Skip to main content
Glama

audit.smart_contract

Read-onlyIdempotent

Smart Contract Vulnerability & Invariant Security Audit: Automated deep invariant analysis for Solidity and Rust/Anchor contracts with CEI checks and severity breakdown. (Price: $0.495 USDC via x402 on Base/Solana)

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
codeYesSmart contract source code (Solidity or Rust/Anchor) or contract address to audit.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesDetailed result, report, diff, or analysis output
statusYesExecution status of the micro-service (success/error)
timestampNoUnix timestamp of execution
monetizationNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool read-only, idempotent, and non-destructive, covering the safety profile. The description adds useful operational context by mentioning the $0.495 USDC fee via x402 on Base/Solana, but it does not disclose details like rate limits, execution time, or whether an address is treated differently from source code.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: a clear purpose statement followed by an essential pricing/payment note. Both sentences earn their place, and there is no filler or redundant elaboration.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter, read-only tool with an output schema, the description covers the key operational facts: audit focus, supported languages, input form, and cost. It could be more complete by noting any constraints or exclusions, such as network/chain limitations, but it is sufficient for an agent to understand the tool's role.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents the only parameter, code, as 'Smart contract source code (Solidity or Rust/Anchor) or contract address to audit.' The description repeats the supported languages but adds no new semantic detail beyond the schema, so the baseline score of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states an audit function for smart contracts, specifying deep invariant analysis, CEI checks, and severity breakdown for Solidity and Rust/Anchor contracts. It is specific about the resource and method, though it does not explicitly contrast itself with sibling audit-related tools like order.commercial_audit or security.honeypot_check.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description establishes clear context: use this tool to perform a security-focused invariant audit on Solidity or Rust/Anchor smart contracts, with code or an address as input. It does not explicitly mention when not to use it or name alternatives, but the intended use case is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation3/5

Most tools target clearly distinct domains, but audit.smart_contract and order.commercial_audit overlap as audit offerings, and order.ast_remediation and remediate.code_patch both generate AST-based remediation patches. The pricing and commercial language help somewhat, but the boundaries are not crisp enough for reliable tool selection.

Naming Consistency4/5

The dot-separated category.snake_case pattern is consistently applied across all 12 tools, making the set easy to scan. However, the category prefixes mix nouns and verbs (analytics, audit, order, remediate, signals), and 'order' is an unclear prefix.

Tool Count4/5

Twelve tools is a reasonable size for a broad paid Web3/DeFi service suite, and each tool represents a distinct revenue-generating capability. The count feels slightly padded by overlapping audit and remediation offerings that could be consolidated.

Completeness3/5

The suite covers a wide range of Web3 tasks including audits, remediation, security checks, routing, analytics, governance simulation, and signals. However, there are no workflow-oriented tools for managing or retrieving past audit/remediation orders, and the broad scope makes the domain boundaries vague.

Resources