Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| UI Inspiration Library Archive UI screenshots into a searchable inspiration library and retrieve matching references by style, page type, use case, or visual goal. | |
| Skill Real-time messaging across OpenClaw instances (channels, DMs, threads, reactions, search). | |
| copyku AI Copywriting Expert untuk digital marketing, social media, landing page, iklan, brand positioning. Multi-language (ID/EN/ZH/JA/MS/AR), 30+ tone, A/B testing, email sequences, SEO meta, bulk mode, dan 6 industry templates. Menghasilkan cop | |
| fswe Full-stack engineering skill with 24 modules covering architecture, API, performance, testing, DevOps, security, and modern TypeScript stack. | |
| promptkit Auto-select and apply the best of 56 prompting frameworks to generate clear, structured prompts. | |
| OpenClaw Finance Voucher Generate import-ready China finance voucher and bank statement workbooks | |
| Baseball Fetch MLB game schedules, live game status, box scores, player search, and season statistics via the MLB Stats API. Use when the user asks about baseball gam... | |
| discogs-sync Add and remove albums from a Discogs wantlist or collection by artist and album name, master ID, or release ID. Search marketplace pricing for vinyl, CD, and other formats. List wantlist and collection contents. Use when the user asks to ad | |
| Leak Check Scan session logs for leaked credentials. Checks JSONL session files against known credential patterns and reports which AI provider received the data. | |
| Market Events Reports upcoming or recent earnings, dividends, and stock splits from FMP for a watchlist of tickers. Accepts a comma-separated ticker list or a file of tick... | |
| Minimax Usage Check MiniMax coding plan usage/credits remaining. Requires MINIMAX_API_KEY environment variable. | |
| Quodd Fetch real-time stock quotes via Quodd API. Get current prices, daily high/low, and after-hours data for US equities. Use when the user asks for stock prices... | |
| Session Cost Analyze OpenClaw session logs to report token usage, costs, and performance metrics grouped by agent and model. Use when the user asks about API spending, to... | |
| yahoo-fantasy-baseball Query your Yahoo Fantasy Baseball league: view roster, standings, matchups, free agents, draft results, transactions, and injuries. Daily roster optimization detects inactive players and suggests bench swaps and IL moves. Read-only — no ros | |
| Academic Formula Converter Convert LaTeX math formulas in Markdown to styled docx or HTML documents with Unicode symbol support for academic use. | |
| SRT Korean SRT (Super Rapid Train) search, reservation, and booking management | |
| MemoryLayer Semantic memory for AI agents. 95% token savings with vector search. | |
| Zrise Connect Release Connect and operate Zrise tasks via XML-RPC API using Lobster workflows for approval-based task execution and result writeback. | |
| Clay Search, manage, and organize your contact network via the Clay CLI. | |
| Autoglm File Upload Use the AutoGLM Upload Mix API to upload local files such as images and documents, then obtain a file URL or resource ID for downstream API calls. The token... | |
| Autoglm Image Recognition Use the AutoGLM Image Recognition API to analyze and describe image content. Use this skill when the user needs image analysis, object or scene recognition,... | |
| BlackClaw RWA Advisor Multi-jurisdictional RWA tokenization advisor — regulatory structuring, token classification, compliance architecture, and issuance strategy across UAE, EU,... | |
| Daily Ai News Skill 0.1.0 Aggregates and summarizes the latest AI news from multiple sources including AI news websites and web search. Provides concise news briefs with direct links... | |
| Github 1 Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries. | |
| Search Pubmed Search biomedical literature on PubMed via NCBI E-Utilities. Use this skill whenever the user needs to search for scientific papers, biomedical articles, lif... | |
| Alby Lightning Payments Send, receive, and manage Bitcoin Lightning payments through Alby Hub's Nostr Wallet Connect, including balance checks and invoice handling. | |
