scan_contract
Submit a public GitHub repo for automated smart contract security analysis. Uses a 7-gate framework to filter false positives and pinpoint real vulnerabilities.
Instructions
Submit a public GitHub repository for an automated smart contract security analysis. Runs the Al-Mizaan v3 7-gate framework (code, reachability, threat-model, invariant, protocol-intent, impact, formal proof) to filter out false positives before reporting anything — on a real benchmark run (3FLabs/grunt, 218 contracts) plain Slither reported 27 "High" findings with a 100% false-positive rate; see BENCHMARK.md for the full comparison. Pattern awareness is drawn from a corpus of 27,681 submitted Sherlock/Code4rena findings; the acceptance-rate numbers used elsewhere in this server (list_vulnerability_patterns) are limited to the 1,032 findings that could be exact-reconciled against contest outcomes — see METHODOLOGY.md. Cost: $5 USDC on Base (eip155:8453) via x402. Delivery is guaranteed within 24h — the sample run documented in README.md took about 25 minutes. Returns a job_id. Use get_scan_report to poll for results. If payment_required is true, pay $5 USDC to the payTo address on Base, then retry scan_contract with the same repo_url.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| repo_url | Yes | Public GitHub repo URL containing Solidity contracts (e.g. https://github.com/org/repo) | |
| protocol_type | No | Protocol category for targeted analysis (optional, default GENERAL) |