Contract Security Scanner MCP server
Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.
0 stars
Reviews
Write oneNobody has reviewed Contract Security Scanner yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Contract Security Scanner tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
batch_scanScans multiple contracts at once and returns a risk comparison table. Useful for: - Comparing multiple DeFi protocols before choosing one - Auditing all contracts in a project - Quick portfolio risk assessment Scans up to 5 contracts in parallel.
interpret_riskGiven a risk score and findings from a scan, provides an actionable recommendation. Returns: SAFE_TO_USE / PROCEED_WITH_CAUTION / HIGH_RISK / DO_NOT_USE
scan_contractScans an EVM smart contract on Base L2 for security risks. Analyzes: - Source code verification status - Risky function selectors (mint, blacklist, pause, backdoors, etc.) - Proxy / upgradeability patterns - Contract age (new contracts = higher risk) - Transaction activity Returns a risk score (0-100) and categorized findings (critical/high/medium/good). Use this before: - Interacting with an unkn
Public scan report
scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 194 days ago4/15
- Maintainer identityregistry namespace matches repository owner6/10
Install Contract Security Scanner in Claude Code, Cursor or VS Code
Runs npx -y @fino314-oss/contract-scanner-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add contract-scanner -- npx -y @fino314-oss/contract-scanner-mcp
Contract Security Scanner: common questions
- Is Contract Security Scanner MCP server safe?
- With care: it is graded C, so read the findings first (63/100). Read the Contract Security Scanner safety report
- How do I install Contract Security Scanner?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Contract Security Scanner need an API key?
- Yes. The registry entry asks for
BASESCAN_API_KEY. - Is Contract Security Scanner maintained?
- The last commit was 210 days ago (2026-03-17). The latest release is v1.0.0.
- What can I use instead of Contract Security Scanner?
- Servers from other publishers that do the same job: Bawbel Scanner MCP server, mcp-audit MCP server and Autopilot Jobhunt MCP server. Compare all Contract Security Scanner alternatives.
Alternatives to Contract Security Scanner
Same job from other publishers: the closest match first, then the best rated.
- Bawbel ScannerSecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.not reviewedGrowingB
- mcp-auditScan, enumerate, and risk-score every MCP server configured on your machine.not reviewedGrowingA
- Autopilot JobhuntAgentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.not reviewedGrowingA
- CodeInspectusLocal-first MCP security scanner and CLI for AI-generated applications.not reviewedGrowingC
- Solana Security StandardScan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.not reviewedGrowingA