Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Flowtriq - anti-DDoS attack integration Monitor and manage Flowtriq DDoS detection in real time using the Flowtriq API. Use this skill whenever the user asks about active attacks, node status, inci... | |
| Simple CSC Use the simple-csc repository to perform Chinese Spelling Correction (CSC) and Chinese Character Error Correction (C2EC) using large language models in a tra... | |
| Video to Skill Extractor Automatically extracts subtitles, visual frames, and operational workflows from technical tutorial videos, generating structured and reusable AI workflow Skill documentation.
自动从技术教程视频提取字幕、画面和操作流程，生成结构化可复用的 AI 工作流 Skill 文档。 | |
| Open Animate Open Animate — the creative suite for AI agents. Create professional motion graphics, generate images, and render MP4 videos. Use when the user wants to make... | |
| onionclaw Search the Tor dark web, fetch .onion hidden-service pages, rotate Tor identities, and run structured multi-step OSINT investigations. Use when the user asks... | |
| Mowenskill Clean Publish, edit, or configure notes on Mowen (墨问) via Open API. Use when user mentions 墨问, mowen, 发布笔记, publish note, or wants to create social-media-style not... | |
| Mowenskill Publish Publish, edit, or configure notes on Mowen (墨问) via Open API. Use when user mentions 墨问, mowen, 发布笔记, publish note, or wants to create social-media-style not... | |
| Online-to-Offline-O2O-marketing O2O营销实战顾问。基于o2o的理论框架，结合当下最新趋势，提供O2O概念理解、问题诊断和实施建议。 适用场景： 1. 用户主动询问O2O相关问题（如"什么是O2O"、"怎么做O2O"） 2. 用户需要O2O问题诊断（如"我们的O2O哪里有问题"） 3. 用户需要O2O实施建议（如"我们想转型O2O怎么做"） 4... | |
| raise-ai-media RaiseAI 媒体生成工具集 - 生图、生视频、脚本生成、图片解析、视频解析。 当用户提到以下任何关键词时必须触发此技能：生成图片、生成视频、图片生成、视频生成、脚本生成、 图片解析、图生文、反推提示词、视频解析、视频脚本、图片生图、视频生视频、 AI生图、AI生视频、AI创作、Media generation... | |
| the-4p-marketing-consultant 营销决策的高级顾问助手。基于营销4P理论框架（产品、定价、渠道、推广）提供专业营销建议。 适用场景： 1. 用户主动询问营销问题（如"怎么做品牌定位"、"如何定价"、"渠道怎么选"） 2. 用户需要营销建议或诊断（如"帮我分析一下这个产品有什么问题"） 3. 用户需要引用实际案例来理解概念（如"有没有类似案例"）... | |
| Image Hosting for agents AgentImgHost REST API for uploading, listing, and deleting images. Returns direct public CDN URLs. | |
| Backup Gog 20260213 121122 Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs. | |
| Polyphemus: The One-Eyed Image Forge Make images with Eye.Art’s free, no-key Polyphemus model: fast artist-guided art, small icons, HTML/CSS-matched visuals, reference edits, and editable SVG. One eye on your prompt; a whole creative arsenal behind it. | |
| claw-turbo Zero-latency regex-based skill routing middleware for OpenClaw. Intercepts known user commands (deploy, restart, print, check logs, etc.) using compiled rege... | |
| B站 (bilibili) 热门视频监控 生成B站热门视频日报并发送邮件。触发词：B站热门、bilibili日报、视频日报、热门视频 | |
| ERC-8128 Sign and verify HTTP requests with Ethereum wallets using ERC-8128. Use when building authenticated APIs that need wallet-based auth, making signed requests... | |
| Microsoft Foundry image generation Azure Foundry image generation skill for OpenClaw; generates images via a Foundry deployment and returns image bytes or URLs. | |
| Tech Security Audit Performs local network scans using Nmap to detect vulnerabilities, identify service versions, and fingerprint operating systems. | |
| 10000 Year Clock Think at civilization-scale timeframes by asking how decisions look over 10,000 years, countering short-term pathological thinking | |
| A11y Audit Migrated Skill migrada desde examples - a11y-audit con capacidades completas | |
| Ab Test Setup Migrated Skill migrada desde examples - ab-test-setup con capacidades completas | |
| Ad Creative Migrated Skill migrada desde examples - ad-creative con capacidades completas | |
| Agent Designer Migrated Skill migrada desde examples - agent-designer con capacidades completas | |
| coordinator-evolution Advanced AI behavior framework that transitions from a simple assistant to a task coordinator, focusing on result synthesis and atomic task scheduling. | |
| OpenClaw Evolution v3 Use when users ask to evolve/upgrade OpenClaw agents into coordinator mode, apply Gene Locking to IDENTITY.md and AGENTS.md, package this evolution as reusab... | |
| stock-analyst-my Perform detailed technical and fundamental analysis of US, Malaysia, and Hong Kong stocks with real-time data, news, and actionable trading levels. | |
| stock 基于东方财富权威数据库，提供股票选股、行情、财务及关联关系等金融数据的智能查询与筛选服务。 | |
