{
  "markdown": "# Contract Security Scanner — MCP Server\n\n[![contract-scanner-mcp MCP server](https://glama.ai/mcp/servers/fino-oss/contract-scanner-mcp/badges/score.svg)](https://glama.ai/mcp/servers/fino-oss/contract-scanner-mcp)\n\n\nScan any Base L2 smart contract for security risks directly from your AI assistant.\n\n**3 tools exposed:**\n- `scan_contract` — Full security scan (source verification, risky selectors, age, activity)\n- `batch_scan` — Compare up to 5 contracts side by side\n- `interpret_risk` — Get an actionable recommendation (SAFE / CAUTION / HIGH_RISK / DO_NOT_USE)\n\n**Risk score: 0-100.** Analyzes: mint/blacklist/backdoor functions, proxy patterns, source verification, contract age, transaction activity.\n\n---\n\n## Installation\n\n### Claude Desktop\n\nAdd to `~/Library/Application Support/Claude/claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"contract-scanner\": {\n      \"command\": \"node\",\n      \"args\": [\"/Users/sam/Desktop/samDev/p8/mcp/server.js\"]\n    }\n  }\n}\n```\n\nRestart Claude Desktop. The tools appear automatically.\n\n---\n\n### Cursor\n\nAdd to `.cursor/mcp.json` (project) or `~/.cursor/mcp.json` (global):\n\n```json\n{\n  \"mcpServers\": {\n    \"contract-scanner\": {\n      \"command\": \"node\",\n      \"args\": [\"/Users/sam/Desktop/samDev/p8/mcp/server.js\"]\n    }\n  }\n}\n```\n\n---\n\n### Cline (VS Code extension)\n\n1. Open Cline settings → MCP Servers → Add server\n2. Set type: `stdio`\n3. Command: `node /Users/sam/Desktop/samDev/p8/mcp/server.js`\n\n---\n\n### Any MCP client (generic)\n\nThe server uses **stdio transport** — just pipe JSON-RPC messages:\n\n```bash\nnode /Users/sam/Desktop/samDev/p8/mcp/server.js\n```\n\n---\n\n## Usage examples\n\nOnce connected, just ask your AI assistant naturally:\n\n```\n\"Scan this contract before I approve: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\"\n\n\"Compare the risk of these 3 Aave clones: 0x... 0x... 0x...\"\n\n\"Is this token safe to buy? 0x4ed4e862860bed51a9570b96d89af5e1b0efefed\"\n```\n\n---\n\n## What gets analyzed\n\n| Check | Source |\n|-------|--------|\n| Source code verified? | BaseScan API |\n| Mint / burn functions | Bytecode selector scan |\n| Pause / freeze | Bytecode selector scan |\n| Blacklist / whitelist | Bytecode selector scan |\n| Backdoors (rescueTokens, withdrawAll) | Bytecode selector scan |\n| Upgradeable proxy | BaseScan + delegatecall detection |\n| Contract age | BaseScan transaction history |\n| Activity level | BaseScan recent txs |\n\n---\n\n## Risk scoring\n\n| Score | Label | Meaning |\n|-------|-------|---------|\n| 0-9 | SAFE | No red flags |\n| 10-29 | LOW | Minor concerns |\n| 30-49 | MEDIUM | Elevated risk — review before interacting |\n| 50-69 | HIGH | Significant risk — small amounts only |\n| 70+ | CRITICAL | Avoid — potential rug or backdoor |\n\n---\n\n## Technical notes\n\n- **Chain**: Base L2 only (`https://mainnet.base.org`)\n- **API**: BaseScan free tier (no key needed for basic checks; set `BASESCAN_API_KEY` env var for full source analysis)\n- **No wallet needed**: read-only RPC calls only\n- **Latency**: ~2-5s per contract (network dependent)\n\n---\n\n*Built on Base. Agent wallet: `0x804dd2cE4aA3296831c880139040e4326df13c6e`*\n",
  "bytes": 3097,
  "sha": "c916c7ba860f503478891aa499f989e27a1b95241db411a2add62dcda68bf2ac",
  "repo_slug": "fino-oss/contract-scanner-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_fino_oss_contract_scanner_9da1f78e/readme"
}