{
  "markdown": "# base-security-scanner-mcp\n\nMCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.\n\n## Install\n\n```bash\nnpx -y base-security-scanner-mcp\n```\n\n## Configure (Claude Desktop / Cursor)\n\n```json\n{\n  \"mcpServers\": {\n    \"base-security-scanner\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"base-security-scanner-mcp\"]\n    }\n  }\n}\n```\n\n## Tools (8)\n\n| Tool | Description |\n|------|-------------|\n| `scan_contract` | Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns) |\n| `check_honeypot` | Check if a token is a honeypot by simulating buy+sell via Uniswap V2 |\n| `detect_rug_risk` | Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status |\n| `analyze_bytecode` | Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.) |\n| `check_token_permissions` | Check owner permissions: mint, pause, blacklist, change fees, disable trading |\n| `get_contract_info` | Basic contract metadata: verified status, bytecode size, ETH balance, token info |\n| `compare_bytecode` | Clone detection -- check if two contracts share the same bytecode |\n| `audit_report` | Full security audit combining all checks into one comprehensive report |\n\n## Environment Variables\n\n| Variable | Default | Description |\n|----------|---------|-------------|\n| `RPC_URL` | `https://mainnet.base.org` | Base mainnet RPC endpoint |\n\n## How It Works\n\n- **Bytecode Analysis**: Extracts PUSH4 opcodes to find function selectors, matches against 30+ known dangerous patterns\n- **Opcode Scanning**: Detects DELEGATECALL, SELFDESTRUCT, CREATE, CREATE2\n- **Honeypot Detection**: Simulates ETH->Token->ETH round-trip via Uniswap V2 router getAmountsOut\n- **Rug Scoring**: Weighted algorithm combining ownership, liquidity depth, dangerous permissions, honeypot status\n- **Clone Detection**: Jaccard similarity on function selector sets\n\n## Related MCP Servers\n\n| Package | Tools | What it does |\n|---------|-------|-------------|\n| `obsd-launchpad-mcp` | 14 | Deploy tokens, trade, earn OBSD |\n| `base-security-scanner-mcp` | 8 | Scan contracts for vulnerabilities |\n| `base-price-oracle-mcp` | 7 | On-chain price feeds from DEX pools |\n| `base-multi-wallet-mcp` | 8 | Coordinated multi-wallet trading |\n| `base-gasless-deploy-mcp` | 5 | Gasless ERC-20 token deployment |\n| `base-flash-arb-mcp` | 7 | Detect arbitrage opportunities |\n| `base-token-sniper-mcp` | 5 | Discover & trade new launches |\n| `base-wallet-toolkit-mcp` | 7 | Wallet balances, gas, tokens |\n| `base-contract-reader-mcp` | 6 | Read any smart contract (free) |\n| `create-mcp-server-cli` | - | Scaffold a new MCP server |\n\n## License\n\nMIT\n",
  "bytes": 2833,
  "sha": "6c51292892e9149c9919b722590b512a129c294dbf9f90c242fa0e09cef3676b",
  "repo_slug": "lordbasilaiassistant-sudo/base-security-scanner-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_lordbasilaiassistant_sudo_base_71c54637/readme"
}