io.github.jongall45/frontrun-mcp-server
NPM · FRONTRUN-MCP-SERVER
Track what 1,000+ VCs follow on X to surface startups before their round. Signal for AI agents.
Available components
Last scanned (10 hours ago)
Scores higher than 55% of npm servers
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 2 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2603 tokens (~74/item across 35 items; 35 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "send_feedback" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 35 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 −1
- Stability: pass → 0.90 functional
- 29 Oct 26 0
- Stability: 0.97 → pass security
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 −1
- Stability: pass → 0.93 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 17 Oct 26 +2
- Stability: 0.83 → pass security
- 16 Oct 26 −2
- Stability: pass → 0.83 functional
- 15 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/frontrun-mcp-server@2.6.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
frontrun_classify ~56
Run AI classification on specific entities. Returns sector, entity type, confidence. 16 credits/entity.
| Name | Type | Req | Description |
|---|---|---|---|
| twitter_user_ids | array | – | Twitter user IDs to classify |
| usernames | array | – | Usernames to classify |
No output schema declared.
No examples provided.
frontrun_company ~58
Synthesized company overview: what they do, sector, stage, website summary, recent activity. Combines Twitter profile, website scrape, and AI classification. 60 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle (without @) |
No output schema declared.
No examples provided.
frontrun_company_founders ~59
Founder intelligence: identifies founders via social graph analysis and enriches with LinkedIn data. Returns name, role, background, previous companies. 100 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle of the company (without @) |
No output schema declared.
No examples provided.
frontrun_company_funding ~57
Funding/deal info cross-referenced with VC follow signals. Returns round details, investors, and which of your tracked VCs follow them. 60 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle (without @) |
No output schema declared.
No examples provided.
frontrun_company_resources ~53
Discovered links and resources: website, GitHub, docs, Discord, Telegram. Extracted from profile and website scrape. 60 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle (without @) |
No output schema declared.
No examples provided.
frontrun_company_signals ~52
Social signal analysis: buzz score, sentiment, notable mentions, and which of your tracked VCs follow this entity. 16 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle (without @) |
No output schema declared.
No examples provided.
frontrun_convergence ~110
Detect convergence: entities followed by multiple tracked accounts independently. The highest-signal endpoint - when 3+ VCs independently follow the same account, it strongly suggests pre-funding interest. 60 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| hours | number | – | Shorthand: hours to look back |
| min_accounts | number | – | Minimum tracked accounts that must follow. Default: 2. Use 3+ for high-conviction. |
| since | string | – | Time window. Default: "7d" |
No output schema declared.
No examples provided.
frontrun_create_rule ~84
Create a custom classification rule. Rules auto-tag entities matching your conditions in enriched follows and discover results. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | object | yes | What to apply when conditions match |
| conditions | object | yes | Conditions that must ALL be met |
| name | string | yes | Rule name, e.g. "DeFi Protocols" or "stablecoin-neobank" |
No output schema declared.
No examples provided.
frontrun_create_webhook ~105
Register a webhook to receive push notifications for signal events (new_follows, convergence). Deliveries are signed with your secret if provided. 40 credits setup + 8 credits per delivery.
| Name | Type | Req | Description |
|---|---|---|---|
| events | array | yes | Event types to subscribe to |
| filters | object | – | Optional event filters (AND logic) |
| secret | string | – | Secret used to HMAC-sign delivery payloads |
| url | string | yes | HTTPS endpoint to receive event payloads |
No output schema declared.
No examples provided.
frontrun_delete_rule ~30
Delete a custom classification rule. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Rule UUID to delete |
No output schema declared.
No examples provided.
frontrun_delete_webhook ~31
Delete a registered webhook. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Webhook ID to delete |
No output schema declared.
No examples provided.
frontrun_discover ~97
Personalized account recommendations based on your tracked set and custom classification rules. "You track 50 VCs - here are accounts they follow that you're not tracking yet." 60 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max results (max 50). Default: 20 |
| min_signal | number | – | Minimum signal score (0-1). Default: 0.3 |
| sector | string | – | Narrow by sector |
No output schema declared.
