MCP.Market

Weakspot MCP server

by weakspot.dev·dev.weakspot/weakspot·v0.1.1
No reviews yet

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

C58/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
New

43 downloads/wk

Reviews

Write one

Nobody has reviewed Weakspot yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Weakspot tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • weakspot_audit

    Commission a security audit of Solidity or Rust/Anchor source files. THIS SPENDS REAL MONEY (USDC on Base,

  • weakspot_audit_status

    Poll an audit by jobId. Free, no wallet needed. `stage` moves static-analysis -> batches -> verify ->

  • weakspot_estimate_price

    Price a Weakspot audit before committing to it. $1 per 10 files, rounded up, capped at 40 files.

  • weakspot_wallet_status

    Show which wallet this server pays from and its USDC balance. Use when a payment fails, to tell an unfunded

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

1 low
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (1)

  • lowNo source repository listedmaint.no-repo
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Weakspot compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 13% of 48,243 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
43
more than 33% of 12,306 servers with a package

What its tools let an agent do: 4 read

Install Weakspot in Claude Code, Cursor or VS Code

Runs npx -y weakspot-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add weakspot -- npx -y weakspot-mcp
Add to Cursor

Weakspot: common questions

Is Weakspot MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the Weakspot safety report
How do I install Weakspot?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Weakspot need an API key?
Yes. The registry entry asks for WEAKSPOT_PRIVATE_KEY.
Is Weakspot maintained?
The latest release is v0.1.1.
How does Weakspot compare with other MCP servers?
safety score 58/100 (higher than 13% of 48,243 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.