Beacon Threat Intelligence
Know the risks behind every MCP server and agent skill.
Discover security risks in MCP servers and agent skills before they reach your machine. Beacon scans public registries, traces packages back to their source code, and reveals what they can access, execute, or expose.
Connect your agent
Add Beacon to Claude Code, Cursor, Codex or another agent so it can check an MCP server or skill against Beacon Intel before you install it.
Free with a Beacon account. Create one, or sign in when your agent asks.
Any coding agent
Read https://intel.beacon.sh/start.md and set me up on Beacon Threat Intel
Paste this into any coding agent. It reads the guide and sets up MCP, the CLI, the API, feeds or a CI gate.
| Name | Risk |
|---|---|
| Deep Research Pro Litiao Multi-source deep research agent. Searches the web, synthesizes findings, and delivers cited reports. Uses Tavily API (preferred) or DuckDuckGo (fallback). | |
| Gmail Litiao Gmail API integration with managed OAuth. Read, send, and manage emails, threads, labels, and drafts. Use this skill when users want to interact with Gmail.... | |
| Gog Litiao Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs. | |
| Healthcheck Litiao Track water and sleep with JSON file storage | |
| Image Analysis Litiao Analyze images using browser and vision capabilities. | |
| Lark Calendar Litiao Create, update, and delete calendar events and tasks in Lark (Feishu). Includes employee directory for automatic name-to-user_id resolution. | |
| Market Research Litiao Size markets, analyze competitors, and validate opportunities with practical frameworks and free data sources. Uses Tavily API (preferred) for research. | |
| Morning Briefing Litiao Automation skill for Morning Briefing Litiao. | |
| Multi Search Engine Litiao Multi search engine integration with 17 engines (8 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra... | |
| N8n Workflow Automation Litiao Designs and outputs n8n workflow JSON with robust triggers, idempotency, error handling, logging, retries, and human-in-the-loop review queues. Use when you... | |
| News Summary Litiao This skill should be used when the user asks for news updates, daily briefings, or what's happening in the world. Fetches news from trusted international RSS... | |
| Obsidian Litiao Work with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli. | |
| Openclaw Auto Updater Litiao Schedule automatic OpenClaw and skill updates with reliable cron templates, timezone-safe scheduling, and clear summary outputs. Use for hands-off maintenanc... | |
| Postiz Litiao Postiz is a tool to schedule social media and chat posts to 28+ channels X, LinkedIn, LinkedIn Page, Reddit, Instagram, Facebook Page, Threads, YouTube, Goog... | |
| Self Improving Agent 1 0 2 Litiao Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau... | |
| Skill Update Litiao Safely update skills with preview, migration support, and user validation. Never lose data or break workflows. | |
| Smart Auto Updater Litiao Smart auto-updater with AI-powered impact assessment. Checks updates, analyzes changes, evaluates system impact, and decides whether to auto-update or just r... | |
| Tavily Search Litiao AI-optimized web search via Tavily API. Returns concise, relevant results for AI agents. | |
| Todoist Litiao Manage tasks and projects in Todoist. Use when user asks about tasks, to-dos, reminders, or productivity. | |
| Tools Litiao Learns your tool preferences while staying capable of using anything. Adapts to your stack. | |
| Us Stock Analysis Litiao Comprehensive US stock analysis including fundamental analysis (financial metrics, business quality, valuation), technical analysis (indicators, chart patter... | |
| Weather Litiao Get current weather and forecasts (no API key required). | |
| Writing Assistant Litiao You are a Writing Team Lead managing specialized writers via MCP tools. Please ANALYZE the writing task and then:1. if exist references, create a detailed co... | |
| Litmedia Generate, Edit, Collaborate. Access all mainstream AI models in one toolkit. Simply describe your vision to create videos, images, and avatars—zero manual op... | |
