Kestrova Solidity Security Scan
Server Details
Free Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 3 tools
The three tools have distinct roles: payment_terms is pure metadata/pricing, scan_solidity_preview is a free limited check, and scan_solidity_full is a paid detailed scan. Preview vs full could be mistaken at a glance, but the descriptions clearly mark free/limited vs paid/detailed and the payment_terms tool anchors the paid flow.
The two scan tools follow a clean scan_solidity_<qualifier> pattern (preview/full). payment_terms is a noun phrase that deviates from the verb_noun convention, but it is still readable and thematically related to the x402 payment flow.
Three tools for a narrowly scoped security-scanning service is lean but each earns its place: pricing, free tier, paid tier. It sits at the lower edge of comfortable, but nothing feels redundant or missing at the surface level.
The lifecycle is essentially covered: discover pricing, try a free scan, and run a full paid scan with structured findings. Minor gaps exist (no scan-history retrieval, no explicit report export or supported-chain listing beyond payment_terms), but these are workarounds rather than blockers.
Available Tools
3 toolspayment_termsBRead-onlyInspect
FREE. Price, recipient, network, asset and how to pay for scan_solidity_full.
Inputs: no named parameters.
scan_solidity_fullBInspect
OPTIONAL, PAID ($1.00 USDC via x402 on Base or Solana). Structured Slither findings for Solidity: detector, impact, confidence, description and file/line locations, for fixing each issue. counts and findings cover every finding; each finding's scope is "application" or "dependency" (located only in uploaded lib// or node_modules/ code; original severity kept), with application_counts and dependency_counts. Without a valid x402 payment in _meta['x402/payment'] it returns the payment terms and does NOT scan or charge. Charged only after a successful scan. Pay only with your user's explicit authorisation and within their spending limits.
Inputs: sources (required).
scan_solidity_previewARead-onlyIdempotentInspect
FREE Solidity security check (Slither static analysis), no key and no wallet. Detects known vulnerability patterns (reentrancy, unchecked calls, tx.origin authorisation, arbitrary ETH sends, unprotected functions and more) and returns severity counts plus High/Medium detector names. Use after writing or changing a contract and before deployment. Input: {"sources": {"File.sol": ""}} (include imported files). Up to 15 KB / 10 files; rate-limited per client. Zero findings does not mean safe.
Inputs: sources (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Smart-contract risk reports for AI agents on 20 EVM chains, paid per call via x402 ($0.02 USDC).
AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Free token-safety scans + paid x402 verdicts, signals, radar & EVM swap quotes for AI agents.
Related MCP Servers
- AlicenseAqualityBmaintenanceAI-powered smart contract security analysis for AI agents and developers, enabling scanning of Solidity repos for vulnerabilities.343 npm11MIT
- AlicenseAqualityBmaintenanceEnables AI assistants and CLI users to run automated bytecode security audits of EVM smart contracts on Base Mainnet, detecting risky opcodes and interface signatures, scoring risk, and unlocking verified results via x402 USDC micropayments.3MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to scan code for security vulnerabilities before execution, supporting Python and JavaScript/TypeScript with deterministic AST-based analysis and optional Solana micropayments.4 npmMIT
- FlicenseNot gradedqualityCmaintenancePay-per-call agent tools (web reader, page extract, email/domain/site/wallet/token checks, screenshot, PDF) via x402 USDC micropayments, with 3 free trial calls per wallet.-
Glama MCP Gateway
Add one secure layer between your agents and this server.