Contract Scanner

Name: Contract Scanner
Author: fino-oss

by fino-osscommunityv1.0.0

The MCP server scans Base L2 smart contracts for security risks, providing detailed analysis and risk scoring. It offers tools for full security scans, batch comparisons, and actionable risk interpretations.

From the registry: Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

GitHub Repository

Install & configure

Prerequisites

optional
BaseScan API key (optional)
Optional. Required for full source analysis; free tier works for basic checks.
https://basescan.org/myapikey
required
Clone/build server
Server is run from local path; clone the repo and point your MCP client at the built server.js.
```
$ git clone https://github.com/fino-oss/contract-scanner-mcp
```
https://github.com/fino-oss/contract-scanner-mcp

Install in your client

Paste into the AI you're chatting with — it will figure out the rest

Please install the `contract-scanner` MCP server into my current AI client (that's you).

Required prerequisites (do these first if not already done):
- **Clone/build server** — Server is run from local path; clone the repo and point your MCP client at the built server.js. Run: `git clone https://github.com/fino-oss/contract-scanner-mcp` (https://github.com/fino-oss/contract-scanner-mcp)

Optional prerequisites:
- BaseScan API key (optional) — Optional. Required for full source analysis; free tier works for basic checks. (https://basescan.org/myapikey)

Canonical MCP server config (stdio transport):
- command: `node`
- args: ["<path-to>/server.js"]
- optional environment variables:
  - `BASESCAN_API_KEY`: BaseScan API key for full source analysis. (example: `<your-basescan-api-key>`)

Note: README uses a hardcoded local path (/Users/sam/...); no npm package — you must clone/build from source and point node at the resulting server.js.

Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.

Note: README uses a hardcoded local path (/Users/sam/...); no npm package — you must clone/build from source and point node at the resulting server.js.