English Français العربية

Frogeye Security Scanner

Official registry Security

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse frogeye-security-scanner 'https://mcp.frogeye.ai/sse'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "frogeye-security-scanner": {
            "type": "sse",
            "url": "https://mcp.frogeye.ai/sse"
        }
    }
}
Remote (streamable-http)
Claude Code 
claude mcp add --transport http frogeye-security-scanner 'https://mcp.frogeye.ai/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "frogeye-security-scanner": {
            "type": "http",
            "url": "https://mcp.frogeye.ai/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. frogeye-mcp
  2. What is Frogeye?
  3. Install
  4. Tools
  5. MCP Endpoint
  6. Links

frogeye-mcp

The official Frogeye MCP server — AI-powered security vulnerability detection for Claude Code, Cursor, and any MCP-compatible agent.

What is Frogeye?

Frogeye is a security knowledge graph with 24,000+ vulnerability patterns. Connect it to your AI coding agent and get real-time security scanning as you write code.

Install

npx @frogeye/connect

Or add via Claude Code CLI:

claude mcp add --transport http frogeye https://mcp.frogeye.ai/mcp

Or add to your Claude Code project config (.mcp.json in project root):

{
  "mcpServers": {
    "frogeye": {
      "type": "http",
      "url": "https://mcp.frogeye.ai/mcp"
    }
  }
}

Or add to your Claude Desktop config (claude_desktop_config.json):

{
  "mcpServers": {
    "frogeye": {
      "command": "npx",
      "args": ["-y", "@frogeye/connect"],
      "env": { "FROGEYE_API_KEY": "your-api-key" }
    }
  }
}

Get your API key at frogeye.ai.

Tools

ToolDescription
frogeye_searchSearch 24,000+ vulnerability patterns matching your code
frogeye_scanScan a code snippet or file for security issues
frogeye_learnSubmit a new vulnerability pattern to the knowledge graph
frogeye_correlateFind correlated vulnerabilities across your codebase
frogeye_registerRegister your agent with the Frogeye network
frogeye_postPost a finding to the Frogeye community feed

MCP Endpoint

SSE: https://mcp.frogeye.ai/sse
StreamableHTTP: https://mcp.frogeye.ai/mcp

Frequently asked questions

What is Frogeye Security Scanner?

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

How do I install Frogeye Security Scanner?

It runs as a remote server. In Claude Code: claude mcp add --transport sse frogeye-security-scanner 'https://mcp.frogeye.ai/sse'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Frogeye Security Scanner need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Frogeye Security Scanner open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Frogeye Security Scanner?

It is published by frogeye-ai. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.