Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Welsh Write Welsh that sounds human. Not formal, not robotic, not AI-generated. | |
| WhatsApp Business API Complete WhatsApp Business Cloud API for messages, templates, media, webhooks, flows, and business profiles. | |
| Whop Run and grow a Whop business with better offers, checkout flows, promo strategy, affiliates, ads, tracking, analytics, support operations, and advanced API w... | |
| WiFi Troubleshoot and secure wireless networks with channel optimization and diagnostics. | |
| Wiki Build wikis people actually read — structure pages, cross-link, and keep content fresh. | |
| Wiki.js Deploy and manage Wiki.js documentation sites avoiding common configuration traps. | |
| Windmill Build automation workflows and internal tools with Windmill's code-first platform. | |
| Windows Windows-specific patterns, security practices, and operational traps that cause silent failures. | |
| WireGuard Configure WireGuard VPN tunnels with secure routing and key management. | |
| Wishlist Build a personal wishlist system for capturing wants, tracking prices, and smart purchasing decisions. | |
| Word Control Word app sessions, documents, selections, comments, export, and review state with osascript workflows. | |
| Word / DOCX Create, inspect, and edit Microsoft Word documents and DOCX files with reliable styles, numbering, tracked changes, tables, sections, and compatibility check... | |
| Work Navigate office work with professional communication, meeting prep, workplace dynamics, and visibility tactics. | |
| Workflow Build automated pipelines with reusable components, data flow between nodes, and state management. | |
| Workouts Build a personal workout tracking system with exercises, routines, progression, and PRs. | |
| Write Plan, draft, version, and refine written content with enforced versioning and quality audits. | |
| Writer Fix AI writing patterns that create repetitive and robotic content | |
| Writing Drafts, edits, and rewrites prose in the user's own voice — emails, posts, essays, memos, proposals, social copy. Use when asked to write, draft, edit, tighten, shorten, rewrite, or proofread something; when a draft reads flat, wordy, robot | |
| Xcode Avoid common Xcode mistakes — signing issues, build settings traps, and cache corruption fixes. | |
| XML Parse, generate, and transform XML with correct namespace handling and encoding. | |
| XRP Assist with XRP transactions, destination tags, reserves, and XRPL features. | |
| Yahoo Use Yahoo Finance for quotes, symbol search, watchlists, market briefs, and catalyst-aware stock decisions. | |
| YAML Writes, debugs, and validates YAML that parses the same in every language and tool. Use when a file will not parse, when a value silently turns into a boolean, number, date or null (`no`, `on`, `1.0`, `0644`, `22:22`), when tabs, indentatio | |
| Yelp Search Yelp businesses and reviews, compare local options, and audit listing quality with official APIs, public pages, and safe action boundaries. | |
| Yoga Yoga instruction, pose alignment, sequencing, breathwork, and modifications for different levels. | |
| YouTube Video Transcript Fetch, summarize, and save YouTube transcripts with timestamp navigation, chapter detection, and searchable content. | |
| Zapier Complete Zapier automation with Zaps, Tables, Interfaces, webhooks, REST Hooks API, and 6000+ app integrations. | |
| Zendesk Manage Zendesk tickets, users, and support workflows with API integration and automation. | |
| Zigbee Deploy and troubleshoot Zigbee mesh networks for home automation. | |
| Zillow Navigate Zillow for buying, selling, investing, and market research with Zestimate interpretation, pricing strategy, and ROI analysis. | |
| Videogames A skill to lookup video game information, prices, compatibility, and duration. | |
| FOR AGENTS ONLY — AI Self-Portrait Exhibition Create and exhibit an AI agent self-portrait | |
| Clawclub Use this skill when the user wants to create or join private communities and interest groups within the OpenClaw ecosystem. Triggers on "create a group", "fi... | |
| Clawmatch Use this skill when the user wants to find compatible people — romantic partners, business partners, or friends — based on deep psychological profiling. Trig... | |
| Clawteam Use this skill when the user wants to assemble a team for a project by matching people based on skills, roles, and work styles. Triggers on "find a team", "b... | |
| Deepsync Use this skill when the user wants to find compatible people — romantic partners, business partners, or friends — based on deep psychological profiling. Trig... | |
| Deepsynclaw Use this skill when the user wants to find compatible people based on deep psychological profiling. Triggers on "find my match", "find me a partner", "who am... | |
| Mindmatch Use this skill when the user wants to find compatible people based on deep psychological profiling. Triggers on "find my match", "find me a partner", "who am... | |
| Synclaw Use this skill when the user wants to find compatible people based on deep psychological profiling. Triggers on "find my match", "find me a partner", "who am... | |
| Viboscope Use this skill when the user wants to find people they'll click with — cofounders, project partners, mastermind groups, friends, or anyone — based on deep ps... | |
| BadgerPeek Safely inspect Honeybadger errors without MCP | |
| Hive CLI Operate Hive task pipelines and pre-release QA through its native CLI. Use when an agent needs to read durable daily activity or history, answer current Hive or Hive-bench status, identify the exact active task and blocker owner, discover o | |
| PRDigest Write a prose pull-request digest from PRDigest's deterministic, versioned facts. Use when an OpenClaw user asks to summarize merged pull requests without sending Telegram messages or enabling PRDigest's built-in AI provider. | |
| ButterSwap Butter Network DEX Aggregator for cross-chain token swaps. Get swap quotes, route transaction data, and cross-chain routing information. Use this skill whene... | |
| Preflight Checks Test-driven behavioral verification for AI agents. Catches silent degradation when agent loads memory but doesn't apply learned behaviors. Use when building agent with persistent memory, testing after updates, or ensuring behavioral consist | |
| Vanio AI Connect your agent to Airbnb, Booking.com & VRBO via Vanio AI — the only way to manage vacation rentals from OpenClaw. 140 tools for reservations, guests, me... | |
| Youtube Summary Skill Fetch a YouTube video transcript and provide a structured summary. Usage: /youtube-summary <youtube-url> [--lang <language>] | |
| relux-works Interact with Relux Works, an AI-native software development studio - look up services, fixed-price packages and company facts, and submit a project inquiry on behalf of a user (build an MVP, rescue a vibe-coded app, hand over app publishin | |
| deep-diagnostic-procedure-public Systematic 6-layer diagnostic framework for OpenClaw issues: policy, config, runtime, logs, network, code. | |
| Navil Audit Deep security audit for OpenClaw. Run a comprehensive scan of all installed skills, MCP servers, and agent configuration. Generates a detailed security repor... |
39,751–39,800 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.