How do I use claudit?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@claudit Search Solodit for oracle manipulation HIGH severity findings" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

claudit

by marchev

Overview Schema Source Related Servers Discussions Admin

JavaScript

Remote

claudit

Smart contract security findings for AI coding agents

Search Solodit's 20,000+ audit findings from Claude Code and Codex CLI.

Quick Start · Tools · Examples · Configuration

Quick Start

curl -fsSL https://raw.githubusercontent.com/marchev/claudit/main/install.sh | sh

The installer detects Claude Code and/or Codex CLI, prompts for your Solodit API key, and registers the MCP server.

Then just ask:

> Find 5 solo findings by 0x52 at Sherlock

Claude Code

claude mcp add --scope user --transport stdio solodit \
  --env SOLODIT_API_KEY=sk_your_key_here \
  -- npx -y @marchev/claudit@latest

# (Optional) Install companion skill
mkdir -p ~/.claude/skills/solodit
curl -fsSL https://raw.githubusercontent.com/marchev/claudit/main/.claude/skills/solodit/SKILL.md \
  -o ~/.claude/skills/solodit/SKILL.md

Codex CLI

codex mcp add solodit \
  --env SOLODIT_API_KEY=sk_your_key_here \
  -- npx -y @marchev/claudit@latest

Related MCP server: solidit-mcp-server

Tools

`search_findings`

Search across all findings with filters.

Parameter	Type	Description
`keywords`	`string`	Text search in title and content
`severity`	`string[]`	`HIGH` `MEDIUM` `LOW` `GAS` (case-insensitive)
`firms`	`string[]`	Audit firm names
`tags`	`string[]`	Vulnerability tags
`language`	`string`	Programming language
`protocol`	`string`	Protocol name (partial match)
`reported`	`string`	`30` `60` `90` `alltime`
`sort_by`	`string`	`Recency` `Quality` `Rarity`
`sort_direction`	`string`	`Desc` (default) `Asc`
`page`	`int`	Page number (default 1)
`page_size`	`int`	Results per page (default 10, max 100)
`advanced_filters`	`object`	See below

Field	Type	Description
`quality_score`	`number`	Minimum quality score (0-5)
`rarity_score`	`number`	Minimum rarity score (0-5)
`user`	`string`	Finder/auditor handle
`min_finders`	`number`	Minimum number of finders
`max_finders`	`number`	Maximum number of finders
`reported_after`	`string`	ISO date string
`protocol_category`	`string[]`	Protocol categories
`forked`	`string[]`	Forked protocol names

`get_finding`

Get full details for a specific finding by numeric ID, Solodit URL, or slug.

`get_filter_options`

List all valid filter values — firms, tags, categories, languages — with finding counts.

Examples

Search Solodit for oracle manipulation HIGH severity findings
Find all Sherlock findings about flash loans
What reentrancy issues exist in lending protocols?
Show me solo findings by 0x52
Get recent HIGH severity Solidity findings sorted by quality

Configuration

Claude Code:

claude mcp remove solodit
claude mcp add --scope user --transport stdio solodit \
  --env SOLODIT_API_KEY=sk_new_key \
  -- npx -y @marchev/claudit@latest

Codex CLI:

codex mcp remove solodit
codex mcp add solodit \
  --env SOLODIT_API_KEY=sk_new_key \
  -- npx -y @marchev/claudit@latest

Cursor MCP

{
  "mcpServers": {
    "solodit": {
      "command": "npx",
      "args": ["-y", "@marchev/claudit@latest"],
      "env": {
        "SOLODIT_API_KEY": "sk_new_key"
      }
    }
  }
}

Claude Code:

claude mcp remove solodit
rm -rf ~/.claude/skills/solodit

Codex CLI:

codex mcp remove solodit

git clone https://github.com/marchev/claudit.git
cd claudit
npm install
npm run build

# Test locally
SOLODIT_API_KEY=sk_your_key node dist/index.js

Support

Claudit is a solo-maintained public good for Ethereum security. If it saves you time or finds bugs for you, consider supporting its continued development on Giveth:

giveth.io/project/claudit-0

MIT License

Available Tools

4 tools

get_claudit_versionA

Returns the currently running version of the Claudit MCP server.

