Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Seasonal Planting Guide Provides monthly, zone-specific planting schedules, plant details, and custom entries to help gardeners plan seasonal crops year-round. | |
| Security Checker Security scanner for Python skills before publishing to ClawHub. Use before publishing any skill to check for dangerous imports, hardcoded secrets, unsafe file operations, and dangerous functions like eval/exec/subprocess. Essential for mai | |
| Task Runner Manage and track tasks and projects persistently with priorities, completion status, filtering, and secure markdown export across sessions. | |
| URL Fetcher Fetch and save web content using only Python stdlib with URL and path validation, basic HTML-to-markdown conversion, and no API keys or external dependencies. | |
| Fitness Agent Provides personalized workout plans, nutrition guidance, exercise alternatives, and tracks fitness progress with motivational and safety-focused coaching. | |
| A Share Glossary Tutor A股/炒股新手概念与指标的结构化讲解与笔记沉淀。用在：解释PE/PB/ROE/现金流/财报口径、板块与题材、政策术语；把零散问题整理成可复习的知识体系（中文优先）。 | |
| A Share Metrics Card 获取并生成 A股单只股票的关键指标“体检卡”（估值/盈利质量/现金流/负债/分红/交易活跃度等），输出为统一 Markdown，便于对比与持续跟踪。用在："帮我查600406关键指标"、"做一张国电南瑞体检卡"。 | |
| Daily Report Joig 生成简洁的中文日报（highlights/blockers/next），并可落盘为 Markdown 文件，适合个人复盘与同步。 | |
| Daily Report Writer 根据输入生成日报 Markdown 草稿并写入 reports 目录 | |
| CPA Update - Secure CLI Proxy API Maintenance 安全更新和维护 CLI Proxy API（CPA）部署与配置。用于 CPA 镜像升级、配置变更、认证目录兼容修复、上线验证与回滚。适用于用户提到“CPA 更新/升级/配置改了/容器重建/回滚”等场景。 | |
| Prompt Creator Hebrew עוזר ליצירת פרומפטים מקצועיים בעברית, עם דגש על תוכן יהודי, ריאליסטי וקולנועי לשימוש בכלי AI לתמונות ווידאו. | |
| FreeGuard VPN Setup Guide Guide users through installing, signing in to, connecting, and troubleshooting FreeGuard VPN with the official FreeGuard CLI. | |
| Smart Audio Analyzer All-in-one audio analysis: transcribe, identify speakers by voiceprint, auto-detect scene (meeting/interview/training/talk), generate structured notes. The O... | |
| Barbaric Growth 野蛮成长自动化技能 - GitHub热点追踪 + ByteRover知识沉淀 + OpenMOSS任务循环 + StarOffice状态看板。自主消耗token+产出有价值的知识资产。 | |
| EvoMap Node Integration Integrate OpenClaw with EvoMap Hub for node registration, heartbeat, asset publishing, bounty claiming, and evolution asset management. | |
| Nova Orbit Nova 自驱动轨道 — GitHub调研 + 自进化记忆 + 模式复用 + 人机协作。Nova 的核心智能引擎。 | |
| Self-Correct 自纠错工具调用框架 - 轻量修正策略库 + 状态快照。对常见错误自动应对，高风险操作前保存快照。 | |
| ExchangeService Cross-platform (Linux/macOS/Windows) skill for Exchange Server 2016 CU21 EWS operations on OpenClaw Node.js runtime. | |
| A Share Overnight Trading A股主板隔夜交易法选股策略。当用户需要每日尾盘在A股主板（60开头沪市、00开头深市主板）中选一支股票进行隔夜交易（今日尾盘买入，次日开盘卖出）时使用此技能。包含筛选标准、操作流程、风险控制和执行纪律。适用于追求隔夜价差的短线交易者。 | |
| K8s Yaml Connect Connect to Kubernetes clusters using YAML configuration files. Use when you need to apply, validate, or manage Kubernetes resources via kubectl with YAML inp... | |
| My Daily Brief 每日早报技能，生成天气+热点简报。 Use when: 用户说“今日简报”“今天热点”，或早上8点定时触发。 NOT for: 详细天气预报、深度新闻分析。 | |
| Alchemy OpenAPI Skill Operate Alchemy Prices API reads via UXC + curated OpenAPI schema | |
| Binance Spot OpenAPI Skill Operate Binance Spot public market, signed account, and order endpoints via UXC with curated OpenAPI mapping and Ed25519 (recommended) and HMAC query signing | |
| Binance Spot WebSocket Skill Subscribe to Binance Spot public market streams through UXC raw WebSocket support for trades, book ticker, depth, and ticker events with stream-specific guar... | |
