Contract Security Scanner

Overview

Contract Security Scanner is an MCP server that analyzes Base L2 smart contracts for security vulnerabilities. It assigns a risk score from 0 to 100 and detects common threats including backdoors and proxy-based exploits, helping developers identify potential security issues before deployment.

The server runs locally on your machine using the npm package @fino314-oss/contract-scanner-mcp, which communicates over stdio. You'll need an API key for authentication. The latest release is v1.0.0, and the source code is available at fino-oss/contract-scanner-mcp on GitHub.

Contract Security Scanner is listed in the Security category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and others. If you maintain this project, you can claim this listing to verify ownership and keep information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "contract_security_scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@fino314-oss/contract-scanner-mcp"
      ]
    }
  }
}