1. Conduid
  2. Security
  3. io.github.mastrophot/contract-security-scanner
MCP server · Security

io.github.mastrophot/contract-security-scanner

· github.com/mastrophot/near-mcp-contract-security

MCP smart contract scanner with NEAR-focused security context.

Unclaimed security
InstallView source
37Low

Scored 6 months ago · breakdown

About io.github.mastrophot/contract-security-scanner

io.github.mastrophot/contract-security-scanner is an MCP server in the Security category: mCP smart contract scanner with NEAR-focused security context.

Install

Claude Code
claude mcp add io-github-mastrophot-contract-security-scanner -- npx -y mcp-contract-security
npx
npx -y mcp-contract-security

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.mastrophot/contract-security-scanner

Powered by Claude · Grounded in docs

I know everything about io.github.mastrophot/contract-security-scanner. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

mcp-contract-security

MCP server for smart contract security scanning.

Implements the required tools:

  • scan_contract
  • compare_security_models
  • audit_checklist

Supports languages:

  • solidity
  • rust
  • typescript

What it checks

scan_contract currently detects heuristic patterns for:

  • Reentrancy
  • Integer overflow/underflow risk
  • Access control issues
  • Front-running exposure
  • Oracle manipulation risk

The output includes:

  • vulnerability list with severity/type/line
  • security_score
  • near_equivalent_score
  • NEAR-specific security notes and recommendation

Install

npm install -g mcp-contract-security

Published package:

MCP config (Claude Desktop)

{
  "mcpServers": {
    "contract-security": {
      "command": "mcp-contract-security"
    }
  }
}

Tool usage

scan_contract

Input:

{
  "code": "contract source code here",
  "language": "solidity"
}

compare_security_models

Input (optional):

{
  "language": "solidity"
}

audit_checklist

Input (optional):

{
  "language": "rust"
}

Local development

npm install
npm run check

Deliverable assets

Additional publish assets are prepared in deliverables/:

  • deliverables/mcp-registry-submission.md
  • deliverables/security-subreddit-posts.md
  • deliverables/blog-why-near-contracts-safer.md
  • server.json (MCP Registry metadata, schema-validated)

License

MIT

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.mastrophot/contract-security-scanner

How do I install io.github.mastrophot/contract-security-scanner?

Run claude mcp add io-github-mastrophot-contract-security-scanner -- npx -y mcp-contract-security, then add the server to your MCP client's configuration.

Is io.github.mastrophot/contract-security-scanner safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.mastrophot/contract-security-scanner still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.