Kestrova: Solidity Vulnerability Scan
io.github.som2026-commitsPublished by GitHub account som2026-commitsv0.4.0Updated Oct 31, 2026
Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402
The publisher's own server: scan.mx Email Diagnostics
Overview
Remote MCP server that runs Slither static analysis on Solidity contracts, with a free severity preview and a paid detailed report.
- What you can do
- Run a free Slither scan on a Solidity contract and get severity counts plus the names of High and Medium detectors triggered
- Request an optional paid full report that lists every finding with line locations
- Read the payment terms for the paid scan before spending
- Supports security review of contracts an assistant writes, edits or is about to deploy
- When to use it
- Useful when an assistant writes, modifies or prepares to deploy Solidity contracts and you want a quick automated pattern check, or when you need a line-level findings list and are willing to pay for it.
- Requirements
- A remote streamable HTTP endpoint; no API key or environment variables are declared. The free preview needs nothing else. The full report requires a payment of 1 USDC on Solana via x402, which needs a funded wallet and user authorisation.
Installation
In SourceWeft
- Open Kestrova: Solidity Vulnerability Scan in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.som2026-commits%2Fkestrova/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config.
{
"mcpServers": {
"kestrova-solidity-vulnerability-scan": {
"type": "http",
"url": "https://kestrova.onrender.com/mcp?src=registry"
}
}
}README
This repository has no README.
Tools
0Version history
2- v0.4.0LatestOct 31, 2026
- v0.3.0Oct 26, 2026
Score
70% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listedRequired15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
- License10 pts
Other Scan integrations
scan.mx Email Diagnostics
mx.scanOfficial publisher
Remote MCP server that lets an assistant run graded email deliverability and DNS checks on a domain, covering MX, SPF, DKIM, DMARC, blacklists and more.
MTG Trade Scan
fr.mtg-trade
Scans Magic: The Gathering binder photos, turning uploaded page images into processed scan jobs, with free daily pages and paid credits.
mcp-guard
Published by GitHub account diegoperezg7
Security scanner for MCP servers that checks tool lists for poisoning, shadowing, excessive permissions, leaked secrets and weak transports.
PredictionScan
Published by GitHub account JordanKarst
Derived prediction-market flow, price changes, trader research and news. 11 read-only tools.
x402-sec-scan
Published by GitHub account 6mickswagger9
Local stdio MCP server exposing an x402 paid API for AI agents, settling payments in USDC on Base through a CDP facilitator.