Frogeye Security Scanner MCP Server

by frogeye-ai Your server? Claim it

not responding

Frogeye Security Scanner is listed as active in the registry but did not answer our last check. It exposes 7 tools. Last commit 5 May 2026.

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Uptime history 91 days of history · worst day 0%

91 days agonow

0.0%

Uptime 24h

0 of 184 checks

Tools

read from the server

534 ms

Response time

average over 24h

Stars

last commit 5 May 2026

What the code does

We read the source, 3 d ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Reads files and sends them to the network index.js:951

    entries = fs.readdirSync(dirPath, { withFileTypes: true });

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport sse https://mcp.frogeye.ai/sse

Settings → Connectors → Add custom connector, then paste this address

https://mcp.frogeye.ai/sse

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://mcp.frogeye.ai/sse"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.frogeye.ai/sse"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "sse",
      "url": "https://mcp.frogeye.ai/sse"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 7

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

frogeye

frogeye_batch_scan

Batch scan up to 10 code snippets in a single MCP call. More efficient than 10 individual frogeye_scan calls for scanning multiple files or repos. Returns findings array with confidence scores and badge suggestions per item.

frogeye_correlate

Correlate multiple vulnerability class names found in a scan to detect compound security risks. Identifies dangerous combinations where individual findings combine into a higher-severity attack chain. No API key required.

frogeye_learn

Teach Frogeye a team-specific security rule. Writes a private, team-scoped pattern to your KB — visible only when searching with your API key. Requires authentication.

frogeye_post

Submit a new vulnerability pattern to the Frogeye knowledge graph. The pattern will be anonymized and queued for human review before being published.

frogeye_register

Claim a username for this agent. Idempotent — safe to call multiple times.

frogeye_scan

Scan a code snippet for security vulnerabilities against 24,000+ patterns. Pass your code snippet directly via the content parameter. The hosted Frogeye server cannot access your local filesystem — Claude Code should read the file content and pass it here.

frogeye_search

Search the Frogeye vulnerability knowledge graph for patterns similar to the given code snippet. Returns the top 10 matching vulnerability patterns with severity, class, and fix suggestions.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.frogeye.ai/sse	sse	answering	534 ms	7 min ago
https://mcp.frogeye.ai/mcp	streamable-http	answering	574 ms	7 min ago

Alternatives to Frogeye Security Scanner

same job, measured the same way

CodeInspectus

by synvoya

Local-first MCP security scanner and CLI for AI-generated applications.

405 installs/wk local only

Inkog

by inkog-io

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

108 installs/wk local only

SimplyScan

by simplyscan

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

8 tools answering

Vulnicheck

by andrasfe

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

local only

valvur

by maverickhq

Offline security scanning for AI-generated code: seven open-source scanners in one MCP server.

445 installs/wk local only

XploitScan

by bgage72590

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

163 installs/wk local only

Black Duck Security Scanner

by blackduck

AI-powered security scanning using Black Duck Signal for vulnerability detection.

228 installs/wk local only

Skill Audit MCP

by eltociear

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

11 tools answering

Frogeye Security Scanner — questions

Answers built from our own checks of this server.

What can Frogeye Security Scanner do?

It exposes 7 tools, read directly from the server on our last check. Among them: frogeye_batch_scan, frogeye_correlate, frogeye_learn, frogeye_post, frogeye_register, frogeye_scan and 1 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Frogeye Security Scanner working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 0 of 184 checks got a reply (0.0%), average response time 534 ms. The bar chart above shows every period we have measured.

The registry lists Frogeye Security Scanner as active — why does it not respond?

The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.

How do I connect Frogeye Security Scanner?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Frogeye Security Scanner need an API key?

No. Frogeye Security Scanner completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 7 of them are readable on this page. This is what we observed, not what the docs claim.

Is Frogeye Security Scanner open source?

We cannot say either way: written in JavaScript and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.