Skip to main content
Glama
mastrophot

mcp-contract-security

by mastrophot
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to mcp-contract-security

No user-submitted related servers found.

    Related Servers

    • Smart Contract Security

      uitkhoanna
      F
      license
      Not graded
      quality
      D
      maintenance
      An MCP server that statically audits Solidity smart contracts for common vulnerabilities like reentrancy and access control, enabling developers to identify and fix security issues via natural language.
      -

    • smart-contract-scanner-api

      lazymac2x
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables scanning Solidity smart contracts for 13 vulnerability classes using pattern-based analysis; provides full audit, quick scan, gas analysis, and detector catalog through MCP tools.
      -

    • mcp-fortress

      mcp-fortress
      A
      license
      Not graded
      quality
      D
      maintenance
      Scans MCP servers for security vulnerabilities, prompt injection, and tool poisoning, providing risk scores and protection.
      4
      MIT

    • meok-mcp-injection-scan-mcp

      CSOAI-ORG
      A
      license
      A
      quality
      D
      maintenance
      Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.
      5
      MIT

    • agent-audit

      piiiico
      A
      license
      Not graded
      quality
      B
      maintenance
      Security scanner for MCP servers. Detects prompt injection, command injection, auth bypass, and excessive permissions across tools, resources, and prompts.
      11 npm
      2
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose: scanning contracts for vulnerabilities, comparing architectures, and providing checklists. There is no meaningful overlap that would cause an agent to select the wrong tool.

    Naming Consistency4/5

    Two tools follow a verb_noun pattern (scan_contract, compare_security_models), while audit_checklist is more of a noun phrase. The pattern is mostly predictable and readable, with only a minor deviation.

    Tool Count4/5

    Three tools is a reasonable scope for a focused contract security server. It is slightly small but each tool serves a distinct, justified function within the domain.

    Completeness4/5

    The toolset covers scanning, comparative analysis, and actionable guidance, which gives agents a solid workflow. It lacks deeper features like detailed report generation or code fixes, but the core security assessment use case is well covered.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources