Server data from the Official MCP Registry
Smart-contract security quick-scan: rug, honeypot & owner-power risk before you fund it.
Smart-contract security quick-scan: rug, honeypot & owner-power risk before you fund it.
Valid MCP server (4 strong, 4 medium validity signals). 4 known CVEs in dependencies (0 critical, 3 high severity) Package registry verified. Imported from the Official MCP Registry.
7 files analyzed ยท 5 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-baneado98-contract-auditor": {
"args": [
"-y",
"contract-auditor-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
Quick-scan a smart contract for rug / honeypot / centralization risk before you approve or send funds.
contract-auditor is an MCP server and a pay-per-call x402 HTTP API. Give it a deployed contract address + chain (or raw Solidity source) and it returns a SAFE / CAUTION / HIGH-RISK verdict with an explained risk score.
It combines three things an AI agent can't gather on its own from a chat:
โ ๏ธ Heuristic quick-scan, not a formal audit. Absence of findings is not proof of safety. Always do your own research before sending funds.
| ๐ Upgradeable proxy | EIP-1967 / 1167 / beacon โ the owner can replace the audited code |
| ๐ Owner powers | mint, pause, blacklist, owner-adjustable fees/tax, max-tx limits, trading on/off, withdraw/sweep |
| ๐ Dangerous primitives | selfdestruct, delegatecall, tx.origin auth, arbitrary external calls, inline assembly |
| ๐ฏ Honeypot signals | can't-sell patterns: blacklist + uncapped tax + trading switch + wallet/tx caps |
| ๐ Owner status | live on-chain: renounced, single EOA (one key), or multisig/timelock? |
| โ Unverified | no verified source on Sourcify = you can't read what you're trusting |
{
"mcpServers": {
"contract-auditor": { "command": "npx", "args": ["-y", "contract-auditor-mcp"] }
}
}
Tool: audit_contract โ params: address, chain (alias or chainId), source (optional raw Solidity), deep (boolean).
Or connect over HTTP at POST /mcp.
GET https://contract-auditor-ivory.vercel.app/audit?address=0xdAC17F958D2ee523a2206206994597C13D831ec7&chain=ethereum
GET https://contract-auditor-ivory.vercel.app/audit?address=0x...&chain=base
Supported chains: ethereum, base, optimism, arbitrum, polygon, bsc, avalanche, gnosis, celo (or a numeric chainId). Free tier is rate-limited to 30 requests/hour/IP.
The /pro/audit route is gated by x402. Your agent pays $0.25 USDC per call automatically โ no sign-up, no API key โ settling on-chain (USDC on Base) to the operator wallet.
GET /pro/audit?address=0x...&chain=ethereum # 402 โ pay โ result
(chainId, address). If a contract is only verified on a native explorer and not mirrored to Sourcify, it shows as unverified here โ pass the source directly to scan it.MIT
Be the first to review this server!
by Modelcontextprotocol ยท Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno ยท Developer Tools
Toleno Network MCP Server โ Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace ยท Developer Tools
Create, build, and publish Python MCP servers to PyPI โ conversationally.