English Français العربية

dev.weakspot/weakspot

السجل الرسمي الأمن

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

الموقع

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package weakspot-mcp
Claude Code 
claude mcp add weakspot -e 'WEAKSPOT_PRIVATE_KEY=<your weakspot_private_key>' -e 'WEAKSPOT_MAX_USD=4' -e 'WEAKSPOT_URL=https://weakspot.dev' -e 'WEAKSPOT_RPC_URL=<WEAKSPOT_RPC_URL>' -- npx -y weakspot-mcp@0.1.1
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "weakspot": {
            "command": "npx",
            "args": [
                "-y",
                "weakspot-mcp@0.1.1"
            ],
            "env": {
                "WEAKSPOT_PRIVATE_KEY": "<your weakspot_private_key>",
                "WEAKSPOT_MAX_USD": "4",
                "WEAKSPOT_URL": "https://weakspot.dev",
                "WEAKSPOT_RPC_URL": "<WEAKSPOT_RPC_URL>"
            }
        }
    }
}

متغيرات البيئة

  • WEAKSPOT_PRIVATE_KEY سري Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.
  • WEAKSPOT_MAX_USD Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.
  • WEAKSPOT_URL Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.
  • WEAKSPOT_RPC_URL Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.

الأسئلة الشائعة

ما هو dev.weakspot/weakspot؟

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

كيف أثبّت dev.weakspot/weakspot؟

يعمل على جهازك. في Claude Code: claude mcp add weakspot -e 'WEAKSPOT_PRIVATE_KEY=<your weakspot_private_key>' -e 'WEAKSPOT_MAX_USD=4' -e 'WEAKSPOT_URL=https://weakspot.dev' -e 'WEAKSPOT_RPC_URL=<WEAKSPOT_RPC_URL>' -- npx -y weakspot-mcp@0.1.1. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج dev.weakspot/weakspot إلى مفتاح API؟

نعم. يتطلب WEAKSPOT_PRIVATE_KEY، وتضبطها في إعداداته.

من يصون dev.weakspot/weakspot؟

ينشره dev.weakspot. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.