Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| stack-builder Design, audit, and evolve a personalized AI skill stack ("your own gstack") for any user. Observes the user's real context and interviews for gaps, identifies both signature strengths worth replicating and workflow breakdowns worth compensa | |
| Doorstep Get things done in the real world — pickups, deliveries, errands, and gifts handled by a human tasker. San Francisco only. | |
| 校园学习空间决策助手 This skill helps university students find available classrooms for self-study, group discussion, exam prep, or meetings. It should be used when a student ask... | |
| Automation Workflows Design and implement automation workflows to save time and scale operations as a solopreneur. Use when identifying repetitive tasks to automate, building workflows across tools, setting up triggers and actions, or optimizing existing automa | |
| Bookkeeping Basics Set up and maintain basic bookkeeping for a solopreneur business. Use when tracking income and expenses, preparing for taxes, managing invoices and receipts, understanding cash flow, or generating financial reports. Covers accounting softwa | |
| Brand Identity Build a complete brand identity for a solopreneur business from scratch or refresh an existing one. Covers brand personality, voice and tone, visual identity system (colors, typography, logo direction, imagery style), tagline crafting, and | |
| Business Model Canvas Build, fill, stress-test, and iterate on a Business Model Canvas for a solopreneur. Use when designing or redesigning how a business creates, delivers, and captures value — covering all nine BMC blocks plus solopreneur-specific adaptations | |
| Business Plan Write, structure, and update a business plan for a solopreneur. Use when creating a plan from scratch, updating an existing plan after a pivot or new phase, or preparing a plan to share with investors, partners, or even just to clarify your | |
| Closing Deals Close sales deals consistently as a solopreneur. Use when a prospect is at the decision stage and you need to move them to yes, when deals are stalling or going cold, when you need closing scripts or techniques, or when you want to build a | |
| Competitive Analysis Perform a deep competitive analysis for a solopreneur business. Use when mapping competitors in detail, finding exploitable gaps, understanding competitor strategy, benchmarking your own offering, or deciding how to position against the fie | |
| Content Strategy Build and execute a content marketing strategy for a solopreneur business. Use when planning what content to create, deciding on content formats and channels, building a content calendar, measuring content performance, or systematizing cont | |
| Copywriting Write persuasive copy for landing pages, emails, ads, sales pages, and marketing materials. Use when you need to write headlines, CTAs, product descriptions, ad copy, email sequences, or any text meant to drive action. Covers copywriting fo | |
| Customer Feedback Collect, analyze, and act on customer feedback to improve your product and business. Use when building feedback systems, running customer interviews, analyzing feature requests, measuring satisfaction (NPS, CSAT), or closing the feedback lo | |
| Customer Onboarding Design and execute customer onboarding that drives activation and retention. Use when building onboarding flows for new users, reducing churn in the first 30 days, improving time-to-value, or creating onboarding sequences (email, in-app, or | |
| Customer Retention Build and execute customer retention strategies for a solopreneur business. Use when reducing churn, improving customer lifetime value, building loyalty programs, re-engaging inactive users, or creating retention-focused product and communi | |
| Email Marketing Build and execute email marketing campaigns for a solopreneur business. Use when building an email list, writing email sequences (welcome, nurture, sales), designing broadcast campaigns, improving open and click rates, or setting up email a | |
| Financial Planning Plan and manage the finances of a solopreneur business. Use when creating budgets, forecasting revenue and expenses, building a P&L, planning for cash flow, setting financial targets, or preparing for financial decision-making. Covers budge | |
| Go To Market Build a go-to-market (GTM) strategy for launching a product or entering a new market. Use when planning how to reach customers, position your product, choose... | |
| Goal Setting Okrs Set and track goals for a solopreneur business using OKRs (Objectives and Key Results) and related frameworks. Use when defining business goals, creating qua... | |
| Grant Writing Framework Write winning grant proposals for nonprofits and social impact organizations. Covers grant research and selection, proposal structure, compelling narrative w... | |
| Idea Validation Validate a business idea before investing time or money. Use whenever a solopreneur has a raw idea and needs a structured process to stress-test it against r... | |
| Legal Essentials Understand and handle essential legal matters for a solopreneur business. Use when forming a business entity, protecting intellectual property, writing contr... | |
