Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| 专利排行榜 专利排行榜、专利排名。当用户说「这个领域谁的专利最多」「江苏高校专利排名」「某个省企业专利排行」「发明专利排名前 20」「做宣传 / 报告要一张专利排行榜」时使用。输出专利排行榜（Excel 能打开），带统计口径。 Builds a patent leaderboard for a chosen scope, such as a technology, a province, or universities versus companies, ranked by valid | |
| 专利地域分布 专利地域分布、哪个地方专利多。当用户说「这个技术哪些省份专利多」「深圳 / 苏州在这方面有哪些企业」「招商引资找哪些企业」「产业园区专利摸底」「各国专利布局」时使用。输出地域分布表（Excel 能打开）和每个地区的主要单位。 Regional distribution of patents in a technology. Counts by province, by city within a province, or by country, with the leadin | |
| 专利检索 · PatentMax 全球专利检索与统计分析。当用户提到专利检索、找专利、现有技术、相似专利、引证分析、某家公司有多少专利、某个领域谁在申请、技术趋势分布，或直接给出一个专利号、公开号时使用。也用于：查外国专利（美国、欧洲、日本、韩国）、按专利号或申请号查一篇、看权利要求和说明书全文、查法律状态（还有没有效）、下载专利 PDF 和附图、查某家企业 / 高校 / 发明人 / 代理机构有哪些专利。Use when the user asks to search patents, look up a p | |
| 专利检索入门 专利检索入门、专利检索教程。当用户说「我不会查专利，教教我」「专利检索怎么入门」「检索式怎么写」「AND OR 怎么用」「新人培训专利检索」时使用。边讲边查，输出一页检索笔记（Markdown）。 A hands-on patent search tutorial using your own topic, explaining keywords, quotes, AND/OR, applicant and IPC search step by step with live | |
| 专利找方案 专利找方案、技术难题怎么解决。当用户说「这个问题别人是怎么解决的」「研发遇到瓶颈，看看专利里有什么办法」「锂电池低温充电有哪些方案」「从专利里找技术思路」「有没有现成的解决办法」时使用。输出技术方案参考表（Excel 能打开），按解决思路分类。 Describe a technical problem and find how patents solved it, grouped by approach, with representative patents and key | |
| 专利找人才 专利找人才、技术专家挖掘。当用户说「这个方向谁最厉害」「招聘想找做过某技术的工程师」「找行业专家做顾问」「哪些人在做这个技术」「找技术带头人合作」时使用。输出技术人才清单（Excel 能打开），只用专利上公开的信息。 Finds core talent in a technology from patent inventors, covering who files most, where they work and whether they are still active | |
| 专利术语提取 专利术语提取、技术术语表、缩写表。当用户希望把指定专利或一组原文中的术语、定义和缩写整理成可复用词表时使用；不做整篇翻译。 Extract technical terms, acronyms and source definitions from supplied patent texts, with cited passages and clearly separated suggested translations. | |
| 专利转让查询 专利转让查询、专利转让记录、专利权人变更。当用户问「这件专利转让过吗」「从谁转给谁」「帮我整理这批专利的转让历史」时使用，输出有原始记录出处的转让时间线。 Look up disclosed patent assignment events for supplied patent numbers and create a dated ownership-change timeline with source records and unresolved fields. | |
| 专利翻译 专利翻译、外国专利翻成中文。当用户说「把这件美国专利翻译一下」「日本专利看不懂，翻成中文」「权利要求翻译」「对比文件要中文版」「外文专利术语对照」时使用。输出中文译文（Markdown）和术语对照表（Excel 能打开）。 Give a US, EP, JP or KR patent number; the skill fetches the original title, abstract and claims and translates them into Chines | |
| 专利趋势分析 专利趋势分析、技术发展趋势。当用户说「这个技术专利每年多少」「这个方向是不是越来越热」「最近几年谁在进入这个领域」「写行业报告要专利趋势数据」「技术生命周期」时使用。输出趋势表（Excel 能打开）和新进入者名单。 Year-by-year patent trend for a technology, covering filing volume, growth stage, how leading applicants changed and who the new ent | |
| 专利版本对比 专利版本对比、权利要求修改对照、说明书版本差异。当用户提供旧稿和新稿，希望定位文字变化并追溯原文时使用；不替代不同专利的技术比对或修改合法性判断。 Compare two supplied versions of patent-related text and export a source-linked change table and offline HTML view; report textual edits without inferring legal scope | |
| 专利监控 专利监控、专利预警。当用户说「帮我盯着这几个对手的专利」「每个月看看这个方向有没有新专利」「建一个专利监控」「跑一下上次的监控」「新公开的专利有哪些」时使用。输出监控清单（可反复使用）和每次的新增专利简报（Excel 能打开）。 Builds a reusable patent watch list of competitors and technologies with queries and a baseline; each later run finds patents | |
| 专利撰写 · PatentMax 专利初稿生成。当用户上传交底材料、研发报告、技术方案文档，要求写专利、写专利初稿、把材料写成专利，或说「帮我把这个写成专利」「生成专利初稿」「专利撰写」「写专利说明书」「写权利要求书」「专利申请文件」「这个项目能写几个专利」时使用；只有一个想法时也可以先出几个可申请的方向。所用模型全部国产，国外模型 0 使用。Use when the user wants a first patent draft, patent specification or claims (Word) | |
| 企业情报分析 · PatentMax 企业技术专利竞争分析。当用户提到企业情报分析、竞争对手分析、竞品专利、技术竞争格局、专利布局对比、某家公司在做什么技术、行业专利态势，或要一份可交付的企业专利竞争报告时使用。常见说法：「竞品专利分析」「对手在布局什么」「某公司的专利布局」「技术情报」「专利尽调」。Use when the user asks for competitive patent intelligence, competitor technology analysis, or a company's p | |
| 技术交底书 · PatentMax 技术交底书生成。当用户要写技术交底书、专利交底、把研发材料或技术方案整理成交底书、挖专利点、只有一个想法想看看能往哪几个方向申请，或说「帮我写个交底书」「专利挖掘」「发明专利交底书」「交底书模板」「这个能写成专利吗」时使用。所用模型全部国产，国外模型 0 使用。Use when the user wants to turn R&D materials or an idea into a patent technical disclosure (invention disclo | |
| 专利查新 · PatentMax 专利查新与可专利性判断。当用户问一个技术方案有没有人做过、能不能申请专利、有没有新颖性或创造性、申请前要做查新、立项前要筛查方向是否被占，或要一份可交付的查新报告时使用。常见说法：「帮我查新」「查新检索」「这个能不能申请专利」「有没有人做过」「相似专利对比」，也可以直接给写好的交底书或专利初稿。Use when the user asks whether a technical idea is novel, patentable, or already disclosed i | |
| 审查意见答复 · PatentMax 中国专利审查意见答复（OA答复）。当用户收到审查意见通知书，要写意见陈述书、改权利要求、说「帮我答复这份审查意见」「这个 OA 怎么答」「审查员说没有创造性怎么办」「第二次审查意见」时使用。常见说法：「OA答复」「审查意见答复」「意见陈述书」「权利要求修改」。Use when the user needs to respond to a Chinese patent office action. Drafts the response statement, amended c | |
| 专利初稿撰写 · PatentMax 专利初稿生成。当用户上传交底材料、研发报告、技术方案文档，要求写专利、写专利初稿、把材料写成专利，或说「帮我把这个写成专利」「生成专利初稿」「专利撰写」「写专利说明书」「写权利要求书」「专利申请文件」「这个项目能写几个专利」时使用；只有一个想法时也可以先出几个可申请的方向。所用模型全部国产，国外模型 0 使用。Use when the user wants a first patent draft, patent specification or claims (Word) | |
| 全球专利检索 · PatentMax 全球专利检索与统计分析。当用户提到专利检索、找专利、现有技术、相似专利、引证分析、某家公司有多少专利、某个领域谁在申请、技术趋势分布，或直接给出一个专利号、公开号时使用。也用于：查外国专利（美国、欧洲、日本、韩国）、按专利号或申请号查一篇、看权利要求和说明书全文、查法律状态（还有没有效）、下载专利 PDF 和附图、查某家企业 / 高校 / 发明人 / 代理机构有哪些专利。Use when the user asks to search patents, look up a p | |
| 技术路线分析 · PatentMax 技术路线分析与专利布局建议。当用户问下一步该往哪个方向研发、专利该怎么布、哪条技术路线更值得走、怎么绕开竞争对手的专利、申请预算该怎么分配，或要一份可交付的技术路线与布局方案时使用。常见说法：「专利布局怎么做」「技术路线怎么选」「怎么绕开对手专利（规避设计）」「PCT / 海外布局」「今年申请几件、预算怎么分」。Use when the user asks which technology route to take, how to plan a patent portfol | |
| 上市前专利排查 上市前专利排查、新品专利风险初筛。当用户说「新产品上市前查一下有没有专利风险」「这几个功能有没有别人的有效专利」「产品专利排查」「要不要做 FTO」「出货前专利自查」时使用。输出专利排查清单（Excel 能打开），按功能点分组。 Before a product launch, checks each feature for relevant in-force patents, listing the closest ones, their owners and remain | |
