Weakspot

dev.weakspot/weakspot · v0.1.1

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

Website Set it up

Connect Runs on your machine

Terminal

claude mcp add weakspot -e WEAKSPOT_PRIVATE_KEY=<WEAKSPOT_PRIVATE_KEY> -e WEAKSPOT_MAX_USD=<WEAKSPOT_MAX_USD> -e WEAKSPOT_URL=<WEAKSPOT_URL> -e WEAKSPOT_RPC_URL=<WEAKSPOT_RPC_URL> -- npx -y [email protected]

claude_desktop_config.json

{
  "mcpServers": {
    "weakspot": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "WEAKSPOT_PRIVATE_KEY": "<WEAKSPOT_PRIVATE_KEY>",
        "WEAKSPOT_MAX_USD": "<WEAKSPOT_MAX_USD>",
        "WEAKSPOT_URL": "<WEAKSPOT_URL>",
        "WEAKSPOT_RPC_URL": "<WEAKSPOT_RPC_URL>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "weakspot": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "WEAKSPOT_PRIVATE_KEY": "<WEAKSPOT_PRIVATE_KEY>",
        "WEAKSPOT_MAX_USD": "<WEAKSPOT_MAX_USD>",
        "WEAKSPOT_URL": "<WEAKSPOT_URL>",
        "WEAKSPOT_RPC_URL": "<WEAKSPOT_RPC_URL>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "weakspot": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "WEAKSPOT_PRIVATE_KEY": "<WEAKSPOT_PRIVATE_KEY>",
        "WEAKSPOT_MAX_USD": "<WEAKSPOT_MAX_USD>",
        "WEAKSPOT_URL": "<WEAKSPOT_URL>",
        "WEAKSPOT_RPC_URL": "<WEAKSPOT_RPC_URL>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`WEAKSPOT_PRIVATE_KEY` Optional, secret	Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.
`WEAKSPOT_MAX_USD` Optional	Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.
`WEAKSPOT_URL` Optional	Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.
`WEAKSPOT_RPC_URL` Optional	Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.

Details

Package	`[email protected]` (NPM, stdio)
First published	5 Sep 2026
Last updated	5 Sep 2026
Registry name	`dev.weakspot/weakspot`

More other servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use Weakspot often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/dev-weakspot-weakspot/badge.svg)](https://nestdaddy.com/mcp/servers/dev-weakspot-weakspot)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.