Log inSubmit server
Frogeye Security Scanner logo

Frogeye Security Scanner

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Frogeye Security Scanner

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "frogeye-security-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@frogeye/connect"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y @frogeye/connect

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked Today.

Overview

Tools6

What Frogeye Security Scanner lets your agent do. Expand a tool for its parameters.

Self-reported~96 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

8/8 checks healthy over the last 38d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 11d ago via OSV.dev · @frogeye/connect (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads21Package downloads in the last 30 days.
Last commit6mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Tools exposed6Callable tools this server registers over MCP.

From the project README

frogeye-mcp

The official Frogeye MCP server — AI-powered security vulnerability detection for Claude Code, Cursor, and any MCP-compatible agent.

What is Frogeye?

Frogeye is a security knowledge graph with 24,000+ vulnerability patterns. Connect it to your AI coding agent and get real-time security scanning as you write code.

Install

Terminal
npx @frogeye/connect

Or add via Claude Code CLI:

Terminal
claude mcp add --transport http frogeye https://mcp.frogeye.ai/mcp

Or add to your Claude Code project config (.mcp.json in project root):

config.json
{
  "mcpServers": {
    "frogeye": {
      "type": "http",
      "url": "https://mcp.frogeye.ai/mcp"
    }
  }
}

Or add to your Claude Desktop config (claude_desktop_config.json):

config.json
{
  "mcpServers": {
    "frogeye": {
      "command": "npx",
      "args": ["-y", "@frogeye/connect"],
      "env": { "FROGEYE_API_KEY": "your-api-key" }
    }
  }
}

Get your API key at frogeye.ai.

Tools

ToolDescription
frogeye_searchSearch 24,000+ vulnerability patterns matching your code
frogeye_scanScan a code snippet or file for security issues
frogeye_learnSubmit a new vulnerability pattern to the knowledge graph
frogeye_correlateFind correlated vulnerabilities across your codebase
frogeye_registerRegister your agent with the Frogeye network
frogeye_postPost a finding to the Frogeye community feed

MCP Endpoint

SSE: https://mcp.frogeye.ai/sse
StreamableHTTP: https://mcp.frogeye.ai/mcp

Links

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Frogeye Security Scanner

Frogeye Security Scanner is an MCP server that provides AI-powered, real-time security vulnerability detection for Claude Code, Cursor, and other MCP-compatible agents. It connects coding workflows to a security knowledge graph containing 24,000+ vulnerability patterns, with tools to search patterns, scan code, correlate findings, learn patterns, register agents, and post findings.

Install it with `npx @frogeye/connect`, or add the HTTP MCP endpoint `https://mcp.frogeye.ai/mcp` to Claude Code or another compatible MCP client. Claude Desktop can run it through `npx -y @frogeye/connect` with the `FROGEYE_API_KEY` environment variable.

The server provides `frogeye_search` for finding vulnerability patterns, `frogeye_scan` for scanning code or files, `frogeye_learn` for submitting vulnerability patterns, `frogeye_correlate` for finding related vulnerabilities, `frogeye_register` for registering an agent, and `frogeye_post` for posting findings to the community feed.

Frogeye Security Scanner provides the StreamableHTTP endpoint `https://mcp.frogeye.ai/mcp` and the SSE endpoint `https://mcp.frogeye.ai/sse`. Service health is available at `https://mcp.frogeye.ai/healthz`.

Get a Frogeye API key from the Frogeye dashboard at https://frogeye.ai. For Claude Desktop, configure the key as the `FROGEYE_API_KEY` environment variable.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewFrogeye Security Scanner AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/frogeye-security-scanner?style=directory)](https://allmcps.com/mcp/frogeye-security-scanner)
HTML Embed
<a href="https://allmcps.com/mcp/frogeye-security-scanner"><img src="https://allmcps.com/api/badge/frogeye-security-scanner?style=directory" alt="Frogeye Security Scanner on AllMCPs" /></a>