"smart" matching MCP servers:

Enables automated Solidity smart contract auditing by analyzing callgraphs and control flow to detect reentrancy vulnerabilities. Integrates with MCP-compatible clients to provide deterministic, zero-dependency security assessments.

Connects MCP clients to pre-submission review that argues against a draft bug-bounty report or smart-contract finding the way a triager would, tying every claim to a supplied file and line and returning a submit, rewrite-then-submit, prove-first, hold-duplicate or drop verdict. Exposes tools to list review profiles, prepare reviews for the agent's own model, build hash-verified review packets, and — with a connection token — run hosted profiles on your own provider key.

Enables an LLM to author, validate, and test Wirefilter WAF and Smart Firewall rules using live schema and real CVE exploit templates.

Raze is an MCP server that integrates with AI assistants to analyze, validate, and prove smart contract security issues using deterministic Foundry execution.

Enables AI assistants to orchestrate OSINT reconnaissance pipelines, including subdomain takeover detection, URL harvesting, secret scanning, and JS analysis, by chaining 73 tools with smart target detection and deduplication.

Enables auditing EIP-712 typed signature phishing permits and sanitizing allowances (Permit2/MetaMask) via MCP, with deterministic callgraph verification and DeFi vulnerability triage. It integrates with Claude Desktop, Cursor, and MCP clients for autonomous smart contract security analysis.

Provides autonomous EVM smart contract auditing and DeFi vulnerability triage, with a focus on flash loan arbitrage price impact and MEV sandwich protection for Aave and Uniswap v3. Enables deterministic callgraph verification and signature phishing defense via a native Model Context Protocol server.

Enables users to run a smart-lighting MCP tool that returns an adversarial payload, demonstrating indirect prompt injection and tool hijacking against MCP hosts.