English Français العربية

Kestrova: Solidity Vulnerability Scan

Registre officiel Sécurité

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

Code source Site web Documentation

Que pouvez-vous faire avec Kestrova: Solidity Vulnerability Scan ?

  • scan_solidity_preview (free, no key): severity counts and High/Medium detector names.
  • scan_solidity_full (paid, optional): every finding with detector, impact, confidence and file/line locations.
  • payment_terms (free): current price and payment details.

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http kestrova-solidity-vulnerability-scan 'https://kestrova.onrender.com/mcp?src=registry'
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "kestrova-solidity-vulnerability-scan": {
            "type": "http",
            "url": "https://kestrova.onrender.com/mcp?src=registry"
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. Kestrova: Solidity security review for coding agents
  2. Install (pick one)
  3. What it does
  4. Limits (read this)
  5. Privacy
  6. Contents

Kestrova: Solidity security review for coding agents

An agent skill plus a remote MCP server. When your coding agent writes, changes or prepares to deploy a Solidity contract, it runs a free Slither static-analysis preview, explains the results without overclaiming, and offers an optional paid line-level report only after you approve the price.

Install (pick one)

AgentCommand
Claude Code (plugin: skill + MCP)/plugin marketplace add som2026-commits/kestrova-solidity-security then /plugin install solidity-security-review@kestrova
Any agent that supports skills (SKILL.md)npx skills add som2026-commits/kestrova-solidity-security --skill solidity-security-review
MCP only (any MCP client)remote Streamable HTTP server https://kestrova.onrender.com/mcp?src=registry (Claude Code: claude mcp add --transport http kestrova "https://kestrova.onrender.com/mcp?src=skill")

In our tests, agents with only the MCP server did not run the check unprompted; the skill is what makes them do it.

What it does

  • scan_solidity_preview (free, no key): severity counts and High/Medium detector names.
  • scan_solidity_full (paid, optional): every finding with detector, impact, confidence and file/line locations. Paid per call via x402 in USDC on Solana from your own wallet tool; charged only if the scan succeeds. The skill forbids paying without your explicit approval and never handles keys.
  • payment_terms (free): current price and payment details.

Limits (read this)

Automated pattern detection (Slither), not an audit. A clean result does not mean a contract is safe. Not covered: business logic, economic/oracle/MEV attacks, access-control intent, upgrade and admin-key risk, code not sent, deployment configuration. Use professional audits and tests for anything holding value.

Privacy

Sources you send are scanned in a temporary directory that is deleted after each scan; the service does not store or log them. The service's usage log records the route, status, client family and the src install-channel tag, never IP addresses or source code (IP addresses are held in memory only for rate limiting). The hosting providers (Render, Cloudflare) may keep their own standard request logs.

Contents

.claude-plugin/marketplace.json (marketplace), solidity-security-review/ (plugin: .claude-plugin/plugin.json, .mcp.json, skills/solidity-security-review/SKILL.md). No server code.

License: MIT (see LICENSE).

Questions fréquentes

Qu'est-ce que Kestrova: Solidity Vulnerability Scan ?

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

Comment installer Kestrova: Solidity Vulnerability Scan ?

Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http kestrova-solidity-vulnerability-scan 'https://kestrova.onrender.com/mcp?src=registry'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour Kestrova: Solidity Vulnerability Scan ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

Kestrova: Solidity Vulnerability Scan est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient Kestrova: Solidity Vulnerability Scan ?

Il est publié par som2026-commits. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.