🔒 TON Dev Skills

Security scanner, migration engine, MCP server & CLI for TON smart contracts

---

TON Dev Skills is a comprehensive development and security platform for the TON blockchain. It scans FunC, Tact, and Tolk contracts for vulnerabilities, migrates Solidity contracts to TON-native equivalents, and integrates directly into your AI-powered IDE via MCP.

✨ What You Get

Feature	Description
Security Scanner	50+ rules across 21 categories — from reentrancy to TEP compliance
Migration Engine	Convert ERC-20, ERC-721, ERC-1155 and more from EVM → TON (Jettons, NFTs, SBTs)
MCP Server	Use scanner, migration, and contract tools directly in Claude, Cursor, Windsurf, etc.
CLI	Audit, compile, deploy, scaffold, and test-generate from the command line
Contract Templates	Production-ready Jetton, NFT, DAO, DEX, and multisig templates

🚀 Getting Started

# Install from npm
npm install -g @tesserae/ton-dev-skills

# Run your first audit
ton-dev audit ./contracts/my-contract.fc

# Scaffold a new contract
ton-dev scaffold jetton --name "MyToken" --symbol "MTK"

# Compile a contract
ton-dev compile ./contracts/my-contract.fc

# Start the MCP server (for Claude, Cursor, etc.)
ton-dev mcp start

👉 Full Getting Started Guide →

🔍 Scanner Categories

The security scanner checks 50+ rules across these categories:

Access Control	Arithmetic Safety	Bounced Messages	Cell Overflow
Code Injection	Compilation	Data Validation	Denial of Service
External Messages	Gas & Fees	Integer Handling	Randomness
Replay Protection	Reentrancy	State Management	Storage
TEP Compliance	Timestamp	Upgradeability	TVM Internals
Cross-Contract Safety

📊 Sample Output

$ ton-dev audit contracts/my-jetton.fc

  TON Dev Skills — Security Audit
  ═══════════════════════════════════

  Contract: contracts/my-jetton.fc
  Language:  FunC
  Rules:     53 checked

  ┌──────────┬────────────────────────────────────┬──────────┐
  │ Severity │ Finding                            │ Line     │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🔴 HIGH  │ Missing sender validation on       │ L42      │
  │          │ internal_transfer handler           │          │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🟡 MED   │ No bounce handler for failed       │ L87      │
  │          │ token transfers                     │          │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🔵 LOW   │ Gas estimation missing on          │ L103     │
  │          │ cross-contract call                 │          │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🟢 INFO  │ Consider TEP-74 metadata           │ L12      │
  │          │ extension for discoverability       │          │
  └──────────┴────────────────────────────────────┴──────────┘

  Summary: 1 high · 1 medium · 1 low · 1 info
  Full report: ./audit-report-1708099200.json

🔄 Migration Example

$ ton-dev migrate --from solidity --contract contracts/MyToken.sol

  TON Dev Skills — Migration Engine
  ═══════════════════════════════════

  Source:     contracts/MyToken.sol (ERC-20)
  Target:     Jetton (TEP-74) + Jetton Wallet (TEP-89)
  Language:   Tact

  ✅ Token metadata mapped (name, symbol, decimals)
  ✅ Mint/burn logic converted to Jetton master ops
  ✅ Transfer → internal_transfer + transfer_notification
  ✅ Approval pattern removed (not applicable on TON)
  ✅ TEP-74 compliance verified
  ✅ Security audit passed (0 high, 0 medium findings)

  Output: ./output/my-token-jetton.tact
          ./output/my-token-wallet.tact
          ./output/migration-report.md

🛠️ CLI Commands

Command	Description	Plan
ton-dev audit <path>	Security audit a contract or directory	Free
ton-dev compile <file>	Compile a FunC, Tact, or Tolk contract	Free
ton-dev scaffold <template>	Generate a contract from template	Free
ton-dev init	Initialize a TON project	Free
ton-dev deploy <boc>	Deploy a compiled contract	Free
ton-dev debug <exit-code>	Explain a TVM exit code	Free
ton-dev gas estimate <boc>	Estimate gas usage	Free
ton-dev migrate <file>	Migrate an EVM contract to TON	Pro
ton-dev test-gen <file>	Generate test cases	Pro
ton-dev mcp start	Start the MCP server	Pro

🤖 MCP Integration

Add to your Claude Desktop or Cursor config:

{
  "mcpServers": {
    "ton-dev": {
      "command": "ton-dev",
      "args": ["mcp", "start"]
    }
  }
}

Then ask your AI assistant things like:

• "Audit this FunC contract for security issues"
• "Migrate this ERC-20 to a TON Jetton"
• "Scaffold a new NFT collection contract"
• "Check if this contract is TEP-74 compliant"

👉 MCP Server Docs →

💰 Pricing

	Free	Pro	Enterprise
Security Audits	5/day	Unlimited	Unlimited
Scanner Rules	50+	50+	50+ + custom rules
Migration Engine	—	✅	✅
MCP Server	—	✅	✅
Contract Templates	Basic	All	All + custom
CLI Tools	Core (audit, compile, scaffold, deploy, debug, gas)	Full suite	Full suite
Support	Community	Priority	Dedicated
Price	$0	$29/mo	Contact us

📚 Documentation

• Getting Started
• Security Scanner
• Migration Engine
• MCP Server
• CLI Reference
• Contract Templates
• API / Tool Schemas

🔗 Links

• npm: @tesserae/ton-dev-skills
• GitHub: TesseraeVentures/ton-dev-skills

📄 License

MIT — see LICENSE for details.

Core scanner rules and migration logic are proprietary. The CLI, MCP server interface, and this repository are open source.