Contract Security Scanner

Name: Contract Security Scanner
Author: mastrophot

@mastrophotMCP server · External

MCP smart contract scanner with NEAR-focused security context.

Contractsv0.1.1MITTypeScript

Freeno charge per call

How to install

Runs on your machine from its package; the steps are below.

What it does

Reads
Writes
High impact

At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Runs locally over stdio

This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).

npmmcp-contract-securityv0.1.1

Run

npx -y mcp-contract-security

MCP client config

{
  "mcpServers": {
    "contract-security-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-contract-security"
      ]
    }
  }
}

README1 min readView on GitHub

mcp-contract-security

MCP server for smart contract security scanning.

Implements the required tools:

scan_contract
compare_security_models
audit_checklist

Supports languages:

solidity
rust
typescript

What it checks

scan_contract currently detects heuristic patterns for:

Reentrancy
Integer overflow/underflow risk
Access control issues
Front-running exposure
Oracle manipulation risk

The output includes:

vulnerability list with severity/type/line
security_score
near_equivalent_score
NEAR-specific security notes and recommendation

Install

bash

npm install -g mcp-contract-security

Published package:

MCP config (Claude Desktop)

json

{
  "mcpServers": {
    "contract-security": {
      "command": "mcp-contract-security"
    }
  }
}

Tool usage

`scan_contract`

Input:

json

{
  "code": "contract source code here",
  "language": "solidity"
}

`compare_security_models`

Input (optional):

json

{
  "language": "solidity"
}

`audit_checklist`

Input (optional):

json

{
  "language": "rust"
}

Local development

bash

npm install
npm run check

Deliverable assets

Additional publish assets are prepared in deliverables/:

deliverables/mcp-registry-submission.md
deliverables/security-subreddit-posts.md
deliverables/blog-why-near-contracts-safer.md
server.json (MCP Registry metadata, schema-validated)

License

MIT

Similar modules

Browse Contracts