frogeye-mcp
OfficialThis server has a remotely hosted endpoint. Open its connector listing for connection details, authentication requirements, and setup instructions:
frogeye-mcp
The official Frogeye MCP server — AI-powered security vulnerability detection for Claude Code, Cursor, and any MCP-compatible agent.
What is Frogeye?
Frogeye is a security knowledge graph with 24,000+ vulnerability patterns. Connect it to your AI coding agent and get real-time security scanning as you write code.
Related MCP server: agent-security-scanner-mcp
Install
npx @frogeye/connectOr add via Claude Code CLI:
claude mcp add --transport http frogeye https://mcp.frogeye.ai/mcpOr add to your Claude Code project config (.mcp.json in project root):
{
"mcpServers": {
"frogeye": {
"type": "http",
"url": "https://mcp.frogeye.ai/mcp"
}
}
}Or add to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"frogeye": {
"command": "npx",
"args": ["-y", "@frogeye/connect"],
"env": { "FROGEYE_API_KEY": "your-api-key" }
}
}
}Get your API key at frogeye.ai.
Tools
Tool | Description |
| Search 24,000+ vulnerability patterns matching your code |
| Scan a code snippet or file for security issues |
| Submit a new vulnerability pattern to the knowledge graph |
| Find correlated vulnerabilities across your codebase |
| Register your agent with the Frogeye network |
| Post a finding to the Frogeye community feed |
MCP Endpoint
SSE: https://mcp.frogeye.ai/sse
StreamableHTTP: https://mcp.frogeye.ai/mcp
Links
frogeye.ai — Dashboard, API keys, knowledge graph
npm: @frogeye/connect — CLI installer
Health check — Service status
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Maintenance
Related MCP Connectors
AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.
Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Related MCP Servers
- FlicenseAqualityDmaintenanceMCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.1615 npm-
- AlicenseAqualityCmaintenanceA security scanner for AI coding agents and autonomous assistants that scans code for vulnerabilities, detects hallucinated packages, blocks prompt injection, and provides LLM-powered semantic code review via MCP or CLI.222,726 npm123MIT

CodeMindofficial
AlicenseNot gradedqualityDmaintenanceAn AI Security Guardian MCP server that provides real-time vulnerability scanning, secrets detection, and secure coding enforcement for AI-generated code in modern web frameworks.MIT
AgentAuditofficial
AlicenseAqualityDmaintenanceEnables AI agents to scan MCP servers and AI packages for vulnerabilities, prompt injection, and supply chain attacks.741 npmAGPL 3.0