Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Agent Cashflow Track real revenue for ClawHub skill publishers — installs, downloads, stars, and ETH wallet balance pulled from live APIs. No fabricated numbers. Use when y... | |
| OpenClaw Security Audit — BLUF Report Run a non-interactive OpenClaw security audit that produces a structured BLUF report with posture rating, ranked findings, and one-line fix commands. | |
| OSINT Daily Brief Generate a daily OSINT intelligence brief on any target — domain, company, IP, person, or keyword — using Tavily web search, WHOIS, DNS recon, and Shodan. De... | |
| Skill Safety Scanner Scan your installed ClawHub skills for dangerous code patterns — credential harvesting, shell injection, unauthorized network calls, and known malicious sign... | |
| Suricata IDS Monitor Read and triage Suricata IDS/IPS alerts from eve.json into a structured threat report — severity-ranked findings, attacker IPs, top triggered signatures, and... | |
| Telegram Notifier Send any agent report, alert, or message to a Telegram chat using your bot token. Use when you want to deliver findings, briefings, security alerts, or task... | |
| InferSports Live football & basketball odds and scores from InferSports — who's favored, the live score, today's matches and what's worth watching, a specific day's sche... | |
| 创建微信视频号合集_无限 在微信视频号后台创建视频合集。触发场景：创建视频号合集、新建视频号合集、在视频号后台创建合集、创建视频合集。 | |
| 创建公众号文章合集_无限 在公众号后台创建文章合集。触发场景：创建公众号合集、新建文章合集、在公众号创建一个合集、创建合集。 | |
| 生成短视频分镜脚本_无限 自动化生成短视频分镜脚本。打开Chrome浏览器访问DeepSeek平台，使用深度思考和智能搜索模式，根据旁白文本自动生成分镜脚本。触发场景：生成分镜脚本、生成短视频分镜、分镜脚本生成、旁白转分镜、短视频分镜制作。 | |
| 剪映AI文字成片_无限 自动化操作剪映桌面客户端，将用户提供的分镜脚本通过AI文字成片功能生成9:16比例未来科幻风格视频，配真人播客女配音。 | |
| 发布快手短视频_无限 在快手创作者平台发布短视频。触发场景：发布快手视频、上传快手视频、快手发布视频、发快手视频、发布快手短视频。 | |
| 发布抖音短视频_无限 在抖音创作者平台发布短视频。触发场景：发布抖音视频、上传抖音视频、抖音发布视频、发抖音视频。 | |
| 发布智能体技能_无限 将本地技能发布到 ClawHub。触发场景：发布技能、上传技能到ClawHub、发布skill、ClawHub发布。 | |
| 发布抖音文章_无限 通过OpenClaw浏览器在抖音创作者平台发布图文文章，支持标题、摘要、正文、头图、话题和配乐的完整填写并保存草稿。 | |
| 发布短视频到多平台_无限 依次发布短视频到快手、抖音、小红书三个平台。先发布快手，再发布抖音，最后发布小红书。触发场景：同时发布快手和抖音、发布到多个平台、多平台发布短视频、批量发布视频、全平台发布。 | |
| 发表微信公众号文章_无限 专门用于"无限"作者发表公众号文章的技能，包含完整的文章发布流程、格式要求和操作规范。 | |
| influence Write and schedule social media posts with your saved brand voice. Review content and media before publishing, track delivery and read saved Insights. Connect channels including WhatsApp Business through Influence's hosted MCP. Paid subscri | |
| Inflynce Campaign Create and launch Inflynce Boost campaigns on Base to promote any https HTTPS link by paying USDC rewards to real users based on social influence scores. | |
| Convert Notion HTML exports to interactive mind maps 将 Notion 导出的 HTML 文件转换为可交互的思维导图 HTML。支持右键跳转到 Notion 页面链接、搜索、缩放、展开/折叠等功能。当用户提供 Notion HTML 导出文件、提到"思维导图"、"mindmap"、或希望可视化 Notion 页面结构时使用。 | |
| （司库系统）API 全生命周期管理智能 Skill （司库系统）API 全生命周期管理智能 Skill | |
| InfoQuest Web Search AI-optimized web search, image search and content extraction via BytePlus InfoQuest API. Use this skill when you need to gather concise and up-to-date inform... | |
| informat Use when operating the 织信/Informat platform, including apps, tables, workflows, automations, scripts, APIs, dashboards, records, listeners, schedules, or platform-generated files. | |
| Infoway Financial API — Real-Time Quotes, Klines & Analysis Real-time financial market data MCP server — stocks, crypto, forex quotes, klines, sector analysis and fundamentals | |
| Daily News Daily news and hot topics via the 6551 API. Supports news categories, hot news articles, and trending tweets by category. | |
| Twitter To Binance Square Auto-mirror Twitter/X content to Binance Square. Monitors specified Twitter accounts or topics, fetches new tweets, transforms content, and posts to Binance... | |
