Weakspot MCP Server

Weakspot is an MCP integration. Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

Packages and local setup

The published npm package is weakspot-mcp, version 0.1.1. Its declared MCP transport is stdio.

The package declares WEAKSPOT_PRIVATE_KEY: Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.; WEAKSPOT_MAX_USD: Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.; WEAKSPOT_URL: Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.; WEAKSPOT_RPC_URL: Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project website. This profile uses version 0.1.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related blockchain & web3 MCP servers for tools that cover the same kind of work.