Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
solidit-mcp-server
Give AI assistants instant access to Solodit's 49,000+ blockchain vulnerability database.
An MCP server that connects Claude (and other MCP clients) to the Solodit audit findings API -- search vulnerabilities, browse recent discoveries, and look up specific findings directly from your AI workflow.
Runs via npx solidit-mcp-server with zero global installation required.
Quick Start
- Get an API key at solodit.cyfrin.io (Profile > API Keys)
- Add the MCP config (see Claude Code or Claude Desktop below)
- Start using it -- ask Claude something like:
"Search for reentrancy vulnerabilities in DeFi protocols"
Claude Code
Add to your .mcp.json (project-level) or ~/.claude/mcp.json (global):
{
"mcpServers": {
"solodit": {
"command": "npx",
"args": ["-y", "solidit-mcp-server"],
"env": { "SOLODIT_API_KEY": "your-api-key-here" }
}
}
}Claude Desktop
Add to your Claude Desktop config file:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"solodit": {
"command": "npx",
"args": ["-y", "solidit-mcp-server"],
"env": { "SOLODIT_API_KEY": "your-api-key-here" }
}
}
}Docker
Build and run locally:
docker build -t solidit-mcp-server .
docker run -i -e SOLODIT_API_KEY=your-api-key-here solidit-mcp-serverOr use docker-compose with a .env file:
# .env
SOLODIT_API_KEY=your-api-key-heredocker compose upTools
search_findings
Full-featured search across Solodit's database with 14+ filters. All parameters are optional -- a bare call returns recent findings.
| Parameter | Type | Description |
|---|---|---|
keywords | string | Free-text search across titles and content |
impact | string[] | Severity filter: HIGH, MEDIUM, LOW, GAS |
tags | string[] | Vulnerability type: Reentrancy, Oracle, Access Control, Integer Overflow/Underflow, Front-running, Logic Error, DOS, Price Manipulation, Flash Loan, Griefing, etc. |
firms | string[] | Audit firm: Cyfrin, Sherlock, Code4rena, Trail of Bits, OpenZeppelin, etc. |
protocol_category | string[] | Protocol type: DeFi, NFT, Lending, DEX, Staking, Governance, Bridge, etc. |
language | string[] | Language: Solidity, Rust, Cairo, Vyper, Move |
protocol | string | Protocol name (partial match) |
finder | string | Auditor handle (partial match) |
quality_min | number | Minimum quality score (0-5) |
rarity_min | number | Minimum rarity score (0-5) |
date_range | string | Preset: 30, 60, 90 days, or alltime |
date_after | string | Custom date cutoff (ISO format, e.g. 2024-01-01) |
sort_by | string | Recency, Quality, or Rarity |
sort_direction | string | Desc or Asc |
page | number | Page number (default: 1) |
page_size | number | Results per page (default: 20, max: 100) |
max_content_length | number | Content preview length (default: 500, max: 5000) |
Example: "Find high-impact reentrancy findings in DeFi protocols audited by Cyfrin"
get_finding_detail
Retrieve the full content and metadata of a single finding by ID or slug. Use after seeing a result in search_findings to get the complete writeup.
| Parameter | Type | Description |
|---|---|---|
finding_id | string | The finding ID (UUID) or slug from search results or Solodit URLs |
Example: "Get the full details of finding abc-123-def"
search_by_tag
Search by vulnerability tags, sorted by quality score (best examples first). Ideal for finding high-quality writeups about a specific vulnerability class.
| Parameter | Type | Description |
|---|---|---|
tags | string[] | Required. One or more vulnerability tags |
impact | string[] | Severity filter: HIGH, MEDIUM, LOW, GAS |
language | string[] | Language filter |
protocol_category | string[] | Protocol category filter |
page | number | Page number (default: 1) |
page_size | number | Results per page (default: 10, max: 100) |
Example: "Find the best oracle manipulation examples in Solidity"
recent_findings
Browse the latest findings from the last N days, sorted by recency (newest first).
| Parameter | Type | Description |
|---|---|---|
days | number | Days to look back (default: 30) |
impact | string[] | Severity filter: HIGH, MEDIUM, LOW, GAS |
language | string[] | Language filter |
protocol_category | string[] | Protocol category filter |
page | number | Page number (default: 1) |
page_size | number | Results per page (default: 10, max: 100) |
Example: "Show me high-impact findings from the last 7 days"
API Key
This server requires a Solodit API key. Get yours at solodit.cyfrin.io under Profile > API Keys.
The key is passed via the SOLODIT_API_KEY environment variable in your MCP configuration (see setup sections above).