New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

solidity-agent-toolkit

Package Overview
Dependencies
Maintainers
1
Versions
10
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

solidity-agent-toolkit

MCP server providing Solidity smart contract security analysis tools, OWASP knowledge base, and development utilities for AI agents

latest
Source
npmnpm
Version
0.7.0
Version published
Maintainers
1
Created
Source

solidity-agent-toolkit

MCP server + LSP server + Agent Skills providing Solidity smart contract security analysis tools, OWASP knowledge base, and development utilities for AI agents.

Built on Model Context Protocol and Language Server Protocol — works with Claude Desktop, Cursor, opencode, VSCode, IntelliJ, Neovim, and any MCP/LSP-compatible client.

Quick Start

# Run MCP server (no install needed)
npx solidity-agent-toolkit

# Install Agent Skills for AI coding agents
npx skills add whackur/solidity-agent-toolkit

MCP Client Config (Claude Desktop, Cursor, etc.)

{
  "mcpServers": {
    "solidity-agent-toolkit": {
      "command": "npx",
      "args": ["-y", "solidity-agent-toolkit@latest"]
    }
  }
}

See MCP Setup for client-specific instructions.

Local Development

git clone --recurse-submodules https://github.com/whackur/solidity-agent-toolkit.git

# If already cloned without submodules
git submodule update --init

# Update submodule to latest remote commit
git submodule update --remote

Features

10 MCP Tools — Security scanning (Slither, Aderyn, Solhint), AST-based vulnerability detection with regex fallback (22 SCWE IDs), OWASP SCWE knowledge search, contract structural analysis (adversarial, proxy safety, ERC compliance, access control, dependencies), compilation & inspection (Foundry), test runner, gas analysis, deployment simulation, code quality (NatSpec, style guide, formatting)

12 MCP Resources — OWASP Smart Contract Top 10, SCWE vulnerability database (156 entries), ERC standard interfaces, adversarial scenarios, Slither detectors, Solhint rules

7 MCP Prompts — Security audit, vulnerability fix, code review, best practices, gas optimization, ERC generation, adversarial analysis

LSP Server — Real-time AST + pattern diagnostics, CLI diagnostics on save, OWASP SCWE hover info, remediation code actions

7 Agent Skills — Security best practices, Foundry development, Hardhat development, gas optimization, code review methodology, ERC standards, adversarial analysis

Documentation

DocumentDescription
InstallationInstall, update, uninstall, version pinning
MCP SetupClaude Desktop, Cursor, opencode, VSCode, IntelliJ
LSP SetupVSCode, IntelliJ, Neovim, Sublime Text
API ReferenceAll tools, resources, and prompts
Agent SkillsSkill descriptions and installation
DevelopmentPrerequisites, commands, architecture

Contributing

All GitHub Issues, PRs (title/description/comments), commit messages, code comments, and documentation must be in English only.

License

MIT

Keywords

solidity

FAQs

Package last updated on 12 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts