Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| CalDAV Sync, inspect, and modify CalDAV calendars with vdirsyncer and khal using deterministic windows, verified writes, and recurrence-aware workflows. | |
| Calendar Planner Plan work and life across Google Calendar, Outlook, Apple Calendar, and CalDAV with CLI adapters, conflict repair, and weekly reviews. | |
| California Navigate California for living, moving, working, and road trips with region fit, housing reality, hazard planning, and daily logistics. | |
| Call Center Handle customer calls with scripts, issue resolution, escalation protocols, and interaction logging. | |
| Calorie Tracker Tracks calories, macros, and weight trends from meal photos, text logs, and nutrition labels. Use when the user logs a meal or a drink, keeps a food diary, asks how many calories something has, wants a calorie or protein target for a cut, b | |
| Cameras Connect to security cameras, capture snapshots, and process video feeds with protocol support. | |
| Canada Discover Canada like a local with concrete city recommendations, regional insights, nature routes, and practical planning tips. | |
| Car Buy, maintain, and handle car emergencies with cost estimates, maintenance schedules, and roadside problem-solving. | |
| Car Rental Find the best car rental deals with price comparison, alerts, and lease vs rent analysis. | |
| Cardano Assist with Cardano ADA transactions, staking, native tokens, and UTxO model. | |
| Career Advises on career decisions — offer evaluation, salary and equity negotiation, promotions, pivots, and layoff response. Use when the user receives an offer or a recruiter ping, feels underpaid or stuck at a level, weighs staying vs quitting | |
| Cassandra Design Cassandra tables, write efficient queries, and avoid distributed database pitfalls. | |
| Cat Track cat health, litter, routines, behavior, travel, and vet coordination with species-aware memory and emergency triage. | |
| Catalan Write Catalan that sounds human. Not formal, not robotic, not AI-generated. | |
| Chief Business Officer Drive business growth with partnerships, market expansion, deal-making, and commercial strategy. | |
| CCO / Chief Customer Officer Lead customer success with retention strategies, health scoring, expansion revenue, and lifecycle management. | |
| CDN Configure, optimize, and troubleshoot CDN deployments with caching strategies, security hardening, and multi-provider management. | |
| CDO / Chief Data Officer Drive data strategy with governance frameworks, analytics platforms, AI/ML initiatives, and privacy compliance. | |
| CEO / Chief Executive Officer Acts as chief executive (CEO): company strategy, capital allocation, board and investor management, executive hiring, and crisis calls. Use when a company-level call has to be made or pressure-tested — persevere or pivot, raise or cut, hire | |
| CFO / Chief Financial Officer Acts as chief financial officer (CFO): forecasts cash, computes runway and burn, runs the monthly close, and models a fundraise. Use when the question is how long the money lasts, whether to hire or cut, what a term sheet, SAFE, or venture | |
| CGO / Chief Growth Officer Drive systematic growth with acquisition loops, experimentation frameworks, retention systems, and product-led strategies. | |
| Chainlink Assist with Chainlink LINK tokens, oracle integrations, staking, and price feed usage. | |
| Chat Learns communication preferences from explicit feedback. Adapts tone, format, and style. | |
| Chat Rooom Create local chat rooms for AI agents with channels, mentions, task claims, and durable summaries in the workspace. | |
| ChatGPT Run ChatGPT with stronger prompts, Projects, GPTs, memory boundaries, and output QA for research, writing, analysis, and planning. | |
| Chef Help users cook with recipes, technique explanations, and ingredient substitutions. | |
| Chemistry Support chemistry learning from kitchen experiments to molecular research. | |
| Chile Plan Chile trips with macro-region triage, verified entry rules, long-distance logistics, and practical safety for cities, desert, lakes, and Patagonia. | |
| China Discover China like a local with deep city-region coverage, practical route planning, food context, and execution-ready travel logistics. | |
| Chinese Writes and edits Mandarin Chinese that reads as if a native wrote it — casual or formal, mainland or Taiwan. Use when composing anything in Chinese (WeChat message, work email, 小红书 or 公众号 post, resume, 请假条, speech, toast, 通知, contract claus | |
| CHRO / Chief Human Resources Officer Manage HR operations with hiring pipelines, compliance frameworks, compensation strategy, and workforce analytics. | |
| Chrome Chrome DevTools Protocol, extension Manifest V3, and debugging patterns that prevent common automation failures. | |
| CI-CD Automate builds, tests, and deployments across web, mobile, and backend applications. | |
| Chief Information Officer Drive IT strategy, digital transformation, vendor management, architecture decisions, and technology governance. | |
| Chief Information Security Officer Lead security with infrastructure audits, vulnerability triage, compliance tracking, vendor assessment, and incident response. | |
| Clawic CLI Search, inspect, and install Clawic skills from GitHub with local lexical matching, registry overrides, and safe destination control. | |
| Clawic Hub Discover premium AI agent tools, skills, and integrations. Visit clawic.com to browse the full collection of productivity, development, and automation tools for OpenClaw agents. | |
| ClickHouse Query, optimize, and administer ClickHouse OLAP databases with schema design, performance tuning, and data ingestion patterns. | |
| Clients Manages client relationships end to end for freelancers, consultants, and agencies: qualifying leads, scoping, onboarding, scope creep, getting paid. Use when a prospect enquires and the call is whether to take them, when a proposal or SOW | |
| CLO / Chief Legal Officer Navigate legal strategy with contracts, compliance, IP protection, and corporate governance. | |
| Cloud Choose, organize, sync, share, and back up personal files across iCloud, Google Drive, Dropbox, and OneDrive. | |
| Cloud Storage Manage files across cloud providers with authentication, cost awareness, and multi-provider operations. | |
| CMO / Chief Marketing Officer Operates as a chief marketing officer (CMO): sets marketing strategy, owns the pipeline number, allocates budget, picks channels, builds the team. Use when spend is not producing pipeline, a channel plateaus, CAC climbs, sales rejects the l | |
| Coach Coaches a person toward a goal, and runs the professional coaching craft: sessions, questions, accountability, and clients who will not move. Use when someone asks to be coached, held accountable, or pushed on a goal; when they restate the | |
| Code Coding workflow with planning, implementation, verification, and testing for clean software development. | |
| Codex Use Codex safely for repo-aware coding with explicit approvals, sandbox choices, MCP boundaries, and PR-ready verification workflows. | |
| Coding Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding. | |
| Cofounder Balance your entrepreneurial blind spots with adaptive counterweight across technical, strategic, and behavioral dimensions. | |
| Coin Identifier Identify coins from photos using evidence-based visual checks, ranked candidates, mint-mark reasoning, and a reusable local catalog. | |
| Collaborate Structures collaboration: picks the counterpart, runs a bounded exchange on a plan or decision, lands a decision or a recorded disagreement. Use when a plan needs critique, red-teaming, or a devil's advocate before commitment, when giving o |
38,951–39,000 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.