1. Conduid
  2. Data
  3. io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp
MCP server · Data

io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp

· github.com/lordbasilaiassistant-sudo/base-security-scanner-mcp

MCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Det

Unclaimed data
InstallView source
37Low

Scored 6 months ago · breakdown

About io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp

io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp is an MCP server in the Data category: mCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Det.

Install

Claude Code
claude mcp add io-github-lordbasilaiassistant-sudo-base-security-scanner-mcp -- npx -y base-security-scanner-mcp
npx
npx -y base-security-scanner-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (8)

analyze_bytecodeDisassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)

Parameters not published.

audit_reportFull security audit combining all checks into one comprehensive report

Parameters not published.

check_honeypotCheck if a token is a honeypot by simulating buy+sell via Uniswap V2

Parameters not published.

check_token_permissionsCheck owner permissions: mint, pause, blacklist, change fees, disable trading

Parameters not published.

compare_bytecodeClone detection -- check if two contracts share the same bytecode

Parameters not published.

detect_rug_riskScore rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status

Parameters not published.

get_contract_infoBasic contract metadata: verified status, bytecode size, ETH balance, token info

Parameters not published.

scan_contractAnalyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)

Parameters not published.

Ask AI

✦

Ask AI about io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp

Powered by Claude · Grounded in docs

I know everything about io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

base-security-scanner-mcp

MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.

Install

npx -y base-security-scanner-mcp

Configure (Claude Desktop / Cursor)

{
  "mcpServers": {
    "base-security-scanner": {
      "command": "npx",
      "args": ["-y", "base-security-scanner-mcp"]
    }
  }
}

Tools (8)

Tool Description
scan_contract Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)
check_honeypot Check if a token is a honeypot by simulating buy+sell via Uniswap V2
detect_rug_risk Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status
analyze_bytecode Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)
check_token_permissions Check owner permissions: mint, pause, blacklist, change fees, disable trading
get_contract_info Basic contract metadata: verified status, bytecode size, ETH balance, token info
compare_bytecode Clone detection -- check if two contracts share the same bytecode
audit_report Full security audit combining all checks into one comprehensive report

Environment Variables

Variable Default Description
RPC_URL https://mainnet.base.org Base mainnet RPC endpoint

How It Works

  • Bytecode Analysis: Extracts PUSH4 opcodes to find function selectors, matches against 30+ known dangerous patterns
  • Opcode Scanning: Detects DELEGATECALL, SELFDESTRUCT, CREATE, CREATE2
  • Honeypot Detection: Simulates ETH->Token->ETH round-trip via Uniswap V2 router getAmountsOut
  • Rug Scoring: Weighted algorithm combining ownership, liquidity depth, dangerous permissions, honeypot status
  • Clone Detection: Jaccard similarity on function selector sets

Related MCP Servers

Package Tools What it does
obsd-launchpad-mcp 14 Deploy tokens, trade, earn OBSD
base-security-scanner-mcp 8 Scan contracts for vulnerabilities
base-price-oracle-mcp 7 On-chain price feeds from DEX pools
base-multi-wallet-mcp 8 Coordinated multi-wallet trading
base-gasless-deploy-mcp 5 Gasless ERC-20 token deployment
base-flash-arb-mcp 7 Detect arbitrage opportunities
base-token-sniper-mcp 5 Discover & trade new launches
base-wallet-toolkit-mcp 7 Wallet balances, gas, tokens
base-contract-reader-mcp 6 Read any smart contract (free)
create-mcp-server-cli - Scaffold a new MCP server

License

MIT

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp

How do I install io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp?

Run claude mcp add io-github-lordbasilaiassistant-sudo-base-security-scanner-mcp -- npx -y base-security-scanner-mcp, then add the server to your MCP client's configuration.

Is io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.