Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Product Lifecycle Planner Map products across introduction, growth, maturity, and decline stages with stage-appropriate marketing, pricing, and inventory strategies. | |
| Product Naming Test product names and listing titles for TikTok Shop conversion potential before going live by scoring hook strength, search fit, and compliance risk. | |
| Product Page Audit Score product detail pages on image quality, copy effectiveness, SEO, mobile layout, and trust elements with improvement priorities. | |
| Product Photo Guide Generate platform-specific product photography shot lists and creative direction briefs covering hero images, lifestyle shots, infographics, and video thumbn... | |
| Product Sampling Strategy Design data-driven product sampling campaigns including target audience selection, distribution channel optimization, sample size calculation, feedback colle... | |
| Product Video Cutter 把冗长产品视频切成能直接拿去卖货的有效片段——按 PDP、广告、达人 review、社媒短视频等用途，保留最能转化的 hook、演示与证明片段，删掉废话与空镜。 | |
| Product Video Script Write engaging product video scripts for short-form platforms like TikTok, Reels, and YouTube Shorts. | |
| Profit Calculator Calculate true per-unit profit margins across channels by factoring in COGS, platform fees, shipping costs, ad spend allocation, returns, and overhead to ide... | |
| Profit Margin Analyzer Calculate true per-product profitability by mapping all cost layers — COGS, platform fees, payment processing, shipping, returns, and advertising — to reveal... | |
| Profit Margin Calculator Calculate true ecommerce profit margin after product cost, shipping, platform fees, discounts, and refund drag. Use when teams need a fast profitability real... | |
| Promo Calendar Optimizer Optimize weekly promo schedules across channels balancing inventory, capacity, and budget to prevent conflicts and maintain consistent ecommerce momentum. | |
| Rebuy Booster Design post-purchase sequences, loyalty incentives, and re-order triggers that turn one-time buyers into repeat customers for ecommerce brands. | |
| Referral Engine Design a customer referral program with incentive structures, sharing mechanics, fraud prevention rules, and tracking setup that turns existing buyers into a... | |
| Refund Policy Clarifier Clarifies and rewrites ecommerce refund policies into clear, customer-friendly language without expanding or changing the store’s actual refund terms. | |
| Refund Reason Cluster Clusters refund and return reasons to identify root causes and prevention plans, helping reduce avoidable refunds and margin erosion post-purchase. | |
| Retargeting Funnel Designs multi-stage retargeting ad funnels that re-engage ecommerce visitors based on browsing depth — from homepage bouncers to cart abandoners — with platf... | |
| Retention Drop Checker Diagnose why short-video retention drops and suggest practical fixes. Use when views start but audience leaves early. | |
| Return Rate Impact Calculator Calculate how return rate affects ecommerce profit, CAC tolerance, and operational risk. Use when teams need to see how refunds and reverse logistics change... | |
| Return Reducer Diagnose the root causes of product returns and build a concrete reduction plan targeting the highest-impact changes — covering listing accuracy, size guidan... | |
| Review Analysis Analyze customer reviews, complaints, and feedback to find repeat patterns, likely root causes, and action priorities. Use when teams need to cluster complai... | |
| Review Analyzer Extract sentiment patterns, repeated pain points, and feature requests from customer reviews to prioritize product fixes and copy improvements. | |
| Review Defect Miner Extract and cluster product defect signals from ecommerce reviews to prioritize quality fixes and address low ratings or negative sentiment. | |
| RFM Segmenter Segment your customer base using Recency, Frequency, and Monetary value scoring to identify Champions, Loyal Customers, At-Risk buyers, and Churned segments... | |
| Roas Calculator Evaluate ad ROAS against ecommerce margin reality, not just attributed revenue. Use when teams need a fast scale/hold/cut decision on paid traffic. | |
| Seasonal Inventory Planner Build month-by-month inventory plans that align purchasing, stocking, and markdown timing with seasonal demand curves to prevent both stockouts during peaks... | |
