io.github.fino-oss/contract-scanner

MCPcommunity
v1.0.0io.github.fino-ossUnknownUpdated 3mo agonpmGitHub

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

Scan any Base L2 smart contract for security risks directly from your AI assistant. — Full security scan (source verification, risky selectors, age, activity) — Compare up to 5 contracts side by side — Get an actionable recommendation (SAFE / CAUTION / HIGHRISK / DONOTUSE) Risk score: 0-100. Analyzes: mint/blacklist/backdoor functions, proxy patterns, source verification, contract age,…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
3mo agoLast update
Package
Authorio.github.fino-oss
LicenseUnknown
Version1.0.0
Sourcemcp-registry
npm@fino314-oss/contract-scanner-mcp
GitHubfino-oss/contract-scanner-mcp
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies60 resolved · 1 with advisories
Tool surface3 tools · none privileged
Security scan✓ Cleanv1.0.0 · 20d ago
DEPws@8.17.1GHSA-58qx-3vcg-4xpx (transitive)
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Scan any Base L2 smart contract for security risks directly from your AI assistant. — Full security scan (source verification, risky selectors, age, activity) — Compare up to 5 contracts side by side — Get an actionable recommendation (SAFE / CAUTION / HIGHRISK / DONOT_USE) Risk score: 0-100. Analyzes: mint/blacklist/backdoor functions, proxy patterns, source verification, contract age, transaction activity. Restart Claude Desktop. The tools appear automatically. Add to (project) or (global):…

Keywords
mcp