MCP.Market

Contract Scanner MCP server

by lordbasilaiassistant-sudo·io.github.lordbasilaiassistant-sudo/contract-scanner·v1.0.2
No reviews yet

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

C55/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C55/100

full report

Adoption
New

29 downloads/wk

Reviews

Write one

Nobody has reviewed Contract Scanner yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Contract Scanner tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan14 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Contract Scanner compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
55/100
higher than 10% of 915 Security servers
Downloads a week
29
more than 16% of 248 Security servers with a package

Install Contract Scanner in Claude Code, Cursor or VS Code

Runs npx -y @thryx/contract-scanner-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add contract-scanner -- npx -y @thryx/contract-scanner-mcp-server
Add to Cursor

Contract Scanner: common questions

Is Contract Scanner MCP server safe?
With care: it is graded C, so read the findings first (55/100). Read the Contract Scanner safety report
How do I install Contract Scanner?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Contract Scanner need an API key?
Yes. The registry entry asks for THRYX_API_KEY, BASESCAN_API_KEY, ETHERSCAN_API_KEY.
Is Contract Scanner maintained?
The latest release is v1.0.2.
What can I use instead of Contract Scanner?
Servers from other publishers that do the same job: Bawbel Scanner MCP server, CodeInspectus MCP server and MCP Safety Warden MCP server.
How does Contract Scanner compare with other Security MCP servers?
safety score 55/100 (higher than 10% of 915 Security servers); downloads a week 29 (more than 16% of 248 Security servers with a package). Full comparison.

Alternatives to Contract Scanner

Same job from other publishers: the closest match first, then the best rated.

  • Bawbel Scanner
    Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
    B
  • CodeInspectus
    Local-first MCP security scanner and CLI for AI-generated applications.
    C
  • MCP Safety Warden
    MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.
    A
  • SafeWeave
    Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
    C
  • mcp-audit
    Scan, enumerate, and risk-score every MCP server configured on your machine.
    A

More from lordbasilaiassistant-sudo →