sseupdated 4mo ago
The official Frogeye MCP server — AI-powered security vulnerability detection for Claude Code, Cursor, and any MCP-compatible agent.
What can you do with Frogeye Security Scanner?
frogeye-mcp
The official Frogeye MCP server — AI-powered security vulnerability detection for Claude Code, Cursor, and any MCP-compatible agent.
What is Frogeye?
Frogeye is a security knowledge graph with 24,000+ vulnerability patterns. Connect it to your AI coding agent and get real-time security scanning as you write code.
Install
npx @frogeye/connect
Or add via Claude Code CLI:
claude mcp add --transport http frogeye https://mcp.frogeye.ai/mcp
Or add to your Claude Code project config (.mcp.json in project root):
{
"mcpServers": {
"frogeye": {
"type": "http",
"url": "https://mcp.frogeye.ai/mcp"
}
}
}
Or add to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"frogeye": {
"command": "npx",
"args": ["-y", "@frogeye/connect"],
"env": { "FROGEYE_API_KEY": "your-api-key" }
}
}
}
Get your API key at frogeye.ai.
Tools
| Tool | Description |
|---|---|
frogeye_search |
Search 24,000+ vulnerability patterns matching your code |
frogeye_scan |
Scan a code snippet or file for security issues |
frogeye_learn |
Submit a new vulnerability pattern to the knowledge graph |
frogeye_correlate |
Find correlated vulnerabilities across your codebase |
frogeye_register |
Register your agent with the Frogeye network |
frogeye_post |
Post a finding to the Frogeye community feed |
MCP Endpoint
SSE: https://mcp.frogeye.ai/sse
StreamableHTTP: https://mcp.frogeye.ai/mcp
Links
- frogeye.ai — Dashboard, API keys, knowledge graph
- npm: @frogeye/connect — CLI installer
- Health check — Service status
Install
Add Frogeye Security Scanner to your client. Pick the one you use.
claude mcp add --transport sse frogeye-security-scanner https://mcp.frogeye.ai/ssecodex mcp add frogeye-security-scanner --url https://mcp.frogeye.ai/sse{
"mcpServers": {
"frogeye-security-scanner": {
"url": "https://mcp.frogeye.ai/sse"
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
{
"servers": {
"frogeye-security-scanner": {
"type": "sse",
"url": "https://mcp.frogeye.ai/sse"
}
}
}Add to `.vscode/mcp.json` in your workspace.
{
"mcpServers": {
"frogeye-security-scanner": {
"url": "https://mcp.frogeye.ai/sse"
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"frogeye-security-scanner": {
"serverUrl": "https://mcp.frogeye.ai/sse"
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
6 tools
Frogeye Security Scanner exposes 6 tools to a connected agent.
- frogeye_search
- Search 24,000+ vulnerability patterns matching your code
- frogeye_scan
- Scan a code snippet or file for security issues
- frogeye_learn
- Submit a new vulnerability pattern to the knowledge graph
- frogeye_correlate
- Find correlated vulnerabilities across your codebase
- frogeye_register
- Register your agent with the Frogeye network
- frogeye_post
- Post a finding to the Frogeye community feed
Score
59 / 100
Adequate
- Documentation22/25
- Maintenance13/25
- Trust6/20
- Capability6/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 119 days ago
- Has a release history
- Repository is not archived
- No licence detected
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 6 tool(s) documented
- Provides prompt templates
- Provides resources
- 6 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 1.5.18Latest | May 5, 2026 |