Is Frase SEO MCP server safe?

Yes, with the usual care.

B78/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 medium

Code scan133 source files scanned8/25
Live reliabilityremote reachable in 241ms (auth required)20/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualityOAuth resource metadata advertised on 40115/15
Maintenancelast push 1 days ago15/15
Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10

highShell command built from a string (injection risk)exec.shell-concat

dist/cli/init.js: …ectly try { execSync(`claude mcp add frase -e FRASE_API_KEY=${apiKey} -- npx -y @frase/mcp-server`, { …

mediumeval / new Function usedexec.eval

dist/mcpb-bundle.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…

Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

SEO Data
SEO data for AI agents: Google SERP, keyword research, backlinks, site audits, AI answer visibility.
not reviewed
Growing
A
Rankability
SEO research, AI visibility, content, and audits through your Rankability workspace.
not reviewed
Growing
A
pSEO Engine
Programmatic SEO as callable tools: research, generate, audit and publish landing pages.
not reviewed
New
C