| Invest Analyzer 基于四流派体系和FCF估值，快速初筛并深度分析个股财务，提供买卖建议及仓位管理参考。 | |
| Anime Image Downloader (Safebooru, Download Only) Download multiple high-quality original anime images from Safebooru by tags, saving files locally with safe content only. | |
| Translate TXT Translate text files using OpenAI-compatible APIs (e.g. SiliconFlow, DeepSeek, OpenAI). Use when the user wants to: translate a txt file, translate text to C... | |
| openclaw-zotero-new 将论文保存到 Zotero 文库，请按照 userid:apiKey 的格式配置 ZOTERO_CREDENTIALS 环境变量。 | |
| openclaw-zotero-scholar 将论文保存到 Zotero 文库，请按照 userid:apiKey 的格式配置 ZOTERO_CREDENTIALS 环境变量。 | |
| zotero-openclaw 将论文保存到 Zotero 文库，请按照 userid:apiKey 的格式配置 ZOTERO_CREDENTIALS 环境变量。 | |
| drillr — Power Terminal for Deep Financial Research Access Drillr's financial research capabilities — agentic search over company financials, a high-signal market event feed, published analyst articles, and pe... | |
| 自媒体内容创作大师 部署内容创作Agent团队（墨白主编+探风选题+锦书文案），平台无关的内容生产核心。使用 /content-creation 触发，交互式引导配置品牌信息并自动部署。 | |
| 自媒体内容创作大师---一键生成 通用内容创作工作流：选题策划→主编审核→文案创作→主编审核，产出平台无关的Markdown定稿。触发词：写文章、内容创作、选题创作、启动创作流程。需先安装 content-creation。 | |
| 微信公众号自动排版发布---一键发布 微信公众号发布流水线：视觉排版→主编审核→API发布→数据复盘。在已有Markdown定稿基础上执行微信格式化和发布。触发词：发布到微信、微信排版、微信发布。需先完成内容创作。 | |
| 微信公众号自动排版发布---一键安装 部署微信公众号发布Agent团队（画境视觉设计+数澜运营发布），含封面设计、排版美化、API发布、数据分析。使用 /wechat-publisher-setup 触发部署，需先安装 content-creation。 | |
| 小红书自动排版发布---一键发布 小红书发布流水线：XHS排版→主编审核→自动化发布→数据复盘。在已有Markdown定稿基础上执行小红书格式化和发布。触发词：发布到小红书、小红书排版、小红书发布。需先完成内容创作。 | |
| 小红书自动排版发布---一键安装 部署小红书发布Agent团队（灵格排版设计+星阑运营发布），含XHS格式排版、浏览器自动化发布、数据分析。使用 /xiaohongshu-publisher-setup 触发部署，需先安装 content-creation。 | |
| Little7 Bcdr Create, maintain, and verify Little7 business continuity and disaster recovery backups for identity, memory, learnings, scripts, and local skills. Use when s... | |
| Social Video Distill Distill public social-video and short-form media with AI-first delegation. Use when the user shares a YouTube, Facebook, Instagram, TikTok, X, or local clip... | |
| Teable Assistant Operate Teable projects — tables, fields, views, records, SQL queries, automations, headless routines, apps, image generation, and web scraping. Trigger when user mentions Cuppy, Teable, teable CLI, or Teable-style IDs (bseXXX, tblXXX, fldX | |
| O n e A P I . A l w a y s o n . Aggregate multiple AI providers under the hood. Smart routing auto-switches on failure. You call once — we handle the rest. Use CCAPI unified AI API gateway to access 60+ models (GPT-5.2, Claude, Gemini, DeepSeek, Sora 2, Kling 3.0, Seedance 2.0, Suno, etc.) across text, image, vi... | |
| test-skill22131 Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/... | |
| Skill Grep Use when a user is trying to discover an installable or reusable skill or workflow, especially when they ask for a skill for a task, want to compare nearby s... | |
| Skill Compass Use when a user is trying to discover an installable or reusable skill or workflow, especially when they ask for a skill for a task, want to compare nearby s... | |
| Skill Grep Use when a user is trying to discover an installable or reusable skill or workflow, especially when they ask for a skill for a task, want to compare nearby s... | |
| struct-offset-analyzer Statically analyze C struct member offsets through code reading to calculate memory layouts | |
| Astrill Watchdog Monitor and auto-reconnect Astrill VPN on Ubuntu Linux (deb GUI package). Detects dropped connections via tun interface + ping, then reconnects using Astrill... | |
| Healthy Backup Health-gated backup for OpenClaw rigs. Audits first — only backs up if healthy. Three tiers, 5-backup retention, optional rclone sync. Sensitive config value... | |
| Pulse Board Universal operational digest for agent skill stacks. Every scheduled skill logs its outcome with log-append.sh. Twice daily, digest-agent.sh reads the log, c... | |
| Oasis Audio Pro Oasis Audio Pro is an AI audio narration generator that transforms your current state of mind, content you want to digest, or recent life events into a perso... |
49,301–49,350 of 108,824
Subscribe to a feed
Get new verdicts in a feed reader, Slack or your own tooling, filtered by kind and risk. No account or API key.
