Skip to main content
Glama

TON Dev Skills is a comprehensive development and security platform for the TON blockchain. It scans FunC, Tact, and Tolk contracts for vulnerabilities, migrates Solidity contracts to TON-native equivalents, and integrates directly into your AI-powered IDE via MCP.

โœจ What You Get

Feature

Description

Security Scanner

50+ rules across 21 categories โ€” from reentrancy to TEP compliance

Migration Engine

Convert ERC-20, ERC-721, ERC-1155 and more from EVM โ†’ TON (Jettons, NFTs, SBTs)

MCP Server

Use scanner, migration, and contract tools directly in Claude, Cursor, Windsurf, etc.

CLI

Audit, compile, deploy, scaffold, and test-generate from the command line

Contract Templates

Production-ready Jetton, NFT, DAO, DEX, and multisig templates

Related MCP server: Solana Web3.js MCP Server

๐Ÿš€ Getting Started

# Install from npm
npm install -g @tesserae/ton-dev-skills

# Run your first audit
ton-dev audit ./contracts/my-contract.fc

# Scaffold a new contract
ton-dev scaffold jetton --name "MyToken" --symbol "MTK"

# Compile a contract
ton-dev compile ./contracts/my-contract.fc

# Start the MCP server (for Claude, Cursor, etc.)
ton-dev mcp start

๐Ÿ‘‰ Full Getting Started Guide โ†’

๐Ÿ” Scanner Categories

The security scanner checks 50+ rules across these categories:

Access Control

Arithmetic Safety

Bounced Messages

Cell Overflow

Code Injection

Compilation

Data Validation

Denial of Service

External Messages

Gas & Fees

Integer Handling

Randomness

Replay Protection

Reentrancy

State Management

Storage

TEP Compliance

Timestamp

Upgradeability

TVM Internals

Cross-Contract Safety

๐Ÿ“Š Sample Output

$ ton-dev audit contracts/my-jetton.fc

  TON Dev Skills โ€” Security Audit
  โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•

  Contract: contracts/my-jetton.fc
  Language:  FunC
  Rules:     53 checked

  โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
  โ”‚ Severity โ”‚ Finding                            โ”‚ Line     โ”‚
  โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
  โ”‚ ๐Ÿ”ด HIGH  โ”‚ Missing sender validation on       โ”‚ L42      โ”‚
  โ”‚          โ”‚ internal_transfer handler           โ”‚          โ”‚
  โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
  โ”‚ ๐ŸŸก MED   โ”‚ No bounce handler for failed       โ”‚ L87      โ”‚
  โ”‚          โ”‚ token transfers                     โ”‚          โ”‚
  โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
  โ”‚ ๐Ÿ”ต LOW   โ”‚ Gas estimation missing on          โ”‚ L103     โ”‚
  โ”‚          โ”‚ cross-contract call                 โ”‚          โ”‚
  โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
  โ”‚ ๐ŸŸข INFO  โ”‚ Consider TEP-74 metadata           โ”‚ L12      โ”‚
  โ”‚          โ”‚ extension for discoverability       โ”‚          โ”‚
  โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

  Summary: 1 high ยท 1 medium ยท 1 low ยท 1 info
  Full report: ./audit-report-1708099200.json

๐Ÿ”„ Migration Example

$ ton-dev migrate --from solidity --contract contracts/MyToken.sol

  TON Dev Skills โ€” Migration Engine
  โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•

  Source:     contracts/MyToken.sol (ERC-20)
  Target:     Jetton (TEP-74) + Jetton Wallet (TEP-89)
  Language:   Tact

  โœ… Token metadata mapped (name, symbol, decimals)
  โœ… Mint/burn logic converted to Jetton master ops
  โœ… Transfer โ†’ internal_transfer + transfer_notification
  โœ… Approval pattern removed (not applicable on TON)
  โœ… TEP-74 compliance verified
  โœ… Security audit passed (0 high, 0 medium findings)

  Output: ./output/my-token-jetton.tact
          ./output/my-token-wallet.tact
          ./output/migration-report.md

๐Ÿ› ๏ธ CLI Commands

Command

Description

Plan

ton-dev audit <path>

Security audit a contract or directory

Free

ton-dev compile <file>

Compile a FunC, Tact, or Tolk contract

Free

ton-dev scaffold <template>

Generate a contract from template

Free

ton-dev init

Initialize a TON project

Free

ton-dev deploy <boc>

Deploy a compiled contract

Free

ton-dev debug <exit-code>

Explain a TVM exit code

Free

ton-dev gas estimate <boc>

Estimate gas usage

Free

ton-dev migrate <file>

Migrate an EVM contract to TON

Pro

ton-dev test-gen <file>

Generate test cases

Pro

ton-dev mcp start

Start the MCP server

Pro

๐Ÿค– MCP Integration

Add to your Claude Desktop or Cursor config:

{
  "mcpServers": {
    "ton-dev": {
      "command": "ton-dev",
      "args": ["mcp", "start"]
    }
  }
}

Then ask your AI assistant things like:

  • "Audit this FunC contract for security issues"

  • "Migrate this ERC-20 to a TON Jetton"

  • "Scaffold a new NFT collection contract"

  • "Check if this contract is TEP-74 compliant"

๐Ÿ‘‰ MCP Server Docs โ†’

๐Ÿ’ฐ Pricing

Free

Pro

Enterprise

Security Audits

5/day

Unlimited

Unlimited

Scanner Rules

50+

50+

50+ + custom rules

Migration Engine

โ€”

โœ…

โœ…

MCP Server

โ€”

โœ…

โœ…

Contract Templates

Basic

All

All + custom

CLI Tools

Core (audit, compile, scaffold, deploy, debug, gas)

Full suite

Full suite

Support

Community

Priority

Dedicated

Price

$0

$29/mo

Contact us

๐Ÿ“š Documentation

๐Ÿ“„ License

MIT โ€” see LICENSE for details.

Core scanner rules and migration logic are proprietary. The CLI, MCP server interface, and this repository are open source.

A
license - permissive license
-
quality - not tested
D
maintenance

Maintenance

โ€“Maintainers
โ€“Response time
โ€“Release cycle
โ€“Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/TesseraeVentures/ton-dev-skills'

If you have feedback or need assistance with the MCP directory API, please join our Discord server