web3-solidity-audit-mcp

Audit Solidity contracts with Slither, Aderyn, and SWC detectors.

121|32|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/shuvonsec/web3-bug-bounty-hunting-ai-skills --skill web3-solidity-audit-mcp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-solidity-audit-mcp
Source: https://github.com/shuvonsec/web3-bug-bounty-hunting-ai-skills/tree/main/web3-solidity-audit-mcp
Command: npx skills add https://github.com/shuvonsec/web3-bug-bounty-hunting-ai-skills --skill web3-solidity-audit-mcp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

MCP server that gives Claude Code direct access to Slither, Aderyn, SWC pattern matching, and gas optimization, delivering merged, severity-sorted audit reports for Solidity contracts.

Core Features & Use Cases

  • Unified multi-tool pipeline: Slither, Aderyn, SWC detectors integrated into one server to audit Solidity code without context-switching.
  • DeFi-focused detectors and built-in explainers, invariant capabilities, and CI/CD workflow support for rapid risk assessment.
  • CI/CD readiness and Claude Code integration via a configured MCP, Docker, or local node.

Quick Start

Install the MCP server, configure Claude Code to use the audit server, and run analyze_contract on your Solidity project.

Frequently Asked Questions about web3-solidity-audit-mcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a Solidity audit directly inside Claude Code?

You can run a Solidity audit in Claude Code by installing this MCP server, which integrates Slither, Aderyn, and SWC detectors to execute the analyze_contract function and deliver merged, severity-sorted reports for your project.

What is the best way to combine Slither and Aderyn findings for a DeFi smart contract review?

The best way to combine Slither and Aderyn findings is using a unified MCP server that orchestrates both tools, automatically de-duplicating overlapping vulnerability results and sorting them by severity for a comprehensive risk assessment.

Can I use Claude Code for SWC pattern matching and gas optimization checks?

Yes, you can use Claude Code for SWC pattern matching and gas optimization by wiring it to this MCP server, which provides direct access to these specific detectors alongside Slither and Aderyn for comprehensive contract analysis.

Does this Solidity audit MCP server support CI/CD workflows?

Yes, this Solidity audit MCP server supports CI/CD workflows by allowing integration via CLI, Docker, or local node configurations, enabling automated risk assessments and security checks during development pipelines.

How do I install and configure a Solidity audit MCP server via Docker?

To install and configure the Solidity audit MCP server via Docker, you need to pull the server image, configure Claude Code to recognize the Docker container, and execute analyze_contract on your Solidity project directory.

Why should I use an MCP server instead of running Slither and Aderyn separately?

Using an MCP server instead of running Slither and Aderyn separately eliminates context-switching, orchestrates multi-tool execution, de-duplicates overlapping findings, and provides built-in explainers for streamlined DeFi risk assessments.