Server data from the Official MCP Registry
MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic.
About
MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic.
Security Report
Valid MCP server (1 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.
5 files analyzed · 1 issue found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: FRAME_LLM_BASE_URL
Environment variable: FRAME_LLM_API_KEY
Environment variable: FRAME_LLM_MODEL
Environment variable: FRAME_LLM_REPO_ROOT
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-lambdasec-frame-mcp": {
"env": {
"FRAME_LLM_MODEL": "your-frame-llm-model-here",
"FRAME_LLM_API_KEY": "your-frame-llm-api-key-here",
"FRAME_LLM_BASE_URL": "your-frame-llm-base-url-here",
"FRAME_LLM_REPO_ROOT": "your-frame-llm-repo-root-here"
},
"args": [
"frame-mcp"
],
"command": "uvx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
frame-mcp
mcp-name: io.github.lambdasec/frame-mcp
An MCP server that exposes the Frame security scanner to any MCP client, so a coding agent can scan code, verify fixes, and reason about vulnerabilities over stdio.
Frame combines taint analysis with separation logic verification to find data-flow vulnerabilities (SQL injection, command injection, path traversal, and more), and checks each reported path with a solver. This package wraps the frame command line program as MCP tools. It launches frame as a subprocess with an explicit argument list, never a shell, and prefers the frame executable installed next to the running Python interpreter.
Install
Run directly with uvx (no separate install step):
uvx frame-mcp
Claude Code
claude mcp add frame -- uvx frame-mcp
Codex
Add this stanza to ~/.codex/config.toml:
[mcp_servers.frame]
command = "uvx"
args = ["frame-mcp"]
Cursor
Create .cursor/mcp.json:
{
"mcpServers": {
"frame": {
"command": "uvx",
"args": ["frame-mcp"]
}
}
}
VS Code
Create .vscode/mcp.json:
{
"servers": {
"frame": {
"type": "stdio",
"command": "uvx",
"args": ["frame-mcp"]
}
}
}
Windsurf
Add to ~/.codeium/windsurf/mcp_config.json under the mcpServers key:
{
"mcpServers": {
"frame": {
"command": "uvx",
"args": ["frame-mcp"]
}
}
}
Gemini CLI
Add to ~/.gemini/settings.json under the mcpServers key:
{
"mcpServers": {
"frame": {
"command": "uvx",
"args": ["frame-mcp"]
}
}
}
Zed
Add to Zed settings.json under context_servers:
{
"context_servers": {
"frame": {
"command": {
"path": "uvx",
"args": ["frame-mcp"]
}
}
}
}
Tools
| Tool | Purpose | Read only |
|---|---|---|
scan | Scan a file or directory for vulnerabilities and return findings as JSON. | yes |
write_baseline | Scan a path and record the findings as a baseline file. | no |
verify | Re-scan the files behind earlier findings and report whether each is fixed. | yes |
fix | Generate and verify fixes for findings. Returns a diff by default. | no |
exploit | Drive an agent to exploit a live, authorized target. | no |
packs_list | List the framework packs a scan would load. | yes |
packs_check | Validate framework pack files. | yes |
solve | Check a separation logic entailment P |- Q. | yes |
A security-review prompt chains scan (with the AI layer), verify, and an offer to fix.
AI features and environment variables
The scan tool with ai=true, along with fix and exploit, call an LLM through an OpenAI-compatible endpoint. Configure it with these environment variables in the MCP client that launches the server:
| Variable | Purpose |
|---|---|
FRAME_LLM_BASE_URL | Base URL of the LLM endpoint, for example a local server or a hosted API. |
FRAME_LLM_API_KEY | API key for the endpoint, when it requires one. |
FRAME_LLM_MODEL | Model name to request. |
FRAME_LLM_REPO_ROOT | Repository root for relative path resolution. |
These are inherited from the server process environment and forwarded to each frame subprocess. The plain scan (taint analysis plus verification) needs none of them.
Exploit authorization
The exploit tool drives an autonomous agent that sends live traffic to a target. Run it only against systems you own or are explicitly authorized to test. Unauthorized testing of systems you do not control may be illegal.
License
Apache-2.0. See LICENSE.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Lharries · Communication
Read, search, and send WhatsApp messages through your AI assistant