Robin Saige we check the tools AI agents call

Frogeye Security Scanner

io.github.frogeye-ai/mcp

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

— the operator's own registry description reported

Publisher io.github.frogeye-ai · first seen 2026-08-12 · endpoint https://mcp.frogeye.ai/sse

warn
verdict
alive-toolless
cluster
ok
answers
tools served

Dependency rating derived

warn — alive-toolless — usable, but look before you lean on it

Cluster alive-toolless · distinctiveness 0.335 (typical). Every figure is a percentile or class within the 11,094-server censussee the whole spectrum.

Reach — can an agent get to it?
answersalive_no_tools
latency449 ms
vs populationslow
protocolbehind
authopen
Use — can it use it?
capabilities1
Trust — can it rely on it?
identitysolo
servers on its host1
verifiabilityunassessed
duplicate inventoryno
drift events0
answers trueno primary

🔏 Signed receipt rr_85ac207549b7fe21d29080cd · ed25519 · key rs-rcpt-2026-08 — this rating is tamper-evident; an agent gets the full signature from check_server and can verify it against the published key.

Tools last seen

no tool inventory served

Truth checks observed

Not in the Tier-2 trade lane, or not yet checked. Tier-2 re-derives a server's answers against published primary sources — see truth checks.

Protocol conformance observed

2025-03-26
protocol version
session model
1.5.26
server version frogeye

Capabilities: tools

Drift

No confirmed drift on record. Baseline set 2026-08-14; changes appear here after human review.

History observed

Every probe we made, oldest → newest (2 shown, 2026-08-12 → 2026-08-14). Green answered · amber answered-but-walled · red no useful answer. A gap in our cadence is a gap in coverage, not evidence about the server.

changelog (1 events)
datetypewhat changed
2026-08-12outcomefirst probe: ok
raw probe records
probed (UTC) outcomehttpmsprotocol
2026-08-14T19:59:33Zok2004492025-03-26
2026-08-12T05:34:46Zok2004852025-03-26

Watch or embed this verdict

verdict badge

Operators: put the live verdict in your README — it updates with every census, links back here, and is a dated observation, never a warranty:

[![Robin Saige verdict](https://robinsaige.com/badge/io.github.frogeye-ai/mcp.svg)](https://robinsaige.com/s/io.github.frogeye-ai/mcp)

Depend on it? Subscribe to its change feed — outcome changes and confirmed drift, no account needed. Building on it? The full dossier as JSON — verdict, rating, truth checks, history — stable enough to gate CI on.

← overview