solidit-mcp-server

Give AI assistants instant access to Solodit's 49,000+ blockchain vulnerability database.

An MCP server that connects Claude (and other MCP clients) to the Solodit audit findings API -- search vulnerabilities, browse recent discoveries, and look up specific findings directly from your AI workflow.

Runs via npx solidit-mcp-server with zero global installation required.

Quick Start

1. Get an API key at solodit.cyfrin.io (Profile > API Keys)

2. Add the MCP config (see Claude Code or Claude Desktop below)

3. Start using it -- ask Claude something like:

   "Search for reentrancy vulnerabilities in DeFi protocols"

Related MCP server: Elytra Security MCP Server

Claude Code

Add to your .mcp.json (project-level) or ~/.claude/mcp.json (global):

{
  "mcpServers": {
    "solodit": {
      "command": "npx",
      "args": ["-y", "solidit-mcp-server"],
      "env": { "SOLODIT_API_KEY": "your-api-key-here" }
    }
  }
}

Claude Desktop

Add to your Claude Desktop config file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "solodit": {
      "command": "npx",
      "args": ["-y", "solidit-mcp-server"],
      "env": { "SOLODIT_API_KEY": "your-api-key-here" }
    }
  }
}

Docker

Build and run locally:

docker build -t solidit-mcp-server .
docker run -i -e SOLODIT_API_KEY=your-api-key-here solidit-mcp-server

Or use docker-compose with a .env file:

# .env
SOLODIT_API_KEY=your-api-key-here

docker compose up

Tools

search_findings

Full-featured search across Solodit's database with 14+ filters. All parameters are optional -- a bare call returns recent findings.

Example: "Find high-impact reentrancy findings in DeFi protocols audited by Cyfrin"

get_finding_detail

Retrieve the full content and metadata of a single finding by ID or slug. Use after seeing a result in search_findings to get the complete writeup.

Example: "Get the full details of finding abc-123-def"

search_by_tag

Search by vulnerability tags, sorted by quality score (best examples first). Ideal for finding high-quality writeups about a specific vulnerability class.

Example: "Find the best oracle manipulation examples in Solidity"

recent_findings

Browse the latest findings from the last N days, sorted by recency (newest first).

Example: "Show me high-impact findings from the last 7 days"

API Key

This server requires a Solodit API key. Get yours at solodit.cyfrin.io under Profile > API Keys.

The key is passed via the SOLODIT_API_KEY environment variable in your MCP configuration (see setup sections above).

License

MIT