smartguard-mcp

SmartGuard MCP

AI-powered smart contract security audit tools for Claude Code, Cursor, and AI coding agents.

Detect reentrancy, access control, overflow, oracle manipulation, and quantum vulnerabilities in Solidity contracts — directly from your AI assistant.

Quick Start

{
  "mcpServers": {
    "smartguard": {
      "command": "npx",
      "args": ["-y", "smartguard-mcp"]
    }
  }
}

Tools (5)

Tool	Description
scan_contract	Scan a single Solidity file for vulnerabilities
scan_contracts_directory	Recursively scan all .sol files in a directory
scan_contract_snippet	Scan a Solidity code snippet (no file needed)
list_vulnerability_patterns	List all detectable vulnerability patterns
gas_optimization	Analyze gas optimization opportunities

Detected Vulnerabilities (18 patterns)

Category	Patterns	Severity
Reentrancy	External calls before state updates	Critical
Access Control	Missing modifiers, tx.origin, unprotected selfdestruct	Critical-High
Delegatecall	Untrusted delegatecall targets	Critical
Arithmetic	Integer overflow (pre-0.8), unchecked blocks	High-Medium
Oracle Manipulation	Direct reserve reading, balance-based pricing	High
Frontrunning	ERC20 approve race condition	Medium
Timestamp	block.timestamp dependence	Medium
Gas DoS	Unbounded loops, long revert strings	Medium-Low
Storage	Uninitialized storage pointers	High
Quantum (PQC)	ECDSA/ecrecover quantum vulnerability	Medium
Best Practice	Floating pragma, TODO comments	Low-Info

Example Output

# SmartGuard Audit Report

**File**: contracts/Vault.sol
**Risk Score**: 65/100 (HIGH)

## Findings

### 🔴 SG-001: External call with value before state update (potential reentrancy)
- **Severity**: CRITICAL
- **Location**: contracts/Vault.sol:15:9
- **SWC**: SWC-107

**Recommendation**: Use checks-effects-interactions pattern or ReentrancyGuard.

Used With

• quantumguard-mcp — Post-quantum cryptography audit (complementary)

Together, QuantumGuard + SmartGuard provide full-spectrum smart contract security: traditional vulnerabilities + quantum-future threats.

License

MIT