ContractOracle-Sentinel

io.github.EvozimPublished by GitHub account Evozimv1.0.0Updated Oct 24, 2026

DeFi smart contract forensic auditor and vulnerability scanner.

VerifiedSSEWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP endpoint for DeFi smart contract forensic auditing and vulnerability scanning, with a paid premium tier unlocked by a payment signature.

What you can do
  • Audit and scan DeFi smart contracts for vulnerabilities and forensic findings.
  • No tool list is published, so the exact operations are not documented.
  • Premium settlement is gated behind a payment-signature header.
When to use it
When you want an assistant to check DeFi smart contracts for vulnerabilities or forensic issues without running a local scanner, and you are willing to pay for premium results.
Requirements
A remote SSE endpoint; no local install or package. No authentication is declared, but premium settlement requires a payment-signature header carrying a Base64-encoded EIP-3009 TransferWithAuthorization signature.
Before you install
Premium use requires a signed EIP-3009 transfer authorization, which can move funds; only sign amounts and recipients you have verified. Contract data you submit goes to a third-party hosted service. No tool list or documentation is published, so behavior is unverified.

Installation

In SourceWeft

  1. Open ContractOracle-Sentinel in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via SSE. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Evozim%2Fdefi-sentinel/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "contractoracle-sentinel": {
      "type": "sse",
      "url": "https://defi-sentinel-mcp.vercel.app/api/mcp"
    }
  }
}

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

67% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.