Contract Security Scanner README | AllMCPs

Contract Security Scanner README

The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Contract Security Scanner listing page.

Back to Contract Security Scanner View source on GitHub

mcp-contract-security

MCP server for smart contract security scanning.

Implements the required tools:

scan_contract
compare_security_models
audit_checklist

Supports languages:

solidity
rust
typescript

What it checks

scan_contract currently detects heuristic patterns for:

Reentrancy
Integer overflow/underflow risk
Access control issues
Front-running exposure
Oracle manipulation risk

The output includes:

vulnerability list with severity/type/line
security_score
near_equivalent_score
NEAR-specific security notes and recommendation

Install

Terminal

npm install -g mcp-contract-security

Published package:

MCP config (Claude Desktop)

config.json

{
  "mcpServers": {
    "contract-security": {
      "command": "mcp-contract-security"
    }
  }
}

Tool usage

`scan_contract`

Input:

config.json

{
  "code": "contract source code here",
  "language": "solidity"
}

`compare_security_models`

Input (optional):

config.json

{
  "language": "solidity"
}

`audit_checklist`

Input (optional):

config.json

{
  "language": "rust"
}

Local development

Terminal

npm install
npm run check

Deliverable assets

Additional publish assets are prepared in deliverables/:

deliverables/mcp-registry-submission.md
deliverables/security-subreddit-posts.md
deliverables/blog-why-near-contracts-safer.md
server.json (MCP Registry metadata, schema-validated)

License

MIT