SmartGuard MCP

AI-powered smart contract security audit tools for Claude Code, Cursor, and AI coding agents.

Detect reentrancy, access control, overflow, oracle manipulation, and quantum vulnerabilities in Solidity contracts — directly from your AI assistant.

Quick Start

{
  "mcpServers": {
    "smartguard": {
      "command": "npx",
      "args": ["-y", "smartguard-mcp"]
    }
  }
}

Tools (5)

| Tool | Description | |------|-------------| | scan_contract | Scan a single Solidity file for vulnerabilities | | scan_contracts_directory | Recursively scan all .sol files in a directory | | scan_contract_snippet | Scan a Solidity code snippet (no file needed) | | list_vulnerability_patterns | List all detectable vulnerability patterns | | gas_optimization | Analyze gas optimization opportunities |

Detected Vulnerabilities (18 patterns)

| Category | Patterns | Severity | |----------|----------|----------| | Reentrancy | External calls before state updates | Critical | | Access Control | Missing modifiers, tx.origin, unprotected selfdestruct | Critical-High | | Delegatecall | Untrusted delegatecall targets | Critical | | Arithmetic | Integer overflow (pre-0.8), unchecked blocks | High-Medium | | Oracle Manipulation | Direct reserve reading, balance-based pricing | High | | Frontrunning | ERC20 approve race condition | Medium | | Timestamp | block.timestamp dependence | Medium | | Gas DoS | Unbounded loops, long revert strings | Medium-Low | | Storage | Uninitialized storage pointers | High | | Quantum (PQC) | ECDSA/ecrecover quantum vulnerability | Medium | | Best Practice | Floating pragma, TODO comments | Low-Info |

Example Output

# SmartGuard Audit Report

**File**: contracts/Vault.sol
**Risk Score**: 65/100 (HIGH)

## Findings

### 🔴 SG-001: External call with value before state update (potential reentrancy)
- **Severity**: CRITICAL
- **Location**: contracts/Vault.sol:15:9
- **SWC**: SWC-107

**Recommendation**: Use checks-effects-interactions pattern or ReentrancyGuard.

Used With

• quantumguard-mcp — Post-quantum cryptography audit (complementary)

Together, QuantumGuard + SmartGuard provide full-spectrum smart contract security: traditional vulnerabilities + quantum-future threats.

License

MIT