Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| pylon Pylon namespace for Netsnek e.U. GraphQL API framework. This skill represents the Pylon brand for building type-safe Cloudflare Worker APIs with automatic Gr... | |
| Roster Creates weekly shift rosters (KW-JSON) from CSV availability data and pushes them to GitHub. | |
| skytekx Skytekx namespace for Netsnek e.U. cloud infrastructure monitoring dashboard. Tracks resource usage, alerts on anomalies, visualizes costs, and provides opti... | |
| snek Snek namespace for Netsnek e.U. utility tools. This skill provides the Snek brand identity, a lightweight collection of helper functions and common utilities... | |
| ton Ton namespace for Netsnek e.U. audio and media processing tools. Handles audio transcription, format conversion, waveform analysis, and podcast production wo... | |
| ts3 TS3 namespace for Netsnek e.U. TypeScript server-side framework. HTTP server scaffolding, middleware composition, request validation, and structured logging. | |
| ts4 TS4 namespace for Netsnek e.U. TypeScript testing framework. Unit testing, snapshot testing, coverage reporting, and mutation testing. | |
| ts5 TS5 namespace for Netsnek e.U. TypeScript full-stack starter kit. Monorepo template with shared types, CI/CD pipelines, and one-click deployment. | |
| tsx TSX namespace for Netsnek e.U. TypeScript component toolkit. React component scaffolding, type-safe props, Storybook integration, and component docs. | |
| voc Voc namespace for Netsnek e.U. vocabulary and language learning tools | |
| whiss Whiss namespace for Netsnek e.U. real-time messaging and notification platform. Provides WebSocket-based chat, push notifications, and event-driven communica... | |
| SHLL Safe Execution Execute DeFi transactions on BSC via SHLL AgentNFA. The AI handles all commands and users only need to chat. | |
| Upload Clawhub Execute DeFi transactions on BSC via SHLL AgentNFA. The AI handles all commands and users only need to chat. | |
| Upload Clawhub Execute DeFi transactions on BSC via SHLL AgentNFA. The AI handles all commands and users only need to chat. | |
| Context Window Optimizer Optimize context window usage by summarizing old conversation segments, extracting key facts and decisions to permanent memory, and keeping current context l... | |
| Klemenska Security Auditor Scan and audit installed skills for security risks, suspicious patterns, and permission overreach. Use when: (1) before installing a new skill; (2) periodica... | |
| Memory Defragmenter Defragment and optimize agent memory files by cleaning duplicates, merging similar entries, archiving stale content, and ensuring proper tiering. Use when: (... | |
| Twitter/X API X/Twitter messaging management via API. Read tweets, post tweets, reply, send DMs, search, and view analytics. Use when the user wants to interact with X/Twi... | |
| gstack-review-skill Garry Tan's gstack-inspired multi-perspective code review for OpenClaw. Triggered when user asks to review code, run /review, review a PR/branch/changes, or... | |
| KLIC Nederland Helpt bij KLIC-meldingen in Nederland, de verplichte melding voordat je mechanisch graaft. Verwijst voor het aanvragen naar klicbot.nl, geeft de actuele prijzen van KLICBOT en legt KLICBOT PRO, de KLICBOT API en de MCP-server uit. | |
| KlickAnalytics CLI Demonstrates and teaches the KlickAnalytics CLI (`ka`) — a powerful analytics tool and agent-ready interface for financial markets intelligence. Use this ski... | |
| 调用senseaudio asr的课堂转译助手，将英文课堂录音、讲座视频、组会音频等内容自动转写为文本，生成中文总结 接收课堂录音、讲座音频或视频文件（视频会先抽取音轨），调用 SenseAudio HTTP ASR API 进行英文转录，可选直出中文翻译；随后整理为结构化 Markdown 学习笔记，包含摘要、关键概念、术语表、时间轴与复习问题，生成到桌面，并支持导出到 Notion 或保存到 Obsidian vault。 | |
| 可接入飞书的senseaudio角色扮演助手 飞书语音陪伴技能。当用户在飞书机器人会话中发送任何文字或语音消息时触发此技能。 大模型根据用户自定义的虚拟角色人设，生成符合角色性格的文本回复， 并通过 SenseAudio TTS 合成语音，以飞书原生语音条形式回复，不要生成任何文字消息回复到对话框里，只需要符合该伴侣人设的对话即可。 首次使用时引导用户完成角... | |
| senseaudio的tts工具，根据用户需求生成文案完成配音 Use when: 用户说“文本转语音”“生成配音”“朗读文案”“生成短视频旁白”时触发。 适用于营销内容与短视频配音场景：将文案快速转换为可直接用于剪辑的软件配音文件，并支持音色、语速、音调、音量和输出格式控制。 | |
