🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

evmole-mcp

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

evmole-mcp

Local stdio MCP server for structured EVM runtime-bytecode analysis with EVMole

latest
Source
npmnpm
Version
0.9.3
Version published
Maintainers
1
Created
Source

evmole-mcp

evmole-mcp is the local MCP server for EVMole, a structured analyzer for deployed EVM runtime bytecode. It exposes one tool, analyze_evm_bytecode, for use by MCP-compatible agents and clients.

Start the server

npx -y evmole-mcp@latest

Node.js 22 or newer is required.

Configure an MCP client

{
  "mcpServers": {
    "evmole": {
      "command": "npx",
      "args": ["-y", "evmole-mcp@latest"]
    }
  }
}

The server communicates over stdio.

Analyze runtime bytecode

The analyze_evm_bytecode tool accepts hexadecimal bytecode, optional include feature names, and optional offset and limit values. It can extract:

  • function selectors and dispatch locations;
  • inferred arguments and state mutability;
  • inferred persistent and transient storage access;
  • compiler metadata;
  • disassembly, basic blocks, and a control-flow graph.

Function selectors can be requested on their own with selectors. Requesting arguments or stateMutability also enables selector extraction, and the requested function information is combined in analysis.functions. Other requested analyses are returned in their corresponding analysis fields.

If include is omitted, the tool analyzes selectors, arguments, state mutability, both storage domains, and metadata. Disassembly and control-flow features are opt-in because their output can be large. The tool returns the canonical version 1 EVMole response as structured content plus a JSON text fallback. Check warnings and pagination before interpreting the result.

Privacy and limitations

The server uses stdio only, makes no network requests, requires no credentials, does not fetch contract addresses, and writes no files. It does not decode calldata, verify source, execute creation bytecode, or fully decompile source. Arguments, mutability, and storage descriptions are inferred rather than verified source-level facts.

Each evmole-mcp release depends on the matching exact evmole version.

See https://github.com/cdump/evmole/tree/master/agent for full setup and privacy guidance. Report problems at https://github.com/cdump/evmole/issues.

Keywords

evm

FAQs

Package last updated on 31 Jul 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts