# Froglet (npm · froglet-mcp)

Run local Froglet verifiable compute, signed receipts, settlement, and service publication.

- Trust score: 56/100 (low)
- Change this week: +17
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `froglet-mcp`: 56/100 (this document), [markdown](https://verifymcp.io/servers/armanas-froglet/froglet-mcp.md), [page](https://verifymcp.io/servers/armanas-froglet/froglet-mcp)

## Channel facts

- Registry: `npm`
- Package: `froglet-mcp`
- Version: `0.4.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 33 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 14/100
  - AI-judged instruction clarity (poor).
  - Context-footprint check failed: tool/resource definitions use about 2106 tokens (~2106/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 92/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 76% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add armanas-froglet -- npx -y froglet-mcp
```

### Codex

```bash
codex mcp add armanas-froglet -- npx -y froglet-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "armanas-froglet": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "froglet-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add armanas-froglet --command npx --arg -y --arg froglet-mcp
```

### Hermes

```yaml
mcp_servers:
  armanas-froglet:
    command: "npx"
    args: ["-y", "froglet-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "armanas-froglet": {
      "command": "npx",
      "args": [
        "-y",
        "froglet-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 56, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 55, +40)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Schema quality: unverified → poor
- [functional] First check of Schema quality: unverified
- [functional] Licence: Apache-2.0

### 2026-08-01 (score 15, −6)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 21, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 39)

First indexed and scored.

## MCP tools (1)

### `froglet` (~2106 tokens)

Authoritative Froglet MCP tool for a local or self-hosted Froglet node. Use exact Froglet actions instead of guessing. Start with status to verify provider/runtime reachability. For local services use list_local_services or get_local_service. For marketplace-backed remote services use discover_services or get_service. For named service execution use invoke_service and prefer provider_id from discovery results; provider_url is an optional override. Use run_compute for open-ended compute through the runtime deal flow. For ONE-CALL agent-grade publishing (user says "publish a Froglet service that does X") use marketplace_publish — it shells out to `froglet-node publish` which builds, signs, registers, and verifies in one call; pass {name, source_inline, hosting:{kind:'tor'|'local'|'self'}}. publish_artifact still exists for the lower-level path of publishing a pre-built artifact to a local provider only. For settlement visibility use get_wallet_balance (current funds snapshot), list_settlement_activity (recent deals), get_payment_intent (per-deal intent), or get_invoice_bundle (per-deal bundle). For the marketplace: marketplace_register (self-register a public provider), marketplace_search (find providers + offers), marketplace_provider (one provider's details), marketplace_receipts (one provider's receipts), marketplace_file_complaint (file an arbiter complaint), marketplace_get_complaint (read complaint status). When the user asks whether or how to install Froglet locally, call plan_install first to collect choices; once the profile is confirmed, call get_install_guide to retrieve the canonical shell commands and run them through your host agent's shell — do NOT route install commands through the Froglet runtime. After install, call plan_use_case before implementing consumer, provider, evidence, payments, batch, or GPU workflows so unsupported boundaries are named before execution. The no-install public demo lives at https://froglet.dev/llms.txt and is intentionally…

Input parameters:

- `action` (string, required): Exact Froglet action name. Do not invent actions. Use status first to verify local provider/runtime reachability. Use list_local_services for local listings, discover_services for remote marketplace…
- `artifact_path` (string): Daemon-local artifact path for publish_artifact. Only use when the provider is configured with FROGLET_PROVIDER_ARTIFACT_ROOT and the path is known to canonicalize under that root.
- `capabilities` (array): Optional provider-required capability strings for publish_artifact, for example compute.gpu. GPU capabilities require a GPU-enabled provider.
- `claim_id` (string): Domain claim id returned by marketplace_domain_claim.
- `complainant_id` (string): Optional requester or complainant id for marketplace_file_complaint.
- `complaint_id` (string): Complaint id returned by marketplace_file_complaint.
- `contract_version` (string): Contract version for the execution payload.
- `cursor` (string): Opaque pagination cursor for marketplace_search / marketplace_receipts.
- `deal_id` (string): Target deal id. Required for get_payment_intent and get_invoice_bundle.
- `entrypoint` (string): Entrypoint identifier or path for the workload.
- `entrypoint_kind` (string): Entrypoint shape for the workload, for example handler, script, or builtin.
- `evidence`: Optional JSON object or array of evidence for marketplace_file_complaint.
- `footprint` (string): Install footprint for plan_install/get_install_guide. docker is the full local provider+runtime stack; binary installs only froglet-node; source builds from the cloned repo.
- `hosting` (object): Hosting backend for marketplace_publish. kind ∈ {local|tor|self}. local = private dev, tor = auto hidden service (requires daemon FROGLET_NETWORK_MODE=tor), self = user-supplied URL.
- `include_inactive` (boolean)
- `inline_source` (string): Optional inline source for a compute request. Use this when you want to run explicit source text, typically for runtime=python package_kind=inline_source.
- `input`
- `input_schema`
- `lightning_mode` (string): Lightning mode for plan_install/get_install_guide. mock requires no wallet; lnd_rest requires an LND REST URL and macaroon path.
- `limit` (integer)
- `marketplace_arbiter_url` (string): Optional marketplace arbiter URL for marketplace_file_complaint / marketplace_get_complaint.
- `marketplace_provider_id` (string): Provider id the marketplace_* actions target. Distinct from `provider_id`, which routes the invoke_service call itself. Required for marketplace_file_complaint.
- `marketplace_url` (string): Marketplace URL for marketplace_publish (and for marketplace_register / domain_claim). Defaults to https://marketplace.froglet.dev.
- `max_price_sats` (integer): Upper price bound in sats for marketplace_search results.
- `mode` (string)
- `mounts`: Optional mount handles or bindings required by the workload. Keep this as the provider-defined mount payload.
- `name` (string): Service name (project_id + service_id + scaffold directory). Lowercase ASCII letters, digits, or interior hyphens. Required for marketplace_publish.
- `network_mode` (string): Network mode for local/self-hosted Froglet. Keep clearnet/loopback first; use tor or dual only after local health checks pass.
- `oci_digest` (string)
- `oci_reference` (string)
- `offer_id` (string)
- `offer_kind` (string): Offer-kind filter for marketplace_search (e.g. "named.v1").
- `output_schema`
- `package_kind` (string): Execution package kind for the workload, for example inline_module, inline_source, or oci_image.
- `payment_rail` (string): Explicit payment rail for plan_install/get_install_guide. Required before commands are generated; use none for the first free demo service.
- `poll_interval_secs` (number)
- `price_sats` (integer)
- `provider_id` (string): Target provider node ID. Preferred for marketplace-backed get_service, invoke_service, and run_compute calls.
- `provider_url` (string): Optional provider base URL override. Must be public https except marketplace_register may use a Tor v3 http://*.onion URL with registration_transport=tor. Usually discovered automatically from provid…
- `public_ip` (string): Public IPv4 or IPv6 address for a Froglet-managed provider subdomain claim.
- `publication_state` (string)
- `query` (string)
- `reason` (string): Human-readable reason for marketplace_file_complaint.
- `receipt_hash` (string): Optional receipt artifact hash for marketplace_file_complaint.
- `registration_transport` (string): Transport for marketplace_register. Defaults from provider_url; use tor only for http://*.onion provider registration.
- `requested_slug` (string): Optional providers.froglet.dev slug for marketplace_domain_claim.
- `result_json`: Optional static JSON result. Used with publish_artifact for constant-return services.
- `role` (string): User intent for plan_install/get_install_guide. Docker defaults to both provider and runtime; split roles are a direct froglet-node concern.
- `runtime` (string): Execution runtime for the service or compute request, for example wasm, python, or container.
- `service_id` (string): Service identifier. Required for publish_artifact, get_local_service, get_service, and invoke_service.
- `settlement` (object): Settlement method for marketplace_publish. Supported: 'none' (free), 'lightning' (hold-invoice escrow, settled by the node's Lightning wallet; requires Lightning backend + price.currency='sat'), or '…
- `signing_message` (string): Signing message returned by marketplace_domain_claim; marketplace_domain_complete signs it with the local provider identity.
- `source_inline` (string): Python source code (full handler.py contents defining handler(event, context)) for marketplace_publish. Required when package_kind defaults to inline_source (the v1A only supported shape).
- `starter` (string): Optional compact JSON example input for publish_artifact; example only, not a stronger contract than input_schema.
- `status` (string): Status filter for marketplace_receipts (e.g. "succeeded").
- `summary` (string): Descriptive metadata for publish_artifact.
- `target_agent` (string): Agent target for plan_install/get_install_guide. Defaults to claude-code; use manual when the user will configure MCP themselves.
- `task_id` (string)
- `template` (string): Optional publish_artifact template. demo.add publishes a free local Python add service for first-run verification.
- `timeout_secs` (integer)
- `use_case` (string): The user's first intended Froglet use case after install, used by plan_install to choose a post-install playbook.
- `wasm_module_hex` (string): Optional inline Wasm module bytes in hex for direct inline Wasm compute or publish_artifact. Prefer inline bytes or inline_source for agent-driven publication.
- `workload_profile` (string): Optional profile for plan_use_case. If omitted, Froglet infers it from use_case.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/armanas-froglet/froglet-mcp#diagnostics

## Score history

- 2026-08-03: 56
- 2026-08-02: 55
- 2026-08-01: 15
- 2026-07-31: 21
- 2026-07-30: 39
- 2026-07-28: 39
- 2026-07-27: 39

## Links

- npm package: https://www.npmjs.com/package/froglet-mcp
- Socket report: https://socket.dev/npm/package/froglet-mcp
- Repository: https://github.com/armanas/froglet
- Website: https://froglet.dev/
- Changelog RSS feed: https://verifymcp.io/servers/armanas-froglet/froglet-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/armanas-froglet/froglet-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/armanas-froglet/froglet-mcp