Base Security Scanner MCP server
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
Usage numbers are collected on the next scan
Reviews
Write oneNobody has reviewed Base Security Scanner yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Base Security Scanner tools (8)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
analyze_bytecodeDisassemble contract bytecode on Base mainnet and identify known patterns (proxy, diamond, AMM, lending, ERC-20, ERC-721, etc).
audit_reportGenerate a full security audit report for a token on Base mainnet. Combines contract scan, honeypot check, rug risk score, bytecode analysis, and permission checks into one comprehensive report.
check_honeypotCheck if a token on Base mainnet is a honeypot by simulating buy and sell via Uniswap V2 router. Returns buy/sell ability and estimated taxes.
check_token_permissionsCheck owner permissions on a token: can mint? can pause? can blacklist? can change fees? Can disable trading? Ownership renounced?
compare_bytecodeCompare bytecode of two contracts on Base mainnet for clone detection. Returns similarity score and whether they share the same code.
detect_rug_riskScore rug pull risk 0-100 for a token on Base mainnet. Checks ownership, liquidity, dangerous functions, honeypot status, and contract patterns.
get_contract_infoGet basic contract metadata on Base mainnet: is it a contract, bytecode size, ETH balance, transaction count. For tokens, also returns name/symbol/supply.
scan_contractAnalyze a smart contract on Base mainnet for security issues including reentrancy patterns, access control, hidden mints, proxy patterns, and dangerous opcodes.
Public scan report
scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
How Base Security Scanner compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 65/100
- higher than 20% of 915 Security servers
- Tools
- 8
- the typical Security server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
What its tools let an agent do: 8 read
Install Base Security Scanner in Claude Code, Cursor or VS Code
Runs npx -y base-security-scanner-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add base-security-scanner-mcp -- npx -y base-security-scanner-mcp
Base Security Scanner: common questions
- Is Base Security Scanner MCP server safe?
- With care: it is graded C, so read the findings first (65/100). Read the Base Security Scanner safety report
- How do I install Base Security Scanner?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Base Security Scanner need an API key?
- No secret keys are declared. It reads 1 setting from the environment.
- Is Base Security Scanner maintained?
- The latest release is v1.0.3.
- What can I use instead of Base Security Scanner?
- Servers from other publishers that do the same job: Bawbel Scanner MCP server, MCP Security Guard MCP server and Inkog MCP server.
- How does Base Security Scanner compare with other Security MCP servers?
- safety score 65/100 (higher than 20% of 915 Security servers); tools 8 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Base Security Scanner
Same job from other publishers: the closest match first, then the best rated.
- Bawbel ScannerSecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.not reviewedGrowingB
- MCP Security GuardAudit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).not reviewedGrowingA
- InkogSecurity co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.not reviewedGrowingB
- x402 Security & Alpha OracleRead-only pre-trade honeypot simulation and DEX alpha oracle for Solana and Base.not reviewedGrowingA
- CodeInspectusLocal-first MCP security scanner and CLI for AI-generated applications.not reviewedEstablishedC