Skip to main content
Glama
deenesjakoruzh
zalana28

EVM MCP Auditor

by zalana28
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

🛡️ EVM MCP Auditor

CI Test Suite License: MIT MCP Protocol Solidity TypeScript

生产级 Model Context Protocol (MCP) 服务器，用于 EVM 智能合约安全审计、静态漏洞分析以及面向 Claude 和 Claude Code 的多链遥测。

⚡ 概述

EVM MCP Auditor 将 Anthropic 的 Claude、Claude Desktop 和 Claude Code CLI 直接连接到以太坊和 EVM 生态系统。它为 Claude 配备了专门的安全审计工具，可自动检查 Solidity 智能合约中的关键攻击向量、从区块浏览器获取已验证的源代码、解码原始交易 calldata，并估算多链 gas 成本。

┌───────────────────────────┐         ┌───────────────────────────────┐
│                           │  stdio  │                               │
│  Claude Desktop / Code    │ ◄─────► │  EVM MCP Auditor Server       │
│  (Anthropic AI)           │         │  (@zalana/evm-mcp-auditor)    │
│                           │         │                               │
└───────────────────────────┘         └──────────────┬────────────────┘
                                                     │
                                                     ▼
                                      ┌───────────────────────────────┐
                                      │  EVM Networks & Explorers     │
                                      │  • Ethereum • Base • Arbitrum │
                                      │  • Optimism • Polygon • BSC   │
                                      └───────────────────────────────┘

Related MCP server: Elytra Security MCP Server

🚀 功能与 MCP 工具

MCP 工具

描述

evm_audit_contract

对 Solidity 代码运行静态安全分析（重入、不安全的 Delegatecall、tx.origin 认证、未检查的调用、时间戳依赖、自毁）。

evm_fetch_source

直接从 6 个 EVM 网络的区块浏览器获取已验证的合约源代码。

evm_decode_calldata

将原始交易十六进制数据解码为 4 字节函数选择器和参数块。

evm_estimate_gas

获取以太坊、Base、Arbitrum、Polygon、Optimism 和 BSC 的实时 gas 遥测数据。

📦 快速开始与安装

选项 1：Claude Desktop 集成

将以下片段添加到您的 claude_desktop_config.json：

{
  "mcpServers": {
    "evm-auditor": {
      "command": "npx",
      "args": ["-y", "@zalana/evm-mcp-auditor"]
    }
  }
}

选项 2：Claude Code CLI

claude mcp add evm-auditor npx -y @zalana/evm-mcp-auditor

选项 3：本地开发

# Clone repository
git clone https://github.com/zalana28/evm-mcp-auditor.git
cd evm-mcp-auditor

# Install dependencies
npm install

# Run automated test suites
npm test

# Build TypeScript to dist/
npm run build

# Run local MCP server
npm start

🛡️ 支持的漏洞扫描器（SWC / CWE）

  • EVM-SEC-001：重入（检查-效果-交互违规）SWC-107 / CWE-841

  • EVM-SEC-002：任意/不受控制的 Delegatecall SWC-112 / CWE-829

  • EVM-SEC-003：通过 tx.origin 的易受攻击认证 SWC-115 / CWE-287

  • EVM-SEC-004：低级调用返回值未检查 SWC-104 / CWE-252

  • EVM-SEC-005：区块时间戳操纵 SWC-116 / CWE-330

  • EVM-SEC-006：已弃用的 selfdestruct / 未受保护的状态锁定 SWC-106 / CWE-284

  • EVM-SEC-007：浮动 Pragma 编译器警告 SWC-103 / CWE-664

  • EVM-SEC-008：缺少零地址（address(0)）设置器验证 SWC-100 / CWE-20

🤝 贡献

欢迎贡献、提交问题和功能请求！请查看贡献指南。

📄 许可证

本项目根据 MIT 许可证 授权。

由 Zalana 为全球开源和 Web3 开发者社区打造，使用 ⚡。

Install Server
A
license - permissive license
Not graded
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • MCP Anvil Tools

    dennisonbertram
    F
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to interact with Ethereum smart contracts through Anvil, providing capabilities to read Solidity code, simulate and execute transactions, manipulate blockchain state, query events, and test contracts in isolated environments for development and auditing workflows.

  • Farofino MCP Server

    italoag
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables smart contract security auditing using Slither, Aderyn, and custom pattern analysis through the Model Context Protocol, allowing AI assistants to run static analysis and vulnerability checks on Solidity and Vyper contracts.
    1
    Apache 2.0

  • solidit-mcp-server

    HBlackfoxx
    A
    license
    A
    quality
    D
    maintenance
    Connects AI assistants to Solodit's 49,000+ blockchain vulnerability database, enabling search, browse, and lookup of audit findings directly from your AI workflow.
    4
    MIT

View all related MCP servers

Related MCP Connectors

  • Bug Bounty Intelligence

    AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

  • 🐴 Gulltoppr

    Resolve any EVM contract ABI (even unverified, via decompilation), read, simulate, prepare txs.

  • blockscout-mcp-server

    Provide AI agents and automation tools with contextual access to blockchain data including balance…

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/zalana28/evm-mcp-auditor'

If you have feedback or need assistance with the MCP directory API, please join our Discord server