Pentagonal

What Pentagonal-ai/pentagonal MCP server does

Pentagonal-ai/pentagonal MCP server connects an MCP-compatible client to a smart contract development and security workflow. Agents can create contracts from natural-language requirements, inspect existing tokens, run an adversarial security review, apply targeted fixes, and compile Solidity into ABI, bytecode, and gas estimates.

The project covers eight named chains: Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, BSC, and Avalanche. Contract generation supports Solidity and Anchor/Rust. Token lookups can return market information, holder data, liquidity-pool lock details, honeypot findings, and available source code.

How it works

The server exposes separate MCP tools for each part of the workflow. An agent can use the chain-listing tool to identify supported networks, request token intelligence for an address, generate a contract, or submit a contract for an eight-agent security pen test. Audit results include severity grouping and proof-of-concept exploits according to the provided tool description.

The rules tool exposes accumulated security rules from the system's self-learning rules engine. A later fix request can target a specific vulnerability while aiming to preserve the contract's functionality. Compilation is limited to Solidity and returns ABI, bytecode, and gas estimates.

Setup and configuration

For a local stdio connection, install the MCP package with npx -y pentagonal-mcp. The Claude Desktop configuration uses the PENTAGONAL_KEY environment variable for authentication. The project also documents an HTTP connection for Claude Code, Cursor, and Windsurf at https://www.pentagonal.ai/api/mcp; that configuration sends the API key in the x-pentagonal-api-key header.

Pentagonal-ai/pentagonal MCP server supports two payment paths for paid operations. Users can spend credits purchased through the web application, or agents can pay per request with USDC through x402 on Base. The provided material states that x402 does not require an account. API keys can be used programmatically with a credit balance.

Tools and capabilities

• pentagonal_lookup: Retrieves token price, holder information, liquidity-pool lock status, honeypot analysis, and source code.
• pentagonal_audit: Runs an eight-agent security pen test and organizes findings by severity, including proof-of-concept exploits.
• pentagonal_generate: Produces Solidity or Anchor/Rust contracts from natural-language descriptions.
• pentagonal_fix: Addresses a selected vulnerability while preserving intended functionality.
• pentagonal_compile: Compiles Solidity and returns ABI, bytecode, and gas estimates.
• pentagonal_rules: Displays accumulated security rules.
• pentagonal_chains: Lists the supported blockchains.

Lookup, fix, compile, and chain-listing operations are free but may be rate limited; the rules tool is free. Audits and generation cost $5 when paid with credits or x402.

Limitations and notes

The supplied material does not describe deployment, transaction signing, wallet management, or on-chain contract mutation. Compilation support is explicitly described for Solidity, while Anchor/Rust is listed for generation rather than compilation. Free operations have rate limits, and paid audit or generation requests require either credits or x402 payment. Token intelligence and security results should therefore be treated as inputs to an engineering review rather than evidence that a contract is safe.

Pentagonal-ai/pentagonal MCP server is released under the MIT license.