Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| LinkedIn Ads Strategy: B2B Campaigns, Targeting, and Lead Generation (WIP) Run LinkedIn advertising campaigns for B2B: Sponsored Content, Message Ads, Document Ads, and Lead Gen Forms. Covers professional targeting (job title, senio... | |
| Meta Ads Strategy: Facebook & Instagram Ads, Creative, Copy, Targeting, ROAS, Pixel, Ads Manager Run Facebook and Instagram ads end-to-end: Meta ads strategy, ad creative, copy, campaign structure, targeting, budgeting, ROAS tracking, and Pixel setup. In... | |
| Reddit Ads Strategy: Subreddit Targeting and Community-Aware Advertising (WIP) Run Reddit advertising campaigns: subreddit and interest targeting, native ad format, community-aware copy, and performance optimization. For B2B SaaS, devel... | |
| TikTok Ads Strategy: Creative-First Campaigns and Optimization Run TikTok advertising campaigns: creative strategy, campaign structure, audience targeting, bidding, and optimization. Covers In-Feed Ads, Spark Ads, and To... | |
| Credential Auditor 自动化凭证安全审计工具，支持设备默认密码匹配、密码字典生成和多协议暴力破解测试 | |
| Lurefish 路亚钓鱼助手 — 天气查询、渔获记录、钓点推荐、潮汐查询、路亚饵知识、渔获统计。当用户提到路亚、钓鱼、钓点、渔获、潮汐、路亚饵、拟饵、鱼饵选择等相关话题时触发此技能。 | |
| Investment Checklist | 投资决策清单 投资决策清单，每次买入/卖出前必须走一遍，确保决策质量 | |
| Mental Models Master | 顶级思维模型工具箱 顶级思维模型工具箱，遇到任何重要问题/决策时自动调用，进行深思熟虑的分析 | |
| News Alert | 新闻监控 监控持仓公司的最新新闻，发现重要信息立即提醒 | |
| Portfolio Monitor | 投资组合监控 定期监控投资组合，检查持仓公司基本面变化，生成周报 | |
| Stock Analyzer | 股票深度分析 输入股票代码，深入分析财务数据、估值、护城河，生成投资分析报告 | |
| 智能体成长复盘 帮助用户复盘一段时间内的学习、实践、工作和人机协作变化，自动读取已有记忆、身份、Skill、对话记录、任务结果和知识资料，追问少量关键问题，生成'AI赋能XXX成长报告'。调用时机：用户说'智能体成长复盘''生成我的AI赋能成长报告''回顾这段时间我的成长''总结我和智能体最近的变化''复盘最近的人机协作''写一份阶段性学习思想报告''更新我的成长档案'。核心能力：分析用户变化、智能体变化、人机共同形成的能力，区分事实/感受/推断/归纳，未经确认不得写回Memory。 | |
| AI懂帮我巧匠 通过轻松聊天帮用户生成专属AI文档，让AI智能体认识用户、配合用户，并持续进化。当用户说"让AI认识我""帮我写AI小册子""AI不懂我""刚注册不会用""搜魂大法""看看AI的灵魂"时调用。不负责教用户写代码、不负责调试智能体配置bug、不负责直接帮用户完成工作任务。 | |
| AI懂帮我巧匠 通过轻松聊天帮用户生成专属AI文档，让AI智能体认识用户、配合用户，并持续进化。当用户说"让AI认识我""帮我写AI小册子""AI不懂我""刚注册不会用""搜魂大法""看看AI的灵魂"时调用。不负责教用户写代码、不负责调试智能体配置bug、不负责直接帮用户完成工作任务。 | |
| 知识资产化巧匠 把问答库、逐字稿、会议记录、培训材料、长文章、课程文档、制度文件、操作手册等任何原始资料，转成可追溯、可检索、可更新、适合 RAG 和问答智能体直接使用的结构化知识资产（JSONL 主数据 + Markdown 审核视图）。用户说"把这些材料整理成知识库""把这份文档存进知识库""转成能检索的资料""拆成知识块""喂给智能体""结构化一下""做知识卡片""增量入库""去重查冲突"时触发。比 AI 通用能力强在：单一事实源双视图机制、来源可追溯、检索与回答字段分离、冲突/版本/ | |
| 技能升级巧匠 技能升级巧匠：诊断并升级初级/简陋的AI提示词。当用户要求优化技能、写提示词、或评估现有技能时调用。 | |
| 技能升级巧匠L2 面向已有基础结构但不够稳定、放进技能群后容易调错或打架的AI技能，进行系统化升级改造。执行五机制会诊（注册格式合规、入口匹配、去打架、衔接契约、命名记忆），按六条标准修法逐项改造。当用户说"这个技能调不对""多个技能互相抢""帮我做L2升级""这个技能在技能群里不行"时调用。 | |
| design-analysis 自动分析设计素材文件夹中的图片，生成多章节结构化HTML演示文档，支持自定义布局和页面尺寸。 | |
| 百度搜索 Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics. | |
| OpenClaw Pro Generate or edit images via Gemini 3 Pro Image (Nano Banana Pro). | |
| 主动代理 Lite Transform AI agents from task-followers into proactive partners with memory architecture, reverse prompting, and self-healing patterns. Lightweight version f... | |
| Graph-RAG Memory Graph-RAG memory system using Graphiti temporal knowledge graph + FalkorDB + local Ollama embeddings. Provides persistent, queryable long-term memory for Ope... | |
| HostLink Execute commands on the host machine from inside the OpenClaw container via the HostLink daemon. Provides secure, authenticated remote shell execution over a... | |
| Mind-Wander Background reasoning agent that autonomously explores open questions using a local LLM (Qwen3.5-9B), a private knowledge graph for dead-end tracking, and Per... | |
| 百度搜索中文版 通过百度 AI 搜索 API 进行网页搜索，获取实时信息和搜索结果。 | |
| 量化选股系统 - 基于 AKShare + 多因子模型的 A 股选股工具 量化选股系统 - 基于 AKShare + 多因子模型的 A 股选股工具 【核心功能】 - 六大维度综合评分（技术面 30%+ 基本面 25%+ 资金面 15%+ 筹码峰 10%+90% 集中度 10%+ 成交量震荡 10%） - 消息面分析（财联社 + 新浪财经，自动去重） - 每日自动选股（Top 3 推荐）... | |
