ContractLens

com.appin60.contractlens-apiPublished by contractlens-api.appin60.comOfficial publisherv1.3.0Updated Oct 24, 2026

EVM token risk checks, x402 payability check for sellers, address classifier and live gas.

VerifiedStreamable HTTPWeb executableFinanceDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server for EVM smart-contract risk checks, address classification, live gas prices and x402 endpoint payability testing.

What you can do
Scan a verified EVM contract for ownership, admin-gated functions, proxy status and ranked Slither findings, and get a fast LOW/MEDIUM/HIGH risk verdict on ERC-20 tokens before buying, including admin powers, liquidity and source verification checks. Classify any address as EOA, delegated EOA, Safe multisig, timelock, token, proxy or contract with its native balance. Fetch live EIP-1559 gas data and action costs across six chains. Test whether an x402 seller endpoint can actually be paid by sending one payment from a fresh unfunded key.
When to use it
Useful when an assistant helps evaluate tokens or contracts before approving or buying, checks who controls an address before sending funds, needs current gas estimates, or verifies that an x402 payment endpoint works for real buyers.
Requirements
A remote streamable HTTP endpoint; no package, environment variables or headers are declared. Network access to the hosted service is needed. The x402 check sends a payment from a fresh unfunded key through the endpoint's server and facilitator.
Before you install
Risk verdicts and scans are advisory and should not replace your own due diligence before approving or buying. The x402 payability check actively sends a payment request to a third-party endpoint and its facilitator, so only point it at endpoints you are authorized to test.

Installation

In SourceWeft

  1. Open ContractLens in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.appin60.contractlens-api%2Fcontractlens/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "contractlens": {
      "type": "http",
      "url": "https://contractlens-api.appin60.com/mcp"
    }
  }
}

Tools

5

scan_contract

Security scan of a verified EVM smart contract: who controls it now (owner / proxy admin: renounced, single-key EOA or Safe multisig), every owner/role-gated function (mint, pause, blacklist, upgrade, fees), proxy status, and Slither static-analysis findings ranked by impact. Use before approving, depositing into or buying a token. Chains: 1 Ethereum, 8453 Base, 42161 Arbitrum, 10 Optimism, 137 Polygon, 56 BNB.

ParametersaddressrequiredchainIdrequired

check_token

Fast (1-3 s) risk verdict for an ERC-20 token before buying it: LOW/MEDIUM/HIGH with reasons. Who controls it (renounced, single key, Safe multisig, timelock), upgradeable proxy, admin powers in the bytecode (mint, blacklist, pause, adjustable tax, trading switch), source verification, DEX liquidity and pair age. Chains: 1 Ethereum, 8453 Base, 42161 Arbitrum, 10 Optimism, 137 Polygon, 56 BNB.

ParametersaddressrequiredchainIdrequired

gas_now

Live EIP-1559 gas for a chain: base fee, slow/standard/fast tips, maxFeePerGas values and the cost of common actions. Chains: 1, 8453, 42161, 10, 137, 56.

ParameterschainIdrequired

address_info

What is this address? EOA, EIP-7702 delegated EOA, Safe multisig (threshold, owners), timelock, ERC-20 token, proxy or contract, with native balance. Use before sending funds to or trusting an address.

ParametersaddressrequiredchainIdrequired

check_x402_payability

For x402 sellers: can a real buyer actually pay this endpoint? Sends one payment signed by a fresh unfunded key through the endpoint's server and facilitator. Payable endpoints fail only on balance; anything else is reported with the exact reason (schema, description over 500 chars, EIP-712 domain, price over the $1 default client cap, paywall not enforcing).

Parametersurlrequired

Version history

1
  1. v1.3.0LatestOct 13, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.