Frame MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 483 installs a week from pypi. Last commit 27 Oct 2026.
MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic.
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
proc = subprocess.run(
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add frame-mcp -- uvx frame-mcp
{
"mcpServers": {
"frame-mcp": {
"command": "uvx",
"args": [
"frame-mcp"
]
}
}
}
[mcp_servers.frame-mcp]
command = "uvx"
args = ["frame-mcp"]
{
"mcpServers": {
"frame-mcp": {
"command": "uvx",
"args": [
"frame-mcp"
]
}
}
}
{
"servers": {
"frame-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"frame-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
FRAME_LLM_BASE_URL (Base URL of an OpenAI-compatible LLM endpoint for the AI detection, triage, fix and exploit features), FRAME_LLM_API_KEY (API key for the LLM endpoint, when the endpoint requires one), FRAME_LLM_MODEL (Model name to request from the LLM endpoint), FRAME_LLM_REPO_ROOT (Repository root the LLM layer resolves relative paths against).
Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.
Security scanner and runtime proxy for MCP servers.
Security scanner for MCP servers - detects tool poisoning and injection
Security scanner for AI agent skills and MCP servers
Scan for prompt injection, secrets, PII, and vet MCP servers before installation
Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)
MCP server for web application security scanning
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Answers built from our own checks of this server.