| Binance Web3 API Operate Binance Web3 public market and research APIs through UXC with a curated OpenAPI schema. Use when tasks need token search, token metadata/market snaps... | |
| Birdeye MCP Skill Use Birdeye MCP through UXC for token market data, trending and discovery workflows, price monitoring, and DEX-related reads with help-first live tool discov... | |
| Bitget OpenAPI Skill Bitget public spot market data via curated V2 REST endpoints | |
| Bitquery GraphQL Skill Use Bitquery GraphQL through UXC for onchain trades, transfers, token holder analysis, balances, and market structure queries across supported networks, with... | |
| Blocknative Gas Platform Operate Blocknative gas price and fee intelligence reads via UXC + curated OpenAPI schema | |
| Blockscout OpenAPI Skill Operate Blockscout explorer reads via UXC + curated OpenAPI schema | |
| Board WebMCP Connect to the native board demo through local-mcp and one fixed UXC link. Use when the user wants to inspect or edit the shared board at board.holon.run or... | |
| Bybit OpenAPI Skill Bybit public market data via the V5 REST API through UXC | |
| Chainbase OpenAPI Skill Operate Chainbase indexed wallet and token reads via UXC + curated OpenAPI schema | |
| Chrome DevTools MCP Skill Use Chrome DevTools MCP through UXC over local stdio for page navigation, DOM/a11y snapshots, network inspection, console inspection, and performance tooling... | |
| CoinAPI OpenAPI Skill Operate CoinAPI market data reads via UXC + curated OpenAPI schema | |
| Coinbase OpenAPI Skill Products, accounts, and orders via Coinbase Advanced Trade through UXC | |
| CoinGecko OpenAPI Skill Operate CoinGecko market data and GeckoTerminal onchain reads via UXC + curated OpenAPI schema | |
| CoinMarketCap MCP Skill Use CoinMarketCap MCP through UXC for crypto market quotes, technical analysis, on-chain metrics, global market overview, narratives, macro events, news, and... | |
| Context7 MCP Skill Query up-to-date library documentation and code examples using Context7 MCP. Use when you need current, version-specific documentation for npm packages, Pyth... | |
| Crypto.com MCP Skill Exchange market data via the official Crypto.com MCP surface | |
| DeepWiki MCP Skill Ask questions and read documentation about any GitHub repository using DeepWiki MCP. Use when you need to understand a codebase, find specific APIs, or get c... | |
| DefiLlama OpenAPI Skill Operate DefiLlama public protocol and chain analytics reads via UXC | |
| DefiLlama Prices OpenAPI Skill Operate DefiLlama public asset price reads via UXC | |
| DefiLlama Pro OpenAPI Skill Operate DefiLlama Pro analytics reads via UXC + curated OpenAPI schema | |
| DefiLlama Yields OpenAPI Skill Operate DefiLlama public yield reads via UXC | |
| DexScreener API Operate DexScreener public market and DEX pair reads via UXC + curated OpenAPI schema | |
| DingTalk OpenAPI Skill Operate DingTalk v1.0 messaging APIs via UXC + curated OpenAPI schema | |
| Discord OpenAPI Skill Operate Discord HTTP API through UXC with Discord OpenAPI schema. Bot token recommended for full API access including messages and server management. OAuth2... | |
| Dune MCP Use Dune MCP through UXC for blockchain table discovery, SQL query creation/execution, execution result retrieval, and visualization with help-first schema i... | |
| Ethereum JSON-RPC Skill Operate Ethereum execution JSON-RPC through UXC with the official execution OpenRPC schema, public EVM read methods, and eth_subscribe pubsub guardrails. |
42,751–42,800 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.