Contract Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 25 installs a week from npm.
Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding
The linked repository no longer exists on GitHub — it was deleted or made private.
This one has been quiet for a while
Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add contract-scanner -- npx -y @thryx/contract-scanner-mcp-server{
"mcpServers": {
"contract-scanner": {
"args": [
"-y",
"@thryx/contract-scanner-mcp-server"
],
"command": "npx"
}
}
}[mcp_servers.contract-scanner]
command = "npx"
args = ["-y", "@thryx/contract-scanner-mcp-server"]{
"mcpServers": {
"contract-scanner": {
"args": [
"-y",
"@thryx/contract-scanner-mcp-server"
],
"command": "npx"
}
}
}{
"mcpServers": {
"contract-scanner": {
"args": [
"-y",
"@thryx/contract-scanner-mcp-server"
],
"command": "npx"
}
}
}This one needs environment variables set before it will start:
RPC_URL (RPC endpoint URL (defaults to Base mainnet)), THRYX_API_KEY (Premium API key for unlimited scans), BASESCAN_API_KEY (Basescan API key for fetching verified contract source code), ETHERSCAN_API_KEY (Etherscan API key for fetching verified contract source code).
The author declared them in the registry entry; get the values from the project itself.
Alternatives to Contract Scanner
same job, measured the same wayDeFi smart contract forensic auditor and vulnerability scanner.
Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.
Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.
Analyzes code for bugs, security vulnerabilities, and code smells
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.
AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.
Scan websites for security vulnerabilities, headers, TLS, and email security.
Contract Scanner — questions
Answers built from our own checks of this server.