Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Cross-Branch Migration Audit Performs pre-migration audit for cross-branch module or feature migration by analyzing commits, dependencies, conflict risks, and generating detailed interac... | |
| Agent Conviction Score Measures conviction strength of current APEX trade signals | |
| Agent Stress Index Composite stress index measuring systemic risk across all APEX modules | |
| Ai Narrative AI-generated market narrative based on current regime and data | |
| Altcoin Season Altcoin season index — measures capital rotation from BTC to alts | |
| Apex Alpha Score APEX proprietary alpha score for current market opportunity quality | |
| Apex Alpha Score Institutional Institutional alpha score with full factor decomposition | |
| Apex Composite Composite APEX score combining regime, momentum, and risk metrics | |
| Apex Evolution Insight Weekly strategy evolution insights from APEX's self-improvement engine | |
| Apex Evolution Insight Institutional Full institutional evolution report with strategy scoring and outlook | |
| Apex Pulse APEX system heartbeat — confirms live trading is active and healthy | |
| Arb Spread Current arbitrage spread between Kraken and Hyperliquid | |
| Bb Analysis Bollinger Band analysis with squeeze detection and breakout probability | |
| Btc Dominance BTC dominance percentage with trend direction signal | |
| Btc Price Tick Real-time BTC price tick from live exchange feeds | |
| Capital Rotation Signal Detects capital rotation between BTC, ETH, alts, and stables | |
| Carrier Reliability Signal 30-day carrier on-time performance prediction for any carrier and trade lane via 5-factor model | |
| Combined Alpha Combined alpha signal merging momentum, mean-reversion, and sentiment | |
| Cross Asset Contagion Cross-asset contagion risk score — detects systemic spillover risk | |
| Cross Asset Contagion Institutional Full cross-asset contagion analysis with correlation matrices | |
| Cross Exchange Spread Live spread between Kraken, Coinbase, and Hyperliquid for arb detection | |
| Crowded Trade Detector Detects when too many agents are in the same trade — liquidation risk | |
| Dca Reentry Gate DCA re-entry readiness gate based on F&G, RSI, Stoch, and SMA filters | |
| Dca Signal DCA entry signal with gate status, regime, and F&G conditions | |
| Execution Window Optimizer Identifies optimal execution windows based on volatility and liquidity | |
| Fear Greed Composite Fear & Greed index with source and staleness metadata | |
| Fg Micro Lightweight Fear & Greed index snapshot for high-frequency polling | |
| Funding Rate Funding rate analysis across perps with arb opportunity scoring | |
| Funding Rate Hl Current Hyperliquid perpetual funding rates across tracked coins | |
| Grid Health Monitors real-time grid bot performance including fill rate, inventory levels, and status across trading pairs on multiple exchanges. | |
| Grid Health Score Comprehensive grid health score with recommendations for optimisation | |
| Grid Levels Active grid levels, spacing, and next buy/sell prices per pair | |
| ILA Labor Signal ILA East Coast port labor disruption signal — strike probability, inventory buffer, rerouting options | |
| Liquidation Magnet Identifies price levels with dense liquidation clusters | |
| Liquidation Pressure Aggregate liquidation pressure score across tracked perpetuals | |
| Live Atr Sizing Live ATR-based position sizing recommendation for current volatility | |
| Live Fill Rate Live grid fill rate across all pairs — measures execution efficiency | |
| Market Pulse Bundle Provides real-time bundled market data: price tick, Fear & Greed index, and market regime for BTC in a single authenticated API call. | |
| Market Tick Provides real-time cross-asset price, volume, and spread snapshots across Kraken, Coinbase Advanced Trade, and Hyperliquid. | |
| Mean Reversion Scan Mean-reversion opportunity scan across RANGING and CHOPPY regimes | |
| Momentum Status Current momentum engine status across BTC, ETH, SOL, and AVAX | |
| Narrative Intelligence AI-synthesised market narrative with directional bias score | |
| Oi Divergence Open interest divergence from price — detects smart-money positioning | |
| Optimal Order Routing Recommends best exchange and order type for minimum cost execution | |
| Portfolio Heat Provides real-time portfolio heat levels (normal, elevated, emergency) from APEX Runner's live trading to guide risk and position decisions. | |
| Position Exposure Current position exposure by pair, strategy, and exchange | |
| Regime Provides real-time market regime classification (TRENDING, RANGING, CHOPPY, CRISIS) for informed trading strategy selection. | |
| Regime Confluence Multi-timeframe regime agreement score for higher-confidence entries | |
| Regime Confluence Institutional Institutional-grade regime confluence with full multi-asset context | |
| Regime Micro Current market regime label at minimal cost for fast agent loops |
46,201–46,250 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.