| OpenCode Game Builder Spawn OpenCode as an ACP (Agent Client Protocol) subagent for complex coding tasks. Use when building games, web apps, multi-file projects, or when the user... | |
| Webcam Motion Monitor Webcam motion detection and monitoring system for WSL2 with USB/IP passthrough. Use when setting up motion detection on a USB webcam, monitoring camera snaps... | |
| MeshLink 服务发布 通过 meshlink CLI 一键将本地服务安全发布到集团内网，支持端口检测和服务名管理，需用户确认后执行。 | |
| NIM Signal Scan — Manuscript Diagnostic Conducts a precise diagnostic interview to identify whether a manuscript’s stated reader outcome aligns with specific, concrete structural elements producing... | |
| 西之月登录 西之月账号扫码登录技能。当用户说“登录西之月”、“西之月扫码登录”、“获取西之月登录二维码”、 “刷新西之月登录态”，或其他技能检测到缺少有效西之月 access_token 时，应立即触发此技能。 执行完整登录流程：获取二维码 -> 向用户展示二维码 -> 轮询扫码状态 -> 保存 access_token、... | |
| YouTube Daily Digest 每日 YouTube AI/产品/科技播客更新摘要。零配置：装了 OpenClaw + 飞书 bot 就能直接用。 自动抓取 13 个精选频道最新视频字幕，AI 生成中文梗概，飞书卡片推送。 触发词：YouTube 每日推送、播客摘要、daily digest、订阅更新。 | |
| AGNTCY Identity CLI AGNTCY Identity Issuer CLI and Node Backend for managing verifiable agent identities, metadata, and badges. | |
| Cast Multilingual TTS via Typecast CLI with emotion control. Plays audio aloud or saves to file. | |
| Flutter Updater Keep Flutter/Dart projects automatically up-to-date. Detects new Flutter/Dart SDK releases, updates pubspec.yaml dependencies with safe breaking-change handl... | |
| Openclaw Pixel Agents Dashboard Real-time pixel art ops dashboard for OpenClaw deployments. Visualizes agent activity as character sprites in a shared office with live activity bubbles, har... | |
| One missed deadline ends a career. caseclaw makes sure it never happens. Point it at a matter and it auto-calculates every filing deadline from 600+ court rule sets. Throw a new client name at it and it checks conflicts against your entire case history in under a second. Start typing and it's already timing your work in six-minute increments. No browser tabs. No clunky SaaS dashboards. No $500/seat enterprise contracts. Just one command and the peace of mind that nothing is slipping through. Missed deadlines are the | |
| the compliance claw Regulations change 4,000+ times per year. Your clients can't track them all. complianceclaw monitors federal and state regulatory changes, maps them to your... | |
| the ediscovery claw E-Discovery costs $3,000+ per GB when outsourced. edisclaw processes, deduplicates, culls, and searches ESI collections locally for a fraction of the cost—gi... | |
| Drop a contract, get answers. lawclaw rips through PDFs, spots risky clauses, diffs redlines, checks citations, and searches thousands of discovery docs—locally, so nothing leaves your machine. Built for attorneys and paralegals who bill by the hour and can't waste one Drop a contract, get answers. lawclaw rips through PDFs, spots risky clauses, diffs redlines, checks citations, and searches thousands of discovery docs—loca... | |
| Self Improvement Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Zan Gongde 烧token攒功德Skill - 全自动消耗 OpenClaw 套餐 Token 核心原理：循环调用 OpenClaw LLM，每次生成一个经文念诵响应， **实时估算并累加 token 消耗，达到目标后立即停止**。 当用户说"攒功德"、"念经"、"烧token"、"消耗token"时调用此 skill。 四种... | |
| zxz-test 审查近期代码变更，检查 bug、安全隐患并提出改进建议。针对 git diff 中的暂存或未暂存更改提供可操作的反馈。 | |
| App Order Business Stats 按时间段和业务版块统计久事体育APP订单关键指标（业务版块、用户数、订单量、支付金额、退款金额、净销售金额）。适用于查询“某段时间内业务版块的订单”相关统计。 | |
| App Order Date Key Stats 按可变时间维度统计久事体育APP订单关键指标（用户数、订单量、支付金额、退款金额、净销售金额）。只替换@开始时间@、@结束时间@、@关键词@占位符，并允许根据用户指定动态调整时间统计维度（GROUP BY）。适用于查询“某段时间内包含特定关键词的订单，按小时/天/月等统计”。 | |
| App Order Prod Key Stats 按可变产品维度统计久事体育 APP 订单关键指标（订单数、未支付订单数、退款订单数、支付金额、退款金额、用户数）。支持关键词筛选和业务版块筛选，可动态调整查询维度（订单标题/订单明细）。 | |
| digital-employee-builder Build a runnable Agent digital employee from a business codebase or business-function description. Input a business system/module (source code, API docs, or functional spec); output a complete digital-employee workspace — AGENTS.md (operati | |
| mcp-bridge Use mcp-bridge-openclaw CLI to connect to and manage Model Context Protocol (MCP) servers with auto-reconnection and retry logic. Install via npm install -g... | |
| android-arm64-devkit-skill Create, build and deploy Android APKs on ARM64 Linux (DGX Spark, Raspberry Pi, ARM cloud): native aarch64 aapt2 for Gradle, plus adb install-and-verify over USB or VPN. Use for aarch64 APK work. |
40,151–40,200 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.