Skip to main content
Glama

pentagonal-mcp

pentagonal MCP server npm License: MIT

MCP server for Pentagonal — the AI-powered smart contract forge.

Tools

Tool

Description

Auth

pentagonal_lookup

Token intelligence — price, holders, LP lock, honeypot, source code

Free (rate limited)

pentagonal_audit

8-agent security pen test with severity grouping and PoC exploits

$5 (credit or x402)

pentagonal_generate

Generate contracts from natural language (Solidity + Anchor/Rust)

$5 (credit or x402)

pentagonal_fix

Fix a specific vulnerability while preserving functionality

Free (rate limited)

pentagonal_compile

Compile Solidity to ABI + bytecode + gas estimates

Free (rate limited)

pentagonal_rules

View accumulated self-learning security rules

Free

pentagonal_chains

List all supported blockchains

Free

Supports Ethereum, Base, Polygon, Arbitrum, Optimism, BSC, Avalanche, and Solana.

Related MCP server: MCP Anvil Tools

Setup

Claude Desktop (stdio)

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "pentagonal": {
      "command": "npx",
      "args": ["-y", "pentagonal-mcp"],
      "env": {
        "PENTAGONAL_KEY": "your-api-key"
      }
    }
  }
}

Claude Code / Cursor / Windsurf (HTTP)

Add to your MCP config:

{
  "mcpServers": {
    "pentagonal": {
      "type": "http",
      "url": "https://www.pentagonal.ai/api/mcp",
      "headers": {
        "x-pentagonal-api-key": "your-api-key"
      }
    }
  }
}

Get an API Key

  1. Sign in at pentagonal.ai

  2. Click your avatar → 🔑 API Keys

  3. Generate a key — it's shown once, copy it immediately

Payment Options

  • Credits — $5 per audit or generate, buy via the web app (EVM or Solana)

  • x402 — agents pay per-use with USDC on Base (no account needed)

  • API key — use your credit balance programmatically

  • Free tools — fix, compile, lookup, rules, chains are free for everyone

License

MIT

Available Tools

7 tools
pentagonal_auditA

Run an 8-agent security pen test on a smart contract. Each agent specializes in a different attack vector: reentrancy, flash loans, access control, gas griefing, oracle manipulation, front-running, integer overflow, and economic exploits. Findings are returned with severity ratings and line numbers. New security rules are automatically learned from each audit.

Inputs: code (required), chain, use_learned_rules.

pentagonal_chainsB

List all supported blockchains with their chain IDs, explorer URLs, and deployment hints.

Inputs: no named parameters.

pentagonal_compileA

Compile Solidity source code and return the ABI, bytecode, constructor arguments, and gas estimates. Use this after generating and auditing a contract to prepare it for deployment.

Inputs: code (required), contract_name.

pentagonal_fixB

Fix a specific vulnerability in a smart contract. Provide the contract code and the finding details — returns the complete fixed contract preserving all existing functionality.

Inputs: code (required), finding_title (required), finding_description (required).

pentagonal_generateA

Generate a production-quality smart contract from a natural language description. Supports EVM (Solidity) and Solana (Anchor/Rust or SPL Token config). The generator uses Pentagonal's self-learning security rules to produce safer code.

Inputs: prompt (required), chain, solana_type, use_learned_rules.

pentagonal_lookupA

Look up any token or smart contract by address. Returns the full intelligence report: price, market cap, ATH, 24h volume, transactions, holders, liquidity, LP lock status, pool count, security flags (honeypot, mintable, pausable, hidden owner, taxes), social links, and source code if verified. Use this before auditing to understand the full token landscape. Supports EVM and Solana tokens. Chain is auto-detected if omitted.

Inputs: address (required), chain, fields.

pentagonal_rulesB

Get the current self-learning security rules. These rules are accumulated from every audit Pentagonal performs — the more contracts audited, the smarter the system gets.

Inputs: no named parameters.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.9/5.0

    Scored across 7 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose with no overlap: audit runs security tests, chains lists blockchains, compile compiles code, fix fixes vulnerabilities, generate creates contracts, lookup retrieves token/contract intelligence, and rules gets security rules. The descriptions reinforce these unique roles, making tool selection unambiguous.

    Naming Consistency5/5

    All tools follow a consistent 'pentagonal_verb' naming pattern (e.g., pentagonal_audit, pentagonal_compile, pentagonal_fix). This uniform verb-based structure makes the tool set predictable and easy to navigate, with no deviations in style or convention.

    Tool Count5/5

    With 7 tools, the server is well-scoped for smart contract security and development. Each tool serves a specific, non-redundant function in the workflow (e.g., generate, audit, fix, deploy support), and the count is neither too sparse nor bloated for the domain.

    Completeness4/5

    The tool set covers the core smart contract lifecycle comprehensively: generation, compilation, auditing, fixing, and intelligence lookup. Minor gaps include no explicit deployment tool (though compile provides gas estimates) and limited post-deployment monitoring, but agents can work around these with existing tools.

    Maintenance

    ActivityInactive
    ResponsivenessOutdated data

    Related MCP Connectors

    Related MCP Servers