Server data from the Official MCP Registry
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
Valid MCP server (2 strong, 4 medium validity signals). 3 known CVEs in dependencies (0 critical, 2 high severity) Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.
3 files analyzed · 4 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: RPC_URL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-lordbasilaiassistant-sudo-base-security-scanner-mcp": {
"env": {
"RPC_URL": "your-rpc-url-here"
},
"args": [
"-y",
"base-security-scanner-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.
npx -y base-security-scanner-mcp
{
"mcpServers": {
"base-security-scanner": {
"command": "npx",
"args": ["-y", "base-security-scanner-mcp"]
}
}
}
| Tool | Description |
|---|---|
scan_contract | Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns) |
check_honeypot | Check if a token is a honeypot by simulating buy+sell via Uniswap V2 |
detect_rug_risk | Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status |
analyze_bytecode | Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.) |
check_token_permissions | Check owner permissions: mint, pause, blacklist, change fees, disable trading |
get_contract_info | Basic contract metadata: verified status, bytecode size, ETH balance, token info |
compare_bytecode | Clone detection -- check if two contracts share the same bytecode |
audit_report | Full security audit combining all checks into one comprehensive report |
| Variable | Default | Description |
|---|---|---|
RPC_URL | https://mainnet.base.org | Base mainnet RPC endpoint |
| Package | Tools | What it does |
|---|---|---|
obsd-launchpad-mcp | 14 | Deploy tokens, trade, earn OBSD |
base-security-scanner-mcp | 8 | Scan contracts for vulnerabilities |
base-price-oracle-mcp | 7 | On-chain price feeds from DEX pools |
base-multi-wallet-mcp | 8 | Coordinated multi-wallet trading |
base-gasless-deploy-mcp | 5 | Gasless ERC-20 token deployment |
base-flash-arb-mcp | 7 | Detect arbitrage opportunities |
base-token-sniper-mcp | 5 | Discover & trade new launches |
base-wallet-toolkit-mcp | 7 | Wallet balances, gas, tokens |
base-contract-reader-mcp | 6 | Read any smart contract (free) |
create-mcp-server-cli | - | Scaffold a new MCP server |
MIT
Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
by mcp-marketplace · Developer Tools
Scaffold, build, and publish TypeScript MCP servers to npm — conversationally
by mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
by Taylorwilsdon · Productivity
Control Gmail, Calendar, Docs, Sheets, Drive, and more from your AI