Froglet
NPM · FROGLET-MCP · SCANNED AUG 3
Run local Froglet verifiable compute, signed receipts, settlement, and service publication.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security86
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 33 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability14
- AI-judged instruction clarity (poor).Fail
- Context-footprint check failed: tool/resource definitions use about 2106 tokens (~2106/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage92
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 76% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · froglet-mcp
claude mcp add armanas-froglet -- npx -y froglet-mcp
codex mcp add armanas-froglet -- npx -y froglet-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"armanas-froglet": {
"type": "local",
"command": [
"npx",
"-y",
"froglet-mcp"
],
"enabled": true
}
}
} openclaw mcp add armanas-froglet --command npx --arg -y --arg froglet-mcp
mcp_servers:
armanas-froglet:
command: "npx"
args: ["-y", "froglet-mcp"] {
"mcpServers": {
"armanas-froglet": {
"command": "npx",
"args": [
"-y",
"froglet-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Aug 26 +40
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Security disclosure: fail → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → poor ▲ functional
- First check of Schema quality: unverified functional
- Licence: Apache-2.0 functional
- 1 Aug 26 −6
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 27 Jul 26 39
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 94 packages
94 packages in the resolved dependency tree · 94 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
froglet ~2,106
Authoritative Froglet MCP tool for a local or self-hosted Froglet node. Use exact Froglet actions instead of guessing. Start with status to verify provider/runtime reachability. For local services use list_local_services or get_local_service. For marketplace-backed remote services use discover_services or get_service. For named service execution use invoke_service and prefer provider_id from discovery results; provider_url is an optional override. Use run_compute for open-ended compute through the runtime deal flow. For ONE-CALL agent-grade publishing (user says "publish a Froglet service that does X") use marketplace_publish — it shells out to `froglet-node publish` which builds, signs, registers, and verifies in one call; pass {name, source_inline, hosting:{kind:'tor'|'local'|'self'}}. publish_artifact still exists for the lower-level path of publishing a pre-built artifact to a local provider only. For settlement visibility use get_wallet_balance (current funds snapshot), list_settlement_activity (recent deals), get_payment_intent (per-deal intent), or get_invoice_bundle (per-deal bundle). For the marketplace: marketplace_register (self-register a public provider), marketplace_search (find providers + offers), marketplace_provider (one provider's details), marketplace_receipts (one provider's receipts), marketplace_file_complaint (file an arbiter complaint), marketplace_get_complaint (read complaint status). When the user asks whether or how to install Froglet locally, call plan_install first to collect choices; once the profile is confirmed, call get_install_guide to retrieve the canonical shell commands and run them through your host agent's shell — do NOT route install commands through the Froglet runtime. After install, call plan_use_case before implementing consumer, provider, evidence, payments, batch, or GPU workflows so unsupported boundaries are named before execution. The no-install public demo lives at https://froglet.dev/llms.txt and is intentionally…
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Exact Froglet action name. Do not invent actions. Use status first to verify local provider/runtime reachability. Use list_local_services for local listings, discover_services for remote marketplace… |
| artifact_path | string | — | Daemon-local artifact path for publish_artifact. Only use when the provider is configured with FROGLET_PROVIDER_ARTIFACT_ROOT and the path is known to canonicalize under that root. |
| capabilities | array | — | Optional provider-required capability strings for publish_artifact, for example compute.gpu. GPU capabilities require a GPU-enabled provider. |
| claim_id | string | — | Domain claim id returned by marketplace_domain_claim. |
| complainant_id | string | — | Optional requester or complainant id for marketplace_file_complaint. |
| complaint_id | string | — | Complaint id returned by marketplace_file_complaint. |
| contract_version | string | — | Contract version for the execution payload. |
| cursor | string | — | Opaque pagination cursor for marketplace_search / marketplace_receipts. |
| deal_id | string | — | Target deal id. Required for get_payment_intent and get_invoice_bundle. |
| entrypoint | string | — | Entrypoint identifier or path for the workload. |
| entrypoint_kind | string | — | Entrypoint shape for the workload, for example handler, script, or builtin. |
| evidence | — | — | Optional JSON object or array of evidence for marketplace_file_complaint. |
| footprint | string | — | Install footprint for plan_install/get_install_guide. docker is the full local provider+runtime stack; binary installs only froglet-node; source builds from the cloned repo. |
| hosting | object | — | Hosting backend for marketplace_publish. kind ∈ {local|tor|self}. local = private dev, tor = auto hidden service (requires daemon FROGLET_NETWORK_MODE=tor), self = user-supplied URL. |
