# Pentagonal-ai/pentagonal [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/Pentagonal-ai/pentagonal  
**GitHub Stars:** 1  
**npm Downloads (last month):** 136  
**Views:** 9  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/pentagonal-ai-pentagonal

## Description
AI-powered smart contract security forge with 8-agent adversarial pen test. Generate, audit, fix, and compile contracts across 8 chains (Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, BSC, Avalanche). Token intelligence with honeypot detection. x402 USDC payments for autonomous agents.

## Tools
Capabilities this server exposes over MCP:

- **pentagonal_generate** — Generate a production-quality smart contract from a natural language description. Supports EVM (Solidity) and Solana (Anchor/Rust or SPL Token config). The generator uses Pentagonal's self-learning security rules to produce safer code.
- **pentagonal_lookup** — Look up any token or smart contract by address. Returns the full intelligence report: price, market cap, ATH, 24h volume, transactions, holders, liquidity, LP lock status, pool count, security flags (honeypot, mintable, pausable, hidden owner, taxes), social links, and source code if verified. Use this before auditing to understand the full token landscape. Supports EVM and Solana tokens. Chain is auto-detected if omitted.
- **pentagonal_audit** — Run an 8-agent security pen test on a smart contract. Each agent specializes in a different attack vector: reentrancy, flash loans, access control, gas griefing, oracle manipulation, front-running, integer overflow, and economic exploits. Findings are returned with severity ratings and line numbers. New security rules are automatically learned from each audit.
- **pentagonal_fix** — Fix a specific vulnerability in a smart contract. Provide the contract code and the finding details — returns the complete fixed contract preserving all existing functionality.
- **pentagonal_compile** — Compile Solidity source code and return the ABI, bytecode, constructor arguments, and gas estimates. Use this after generating and auditing a contract to prepare it for deployment.
- **pentagonal_rules** — Get the current self-learning security rules. These rules are accumulated from every audit Pentagonal performs — the more contracts audited, the smarter the system gets.
- **pentagonal_chains** — List all supported blockchains with their chain IDs, explorer URLs, and deployment hints.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "pentagonal": {
    "command": "npx",
    "args": ["-y","pentagonal-mcp"],
    "env": {
      "PENTAGONAL_KEY": ""
    }
  }
}
```

**Requires environment variables:** `PENTAGONAL_KEY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What Pentagonal-ai/pentagonal MCP server does

Pentagonal-ai/pentagonal MCP server connects an MCP-compatible client to a smart contract development and security workflow. Agents can create contracts from natural-language requirements, inspect existing tokens, run an adversarial security review, apply targeted fixes, and compile Solidity into ABI, bytecode, and gas estimates.

The project covers eight named chains: Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, BSC, and Avalanche. Contract generation supports Solidity and Anchor/Rust. Token lookups can return market information, holder data, liquidity-pool lock details, honeypot findings, and available source code.

## How it works

The server exposes separate MCP tools for each part of the workflow. An agent can use the chain-listing tool to identify supported networks, request token intelligence for an address, generate a contract, or submit a contract for an eight-agent security pen test.

The rules tool exposes accumulated security rules from the system's self-learning rules engine. A later fix request can target a specific vulnerability while aiming to preserve the contract's functionality. Compilation is limited to Solidity and returns ABI, bytecode, and gas estimates.

## Setup and configuration

For a local stdio connection, install the MCP package with `npx -y pentagonal-mcp`. The Claude Desktop configuration uses the `PENTAGONAL_KEY` environment variable for authentication. The project also documents an HTTP connection for Claude Code, Cursor, and Windsurf at `https://www.pentagonal.ai/api/mcp`; that configuration sends the API key in the `x-pentagonal-api-key` header.

Pentagonal-ai/pentagonal MCP server supports two payment paths for paid operations. Users can spend credits purchased through the web application, or agents can pay per request with USDC through x402 on Base. API keys can be used programmatically with a credit balance.

## Tools and capabilities

- `pentagonal_lookup`: Retrieves token price, holder information, liquidity-pool lock status, honeypot analysis, and source code.
- `pentagonal_audit`: Runs an eight-agent security pen test and organizes findings by severity, including proof-of-concept exploits.
- `pentagonal_generate`: Produces Solidity or Anchor/Rust contracts from natural-language descriptions.
- `pentagonal_fix`: Addresses a selected vulnerability while preserving intended functionality.
- `pentagonal_compile`: Compiles Solidity and returns ABI, bytecode, and gas estimates.
- `pentagonal_rules`: Displays accumulated security rules.
- `pentagonal_chains`: Lists the supported blockchains.

Lookup, fix, compile, and chain-listing operations are free but may be rate limited; the rules tool is free. Audits and generation cost $5 when paid with credits or x402.

## Limitations and notes

Compilation support is explicitly described for Solidity, while Anchor/Rust is listed for generation rather than compilation. Free operations have rate limits, and paid audit or generation requests require either credits or x402 payment. Token intelligence and security results should therefore be treated as inputs to an engineering review rather than evidence that a contract is safe.

Pentagonal-ai/pentagonal MCP server is released under the MIT license.

_Full upstream README: https://allmcps.com/mcp/pentagonal-ai-pentagonal/readme_