Skip to main content
Glama
lordbasilaiassistant-sudo

base-security-scanner-mcp

base-security-scanner-mcp

MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.

Install

npx -y base-security-scanner-mcp

Related MCP server: BlueAgent x402 Services

Configure (Claude Desktop / Cursor)

{
  "mcpServers": {
    "base-security-scanner": {
      "command": "npx",
      "args": ["-y", "base-security-scanner-mcp"]
    }
  }
}

Tools (8)

Tool

Description

scan_contract

Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)

check_honeypot

Check if a token is a honeypot by simulating buy+sell via Uniswap V2

detect_rug_risk

Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status

analyze_bytecode

Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)

check_token_permissions

Check owner permissions: mint, pause, blacklist, change fees, disable trading

get_contract_info

Basic contract metadata: verified status, bytecode size, ETH balance, token info

compare_bytecode

Clone detection -- check if two contracts share the same bytecode

audit_report

Full security audit combining all checks into one comprehensive report

Environment Variables

Variable

Default

Description

RPC_URL

https://mainnet.base.org

Base mainnet RPC endpoint

How It Works

  • Bytecode Analysis: Extracts PUSH4 opcodes to find function selectors, matches against 30+ known dangerous patterns

  • Opcode Scanning: Detects DELEGATECALL, SELFDESTRUCT, CREATE, CREATE2

  • Honeypot Detection: Simulates ETH->Token->ETH round-trip via Uniswap V2 router getAmountsOut

  • Rug Scoring: Weighted algorithm combining ownership, liquidity depth, dangerous permissions, honeypot status

  • Clone Detection: Jaccard similarity on function selector sets

Package

Tools

What it does

obsd-launchpad-mcp

14

Deploy tokens, trade, earn OBSD

base-security-scanner-mcp

8

Scan contracts for vulnerabilities

base-price-oracle-mcp

7

On-chain price feeds from DEX pools

base-multi-wallet-mcp

8

Coordinated multi-wallet trading

base-gasless-deploy-mcp

5

Gasless ERC-20 token deployment

base-flash-arb-mcp

7

Detect arbitrage opportunities

base-token-sniper-mcp

5

Discover & trade new launches

base-wallet-toolkit-mcp

7

Wallet balances, gas, tokens

base-contract-reader-mcp

6

Read any smart contract (free)

create-mcp-server-cli

-

Scaffold a new MCP server

License

MIT

Install Server
A
license - permissive license
A
quality
D
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

View all related MCP servers

Related MCP Connectors

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/lordbasilaiassistant-sudo/base-security-scanner-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server