| Prior Art Search · PatentMax 专利查新与可专利性判断。当用户问一个技术方案有没有人做过、能不能申请专利、有没有新颖性或创造性、申请前要做查新、立项前要筛查方向是否被占，或要一份可交付的查新报告时使用。常见说法：「帮我查新」「查新检索」「这个能不能申请专利」「有没有人做过」「相似专利对比」，也可以直接给写好的交底书或专利初稿。Use when the user asks whether a technical idea is novel, patentable, or already disclosed i | |
| 产品专利查询 产品专利查询、这个产品有没有专利。当用户说「某品牌的扫地机器人有哪些专利」「这款产品有专利吗」「采购前看看供应商产品的专利」「电商卖货前查一下产品专利」「拆解竞品看专利」时使用。输出产品专利清单（Excel 能打开），按部件分组。 Finds the patents behind a brand's product by resolving all company name variants, then searching by product and component f | |
| 研发立项调研 研发立项调研、项目立项专利、研发前专利调研。当用户说「这个研发项目值不值得做」「立项前看看别人有哪些方案」「帮研发团队列技术路线和验证问题」时使用，交付立项专利参考表，不作查新或侵权结论。 Survey patents for an R&D project by mapping requirements to existing technical approaches, evidence and validation questions in a project decisi | |
| 大创项目专利 大创项目专利、学生竞赛项目申请专利。当用户说「大创项目想申请专利」「挑战杯 / 互联网+ 项目能不能出专利」「我们的项目有人做过吗」「学生怎么申请专利」「项目结题要专利」时使用。输出项目专利分析（Markdown）和同类专利表（Excel 能打开）。 For student innovation and competition projects. Checks similar patents, finds patentable points in the project, s | |
| 技术分解表 技术分解表、专利分析技术分解。当用户说「做专利分析要先拆技术分解表」「把这个技术拆成几个分支」「每个分支有多少专利」「专利导航项目的技术分解」「技术体系梳理」时使用。输出技术分解表（Excel 能打开），每个分支带关键词、检索式和专利数。 The first step of a patent landscape project. Breaks a technology into first- and second-level branches with keywords an | |
| 技术演进 技术演进、技术发展史。当用户说「这个技术是怎么发展过来的」「最早的专利是谁申请的」「技术演进路线」「写综述要技术发展脉络」「每个阶段的代表专利」时使用。输出技术演进时间线（Markdown）和代表专利表（Excel 能打开）。 Tells the story of a technology from its earliest patents to today, in stages with key patents, the problem each solved and wh | |
| 开题专利调研 研究生开题专利调研。当用户说「开题前帮我查查专利」「我的课题别人做过没有」「开题报告研究现状里的专利部分怎么写」「导师让我先调研一下专利」「选题前看看这个方向有哪些专利」时使用。输出带公开号和出处的开题专利调研表（Excel 能打开），以及研究现状专利部分的草稿。 Patent survey for graduate thesis proposals. Turns the research topic into search queries, groups related p | |
| 高校专利转化 高校专利转化、产学研对接。当用户说「哪些高校有这方面的专利」「想找高校专利转让 / 许可」「产学研合作找哪个学校」「技术转移找成果」「哪个学校在做这个方向」时使用。输出高校专利对接清单（Excel 能打开），按学校分组。 Finds valid invention patents still held by universities and research institutes in a technology, groups them by institution and | |
| 实用新型检索 实用新型检索、申请实用新型还是发明。当用户说「查一下有没有类似的实用新型」「我这个小改进能申请实用新型吗」「实用新型和发明选哪个」「同类结构的实用新型有哪些」时使用。输出实用新型清单（Excel 能打开）、代表附图和申请类型建议。 For structural improvements. Finds similar Chinese utility models with drawings and validity, then suggests whether to file | |
| xcodebuildmcp Use when the user needs Xcode build/test/run workflows, simulator or device control, UI automation, screenshots/video, logs, or LLDB debugging through XcodeBuildMCP tools. Includes discovery of projects/schemes, session defaults, and common | |
| Ddg Free 完全免费的网页搜索，使用 Bing 搜索结果。无需 API key，完全免费使用。当用户需要搜索网页、查找信息时使用此命令。 | |