| Market Research Conduct structured market research for a solopreneur business. Use when sizing a market, understanding industry dynamics, mapping the competitive landscape b... | |
| Mental Health Psychoeducation Comprehensive psychoeducation on mental health conditions, therapy modalities, evidence-based coping techniques, psychiatric medications, and self-assessment... | |
| Mvp Planning Plan and scope a Minimum Viable Product for a solopreneur. Use when deciding what to build first, what to cut, how to prioritize features, how to define "don... | |
| Naming And Domains Name a business, product, or service and secure a matching domain. Use when brainstorming names, evaluating name quality, checking domain availability, choos... | |
| Negotiation Navigate negotiations as a solopreneur — pricing, scope, terms, and contracts. Use when a prospect pushes back on price, wants to change scope, disputes term... | |
| Niche Selection Select and refine a profitable, focused niche for a solopreneur business. Use when deciding which market segment to serve, narrowing a broad idea into a defe... | |
| Outreach And Prospecting Run cold and warm outreach campaigns to find and engage potential customers or partners. Use when building a prospecting pipeline, writing cold emails or Lin... | |
| Paid Advertising Plan, launch, and optimize paid advertising campaigns for a solopreneur business. Use when running ads on Google, Facebook, LinkedIn, or other platforms to d... | |
| Positioning Strategy Develop a competitive positioning strategy for a solopreneur business. Use when deciding how to differentiate from competitors, what market position to own,... | |
| Pricing Strategy Price a product or service for a solopreneur business. Use when deciding how much to charge, choosing between pricing models, structuring tiers, handling pri... | |
| Product Launch Plan and execute a product launch for a solopreneur business. Use when launching a new product, feature, service, or major update. Covers pre-launch strategy... | |
| Product Roadmap Build and manage a product roadmap for a solopreneur business. Use when deciding what to build next, prioritizing features, planning product development over... | |
| Project Management Manage projects, tasks, and priorities effectively as a solopreneur. Use when organizing work, tracking progress, managing deadlines, coordinating with contr... | |
| Proposal Writing Write winning proposals and quotes for a solopreneur business. Use when putting together a proposal for a potential client, structuring a sales document, pri... | |
| Reclaim Your Brain Transform AI conversations from answer-dispensing to deep learning. Uses Socratic questioning, explain-back verification, progressive disclosure, cognitive l... | |
| Revenue Model Design Design a revenue model for a solopreneur business — how money flows in, from whom, and on what cadence. Use when deciding how to monetize a product or servic... | |
| Sales Funnel Design Design and optimize a sales funnel for a solopreneur business. Use when mapping how customers move from first awareness to paying customer, identifying where... | |
| Scaling Strategy Scale a solopreneur business beyond solo operations. Use when growing revenue, adding team members, systematizing operations, considering when and how to sca... | |
| Seo Strategy Build and execute an SEO strategy for organic search traffic. Use when planning keyword targeting, optimizing content for search engines, building backlinks,... | |
| Social Media Marketing Build and execute a social media marketing strategy for a solopreneur business. Use when choosing platforms, creating a posting strategy, growing followers,... | |
| Sop Generator Turn messy recordings, transcripts, voice notes, or brain dumps into clean, team-ready Standard Operating Procedures (SOPs). Use when you have Loom videos, m... | |
| Spreadsheet Automation Turn Google Sheets into a powerful database and workflow engine using formulas, Apps Script, and integrations. Use when building systems in Sheets, automatin... | |
| Support Systems Build and scale customer support for a solopreneur business. Use when setting up support channels, writing help docs, reducing support volume, improving resp... | |
| Tax Planning Plan and manage taxes effectively as a solopreneur to minimize liability and avoid penalties. Use when understanding tax obligations, quarterly estimated tax... | |
| Time Management Manage time effectively as a solopreneur to maximize productivity and avoid burnout. Use when struggling with focus, feeling overwhelmed, context-switching t... | |
| Unit Economics Calculate, understand, and improve the unit economics of a solopreneur business. Use when figuring out if the business is actually profitable per customer, w... | |
| TikTok Packager Generate deterministic 6-slide portrait PNG slideshow assets plus caption text for TikTok-style posting workflows, including reusable templates and a strict... | |
| Clawdhub Copy Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with |
42,201–42,250 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.