| Seasonal Keyword Planner Map ecommerce keywords to a 12-month demand curve and produce a month-by-month plan for listings, ads, and content timing. | |
| Seller Audit Run a structured health check of your ecommerce seller account — covering listing quality, policy compliance, performance metrics, and account standing — to... | |
| SEO Blog Planner Plan ecommerce blog content strategy with keyword-targeted article outlines that drive organic traffic to product pages. | |
| Shipping Cost Calculator Ecommerce Estimate ecommerce shipping cost per order across weight, zones, carrier rules, and free-shipping policies so teams can make better pricing, margin, and offe... | |
| Shipping Optimizer Reduce per-shipment costs and improve delivery speed by analyzing carrier rates, package dimensions, zone distribution, and fulfillment method mix — with con... | |
| Shopee Planner Plan Shopee Flash Sale, Voucher, and Coins Cashback campaigns with budget allocation and product selection logic for maximum platform traffic and ROI. | |
| Shopify Audit Audit Shopify store pages for conversion blockers including slow load, weak copy, missing trust signals, and friction in the add-to-cart flow. Use when add-t... | |
| Shopify Product Description Generator Build Shopify-ready product descriptions that turn raw product facts into clearer PDP copy with stronger benefits, objections handling, and conversion intent. | |
| Shopify Tracking Auditor Audit Shopify tracking across UTM, pixel, CAPI, and checkout events to identify attribution leaks causing inconsistent ROAS and conversion data. | |
| Short Video Hook Lab Generate, test, and refine short-video hooks for TikTok, Reels, and Shorts with retention-first structure. Use when the user wants stronger openings, better... | |
| Size Guide Builder Create accurate, visual product sizing guides for apparel, footwear, and accessories that reduce size-related returns by including measurement instructions,... | |
| SKU Rationalization Identify underperforming SKUs, recommend discontinuations, and optimize product catalog for maximum profitability. | |
| SMS Optimizer Craft compelling, policy-safe SMS messages for flash sales, order updates, and retention campaigns that drive clicks without triggering opt-outs. | |
| Social Media Calendar Build weekly or monthly social media content calendars for ecommerce brands, aligned with product launches, holidays, seasonal promotions, flash sales, and p... | |
| Social Video Resizer 把一条社媒视频快速变成多个平台可发的尺寸版本——在 9:16、1:1、4:5、16:9 之间选择 crop / pad / scale 最佳策略，保护人脸、产品与字幕安全区，输出各平台可直接使用的适配方案。 | |
| Spillover Estimator Estimate whether one commerce channel is creating measurable spillover into another channel using simple exports, campaign timing, and directional evidence.... | |
| Store Policy Writer Generate clear, professional, business-specific ecommerce store policies (returns, shipping, privacy, terms of service). | |
| Story-led Sell Script Create a believable story-driven sales script that naturally integrates product benefits through emotional, creator-native narratives for short-form video. | |
| Subscription Builder Design a subscription or auto-replenishment program for consumable products including pricing tiers, frequency options, churn-reduction tactics, and the onbo... | |
| Supplier Scorecard Track and score supplier reliability, quality consistency, lead time accuracy, and communication to make sourcing decisions based on evidence. Use when compa... | |
| Support Scripts Build a pre-written response library for common customer service inquiries, complaints, and order issues that maintains tone and reduces resolution time. | |
| Sustainability Messaging Craft authentic, compliant sustainability messaging for e-commerce brands including environmental claims, eco-friendly positioning, greenwashing avoidance, c... | |
| Testimonial Builder Build a systematic process for collecting, vetting, and using customer testimonials across product pages, ads, and creator briefs. | |
| Tiktok Affiliate Roi Calculator Estimate TikTok affiliate ROI before launch using simple revenue, payout, and cost assumptions. Use when teams need a fast go/no-go decision. | |
| Tiktok Claim Rewriter Rewrite risky TikTok product claims into safer and clearer language without losing persuasion. Use when scripts may trigger policy risk or overpromise concerns. |
47,951–48,000 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.