io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp

Official registry Security

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package base-security-scanner-mcp
Claude Code
claude mcp add base-security-scanner-mcp -e 'RPC_URL=<RPC_URL>' -- npx -y base-security-scanner-mcp@1.0.3
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "base-security-scanner-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "base-security-scanner-mcp@1.0.3"
            ],
            "env": {
                "RPC_URL": "<RPC_URL>"
            }
        }
    }
}

Environment variables

  • RPC_URL Base mainnet RPC URL (defaults to https://mainnet.base.org)

Frequently asked questions

What is io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp?

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

How do I install io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp?

It runs on your machine. In Claude Code: claude mcp add base-security-scanner-mcp -e 'RPC_URL=<RPC_URL>' -- npx -y base-security-scanner-mcp@1.0.3. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.lordbasilaiassistant-sudo/base-security-scanner-mcp?

It is published by lordbasilaiassistant-sudo. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.