Is Frase SEO MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highShell command built from a string (injection risk)
Public scan report
scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high1 medium
- Code scan133 source files scanned8/25
- Live reliabilityremote reachable in 4077ms (auth required)17/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenancelast push 1 days ago15/15
- Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10
Findings (2)
- highShell command built from a string (injection risk)
exec.shell-concatdist/cli/init.js: …ectly try { execSync(`claude mcp add frase -e FRASE_API_KEY=${apiKey} -- npx -y @frase/mcp-server`, { … - mediumeval / new Function used
exec.evaldist/mcpb-bundle.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Frase SEO does
SEO DataSEO data for AI agents: Google SERP, keyword research, backlinks, site audits, AI answer visibility.not reviewedGrowingA
RankdeltaOpen-source AI SEO over MCP: audits, ranks, keywords, backlinks + AI visibility (GEO).not reviewedNewC
Google Ads + Meta Ads + SEO/GEO MCPGoogle Ads, Meta Ads, SEO, GEO & GA4 MCP by Ryze AI - audits, reports, keywords, Search Console.not reviewedEstablishedA