recon-fuzz-chimera-mcp
Generates Medusa fuzzer configuration files (medusa.json) as part of Chimera test suite scaffolding for smart contract security testing.
Generates fuzzing test suites for Solidity smart contracts, including invariant properties, setup configurations, and target function definitions for security testing.
Generates Foundry configuration files (foundry.toml) as part of Chimera test suite scaffolding for smart contract fuzzing and security testing.
Generates Echidna configuration files (echidna.yaml) as part of Chimera test suite scaffolding for smart contract fuzzing and security testing.
@recon-fuzz-mcp/chimera
MCP server that scaffolds Chimera fuzzing test suites for Solidity smart contracts. Generates ready-to-compile projects with properties, handlers, and fuzzer configs.
Tools
Tool | Input | Returns |
|
| Full Chimera project (Setup, Properties, TargetFunctions, BeforeAfter, CryticTester + configs) |
|
| 8-15 curated invariant properties with Solidity skeletons |
|
| Complete ready-to-compile Chimera project for a standard protocol type |
|
| Detailed explanation with code examples |
Protocol types
erc20, vault, lending, amm, governance, staking
Patterns
actors, ghosts, cross-contract, setup-layering
Related MCP server: smart-contract-scanner-api
Installation
Claude Code
claude mcp add chimera-scaffold -- npx @recon-fuzz-mcp/chimeraClaude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"chimera-scaffold": {
"command": "npx",
"args": ["@recon-fuzz-mcp/chimera"]
}
}
}Cursor
Add to .cursor/mcp.json in your project:
{
"mcpServers": {
"chimera-scaffold": {
"command": "npx",
"args": ["@recon-fuzz-mcp/chimera"]
}
}
}No API key needed. The server runs entirely locally with no network calls.
Local development
git clone https://github.com/Recon-Fuzz/recon-mcp-chimera.git
cd recon-mcp-chimera
npm install
npm run buildTest it works
# List tools
echo '{"jsonrpc":"2.0","method":"tools/list","id":1}' | node dist/index.js
# Scaffold a vault project
echo '{"jsonrpc":"2.0","method":"tools/call","params":{"name":"scaffold_project","arguments":{"contract_name":"SimpleVault","functions":["deposit(uint256)","withdraw(uint256)"]}},"id":2}' | node dist/index.js
# Get a lending template
echo '{"jsonrpc":"2.0","method":"tools/call","params":{"name":"get_template","arguments":{"template_name":"lending"}},"id":3}' | node dist/index.jsArchitecture
No network calls — everything is in-memory templates and string generation
src/templates/base.ts— Solidity file generators (Setup, BeforeAfter, Properties, TargetFunctions, CryticTester)src/templates/configs.ts— Fuzzer config generators (foundry.toml, echidna.yaml, medusa.json)src/properties/— Curated property catalogs per protocol type (8-15 properties each)src/patterns/— Pattern explanations with full Solidity code examplessrc/tools/— MCP tool implementations
Privacy
This server runs entirely offline. No network calls, no environment variables read, no data written to disk, no telemetry. All template generation happens in-process.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
AlicenseAqualityDmaintenanceEnables static analysis of Solidity smart contracts using Slither, including contract metadata, function details, inheritance, and security detectors through MCP tools.2396AGPL 3.0- Flicense-qualityDmaintenanceEnables scanning Solidity smart contracts for 13 vulnerability classes using pattern-based analysis; provides full audit, quick scan, gas analysis, and detector catalog through MCP tools.
- FlicenseAqualityCmaintenanceEnables autonomous web-contract verification through MCP tools for planning, classifying, checking, and recording bug patterns, with access to a shared community corpus that strengthens collective detection.6161
- Alicense-qualityAmaintenanceAI-orchestrated security testing via 6 Python tools (recon, port scan, subdomain hunting, frontend scanning, API fuzzing, and nemesis orchestrator) exposed as MCP tools for use by AI agents.MIT
Related MCP Connectors
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Blockscout MCP — multi-chain block-explorer aggregate
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Recon-Fuzz/recon-mcp-chimera'
If you have feedback or need assistance with the MCP directory API, please join our Discord server