| Opennews Real-time crypto, equities, macro, and financial market news aggregator — 85+ data sources across 6 categories covering digital assets, U.S. stocks, semiconductors, AI infrastructure, supply chains, commodities, rates, policy, and market-mo | |
| opennews Real-time crypto, equities, macro, and financial market news aggregator — 85+ data sources across 6 categories covering digital assets, U.S. stocks, semiconductors, AI infrastructure, supply chains, commodities, rates, policy, and market-mo | |
| Opentwitter Twitter/X and meme evidence data via the 6551 API. Supports user profiles, tweet search, user tweets, follower events, deleted tweets, KOL followers, meme token evidence, and meme activity. | |
| opentwitter Twitter/X and meme evidence data via the 6551 API. Supports user profiles, tweet search, user tweets, follower events, deleted tweets, KOL followers, meme token evidence, and meme activity. | |
| Sentinel Reputation AI agent trust scoring and reputation data from the ACP marketplace. Returns reliability grades (A-F), success rates, job counts, buyer diversity, and servic... | |
| Discord Hub My OpenClaw skill for Discord Bot API workflows, covering interactions, commands, messages, and operations using direct HTTPS requests. | |
| Jose Self Improving Agent Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Zoho Bigin CRM Zoho Bigin CRM CLI. Search deals, contacts, accounts. Add notes, move deal stages. Use when user asks about CRM, deals, pipeline status, or needs to update B... | |
| Unraid CLI TypeScript CLI for Unraid Server GraphQL API. 12 command groups for system, arrays, disks, containers, VMs, shares, logs, and diagnostics. Built for humans a... | |
| ARC Creator Create and populate Annotated Research Contexts (ARCs) following the nfdi4plants ARC specification. Use when creating a new ARC, adding studies/assays/workflows/runs, annotating ISA metadata, organizing research data into ARC structure, or | |
| Aria2 Download 通过 Aria2 RPC 添加下载任务，支持实时进度监控。 | |
| Skillsmp Search 从 SkillsMP 市场搜索 AI Agent Skills。支持关键词搜索和 AI 语义搜索。 | |
| X Media Parser 解析 X/Twitter 帖子，获取图片和视频的下载直链。使用 vxtwitter API，无需登录。 | |
| Fortytwo MCP Fortytwo Prime: collective multi-agent inference for high-stakes questions. ALWAYS use when the user says "Ask Fortytwo", "Ask Prime", "ask Fortytwo Prime",... | |
| Auto Memory Curation Automatically analyzes messages for important information and stores it in the right memory files. Runs silently on every message. Filters noise, captures me... | |
| data-pods Create and manage modular portable database pods (SQLite + metadata + embeddings). Includes document ingestion with embeddings for semantic search. Full auto... | |
| Agent 防假完成工具 用于减少 AI agent 假完成行为，通过任务约束、结果校验和执行规范，确保复杂任务真实执行与可信交付。 | |
| Self-Improving Agent 基于对经验的持续学习，不断优化 Agent 能力。适用于完成重要任务后、出现错误时、会话结束时，或用户输入“自我进化”“总结经验”“从经验中学习”等指令时触发。 | |
| Eudic Openapi Skills Local 调用欧路词典及法语、德语、西语助手OpenAPI，管理生词本、笔记和进行英语语音评分功能。 | |
| Feishu Sync Obsidian Local 将飞书 Wiki 文档同步到 Obsidian PARA 知识库。 触发：当用户说"同步飞书"或"同步文档"时使用。 遵循 Pipeline 模式，4 步顺序执行，带硬检查点。 必需文件：vault 根目录必须有 SYNC-RULES.md。 | |
| Taskify CLI Manage tasks and boards on Nostr relays via CLI to list, create, update, assign, complete, search, and export tasks with JSON support. | |
| Applying Brand Guidelines Applies Acme Corporation's brand colors, fonts, logos, and templates to ensure consistent, professional, and compliant document styling. | |
| backup-optimizer 分析代码库审计器生成的文件清单，为部署一致性生成优化的打包方案。用于确保所有关键配置都包含在部署产物中。 | |
| one-service-metrics Collect and summarize service health metrics for a deployment. |
38,301–38,350 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.