Smart contract security scanner โ vulnerabilities, risk scores, and calldata decoding
Connect Runs on your machine
claude mcp add contract-scanner -e RPC_URL=<RPC_URL> -e THRYX_API_KEY=<THRYX_API_KEY> -e BASESCAN_API_KEY=<BASESCAN_API_KEY> -e ETHERSCAN_API_KEY=<ETHERSCAN_API_KEY> -- npx -y @thryx/[email protected]
{
"mcpServers": {
"contract-scanner": {
"command": "npx",
"args": [
"-y",
"@thryx/[email protected]"
],
"env": {
"RPC_URL": "<RPC_URL>",
"THRYX_API_KEY": "<THRYX_API_KEY>",
"BASESCAN_API_KEY": "<BASESCAN_API_KEY>",
"ETHERSCAN_API_KEY": "<ETHERSCAN_API_KEY>"
}
}
}
}
{
"mcpServers": {
"contract-scanner": {
"command": "npx",
"args": [
"-y",
"@thryx/[email protected]"
],
"env": {
"RPC_URL": "<RPC_URL>",
"THRYX_API_KEY": "<THRYX_API_KEY>",
"BASESCAN_API_KEY": "<BASESCAN_API_KEY>",
"ETHERSCAN_API_KEY": "<ETHERSCAN_API_KEY>"
}
}
}
}
{
"servers": {
"contract-scanner": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@thryx/[email protected]"
],
"env": {
"RPC_URL": "<RPC_URL>",
"THRYX_API_KEY": "<THRYX_API_KEY>",
"BASESCAN_API_KEY": "<BASESCAN_API_KEY>",
"ETHERSCAN_API_KEY": "<ETHERSCAN_API_KEY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
RPC_URLOptional | RPC endpoint URL (defaults to Base mainnet) |
THRYX_API_KEYOptional, secret | Premium API key for unlimited scans |
BASESCAN_API_KEYOptional, secret | Basescan API key for fetching verified contract source code |
ETHERSCAN_API_KEYOptional, secret | Etherscan API key for fetching verified contract source code |
Details
| Package | @thryx/[email protected] (NPM, stdio) |
| First published | 7 Apr 2026 |
| Last updated | 7 Apr 2026 |
| Registry name | io.github.lordbasilaiassistant-sudo/contract-scanner |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