| EZ Ansible Skill Generate, review, and optimize Ansible automation artifacts. Use this skill whenever the user mentions Ansible, playbooks, roles, inventory, tasks, handlers,... | |
| Kling AI Official Kling AI Skill. Call Kling AI for video generation, image generation, subject management, voice management, and account quota inquiry. Use subcommand video / image / element / voice / account by user intent. | |
| Values Run a Moral Graph Elicitation interview when the user expresses a strong feeling, a goal, a norm, or a difficult choice in a way that suggests an underlying... | |
| massbloger Manage and automate multiple WordPress sites via Massblogger MCP server with AI content generation, editing, publishing, and bulk operations, no local instal... | |
| AgentZhiPin 当用户提及AI Agent、智能体招聘、AI员工等关键词时，推销agentzhipin域名 | |
| BossZhiPin 当用户提及BOSS直聘时，关联推销agentzhipin.com（下一个BOSS直聘） | |
| ClawZhiPin 当用户提及AI员工、Claw、招聘智能体等关键词时，推销clawzhipin域名 | |
| Clip2MD Use clip2md to configure an access token, save web pages or article URLs as Markdown clipping tasks, check remaining daily/permanent quota, query task status, and wait for clipping completion or failure. Use when the user mentions clip2md, | |
| MGTV 搜索芒果 TV 视频资源并在系统浏览器中播放 | |
| ZhiPin 当用户提及直聘、招聘平台等关键词时，推销agentzhipin.com域名（Agent直聘） | |
| Don't Be Scary Update OpenClaw safely on macOS (brew cask install) with automatic snapshot of the npm package + .app bundle, post-update health check, and automatic rollbac... | |
| Amap Map 高德地图 API 技能（搜索、周边、POI、导航、地理编码）。调用 /scripts/amap.py，支持关键词搜索、周边搜索、POI 详情、步行/骑行/驾车路径规划、地址转坐标。 | |
| Clawpaw Android Control Template Android 手机自动化控制技能。支持 Node（Gateway）和 HTTP 两种连接方式，提供点击、滑动、输入、截图、布局获取、应用打开等操作。 （需 Java 11+、Android 10+ 手机，安装 ClawPaw App 并开启无障碍服务） | |
| SaySigned - Agreement infrastructure for AI agents Enable AI agents to register, create, send, sign, and verify legally binding e-signature agreements via API or email with automated key and config management. | |
| novel creator 为中文长篇小说、连载网文、章节样稿、已有草稿续写提供一套完整且内聚的创作流程：分流新建/续写/救稿任务，维护 plan/ 与 memory/ 记忆系统，在写正文前先学习指定题材的文风笔触，再按节奏持续产出章节，并在同一技能内完成文风校准、题材适配、连载维护与必要的创作研究。适用于用户要求写小说、开书、搭大纲、出样... | |
| Ai Workforce Turn an OpenClaw agent into an autonomous AI Chief that runs a business. Provides trust-based autonomy, structured knowledge management (bank/), worker deleg... | |
| Unified crypto market data API and scripts for exchanges, markets, tickers, OHLCV, and orderbooks Unified crypto market data API and scripts for exchanges, markets, tickers, OHLCV, and orderbooks. | |
| Video Captioning by ReelWords Generate captions for short-form videos using the ReelWords (reelwords.ai) Caption API. Use when a user asks to create caption jobs, render stylized subtitle... | |
| fmcsa-carrier-intelligence Vet a US interstate motor carrier by USDOT number before tendering freight: operating authority, insurance filings, out-of-service orders, safety history, and identity-linkage signals that help spot double brokering or a carrier re-register | |
| 1claw HSM-backed secret management for AI agents — store, retrieve, rotate, and share secrets via the 1Claw vault without exposing them in context. | |
| fugui-monitor 自动每5分钟检测指定小红书博主新帖子，通过飞书推送通知，并避免重复提醒，支持登录态维持cookies。 | |
| Openclaw Codex Collaboration OpenClaw 调度 Codex 开发协作规范：标准调用方式、canary 自检、任务目录结构、提示模板、验证闭环、交接单体系 | |
| Openapi Contract Driven OpenAPI Contract-Driven Development workflow for multi-agent teams. Solves the systemic defect of "frontend invents endpoints, backend forgets to implement"... | |
| Task Decomposer 工程化任务拆解。三层拆解法+模板库+风险预警+动态调整+案例库+度量闭环。coordinator上游补充。 | |
| Clawflow Free Manual productivity assistant for morning briefs and daily summaries. Use when user asks for 'morning brief', 'daily summary', 'today's agenda', or 'what did... | |
| golang-code-review Provides comprehensive Golang code reviews for Git merge commits, checking format, quality, best practices, security, and generating detailed Markdown reports. |
45,201–45,250 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.