Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add frontal-labs/mcp-server --skill frontal-mcpgit clone --depth 1 https://github.com/frontal-labs/mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/frontal-labs/mcp-server/frontal-mcp)<a href="https://agentmods.dev/skills/frontal-labs/mcp-server/frontal-mcp"><img src="https://agentmods.dev/badge/skills/frontal-labs/mcp-server/frontal-mcp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/frontal-labs/mcp-server/frontal-mcp"><img src="https://agentmods.dev/badge/skills/frontal-labs/mcp-server/frontal-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00973 |
| Opus 5.5 | $0.00019 | $0.00389 |
| Sonnet 5.5 | $0.00010 | $0.00195 |
| Haiku 4.5 | $0.00005 | $0.00097 |
Grade A, and why
frontal-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Frontal MCP Server
Standalone MCP server for the Frontal public API (api.frontal.dev). Hybrid of curated typed tools plus spec-driven generic meta-tools covering ~450 operations from the vendored OpenAPI spec (openapi/public.v1.json).
Setup
- Get an API key from Frontal Platform (
frt_...). - Set env:
export FRONTAL_API_KEY="your_api_key_here". - Start:
# stdio (Claude Desktop / local) frontal-mcp-server --transport stdio # HTTP (web apps / multi-tenant hosting) frontal-mcp-server --transport http --port 3000
Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"frontal": {
"command": "frontal-mcp-server",
"args": ["--transport", "stdio"],
"env": { "FRONTAL_API_KEY": "your_api_key_here" }
}
}
}
Configuration
| Variable | Default | Notes |
|---|---|---|
FRONTAL_API_KEY |
- | Required for stdio only; never a fallback for HTTP |
FRONTAL_BASE_URL |
https://api.frontal.dev |
Bare host; /v1/ is in the paths |
FRONTAL_REGION |
- | Region pin (x-frontal-region, e.g. iad, lhr, fra, sin) |
FRONTAL_TOOLSETS |
generic,ontology,data |
Comma-separated; invalid values are rejected |
FRONTAL_HTTP_ALLOWED_ORIGINS |
- (none trusted) | CORS allowlist for HTTP transport; never * |
MCP_LOG_LEVEL |
info |
`error |
HTTP transport rules:
- Every MCP request must send per-request
Authorization: Bearer frt_...; missing token is401. - Exception: unauthenticated
GET /healthalways returns200 {"status":"ok"}. - CLI:
-t/--transport stdio|http,-p/--port,-h/--host,-k/--api-key,-c/--config,-v/--verbose,--log-level.
Tools
Select via FRONTAL_TOOLSETS=generic,ontology,data.
Generic (spec-driven) — generic
frontal_list_endpoints— browse API surface by tag/search.frontal_describe_endpoint— full parameter/body/response detail for one operation.frontal_call_endpoint— invoke any operation byoperationId(ormethod+path), with optional auto-pagination.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 86 lines · 48 tokens per session scan A 47113552c297
frontal-mcp is a skill published in the GitHub repository frontal-labs/mcp-server (1 stars, last pushed yesterday), licensed Apache-2.0. It adds 48 tokens to every session and 973 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-15.
Other skills, from other repositories
duckduckgo-search
Free keyless web, news, and image search via ddgs.
mcporter
List, auth, and call MCP servers/tools from the terminal.
article-writing
Write articles, guides, blog posts, tutorials, newsletter issues, and other long-form content in a distinctive voice derived from supplied examples or brand guidance. Use when the user wants polished written content longer than a paragraph, especially when voice consistency, structure, and credibility matter.
mem0-oss-to-platform
Plan, then execute, a migration of a project from the mem0 open-source / self-hosted SDK (local Memory class) to the mem0 Platform / hosted SDK (MemoryClient). TRIGGER when: the developer wants to move, switch, or migrate mem0 off OSS/self-hosted to the hosted API, e.g. "migrate my mem0 setup to the platform", "switch…
safe-refactor
Restructure code while preserving behavior. Use for extraction, consolidation, ownership moves, or cleanup where verification must bracket structural edits.
deploy-docker-compose
Run the Omnigent server as a Docker compose stack (server + Postgres) on any Docker host — your laptop, a VPS, EC2 by hand, or as the base layer of any container-platform deploy. Invoke when the user wants to build the image, bring up the compose stack, debug the stack on a host they already have, or extend the stack…