Which integrations are available for this server?

Supports auditing and inspecting deployed Ethereum smart contracts, including static analysis, vulnerability reporting, gas optimization, formal verification, and contract information retrieval. Supports auditing and inspecting deployed Optimism smart contracts, including static analysis, vulnerability reporting, gas optimization, formal verification, and contract information retrieval. Supports auditing and inspecting deployed Polygon smart contracts, including static analysis, vulnerability reporting, gas optimization, formal verification, and contract information retrieval.

How do I use mcp-contractaudit?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@mcp-contractaudit run static analysis on 0x1234567890abcdef1234567890abcdef12345678 on ethereum" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

mcp-contractaudit

MCP server for Smart Contract Audit — static analysis, vulnerability scanning, gas optimization, formal verification, report generation, and contract information.

Tools

`run_static_analysis`

Run static analysis on a smart contract using multiple tools (Slither, Mythril, Echidna, Manticore, Foundry).

Parameter	Type	Default	Description
`contract_address`	string	required	Contract address on-chain
`source_code`	string	required	Solidity source code for analysis
`tools`	array	`["slither", "mythril"]`	Analysis tools to run
`chain`	string enum	`ethereum`	ethereum, polygon, arbitrum, optimism, base

Returns audit with findings, summary by severity, and metadata.

`get_vulnerability_report`

Get vulnerability report for a completed audit.

Parameter	Type	Default	Description
`audit_id`	string	required	Audit identifier

Returns audit with findings grouped by severity.

`optimize_gas`

Analyze and suggest gas optimizations for contract functions.

Parameter	Type	Default	Description
`contract_address`	string	required	Contract address on-chain
`source_code`	string	required	Solidity source code
`target_function`	string	-	Specific function to optimize; omit for all

Returns optimization suggestions with estimated gas savings.

`verify_formal_spec`

Verify formal specification against contract implementation.

Parameter	Type	Default	Description
`contract_address`	string	required	Contract address on-chain
`spec_file`	string	required	Path to formal specification file
`spec_language`	string enum	`k-framework`	k-framework, certora, scribble

Returns verification result with proof status and counterexamples.

`generate_audit_report`

Generate a comprehensive audit report from audit findings.

Parameter	Type	Default	Description
`audit_id`	string	required	Audit identifier
`format`	string enum	`markdown`	pdf, markdown, html, json
`include_code_snippets`	boolean	`true`	Include code snippets
`executive_summary`	boolean	`true`	Include executive summary

Returns formatted audit report.

`get_contract_info`

Get basic information about a deployed contract.

Parameter	Type	Default	Description
`contract_address`	string	required	Contract address on-chain
`chain`	string enum	`ethereum`	ethereum, polygon, arbitrum, optimism, base

Returns contract info with audit history.

Related MCP server: solidity-sentinel

Installation

pip install -r requirements.txt

Usage

python main.py

State persisted in ./state/. Override with MCP_CONTRACTAUDIT_STATE_DIR.

Connecting to an MCP client

{
  "mcpServers": {
    "contractaudit": {
      "command": "python3",
      "args": ["/tmp/v3-services/mcp-contractaudit/main.py"]
    }
  }
}

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained

ResponsivenessNo issues

Resources

Related MCP Connectors

yultrace-audit A
com.trycloudflare.urgent-clean-occupied-catalogs
EVM audit (Slither + source + security.txt + MCP-probe + wallet-exposure). 6 tools + /trace.
Code Analysis Blockchain Security
2
https://urgent-clean-occupied-catalogs.trycloudflare.com/mcp/
Grisoco AI security audits A
com.grisoco
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
Blockchain Penetration Testing Code Analysis
61
https://grisoco.com/mcp
VulnHunt Security Intelligence C
io.github.owenkingva-web
Read-only smart-contract security intelligence for autonomous agents.
Blockchain Penetration Testing Code Analysis
1
https://vulnhunt-agent-api-production.up.railway.app/mcp
onchain-risk-mcp A
io.github.robertoyanguas-ops
Audits any Base/EVM address for bytecode risk, proxy patterns, honeypot selectors, and balance.
Blockchain Security Web3 & Decentralized Tech
21
https://onchain-risk-72343955726.us-central1.run.app/mcp/onchain-risk

Related MCP Servers

MCP Contract Auditor
Blockchain Security Code Analysis
Carlys17
A
license
A
quality
D
maintenance
Fetches verified EVM smart contract source code, scans for vulnerabilities, analyzes token holder distribution, and generates audit reports.
Updated 3 months ago (2026-07-15 16:43 UTC)
5
MIT
solidity-sentinel
Code Analysis Blockchain
Baneado98
A
license
A
quality
C
maintenance
Enables static security audit of Solidity smart contracts by analyzing source code or deployed bytecode for vulnerabilities, providing risk scores and detailed findings.
Updated 4 months ago (2026-06-23 20:33 UTC)
1
MIT
genpark-smart-contract
Blockchain Code Analysis Penetration Testing
Alpha-Park
F
license
Not graded
quality
B
maintenance
Enables automated Solidity smart contract auditing by analyzing callgraphs and control flow to detect reentrancy vulnerabilities. Integrates with MCP-compatible clients to provide deterministic, zero-dependency security assessments.
Updated 2 months ago (2026-09-05 01:06 UTC)
8
-
Web3 EVM Debugger & Auditor
Blockchain Web3 & Decentralized Tech Code Analysis
Whambammy
A
license
A
quality
C
maintenance
Enables Solidity developers and security auditors to decode EVM calldata, pinpoint revert locations in debug traces, calculate storage slot layouts, and scan contracts for reentrancy and Yul assembly issues.
Updated a month ago (2026-10-03 03:30 UTC)
6
MIT

mcp-contractaudit

Tools

run_static_analysis

get_vulnerability_report

optimize_gas

verify_formal_spec

generate_audit_report

get_contract_info