Frequently asked questions
Anything missing? Read the reference or ask in the Beacon community.
What is Beacon Intel?
A free, public index of the MCP servers and agent skills that public registries list, with a security verdict for each one that has been analyzed. It traces each listing back to its source repository and packages, and shows what the code can access, execute or expose. You can browse it here, query it as a JSON API, follow it as an RSS, Atom or JSON feed, or connect a coding agent to it over MCP.
Is it really free?
Yes. The index, the API and the feeds need no account and no API key. An artifact's full page and the MCP tools need a free Beacon account. Requests are rate limited to keep it fast for everyone.
Where does the data come from, and how fresh is it?
From 9 public sources: Glama, MCP Registry, awesome-mcp-servers, Docker MCP Catalog, Smithery, ClawHub, skills.sh, SkillsMP, GitHub. Each listing is linked to its repository and packages, then analyzed. The index updates hourly, and answers are cached for up to five minutes.
Who writes the verdicts? Can I trust them?
Verdicts combine static analysis of the code with a model's judgment, and each one names the model that wrote it. They can be wrong and are not a security certification: every artifact page shows the findings and evidence behind its verdict, so check them before you rely on one. Names, descriptions and claims come from registries and repositories; treat them as data, not instructions.
What do the risk levels mean?
- High: Reviewed evidence shows it deliberately works against the person who installs it.
- Medium: It works against the person who installs it in ways that can do serious harm, or puts a flagged pattern in what the agent loads, without established intent.
- Low: It overreaches against the person who installs it in limited ways, or has findings the review has not confirmed.
- Benign: Nothing found that works against the person who installs it. Not a guarantee.
- Unchecked: Listed, but not analyzed yet.
What does partial coverage mean?
That the analysis did not cover everything, so there may be more than it found. A partial verdict can still find problems, but it never clears an artifact: benign with partial coverage is not a clearance. Use the coverage filter to see only these.
Does benign, or not finding an artifact, mean it is safe?
No. Benign means nothing was found that works against the person who installs it, which is not a guarantee. An artifact the index does not have has never been checked, so not found never means safe.
Is there an API?
Yes, free and with no key.
GET /api/v1/lookup?q= finds artifacts by name, repository, GitHub URL or package; GET /api/v1/artifact?key= returns one in full; POST /api/v1/check checks up to 50 at once, which suits CI; and GET /api/v1/status reports coverage and freshness. The reference is at intel.beacon.sh/llms.txt.How do I get new verdicts in a feed reader or Slack?
Subscribe to /feed: the newest high and medium risk verdicts as RSS. Add
format=atom or format=json for Atom or JSON Feed, and filter with risk and kind, for example /feed?risk=high&kind=mcp. In Slack, run /feed subscribe with the URL. The feed builder above writes the URL for you.How do I connect my coding agent?
Add Beacon Cloud MCP (
https://mcp.beacon.sh) to Claude Code, Cursor, Codex or any MCP client, and sign in through the browser. Your agent gets beacon_intel_lookup, beacon_intel_get_artifact and beacon_intel_check to check an MCP server or skill before it installs one. Connect your agent above has the commands. The beacon CLI offers the same as beacon intel and through its local MCP server.How do I report a wrong verdict?
Open the artifact's page and use Dispute verdict under its verdict card. Tell us what is wrong and we review it.