No examples provided.
frontrun_enriched_follows ~201
New follows with full enrichment: AI classification + custom rules + custom tags + filtering. The most powerful signal endpoint. Use sector/keyword/entity_type filters to query like "show me all stablecoin neobanks my tracked VCs followed this week". 16 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| entity_type | string | – | Filter by type: "company", "project", "person", "fund", "vc" |
| hours | number | – | Shorthand: hours to look back |
| keyword | string | – | Search keyword (matches username, name, bio, sector) |
| sector | string | – | Filter by sector (e.g. "DeFi", "AI", "stablecoins") |
| since | string | – | Time window: "24h", "7d", etc. Default: "24h" |
| tag | string | – | Filter by custom tag or rule name |
| username | string | – | Filter to a specific tracked account |
No output schema declared.
No examples provided.
frontrun_feed ~120
Real-time activity feed across tracked accounts. "Who has my tracked list followed today?" Filter by event type (new_follow, convergence) and sector. 16 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| event_type | string | – | Filter: "new_follow" or "convergence" |
| hours | number | – | Shorthand: hours to look back |
| limit | number | – | Max events (max 200). Default: 50 |
| sector | string | – | Filter targets by sector |
| since | string | – | Time window. Default: "24h" |
No output schema declared.
No examples provided.
frontrun_list_rules ~19
List your custom classification rules. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
frontrun_list_tags ~42
List your custom-tagged entities. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| sector | string | – | Filter by custom sector |
| tag | string | – | Filter by tag name |
No output schema declared.
No examples provided.
frontrun_list_tracked ~22
List all accounts currently being monitored for follow activity.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
frontrun_list_webhooks ~26
List your registered webhooks with status and last delivery time. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
frontrun_new_follows ~119
Detect new follows across tracked accounts. Returns temporal diffs - who each tracked account recently followed and when. 16 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| classify | boolean | – | Include AI classification for each new follow |
| hours | number | – | Shorthand: hours to look back (e.g. 48). Alternative to since. |
| since | string | – | Time window: "24h", "7d", "30d", or ISO date. Default: "24h" |
| username | string | – | Filter to a specific tracked account |
No output schema declared.
No examples provided.
frontrun_preview ~66
Preview an account before tracking. Returns profile summary, signal potential score (0-1), sector hints, and a tracking recommendation. Use this to evaluate whether an account is worth monitoring. 4 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle to preview (without @) |
No output schema declared.
No examples provided.
frontrun_reports ~135
Historical daily reports - the companies discovered in your daily email reports. Filter by date range and sector. "Show me last week's stablecoin discoveries." 4 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Specific date: "YYYY-MM-DD" |
| limit | number | – | Max reports to return (max 30). Default: 7 |
| sector | string | – | Filter by sector keyword (e.g. "stablecoin", "DeFi", "AI") |
| since | string | – | Time range: "7d", "14d", "30d", or "YYYY-MM-DD". Default: "7d" |
No output schema declared.
No examples provided.
frontrun_search ~116
Search discovered entities by sector, keyword, or entity type across your tracked universe. 4 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| entity_type | string | – | Filter: "company", "project", "person", "fund", "vc" |
| keyword | string | – | Search keyword (matches username, sector, bio) |
| limit | number | – | Max results (max 200). Default: 50 |
| sector | string | – | Filter by sector: "DeFi", "AI", "Infrastructure", "Gaming", "Payments", etc. |
No output schema declared.
No examples provided.
frontrun_sectors ~33
Sector breakdown of all discovered entities across your tracked accounts. Shows distribution with counts and percentages. 4 credits.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
frontrun_snapshot ~48
Get the current follow list for a tracked account. Shows everyone they currently follow based on stored data. 4 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| username | string | yes | Twitter/X handle of the tracked account |
No output schema declared.
No examples provided.
frontrun_status ~27
Get account status: credit balance, tracked account count, usage stats, and pricing.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
frontrun_tag ~104
Add custom tags, sector override, or notes to a specific entity. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| custom_entity_type | string | – | Custom entity type override |
| custom_sector | string | – | Custom sector override |
| notes | string | – | Free-text notes |
| tags | array | – | Tags, e.g. ["watchlist", "portfolio"] |
| twitter_user_id | string | – | Twitter user ID |
| username | string | – | Username (alternative to twitter_user_id) |
No output schema declared.
No examples provided.
frontrun_thesis_search ~109
Semantic thesis search over your database (companies surfaced by the investors you track). Describe an investment thesis in plain language (e.g. "information markets - platforms where people trade on what they know") and get companies whose descriptions match the meaning, not just the exact words. Ranked by similarity. 40 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max results (max 50). Default: 25 |
| q | string | yes | Investment thesis in plain language (min 10 characters) |
No output schema declared.
