Contracts MCP servers

A server here drafts, reviews or analyses contracts.

Not here: sending documents for signature only.

312servers
182 remote130 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: EVMole@cdump/evmoleLocal structured analysis of deployed EVM runtime bytecode4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.467 GitHub stars.
  2. Number 2: Adeu@adeu/adeuAutomated DOCX Redlining Engine4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.165 GitHub stars.
  3. Number 3: Nutrient Document Engine MCP Server@pspdfkit/nutrient-document-engine-mcp-serverMCP server for self-hosted Nutrient Document Engine: extract, edit, redact, and annotate documents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.62 GitHub stars.

Best fit

192 made for this, ranked by starsRemoteLocal
  1. Open Agreements @open-agreements/open-agreementsFill standard legal agreement templates (NDAs, SAFEs, NVCA docs, employment) as DOCX files.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.60 GitHub stars.
  2. Solana Security Standard @copenhagen0x/solana-security-mcpScan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.38 GitHub stars.
  3. UCAI @nirholas/abi-to-mcpUCAI — The ABI-to-MCP Server Generator. Convert any smart contract ABI into an AI-ready MCP server.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.37 GitHub stars.
  4. Klever Vm @klever-io/mcp-klever-vmMCP server for Klever blockchain smart contract development.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.31 GitHub stars.
  5. Solidity Compiler IDE @nirholas/solidity-compilerBrowser Solidity compiler IDE - smart contract development testing deploy5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.27 GitHub stars.
  6. Mistral @swih/mistral-mcpMistral MCP server: extract invoices and documents from text, Markdown or OCR into typed JSON.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
  7. Deed @deed-lang/deedContract-first language and MCP server for capability-aware code and patch review.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.9 GitHub stars.
  8. Bug Bounty Intelligence @holistis/bug-bounty-intelligence-mcpAI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.9 GitHub stars.
  9. Document to JSON – PDF Invoice/Statement/Contract Parser @fashionmascherine-svg/document-to-json-mcpTurn any PDF into structured JSON via AI + OCR: invoices, bank statements, contracts.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.8 GitHub stars.
  10. Xahau MCP @hugegreencandle/xahau-mcpMCP server for the Xahau network — offline Hook WASM VM + static analyzer, read-only ledger tools.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  11. Open Legal Chile @elpabloultron/open-legal-chileSuite de Inteligencia Jurídica y 55 herramientas MCP para Chile: BCN, PJUD, doctrina y OCR.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
  12. ContractGate @nightmoose/contractgateInfer, dry-run, deploy, and inspect ContractGate semantic data contracts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
  13. Tanilo @tkcollective/tanilo-mcpTanilo checks the premise before an AI agent acts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  14. Bounty Operator @bountyoperator/bounty-operatorArgues against a security finding or a draft bug bounty report before you submit it.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  15. Evernode MCP @hugegreencandle/evernode-mcpEvernode/HotPocket dApp helper: templates, non-determinism lint, lease math, live host lookup.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  16. M2M Sentinel @m2m-sentinel/m2m-sentinel-sdkBase bytecode capability observations, proxy resolution, gas, DEX, and transfer telemetry.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  17. Cybercentry Verification @cybercentry/verificationTwelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  18. Hashloom @davet47/hashloomContent-addressed contracts and a verification cache that cut agent context by skipping proven code.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  19. Shodai Agreements @shodai/agreementsAuthor, validate, deploy, and operate Shodai on-chain agreements.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
  20. iz-tolk-mcp — Tolk Compiler for TON @izzzzzi/iz-tolk-mcpTolk smart contract compiler for TON — compile, check, and deploy from AI assistants5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  21. Heddle @davet47/heddleContent-addressed contracts and a verification cache that cut agent context by skipping proven code.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.

Also touches on Contracts

119 where it is one part of a bigger job