io.github.lordbasilaiassistant-sudo/contract-scanner

Official registry Security

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @thryx/contract-scanner-mcp-server
Claude Code
claude mcp add contract-scanner -e 'RPC_URL=<RPC_URL>' -e 'THRYX_API_KEY=<your thryx_api_key>' -e 'BASESCAN_API_KEY=<your basescan_api_key>' -e 'ETHERSCAN_API_KEY=<your etherscan_api_key>' -- npx -y @thryx/contract-scanner-mcp-server@1.0.2
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "contract-scanner": {
            "command": "npx",
            "args": [
                "-y",
                "@thryx/contract-scanner-mcp-server@1.0.2"
            ],
            "env": {
                "RPC_URL": "<RPC_URL>",
                "THRYX_API_KEY": "<your thryx_api_key>",
                "BASESCAN_API_KEY": "<your basescan_api_key>",
                "ETHERSCAN_API_KEY": "<your etherscan_api_key>"
            }
        }
    }
}

Environment variables

  • RPC_URL RPC endpoint URL (defaults to Base mainnet)
  • THRYX_API_KEY secret Premium API key for unlimited scans
  • BASESCAN_API_KEY secret Basescan API key for fetching verified contract source code
  • ETHERSCAN_API_KEY secret Etherscan API key for fetching verified contract source code

Frequently asked questions

What is io.github.lordbasilaiassistant-sudo/contract-scanner?

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

How do I install io.github.lordbasilaiassistant-sudo/contract-scanner?

It runs on your machine. In Claude Code: claude mcp add contract-scanner -e 'RPC_URL=<RPC_URL>' -e 'THRYX_API_KEY=<your thryx_api_key>' -e 'BASESCAN_API_KEY=<your basescan_api_key>' -e 'ETHERSCAN_API_KEY=<your etherscan_api_key>' -- npx -y @thryx/contract-scanner-mcp-server@1.0.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.lordbasilaiassistant-sudo/contract-scanner need an API key?

Yes. It expects THRYX_API_KEY, BASESCAN_API_KEY, ETHERSCAN_API_KEY, which you set in its configuration.

Is io.github.lordbasilaiassistant-sudo/contract-scanner open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.lordbasilaiassistant-sudo/contract-scanner?

It is published by lordbasilaiassistant-sudo. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.