Frame Mcp

Scan a file or directory for security vulnerabilities with Frame. Runs taint analysis plus separation logic verification and returns the findings as JSON. Set ``ai=True`` to add the LLM detection and triage layer (needs the FRAME_LLM_* environment variables). ``changed_ref`` scans only files that differ from a git ref; ``files`` restricts the scan to a list of files; ``baseline`` reports only findings absent from a baseline file; ``packs`` loads extra framework packs. ``hunt_authz=True`` adds the agentic authorization hunt (IDOR, missing authorization, privilege escalation; needs a model): every handler gets a verdict, and the result's ``hunt`` section lists how it ended and what it left unresolved. A hunt runs one agent per group of handlers and can take hours on a large application; it is bounded by its step budgets, not by a timeout. This tool does not modify any files.

Scan ``path`` and record the findings as a baseline file. Writes ``baseline_file`` to disk (creating or overwriting it) and uses ``--fail-on none`` so the current state is accepted. Later scans can pass this file as ``baseline`` to report only new findings.

Re-scan the files behind earlier findings and report their status. ``findings_json`` is the JSON produced by ``scan`` (a JSON string or the parsed object). Each finding comes back as fixed, file_removed, present, suppressed, uncertain or unverifiable. Pass ``ids`` (finding fingerprints) to check only specific findings. This tool does not modify any files.

Generate and verify fixes for scan findings. By default this returns a unified diff and does not touch any files. Set ``in_place=True`` to write the patches to the source files. Each patch is verified by re-scanning the patched code. This tool needs the FRAME_LLM_* environment variables (FRAME_LLM_BASE_URL, FRAME_LLM_MODEL, and an API key when the endpoint requires one).

Drive an LLM agent to exploit a live target. Authorized use only. Run this only against systems you own or are explicitly authorized to test. ``target`` is a URL such as http://app:8080. Optionally prime the agent with ``findings_json`` from ``scan``, a plain-language ``goal``, a ``success_check`` shell command (exit 0 means solved), and ``max_steps``. Needs the FRAME_LLM_* environment variables.

List the framework packs a scan would load. Packs teach Frame a framework's sources, sinks, sanitizers and entry points. Pass ``path`` to include a project directory's .frame/packs.

Validate one or more framework pack .toml files or directories.

Check whether a separation logic entailment ``P |- Q`` is valid. Example entailment: ``x |-> 5 |- x |-> 5``. Set ``model=True`` to return a countermodel when the entailment is invalid.