Weakspot
Audit Solidity and Rust smart contracts from your editor.
Connector by weakspot.devOfficial · Domain verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/weakspot-dev-weakspot
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 4 read · 0 write · 0 deleteRead-only
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- None found
- Runs as
- Node.js package
Tools by what they do 4
Read from the source code; the running server may list different tools.
Read 4 · Look things up without changing anything.
weakspot_auditweakspot_audit_statusweakspot_estimate_priceweakspot_wallet_status
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
WEAKSPOT_PRIVATE_KEY
Other settings (environment variables or headers).
WEAKSPOT_MAX_USDWEAKSPOT_RPC_URLWEAKSPOT_URL
Files it touches
- Any path the agent passes to its tools
Tools (4)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
weakspot_auditCommission a security audit of Solidity or Rust/Anchor source files. THIS SPENDS REAL MONEY (USDC on Base, $1 per 10 files) — confirm with the user before calling it. Returns a jobId immediately; the audit runs for several minutes, so poll weakspot_audit_status with that jobId rather than expecting findings here.
weakspot_audit_statusPoll an audit by jobId. Free, no wallet needed. `stage` moves static-analysis -> batches -> verify -> summary -> done; findings are present once stage is 'done'. The jobId is a bearer credential — anyone holding it can read the report.
weakspot_estimate_pricePrice a Weakspot audit before committing to it. $1 per 10 files, rounded up, capped at 40 files. Costs nothing and needs no wallet. Call this first if the user cares what the audit will cost.
weakspot_wallet_statusShow which wallet this server pays from and its USDC balance. Use when a payment fails, to tell an unfunded wallet apart from a protocol problem. Never reveals the private key.
Signals
- Last release
- Sep 5, 2026 (1 month ago)
Details
- Registry name
dev.weakspot/weakspot- Version
- 0.1.1
- Auth
- API key
- Packages
- npm weakspot-mcp
- License
- License unknown
- Website
- weakspot.dev
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- Official MCP Registry
Cite this page
Weakspot MCP server. Agent Mart. https://agentmart.dev/connectors/weakspot-dev-weakspot (last updated 2026-10-24)