MCP.Market

Contract Guard MCP server

by eltociear·io.github.eltociear/contract-guard-mcp·v1.1.0·1 stars
No reviews yet

EVM contract/token risk check + ERC20 approval (proxy, EIP-7702, unlimited-allowance). Zero deps.

B80/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed Contract Guard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Contract Guard tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 39 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Contract Guard compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 48,255 servers
GitHub stars
1
more than 65% of 28,688 servers

Install Contract Guard in Claude Code, Cursor or VS Code

claude mcp add contract-guard-mcp -- docker run -i --rm ghcr.io/eltociear/contract-guard-mcp:mcp-1.1.0
Add to Cursor

What the publisher says

From the Contract Guard repository's README, as published. We do not edit it. Read it on GitHub

contract-guard-mcp

MCP server for a pre-interaction risk check on any EVM contract/token — what an agent needs before it approves, swaps, or trusts an address.

Tool: check_contract(address, chain="base") →

  • is-contract vs EOA / self-destructed
  • EIP-7702 delegated-EOA detection
  • upgradeable proxy detection (EIP-1967 + legacy zeppelinos)
  • ERC20 metadata (name / symbol / decimals / totalSupply)
  • risk score + actionable flags

Chains: Base, Ethereum. Pure public JSON-RPC, zero dependencies, no signing.

Also available as a pay-per-call x402 HTTP endpoint: (POST /check, $0.005 USDC on Base).

Run

docker run -i --rm ghcr.io/eltociear/contract-guard-mcp:mcp-latest
# or
python3 server.py

MIT licensed.

Tools

  • check_contract(address, chain) — is-contract/EOA, EIP-7702, proxy, ERC20 metadata, risk score
  • checkapproval(token, owner, spender, chain) — ERC20 allowance audit; flags unlimited approvals** (the #1 drain vector)

Free MCP vs paid x402

This MCP server is free (run it locally / via your client). For server-side, batch, or no-install use, the same engine is a pay-per-call x402 HTTP API — POST https://eltociear-contract-guard.hf.space/check ($0.005 USDC on Base, no signup). Your agent's wallet pays per call.

Professional audit services

Maintained by the same author — paid services on Polar (Stripe checkout):

  • MCP Security Audit Report — $5 — one-off audit of your MCP server: 68 attack patterns, severity-rated PDF report with concrete fixes.
  • Security Pulse — $5/mo (annual $50) — monthly briefing on newly disclosed MCP server vulnerabilities, scan stats across 100+ tracked repos, mitigation playbooks.
  • Pro Audit Stack — $20/mo — for teams running MCP servers in CI/CD: 50 hosted scans/month, Discord access, 24h SLA on vulnerability questions.

Full catalog: polar.sh/eltociear

Also live: clean-read ($0.005 / call)

Same operator, same x402 rails: clean-read turns any URL into clean Markdown for AI agents — fetches the page, strips nav/ads/boilerplate (trafilatura), returns the main content with title and word count. POST https://eltociear-skill-audit.hf.space/read — $0.005 USDC on Base, no signup.

Nothing above is checked by us. What we check is on the safety report.

Contract Guard: common questions

Is Contract Guard MCP server safe?
Mostly: it is graded B (80/100). Read the Contract Guard safety report
How do I install Contract Guard?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Contract Guard need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Contract Guard maintained?
The last commit was 77 days ago (2026-08-19). The latest release is v1.1.0.
How does Contract Guard compare with other MCP servers?
safety score 80/100 (higher than 60% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers). Full comparison.

More from eltociear →