MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"base-security-scanner": {
"args": [
"-y",
"base-security-scanner-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'base-security-scanner-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked base-security-scanner-mcp against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security / finance
Real-time financial market data: stocks, forex, crypto, commodities, and economic indicators
An evil MCP server used for redteam testing
A Model Context Protocol server for building an investor agent
Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.
MCP Security Weekly
Get CVE alerts and security updates for io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.
npx -y base-security-scanner-mcp
{
"mcpServers": {
"base-security-scanner": {
"command": "npx",
"args": ["-y", "base-security-scanner-mcp"]
}
}
}
| Tool | Description |
|---|---|
scan_contract | Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns) |
check_honeypot | Check if a token is a honeypot by simulating buy+sell via Uniswap V2 |
detect_rug_risk | Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status |
analyze_bytecode | Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.) |
check_token_permissions | Check owner permissions: mint, pause, blacklist, change fees, disable trading |
get_contract_info | Basic contract metadata: verified status, bytecode size, ETH balance, token info |
compare_bytecode | Clone detection -- check if two contracts share the same bytecode |
audit_report | Full security audit combining all checks into one comprehensive report |
| Variable | Default | Description |
|---|---|---|
RPC_URL | https://mainnet.base.org | Base mainnet RPC endpoint |
| Package | Tools | What it does |
|---|---|---|
obsd-launchpad-mcp | 14 | Deploy tokens, trade, earn OBSD |
base-security-scanner-mcp | 8 | Scan contracts for vulnerabilities |
base-price-oracle-mcp | 7 | On-chain price feeds from DEX pools |
base-multi-wallet-mcp | 8 | Coordinated multi-wallet trading |
base-gasless-deploy-mcp | 5 | Gasless ERC-20 token deployment |
base-flash-arb-mcp | 7 | Detect arbitrage opportunities |
base-token-sniper-mcp | 5 | Discover & trade new launches |
base-wallet-toolkit-mcp | 7 | Wallet balances, gas, tokens |
base-contract-reader-mcp | 6 | Read any smart contract (free) |
create-mcp-server-cli | - | Scaffold a new MCP server |
MIT