English Français العربية

dev.weakspot/weakspot

Registre officiel Sécurité

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

Site web

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package weakspot-mcp
Claude Code 
claude mcp add weakspot -e 'WEAKSPOT_PRIVATE_KEY=<your weakspot_private_key>' -e 'WEAKSPOT_MAX_USD=4' -e 'WEAKSPOT_URL=https://weakspot.dev' -e 'WEAKSPOT_RPC_URL=<WEAKSPOT_RPC_URL>' -- npx -y weakspot-mcp@0.1.1
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "weakspot": {
            "command": "npx",
            "args": [
                "-y",
                "weakspot-mcp@0.1.1"
            ],
            "env": {
                "WEAKSPOT_PRIVATE_KEY": "<your weakspot_private_key>",
                "WEAKSPOT_MAX_USD": "4",
                "WEAKSPOT_URL": "https://weakspot.dev",
                "WEAKSPOT_RPC_URL": "<WEAKSPOT_RPC_URL>"
            }
        }
    }
}

Variables d'environnement

  • WEAKSPOT_PRIVATE_KEY secret Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.
  • WEAKSPOT_MAX_USD Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.
  • WEAKSPOT_URL Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.
  • WEAKSPOT_RPC_URL Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.

Questions fréquentes

Qu'est-ce que dev.weakspot/weakspot ?

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

Comment installer dev.weakspot/weakspot ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add weakspot -e 'WEAKSPOT_PRIVATE_KEY=<your weakspot_private_key>' -e 'WEAKSPOT_MAX_USD=4' -e 'WEAKSPOT_URL=https://weakspot.dev' -e 'WEAKSPOT_RPC_URL=<WEAKSPOT_RPC_URL>' -- npx -y weakspot-mcp@0.1.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour dev.weakspot/weakspot ?

Oui. Il attend WEAKSPOT_PRIVATE_KEY, à renseigner dans sa configuration.

Qui maintient dev.weakspot/weakspot ?

Il est publié par dev.weakspot. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.