Base MCP Server

MCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Det

Local serverstdio

What is the Base MCP Server?

MCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Det

What it actually does

MCP server for AI agents to scan smart contracts on Base mainnet for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy patterns, and generate full audit reports -- all read-only, no private key needed.

Recorded tools

  • scan_contract — Analyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)
  • check_honeypot — Check if a token is a honeypot by simulating buy+sell via Uniswap V2
  • detect_rug_risk — Score rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status
  • analyze_bytecode — Disassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)
  • check_token_permissions — Check owner permissions: mint, pause, blacklist, change fees, disable trading
  • get_contract_info — Basic contract metadata: verified status, bytecode size, ETH balance, token info
  • compare_bytecode — Clone detection -- check if two contracts share the same bytecode
  • audit_report — Full security audit combining all checks into one comprehensive report

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
scan_contractAnalyze a contract for security issues (reentrancy, access control, hidden mints, proxy patterns)
check_honeypotCheck if a token is a honeypot by simulating buy+sell via Uniswap V2
detect_rug_riskScore rug pull risk 0-100 based on ownership, liquidity, permissions, honeypot status
analyze_bytecodeDisassemble bytecode, identify contract type (proxy, AMM, ERC-20, diamond, etc.)
check_token_permissionsCheck owner permissions: mint, pause, blacklist, change fees, disable trading
get_contract_infoBasic contract metadata: verified status, bytecode size, ETH balance, token info
compare_bytecodeClone detection -- check if two contracts share the same bytecode
audit_reportFull security audit combining all checks into one comprehensive report

How to install the Base MCP Server

{
  "mcpServers": {
    "base-security-scanner": {
      "command": "npx",
      "args": ["-y", "base-security-scanner-mcp"]
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Example prompts to try

  • “Use Base to scan contract.”
  • “Use Base to check honeypot.”
  • “Use Base to detect rug risk.”

Frequently asked questions

MCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Det Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.