Base Security Scanner

MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.

Install

npx -y base-security-scanner-mcp

Configure (Claude Desktop / Cursor)

{
  "mcpServers": {
    "base-security-scanner": {
      "command": "npx",
      "args": ["-y", "base-security-scanner-mcp"]
    }
  }
}

Tools (8)

Tool	Description
scan_contract	Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)
check_honeypot	Check if a token is a honeypot by simulating buy+sell via Uniswap V2
detect_rug_risk	Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status
analyze_bytecode	Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)
check_token_permissions	Check owner permissions: mint, pause, blacklist, change fees, disable trading
get_contract_info	Basic contract metadata: verified status, bytecode size, ETH balance, token info
compare_bytecode	Clone detection -- check if two contracts share the same bytecode
audit_report	Full security audit combining all checks into one comprehensive report

Environment Variables

Variable	Default	Description
RPC_URL	https://mainnet.base.org	Base mainnet RPC endpoint

How It Works

• Bytecode Analysis: Extracts PUSH4 opcodes to find function selectors, matches against 30+ known dangerous patterns
• Opcode Scanning: Detects DELEGATECALL, SELFDESTRUCT, CREATE, CREATE2
• Honeypot Detection: Simulates ETH->Token->ETH round-trip via Uniswap V2 router getAmountsOut
• Rug Scoring: Weighted algorithm combining ownership, liquidity depth, dangerous permissions, honeypot status
• Clone Detection: Jaccard similarity on function selector sets

Related MCP Servers

Package	Tools	What it does
obsd-launchpad-mcp	14	Deploy tokens, trade, earn OBSD
base-security-scanner-mcp	8	Scan contracts for vulnerabilities
base-price-oracle-mcp	7	On-chain price feeds from DEX pools
base-multi-wallet-mcp	8	Coordinated multi-wallet trading
base-gasless-deploy-mcp	5	Gasless ERC-20 token deployment
base-flash-arb-mcp	7	Detect arbitrage opportunities
base-token-sniper-mcp	5	Discover & trade new launches
base-wallet-toolkit-mcp	7	Wallet balances, gas, tokens
base-contract-reader-mcp	6	Read any smart contract (free)
create-mcp-server-cli	-	Scaffold a new MCP server

License

MIT