Inputs: no named parameters.

get_filter_optionsA

List available filter values for Solodit search (firms, tags, categories, languages). Use this to discover valid values for search_findings filters.

Inputs: no named parameters.

get_findingA

Get full details for a specific Solodit finding by its numeric ID (preferred), URL, or slug. Returns complete markdown content and all metadata.

Inputs: identifier (required).

search_findingsA

Search Solodit's 20k+ smart contract security findings from real audits. Returns severity, firm, protocol, tags, quality score, content snippet, and Solodit URL for each finding. IMPORTANT: Each result includes a Solodit URL — always include it when presenting results to the user.

Inputs: page, tags, firms, sort_by, +8 more.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.2/5.0

Scored 2026-07-06 04:10 across 4 tools

Disambiguation5/5

Each tool targets a distinct action: version retrieval, filter discovery, single finding detail, and finding search. There is no overlap in purpose.

Naming Consistency5/5

All tools use snake_case with a verb_noun pattern. Three use 'get_' and one uses 'search_', but the verb clearly indicates the operation type, and the naming is predictable.

Tool Count5/5

With 4 tools, the server is well-scoped for its purpose of searching and retrieving audit findings, plus supporting utilities like version and filter options.

Completeness5/5

The server provides a complete surface for read-only access to findings: discover filters, search, and get full details. No missing operations for its intended use case.

Resources

Related MCP Connectors

Kestrova: Solidity Vulnerability ScanA
io.github.som2026-commits
Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402
Blockchain Code Analysis Penetration Testing
31
https://kestrova.onrender.com/mcp?src=registry
nist-nvd-mcp-serverA
io.github.cyanheads
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Penetration Testing Government Data
512
https://nist-nvd.caseyjhand.com/mcp
Maguyva
ai.maguyva
Code intelligence for coding agents: semantic, AST, graph, and full-text search. 279+ languages.
Code Analysis Coding Agents
23
https://maguyva.tools/mcp
Bug Bounty Intelligence
io.github.holistis
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Blockchain Penetration Testing
211
https://wazir-x402.duckdns.org/api/bug-intel

Related MCP Servers

Solodit MCP Serverofficial
Blockchain Research & Data
zerotrust-labs
A
license
A
quality
D
maintenance
MCP server that provides access to Cyfrin Solodit's database of smart contract security findings, enabling search and filtering by impact, firms, tags, and more.
Updated 9 months ago (2026-01-30 18:30 UTC)
2
1
MIT
solidit-mcp-server
Blockchain Penetration Testing
HBlackfoxx
A
license
A
quality
D
maintenance
Connects AI assistants to Solodit's 49,000+ blockchain vulnerability database, enabling search, browse, and lookup of audit findings directly from your AI workflow.
Updated 8 months ago (2026-03-10 16:38 UTC)
4
MIT
ContractAudit MCP Server
RAG Systems Search Blockchain
ArmaghanRazaChaudhary
A
license
B
quality
D
maintenance
Enables read-only search over a curated, provenance-preserving corpus of EVM smart-contract security knowledge, providing tools for retrieving audit findings, document context, and source information.
Updated 4 months ago (2026-07-21 22:31 UTC)
5
MIT
3ilm-mcp
Blockchain Research & Data Security
holistis
A
license
C
quality
C
maintenance
Enables AI agents and security researchers to query a curated knowledge base of 1,032 verified smart contract vulnerability findings from Sherlock audit contests, including acceptance rates and examples per vulnerability pattern.
Updated 2 months ago (2026-09-08 06:48 UTC)
3
59 npm
2
MIT

claudit

Quick Start

Claude Code

Codex CLI

Tools

search_findings

get_finding

get_filter_options

Examples

Configuration

Support

Available Tools

Tool Schema Changelog

TDQS

Resources

Related MCP Connectors

Related MCP Servers

Solodit MCP Serverofficial

solidit-mcp-server

ContractAudit MCP Server

3ilm-mcp

`search_findings`

`get_finding`

`get_filter_options`