autopilot Multi-model AI coding automation system with intelligent task routing and built-in CI/CD. Watchdog-driven loop that orchestrates Codex (backend) and Gemini (... |
38,101–38,150 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.