Mmcp.market

Contract Security Scanner MCP server

by fino-oss·io.github.fino-oss/contract-scanner·v1.0.0

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

C63/100grade C
What users say
No reviews yet
Be the first
Safety scan
C63/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Contract Security Scanner yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Contract Security Scanner tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • batch_scan

    Scans multiple contracts at once and returns a risk comparison table. Useful for: - Comparing multiple DeFi protocols before choosing one - Auditing all contracts in a project - Quick portfolio risk assessment Scans up to 5 contracts in parallel.

  • interpret_risk

    Given a risk score and findings from a scan, provides an actionable recommendation. Returns: SAFE_TO_USE / PROCEED_WITH_CAUTION / HIGH_RISK / DO_NOT_USE

  • scan_contract

    Scans an EVM smart contract on Base L2 for security risks. Analyzes: - Source code verification status - Risky function selectors (mint, blacklist, pause, backdoors, etc.) - Proxy / upgradeability patterns - Contract age (new contracts = higher risk) - Transaction activity Returns a risk score (0-100) and categorized findings (critical/high/medium/good). Use this before: - Interacting with an unkn

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 194 days ago4/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install Contract Security Scanner in Claude Code, Cursor or VS Code

Runs npx -y @fino314-oss/contract-scanner-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add contract-scanner -- npx -y @fino314-oss/contract-scanner-mcp
Add to Cursor

Contract Security Scanner: common questions

Is Contract Security Scanner MCP server safe?
With care: it is graded C, so read the findings first (63/100). Read the Contract Security Scanner safety report
How do I install Contract Security Scanner?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Contract Security Scanner need an API key?
Yes. The registry entry asks for BASESCAN_API_KEY.
Is Contract Security Scanner maintained?
The last commit was 210 days ago (2026-03-17). The latest release is v1.0.0.
What can I use instead of Contract Security Scanner?
Servers from other publishers that do the same job: Bawbel Scanner MCP server, mcp-audit MCP server and Autopilot Jobhunt MCP server. Compare all Contract Security Scanner alternatives.

Alternatives to Contract Security Scanner

Same job from other publishers: the closest match first, then the best rated.

All Contract Security Scanner alternatives →
  • Bawbel Scanner
    Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
    B
  • mcp-audit
    Scan, enumerate, and risk-score every MCP server configured on your machine.
    A
  • Autopilot Jobhunt
    Agentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.
    A
  • CodeInspectus
    Local-first MCP security scanner and CLI for AI-generated applications.
    C
  • Solana Security Standard
    Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
    A

More from fino-oss →