| Coding Plan Usage Queries the remaining hours of Alibaba Cloud Coding Plan using a command-line tool. Invoke when user asks for Coding Plan usage. | |
| Ai Interview 🤖 AI 面试系统 - 完整的 AI 面试解决方案 提供求职者和面试官两个 AI Agent，支持飞书群聊面试 + 实时可视化观察。 **功能：** - 👨💻 job-seeker - AI 求职者（3年前端，微前端经验） - 👨💼 recruiter - AI 面试官（提问、评估候选人） - 📊... | |
| aweseed-sdwan Set up AweSeed SD-WAN with the desktop client and automatic cross-site networking. | |
| Picnow — Image Generation Generate high-quality images via Picnow (api.letmego.top). Activate when the user wants to create, generate, draw, or design images — including product photo... | |
| Clawphunks Mint and trade ClawPhunks NFTs. The first collection designed for AI agents. | |
| teamai Guide for TeamAI — the CLI that syncs a team's AI skills, rules, docs, and env across AI coding tools (set up, join, manage, contribute, uninstall). Invoke ONLY when the user explicitly runs `/teamai`. Do NOT auto-trigger from ordinary conv | |
| Markdown Output Enforce Markdown output formatting policy whenever the user asks for full Markdown source code, raw Markdown, or copyable Markdown documents. Use whenever th... | |
| Oidc Integration Plan and implement OIDC and OAuth 2.0 integration for React or TypeScript frontends and Java or Spring Boot backends. Use whenever the user mentions OIDC, Op... | |
| Focalpoint Memory FocalPoint — AI cognitive operating system. Memory + attention management + workflow orchestration. Workbench prepares context before tasks. Three-Province r... | |
| Founder Article Generate professional business articles with magazine-quality layout. Specialized for founders, investors, and business analysts to create compelling content... | |
| Fpms Memory Cognitive memory engine — gives your AI persistent work tracking, proactive risk alerts, and cross-conversation continuity. Never lose track of projects again. | |
| onebound-api Search Taobao and 1688 products, and fetch product details, through the Onebound platform gateway. | |
| Anime CLI for AI agents to search and lookup anime info for their humans. Uses Jikan (unofficial MyAnimeList API). No auth required. | |
| Bluesky Use the Bluesky CLI for timeline, search, notifications, posts, replies, threads, images, likes, reposts, follows, blocks, and mutes. | |
| Books CLI for AI agents to search and lookup books for their humans. Uses Open Library API. No auth required. | |
| Breweries CLI for AI agents to find breweries for their humans. Uses Open Brewery DB. No auth required. | |
| Council Send an idea to the Council of the Wise for multi-perspective feedback. Spawns sub-agents to analyze from multiple expert perspectives. Auto-discovers agent... | |
| Countries CLI for AI agents to lookup country info for their humans. Uses REST Countries API. No auth required. | |
| Harrypotter CLI for AI agents to lookup Harry Potter universe info for their humans. Uses HP-API. No auth required. | |
| Pokemon CLI for AI agents to lookup Pokémon info for their humans. Uses PokéAPI. No auth required. | |
| Recipes CLI for AI agents to find recipes for their humans. Uses TheMealDB API. No auth required. | |
| Spacex CLI for AI agents to lookup SpaceX launches and rockets for their humans. No auth required. | |
| Starwars CLI for AI agents to lookup Star Wars universe info for their humans. Uses SWAPI. No auth required. | |
| DataGuard DLP Runtime Data Loss Prevention (DLP) for OpenClaw agents. Multi-layer defense against credential exfiltration, PII leakage, and sensitive data transfer. Interc... |
40,851–40,900 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.