| include_inactive | boolean | — | — |
| inline_source | string | — | Optional inline source for a compute request. Use this when you want to run explicit source text, typically for runtime=python package_kind=inline_source. |
| input | — | — | — |
| input_schema | — | — | — |
| lightning_mode | string | — | Lightning mode for plan_install/get_install_guide. mock requires no wallet; lnd_rest requires an LND REST URL and macaroon path. |
| limit | integer | — | — |
| marketplace_arbiter_url | string | — | Optional marketplace arbiter URL for marketplace_file_complaint / marketplace_get_complaint. |
| marketplace_provider_id | string | — | Provider id the marketplace_* actions target. Distinct from `provider_id`, which routes the invoke_service call itself. Required for marketplace_file_complaint. |
| marketplace_url | string | — | Marketplace URL for marketplace_publish (and for marketplace_register / domain_claim). Defaults to https://marketplace.froglet.dev. |
| max_price_sats | integer | — | Upper price bound in sats for marketplace_search results. |
| mode | string | — | — |
| mounts | — | — | Optional mount handles or bindings required by the workload. Keep this as the provider-defined mount payload. |
| name | string | — | Service name (project_id + service_id + scaffold directory). Lowercase ASCII letters, digits, or interior hyphens. Required for marketplace_publish. |
| network_mode | string | — | Network mode for local/self-hosted Froglet. Keep clearnet/loopback first; use tor or dual only after local health checks pass. |
| oci_digest | string | — | — |
| oci_reference | string | — | — |
| offer_id | string | — | — |
| offer_kind | string | — | Offer-kind filter for marketplace_search (e.g. "named.v1"). |
| output_schema | — | — | — |
| package_kind | string | — | Execution package kind for the workload, for example inline_module, inline_source, or oci_image. |
| payment_rail | string | — | Explicit payment rail for plan_install/get_install_guide. Required before commands are generated; use none for the first free demo service. |
| poll_interval_secs | number | — | — |
| price_sats | integer | — | — |
| provider_id | string | — | Target provider node ID. Preferred for marketplace-backed get_service, invoke_service, and run_compute calls. |
| provider_url | string | — | Optional provider base URL override. Must be public https except marketplace_register may use a Tor v3 http://*.onion URL with registration_transport=tor. Usually discovered automatically from provid… |
| public_ip | string | — | Public IPv4 or IPv6 address for a Froglet-managed provider subdomain claim. |
| publication_state | string | — | — |
| query | string | — | — |
| reason | string | — | Human-readable reason for marketplace_file_complaint. |
| receipt_hash | string | — | Optional receipt artifact hash for marketplace_file_complaint. |
| registration_transport | string | — | Transport for marketplace_register. Defaults from provider_url; use tor only for http://*.onion provider registration. |
| requested_slug | string | — | Optional providers.froglet.dev slug for marketplace_domain_claim. |
| result_json | — | — | Optional static JSON result. Used with publish_artifact for constant-return services. |
| role | string | — | User intent for plan_install/get_install_guide. Docker defaults to both provider and runtime; split roles are a direct froglet-node concern. |
| runtime | string | — | Execution runtime for the service or compute request, for example wasm, python, or container. |
| service_id | string | — | Service identifier. Required for publish_artifact, get_local_service, get_service, and invoke_service. |
| settlement | object | — | Settlement method for marketplace_publish. Supported: 'none' (free), 'lightning' (hold-invoice escrow, settled by the node's Lightning wallet; requires Lightning backend + price.currency='sat'), or '… |
| signing_message | string | — | Signing message returned by marketplace_domain_claim; marketplace_domain_complete signs it with the local provider identity. |
| source_inline | string | — | Python source code (full handler.py contents defining handler(event, context)) for marketplace_publish. Required when package_kind defaults to inline_source (the v1A only supported shape). |
| starter | string | — | Optional compact JSON example input for publish_artifact; example only, not a stronger contract than input_schema. |
| status | string | — | Status filter for marketplace_receipts (e.g. "succeeded"). |
| summary | string | — | Descriptive metadata for publish_artifact. |
| target_agent | string | — | Agent target for plan_install/get_install_guide. Defaults to claude-code; use manual when the user will configure MCP themselves. |
| task_id | string | — | — |
| template | string | — | Optional publish_artifact template. demo.add publishes a free local Python add service for first-run verification. |
| timeout_secs | integer | — | — |
| use_case | string | — | The user's first intended Froglet use case after install, used by plan_install to choose a post-install playbook. |
| wasm_module_hex | string | — | Optional inline Wasm module bytes in hex for direct inline Wasm compute or publish_artifact. Prefer inline bytes or inline_source for agent-driven publication. |
| workload_profile | string | — | Optional profile for plan_use_case. If omitted, Froglet infers it from use_case. |
No output schema declared.
No examples provided.