O que dá para fazer com base security scanner mcp?

base-security-scanner-mcp

MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.

Install

npx -y base-security-scanner-mcp

Configure (Claude Desktop / Cursor)

{
  "mcpServers": {
    "base-security-scanner": {
      "command": "npx",
      "args": ["-y", "base-security-scanner-mcp"]
    }
  }
}

Tools (8)

Tool	Description
`scan_contract`	Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)
`check_honeypot`	Check if a token is a honeypot by simulating buy+sell via Uniswap V2
`detect_rug_risk`	Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status
`analyze_bytecode`	Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)
`check_token_permissions`	Check owner permissions: mint, pause, blacklist, change fees, disable trading
`get_contract_info`	Basic contract metadata: verified status, bytecode size, ETH balance, token info
`compare_bytecode`	Clone detection -- check if two contracts share the same bytecode
`audit_report`	Full security audit combining all checks into one comprehensive report

Environment Variables

Variable	Default	Description
`RPC_URL`	`https://mainnet.base.org`	Base mainnet RPC endpoint

How It Works

Bytecode Analysis: Extracts PUSH4 opcodes to find function selectors, matches against 30+ known dangerous patterns
Opcode Scanning: Detects DELEGATECALL, SELFDESTRUCT, CREATE, CREATE2
Honeypot Detection: Simulates ETH->Token->ETH round-trip via Uniswap V2 router getAmountsOut
Rug Scoring: Weighted algorithm combining ownership, liquidity depth, dangerous permissions, honeypot status
Clone Detection: Jaccard similarity on function selector sets

Package	Tools	What it does
`obsd-launchpad-mcp`	14	Deploy tokens, trade, earn OBSD
`base-security-scanner-mcp`	8	Scan contracts for vulnerabilities
`base-price-oracle-mcp`	7	On-chain price feeds from DEX pools
`base-multi-wallet-mcp`	8	Coordinated multi-wallet trading
`base-gasless-deploy-mcp`	5	Gasless ERC-20 token deployment
`base-flash-arb-mcp`	7	Detect arbitrage opportunities
`base-token-sniper-mcp`	5	Discover & trade new launches
`base-wallet-toolkit-mcp`	7	Wallet balances, gas, tokens
`base-contract-reader-mcp`	6	Read any smart contract (free)
`create-mcp-server-cli`	-	Scaffold a new MCP server

License

MIT

Instalação

Adicione base security scanner mcp ao seu cliente. Escolha o que você usa.

claude mcp add base-security-scanner-mcp -- npx -y base-security-scanner-mcp

codex mcp add base-security-scanner-mcp -- npx -y base-security-scanner-mcp

amp mcp add base-security-scanner-mcp -- npx -y base-security-scanner-mcp

{
  "mcpServers": {
    "base-security-scanner-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "base-security-scanner-mcp"
      ]
    }
  }
}

Add to `claude_desktop_config.json`, then restart Claude Desktop.

{
  "mcpServers": {
    "base-security-scanner-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "base-security-scanner-mcp"
      ]
    }
  }
}

Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.

code --add-mcp '{"name":"base-security-scanner-mcp","command":"npx","args":["-y","base-security-scanner-mcp"]}'

Or add the block manually to `.vscode/mcp.json` under `servers`.

{
  "mcpServers": {
    "base-security-scanner-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "base-security-scanner-mcp"
      ]
    }
  }
}

Add to `~/.codeium/windsurf/mcp_config.json`.

{
  "mcpServers": {
    "base-security-scanner-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "base-security-scanner-mcp"
      ]
    }
  }
}

Add to `cline_mcp_settings.json` via the MCP Servers panel.

{
  "mcpServers": {
    "base-security-scanner-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "base-security-scanner-mcp"
      ]
    }
  }
}

Add to `~/.gemini/settings.json`.

{
  "mcpServers": {
    "base-security-scanner-mcp": {
      "type": "local",
      "command": "npx",
      "args": [
        "-y",
        "base-security-scanner-mcp"
      ],
      "tools": [
        "*"
      ]
    }
  }
}

Add to `~/.copilot/mcp-config.json`, or run `/mcp add` inside the CLI.

{
  "context_servers": {
    "base-security-scanner-mcp": {
      "command": {
        "path": "npx",
        "args": [
          "-y",
          "base-security-scanner-mcp"
        ]
      }
    }
  }
}

Add to your Zed `settings.json`.

npx -y base-security-scanner-mcp

Run `goose configure`, choose **Add Extension → Command-line Extension**, and paste this command.

8 ferramentas

base security scanner mcp expõe 8 ferramentas a um agente conectado.

scan_contract: Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)
check_honeypot: Check if a token is a honeypot by simulating buy+sell via Uniswap V2
detect_rug_risk: Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status
analyze_bytecode: Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)
check_token_permissions: Check owner permissions: mint, pause, blacklist, change fees, disable trading
get_contract_info: Basic contract metadata: verified status, bytecode size, ETH balance, token info
compare_bytecode: Clone detection -- check if two contracts share the same bytecode
audit_report: Full security audit combining all checks into one comprehensive report

Pontuação

59 / 100

Aceitável

Documentação22/25
Manutenção13/25
Confiança6/20
Capacidade6/15
Instalação12/15

Documents what it does and how to connect
Has a resolvable package or endpoint
Exposes at least one tool, prompt or resource
README has substantive content
Includes a code example
Documents its configuration
Mentions credentials or security posture
Last commit 177 days ago
Has a release history
Repository is not archived
No licence detected
Namespace verified in the official MCP registry
Claimed by its owner
Published under an organisation
8 tool(s) documented
Provides prompt templates
Provides resources
12 documented install method(s)
Published to a package registry
Offers a hosted endpoint — no local install

Ler os critérios completos →

Histórico de versões

Versões	Publicada
1.0.3Mais recente	7 de mar. de 2026
1.0.2	7 de mar. de 2026