Frogeye Security Scanner

Created By
frogeye-aia month ago
Zero-config security scanner for AI-generated apps. 25K+ vulnerability patterns. Works with Claude Code, Cursor and any MCP-compatible agent.
Overview

What is Frogeye?

Frogeye is a security knowledge graph for AI-generated apps. It catches the vulnerabilities that AI coding agents introduce before like SQL injection, broken auth, exposed credentials, XSS.

Why it exists

AI coding tools (Lovable, Bolt, Cursor, Claude Code) generate vulnerable code by default. Supabase RLS disabled, raw SQL queries, hardcoded secrets — 70%+ of AI-generated apps have critical vulnerabilities. Frogeye is the security layer that should have been built in.

How it works

  1. Install via npx @frogeye/connect
  2. Your MCP-compatible agent (Claude Code, Cursor) automatically queries Frogeye during code review
  3. Get real-time vulnerability detection against 25,000+ patterns from real production codebases

Tools

  • frogeye_search — semantic search across 25K+ vulnerability patterns
  • frogeye_scan — scan code snippets for known vulnerabilities
  • frogeye_learn — contribute patterns back to the knowledge graph
  • frogeye_correlate — find related vulnerability patterns across your codebase
  • frogeye_register — register your agent identity

Get started

Get your API key at frogeye.ai — free tier includes 25 queries/day, no credit card required.

Server Config

{
  "mcpServers": {
    "frogeye": {
      "command": "npx",
      "args": [
        "-y",
        "@frogeye/connect"
      ],
      "env": {
        "FROGEYE_API_KEY": "<YOUR_KEY>"
      }
    }
  }
}
Project Info
Created At
a month ago
Updated At
a month ago
Author Name
frogeye-ai
Star
-
Language
-
License
-
Category

Recommend Servers

View All
Mnemom

14 hours ago
//beforeyouship — LLM Cost Modeling From Your Editor
@Indiegoing

Query realistic LLM cost models without leaving your editor. beforeyouship models the **true monthly cost** of an LLM app architecture — retries, prompt caching, batch discounts, infra overhead, and 3×/10× growth — across GPT-5.x, Claude, Gemini, DeepSeek, and more. Not a token calculator: a planning tool for the design phase, before you commit to a stack. **No API key needed to try it** — demo mode covers the six free-tier models. A Pro key from [beforeyouship.dev](https://beforeyouship.dev) unlocks the full 18-model catalog. ## What you can ask - "How much will a RAG chatbot cost at 10,000 requests/day?" - "Compare Claude Haiku vs Gemini Flash pricing for my workload" - "What's the cheapest model for a multi-step agent at scale?" - "Show me current per-token prices for Anthropic models" ## Tools ### `estimate_cost` Full cost model for an architecture at a given usage level. Returns Naive / Realistic / Worst Case monthly cost per model, 3×/10× growth scenarios, and an opinionated recommendation with reasoning. ### `get_model_prices` Current per-1M-token pricing — input, output, cached input, batch — with context windows and staleness metadata. ### `list_archetypes` Seven preset architecture patterns (simple chatbot, chatbot with history, RAG pipeline, multi-model router, coding assistant, document processor, multi-step agent) used as starting points for estimates. ## Setup **Claude Code:** ​```bash claude mcp add --transport http beforeyouship https://beforeyouship.dev/api/mcp ​``` **Cursor / other clients** — add a remote server: ​```json { "mcpServers": { "beforeyouship": { "type": "streamable-http", "url": "https://beforeyouship.dev/api/mcp" } } } ​``` Add an `Authorization: Bearer bys_...` header with a Pro key for the full catalog. ## Try it > Estimate the monthly cost of a RAG pipeline at 10,000 requests/day

13 hours ago
Docwand

13 hours ago