| Fill XFA PDF Forms Fill XFA (Adobe LiveCycle) PDF forms programmatically. Use when working with .pdf files that have Form: XFA (check with pdfinfo). Standard tools like pdftk,... | |
| Consciousness and Human Influence Meta skill for OpenClaw (Moltbot / Clawdbot) that reads human behavior, uncovers hidden motives and patterns, and designs systems, strategies, and interventi... | |
| ipo-doc-formatting 在写 Word 或改 Word 文件时，按招股书 / 审核问询反馈回复的样式要求应用格式（报告/备忘录/尽调等正式文档同归招股书版 000-009）。触发词：「按招股书样式」「招股书格式」「招股书排版」「招股书章节样式」「把这篇改成招股书格式」「这篇按招股书排一下」「按反馈回复样式」「问询回复格式」「反馈回复排版」「反馈回复排版规范」「落实函格式」「套用 000-009 样式」「套 000-009」「报告模板样式」「套模板样式」「把这个 Word 改成XXX格式」「Word | |
| Openclaw Soul OpenClaw 自我进化框架一键部署。安装宪法(AGENTS.md)、可进化灵魂(SOUL.md)、心跳系统、六层记忆架构、目标管理、思维方法论（HDD/SDD）、安全审查（skill-vetter），并通过场景化对话引导用户定义 Agent 性格。用户可选安装 EvoClaw（审批制进化）、Self-Impr... | |
| Openclaw Soul Publish OpenClaw 自我进化框架一键部署。安装宪法(AGENTS.md)、可进化灵魂(SOUL.md)、心跳系统、PARA三层记忆架构、目标管理，并通过场景化对话引导用户定义 Agent 性格。自动配置 EvoClaw（审批制进化）和 Self-Improving Agent（自主学习）。触发场景："setup o... | |
| Linux Incident Remediator Provides forensically-safe Linux threat detection, network and process analysis, integrity verification, controlled firewall and service remediation preservi... | |
| KibiBot Skill Create tokens on-chain, check fee earnings, check Kibi Credit balance, trigger agent credit reload, and interact with KibiBot's Agent API and Kibi LLM Gatewa... | |
| KibiBot Create tokens on-chain, check fee earnings, check Kibi Credit balance, trigger agent credit reload, and interact with KibiBot's Agent API and Kibi LLM Gatewa... | |
| Brain Tease Game [中文] 多语言脑筋急转弯互动游戏，支持中文、英文、日文。自动检测用户语言，支持随机出题、答案判断、提示系统、不重复题目历史记录。 [English] Multi-language brain teaser interactive game supporting Chinese, English, and Jap... | |
| Skill Security Review Review and audit OpenClaw skills and agents for data risks, code execution, persistence, network access, privilege escalation, and supply-chain threats befor... | |
| Agent Migration Safely rename or migrate an OpenClaw agent by updating config and naming, migrating session content, fixing session metadata, restarting, verifying, and aski... | |
| Idea Capture Capture or update an idea, append an update log, and write a session summary for later retrieval. | |
| Skill Review Review an OpenClaw skill for token efficiency, scriptability, and clean action boundaries; back up first, then improve the skill. | |
| My Skill 1 获取美国 10 年期国债利率（CNBC + Treasury.gov），写入 CSV，并生成极简日志 | |
| subsession-delete Delete an OpenClaw child session cleanly by removing its transcript, trajectory files, and sessions.json index entry. | |
| Docx Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude... | |
| Pdf Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs... | |
| Notebooklm Skill Factory Orchestrate NotebookLM research into SKILL.md generation and Claude Code validation in a single automated pipeline. Use when user asks to create a new Claude... | |
| Knowledge Graph Generator Generate comprehensive Knowledge Graphs (RDF-Turtle by default, or JSON-LD and other RDF serializations on request) from content at file: or http(s): scheme... | |
| Query DBpedia using Natural Language Transform natural language questions into SPARQL queries for DBpedia and generate beautiful HTML results pages. Query the DBpedia knowledge graph using plain... | |
| Query Wikidata using Natural Language Transform natural language questions into SPARQL queries for Wikidata and generate beautiful HTML results pages. Query the Wikidata knowledge base using plai... | |
| RSS & Atom Feed Generator Generate valid RSS 2.0 or Atom 1.0 feeds from web pages that contain post lists but lack a native feed. Triggers on phrases like "generate a feed for", "crea... | |
| Data Twingler Skill for SQL, SPARQL, and GraphQL Execute SQL, SPARQL, SPASQL, SPARQL-FED, and GraphQL queries against live data spaces and knowledge graphs via OpenLink's OpenAPI-compliant web services. Use... | |
| Virtuoso Product Support Technical support and database management for OpenLink Virtuoso Server with RDF Views generation, SPARQL queries, and comprehensive database operations. Prov... |
44,801–44,850 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.