Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| 调用 JavaSkillController 提供的 HTTP 接口，供 OpenClaw/OpenLaw 执行业务操作、健康检查。 调用 JavaSkillController 提供的 HTTP 接口，供 OpenClaw/OpenLaw 执行业务操作、健康检查。 | |
| lin-skill-demo 收费技能示例模板 - 带授权验证，演示如何在 ClawHub 发布付费技能 | |
| lin-tet-master Use when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, perfor... | |
| Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Claude ('No, that's wrong...', 'Actually...'), (3) User requests a capability that doesn't exist, (4) An external API or tool fails, (5) Claude realizes its knowledge is outdated or incorrect, (6) A better approach is discovered for a recurring task. Also review learnings before major tasks. Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| test-jiaodian-lin-demo 收费技能示例模板 - 带授权验证，演示如何在 ClawHub 发布付费技能 | |
| Campus Candidate Screener screen campus recruiting candidates against a role's job responsibilities, degree, major, skills, and hiring requirements. use when hr provides a target role... | |
| results-summary-report-generator Evaluate and revise an academic Results section using six evidence-based dimensions, then produce a prioritized results-quality summary report with scores, concrete problems, evidence, and actionable revisions while preserving the Results/D | |
| Talent Profile Generator generate enterprise talent profiles and competency portraits for a specified role. use when a user provides a job title, company culture, grade/level, or ask... | |
| Hot Topic Finder 发现并追踪热点话题，自动去重，支持多平台热榜监控。Use when: (1) 寻找创作灵感或热点话题，(2) 检查话题是否已使用过，(3) 监控微博/知乎/抖音等平台热榜，(4) 需要话题推荐时。NOT for: 实时新闻追踪、舆情危机处理。 | |
| 100 Percent Bars Compare composition across segments using 100% stacked bars. Use for competitive analysis, cost structure comparison, and portfolio composition. | |
| Activity Maps Map key activities and their relationships. Use for operational analysis and capability development. | |
| Asset Extension Analyze how to extend and leverage existing assets. Use for growth strategy and resource optimization. | |
| Asset Extension Modeling Identify new business opportunities based on existing assets and capabilities. Use for market expansion, product development, and strategic growth. | |
| Business Definition Determine unified vs separated business entities. Use for portfolio management, strategic planning, and restructuring decisions. | |
| Capability Assessment Assess organizational capabilities using radar charts. Use for competitive analysis, gap identification, and strategic planning. | |
| Conversion Waterfall Analyze customer conversion through funnel stages. Use for identifying drop-off points and optimization opportunities. | |
| Customer Experience Map and analyze customer experience touchpoints. Use for improving satisfaction, loyalty, and customer journey optimization. | |
| Customer Segmentation Segment customers into groups with similar needs and behaviors. Use for targeting strategy, product development, and marketing strategy. | |
| Dupont Analysis Decompose Return on Equity into component ratios to identify performance drivers. Use for financial analysis, performance benchmarking, and identifying impro... | |
| Economies Of Scale Analyze cost advantages from scale. Use for understanding cost structure and competitive positioning. | |
| Executive Dashboard Design KPI dashboards for executive monitoring. Use for performance tracking, strategic initiatives, and management reporting. | |
| Forecasting Apply quantitative and qualitative forecasting techniques. Use for demand planning, revenue projections, and trend analysis. | |
| Forecasting Techniques Project future using time series, derived demand, and expert opinion methods. Use for market sizing, growth projections, and revenue planning. | |
| Free Cash Flow Model free cash flow to evaluate project or business value. Use for investment decisions, valuation, and understanding cash dynamics. | |
| Growth Share Matrix Analyze business portfolio using BCG Growth-Share Matrix. Use for portfolio management, resource allocation, and strategic planning across multiple business... | |
| Growth Spread Matrix Analyze value creation and growth positioning. Use for competitive analysis, strategic positioning, and understanding where value is generated. | |
| Kpc Comb Visualize Key Purchase Criteria importance and performance. Use for competitive positioning and product strategy. | |
| Marimekko Charts Create market landscape maps using Marimekko charts. Use for competitive positioning, market analysis, and visualizing multi-dimensional data. | |
| Market Definition Define market boundaries using substitution principle. Use for market sizing, competitive analysis, and strategic positioning. | |
| Market Entry Exit Analyze barriers to market entry and exit. Use for market attractiveness assessment, competitive dynamics, and strategic planning. | |
| Market Sizing Estimate market size using top-down, bottom-up, and triangulation methods. Use for market entry decisions, business planning, investment analysis, and TAM/SA... | |
| Parfait Charts Stacked bar charts showing composition and performance. Use for analyzing structure and trends. | |
| Partnering Maps Identify make-buy-partner relationships for key activities. Use for strategic alliances, outsourcing decisions, and supply chain optimization. | |
| Pest Analysis Analyze macro-environmental factors affecting an industry or company. Use as a precursor to strategic analysis, market entry assessment, or scenario planning. | |
| Porters Five Forces Analyze industry competitive dynamics using Porter's Five Forces framework. Use when entering a new market, assessing industry attractiveness, or understandi... | |
| Portfolio Matrix Evaluate strategic options by NPV vs ease of implementation. Use for project prioritization, resource allocation, and strategic decision making. | |
| Prioritization Funnel Evaluate and prioritize opportunities through a structured filtering process. Use for resource allocation, strategic decision support, and project management. | |
| Products Services Differentiation Position products and services in the market using strategic frameworks. Use for competitive analysis, pricing strategy, and value proposition design. | |
| Pyramid Principle Apply structured thinking and MECE principle to break down complex problems. Use at the start of any strategic analysis to organize thoughts and create compe... | |
| Raci Analysis Define roles and responsibilities using RACI matrix. Use for process improvement, organizational design, project management, and change initiatives. | |
| Reverse Costing Deconstruct competitor products to understand cost structure. Use for competitive pricing and cost analysis. | |
| Risk Matrix Identify and prioritize risks by impact and controllability. Use for risk management, project planning, and strategic decision support. | |
| Rona Chart Decompose Return on Net Assets into component ratios. Use for asset efficiency analysis, capital structure review, and business model comparison. | |
| Root Cause Analysis Use logic tree approach to identify root causes of business problems. Use when diagnosing performance issues, process failures, or customer behavior patterns. | |
| Ros Rms Analysis Analyze relationship between profitability and market share. Use for competitive advantage assessment, scale economies analysis, and strategy validation. | |
| Scatter Graphs Visualize relationships between two variables. Use for correlation analysis and pattern identification. | |
| Scenario Development Develop multiple future scenarios to prepare for uncertainty. Use for long-term strategic planning, risk management, and helping organizations think about th... | |
| Sector Charts Visualize competitive positioning using sector charts. Use for market analysis and competitive strategy. | |
| Sensitivity Charts Visualize how changes in variables affect outcomes. Use for risk analysis and decision support. | |
| Share Momentum Analyze market share dynamics and momentum. Use for competitive analysis and strategic planning. |
49,101–49,150 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.