mcpbeat

Frogeye Security Scanner MCP Server

io.github.frogeye-ai/mcp
not responding

Frogeye Security Scanner is listed as active in the registry but did not answer our last check. It exposes 7 tools. Last commit 5 May 2026.

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Uptime history 39 hours of history · worst hour 0%
39 hours agonow
0.0%
Uptime 24h
0 of 182 checks
7
Tools
read from the server
347 ms
Response time
average over 24h
0
Stars
last commit 5 May 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.

run in your terminal
claude mcp add mcp --transport http https://mcp.frogeye.ai/sse
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.frogeye.ai/sse"
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp]
url = "https://mcp.frogeye.ai/sse"
.cursor/mcp.json
{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.frogeye.ai/sse"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.frogeye.ai/sse"
    }
  }
}

Available tools 7

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

frogeye
frogeye_batch_scan
Batch scan up to 10 code snippets in a single MCP call. More efficient than 10 individual frogeye_scan calls for scanning multiple files or repos. Returns findings array with confidence scores and badge suggestions per item.
frogeye_correlate
Correlate multiple vulnerability class names found in a scan to detect compound security risks. Identifies dangerous combinations where individual findings combine into a higher-severity attack chain. No API key required.
frogeye_learn
Teach Frogeye a team-specific security rule. Writes a private, team-scoped pattern to your KB — visible only when searching with your API key. Requires authentication.
frogeye_post
Submit a new vulnerability pattern to the Frogeye knowledge graph. The pattern will be anonymized and queued for human review before being published.
frogeye_register
Claim a username for this agent. Idempotent — safe to call multiple times.
frogeye_scan
Scan a code snippet for security vulnerabilities against 24,000+ patterns. Pass your code snippet directly via the content parameter. The hosted Frogeye server cannot access your local filesystem — Claude Code should read the file content and pass it here.
frogeye_search
Search the Frogeye vulnerability knowledge graph for patterns similar to the given code snippet. Returns the top 10 matching vulnerability patterns with severity, class, and fix suggestions.

Endpoints

URLTransportStateLatencyChecked
https://mcp.frogeye.ai/sse sse answering 347 ms 4 min ago
https://mcp.frogeye.ai/mcp streamable-http answering 339 ms 4 min ago

Frogeye Security Scanner — questions

Answers built from our own checks of this server.

What can Frogeye Security Scanner do?
It exposes 7 tools, read directly from the server on our last check. Among them: frogeye_batch_scan, frogeye_correlate, frogeye_learn, frogeye_post, frogeye_register, frogeye_scan and 1 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Frogeye Security Scanner working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 0 of 182 checks got a reply (0.0%), average response time 347 ms. The bar chart above shows every period we have measured.
The registry lists Frogeye Security Scanner as active — why does it not respond?
The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.
How do I connect Frogeye Security Scanner?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Frogeye Security Scanner need an API key?
No. Frogeye Security Scanner completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 7 of them are readable on this page. This is what we observed, not what the docs claim.
Is Frogeye Security Scanner open source?
Yes — written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.