No examples provided.
frontrun_track ~40
Start monitoring a Twitter/X account for follow activity. 4 credits/account.
| Name | Type | Req | Description |
|---|---|---|---|
| username | string | yes | Twitter/X handle to track (without @) |
No output schema declared.
No examples provided.
frontrun_trending ~87
Entities ranked by follow velocity - how many tracked accounts recently followed them. Use this for daily deal flow. 24 credits (+16 credits per item if classify=true).
| Name | Type | Req | Description |
|---|---|---|---|
| classify | boolean | – | Include AI classification |
| limit | number | – | Max results (max 100). Default: 25 |
| since | string | – | Time window. Default: "7d" |
No output schema declared.
No examples provided.
frontrun_untrack ~34
Stop monitoring a Twitter/X account.
| Name | Type | Req | Description |
|---|---|---|---|
| username | string | yes | Twitter/X handle to stop tracking (without @) |
No output schema declared.
No examples provided.
frontrun_update_rule ~71
Update an existing custom classification rule. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | object | – | Updated actions |
| active | boolean | – | Enable or disable the rule |
| conditions | object | – | Updated conditions |
| id | string | yes | Rule UUID to update |
| name | string | – | New rule name |
No output schema declared.
No examples provided.
frontrun_vc_activity ~60
VC follow pattern analysis: velocity, sector distribution, recent follows with classification. 24 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle of the tracked VC |
| since | string | – | Time window. Default: "30d" |
No output schema declared.
No examples provided.
frontrun_vc_similar ~99
Find VCs with similar follow patterns. Computed from temporal follow graph overlap - not raw follower lists. Use this to discover related investors. 60 credits.
| Name | Type | Req | Description |
|---|---|---|---|
| handle | string | yes | Twitter/X handle of the tracked VC |
| limit | number | – | Max results (max 50). Default: 20 |
| min_overlap | number | – | Minimum overlap score (0-1). Default: 0.1 |
No output schema declared.
No examples provided.
send_feedback ~147
Send feedback to the Frontrun team - no auth or API key needed. Hit a confusing error, a missing capability, or a docs gap? Report it here so we can fix it for agents like you. Include the tool name and your agent runtime if relevant.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | Your agent runtime, e.g. "claude-code" |
| contact | string | – | Optional contact (email/X handle) if you want a reply |
| message | string | yes | The feedback itself (required, max 2000 chars) |
| tool | string | – | Which Frontrun tool/endpoint this is about, e.g. "frontrun_trending" |
No output schema declared.
No examples provided.
trending_teaser ~86
FREE SAMPLE - no auth or API key needed. Top 5 trending companies from Frontrun's follow graph over the last 7 days: name, X handle, sector, follower count, first-flagged date, and how many tracked investors newly followed each (counts only - investor identities require a plan). Use this to try Frontrun before configuring a key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the io.github.jongall45/frontrun-mcp-server server?
io.github.jongall45/frontrun-mcp-server runs locally as an npm package, launched with npx -y frontrun-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · frontrun-mcp-server
claude mcp add jongall45-frontrun-mcp-server -- npx -y frontrun-mcp-server
What is the io.github.jongall45/frontrun-mcp-server server?
io.github.jongall45/frontrun-mcp-server is listed in the public MCP registry as io.github.jongall45/frontrun-mcp-server. Track what 1,000+ VCs follow on X to surface startups before their round. Signal for AI agents. This page covers its npm package (frontrun-mcp-server).
Is the io.github.jongall45/frontrun-mcp-server server safe to use?
io.github.jongall45/frontrun-mcp-server scores 77 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.jongall45/frontrun-mcp-server server expose?
io.github.jongall45/frontrun-mcp-server exposes 35 tools: trending_teaser, send_feedback, frontrun_status, frontrun_list_tracked, frontrun_track, and 30 more. Their descriptions and schemas cost roughly 2,603 tokens of context every time the server is loaded.
Is the io.github.jongall45/frontrun-mcp-server server still maintained?
io.github.jongall45/frontrun-mcp-server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.jongall45/frontrun-mcp-server server under?
io.github.jongall45/frontrun-mcp-server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.