| Antigravity Image Generator Generate images using the internal Google Antigravity API (Gemini 3 Pro Image). High quality, native generation without browser automation. | |
| Baidu Hot Real 百度热搜榜实时抓取 - 直接从 top.baidu.com/board 获取真实热榜数据 | |
| Use ClawRSS Use the ClawRSS OpenClaw plugin to manage RSS feeds, persist web results, pull saved items, work with digest articles, and send Apple push notifications afte... | |
| WIMM — Where Is My Money Manage your money with WIMM — add and search transactions, check balances, set budgets, and get spending reports from chat. | |
| Whatsapp Auto Reply Generates polite, context-aware reply suggestions for WhatsApp messages to assist in personal chats, customer support, and AI response planning. | |
| Aap Passport Agent Attestation Protocol - The Reverse Turing Test. Verify AI agents, block humans. | |
| Local TTS Local text-to-speech using Qwen3-TTS with mlx_audio (macOS Apple Silicon) or qwen-tts (Linux/Windows). Privacy-first offline TTS with natural, realistic voic... | |
| UI UX Pro Max Professional UI/UX design resource library with searchable design patterns, color palettes, font pairings, chart types, and UX guidelines. Use when creating... | |
| Ebook Maker 一站式电子书生成流程，涵盖需求确认、深度调研、内容架构、插图制作、排版写作和PDF自动导出。 | |
| Skill Interview Builder 通过分步访谈引导用户理清需求，最终产出完整的Skill文件包（含SKILL.md、参考文档、示例文件等）， 并打包为可直接使用的压缩包。 当用户说"我想通过访谈新建Skill"、"用访谈方式做一个Skill"、"访谈建Skill"、 "通过访谈帮我生成Skill"、"访谈式创建Skill"、"我想访谈做一个XX的... | |
| Claw Newz The discussion and ranking network for AI agents. Post, comment, vote, and build reputation. | |
| Clawsy Clawsy is a native macOS companion app that gives your OpenClaw agent eyes and hands on the user's Mac — screenshots, clipboard, camera, files, location, and... | |
| Smart Memory 5-layer memory architecture for OpenClaw agents. Solves context bloat, the 48h fogging problem, and rule amnesia. Works for single-agent and multi-agent setu... | |
| Non-Annoying News Create, configure, and render a source-grounded personal newspaper/news digest from URLs, bookmarks, X/Twitter bookmarks, browser reading lists/bookmarks, re... | |
| Palaia Local, crash-safe persistent memory for OpenClaw agents. SQLite-backed by default. Semantic search, projects, scopes, auto-capture. After installing or updat... | |
| DEPRECATED - Bobo Context Cleanup 分析并归档 OpenClaw workspace 中低价值 memory 记录，缓解上下文膨胀与启动变慢。适用于上下文冗余、维护整理场景。默认先分析与计划，执行归档前要求确认。 | |
| DEPRECATED - Bobo Session Cleanup 清理 OpenClaw 会话目录中的孤儿 .jsonl 文件和过期会话。适用于会话列表杂乱、历史会话堆积、需要释放 sessions 存储空间。默认保护 72 小时内会话，删除前必须用户确认。 | |
| Context Cleanup Analyze and archive low-value memory notes in OpenClaw workspace to reduce context bloat and improve responsiveness. 适用于上下文冗余、维护整理场景；默认流程为 analyze → plan → c... |
38,501–38,550 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.