.vscode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .vscode (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server tailored for Klever blockchain smart contract development. This server maintains and serves contextual knowledge including code patterns, best practices, and runtime behavior for developers working with the Klever VM SDK.
Install and run instantly via npx — no cloning required:
npx -y @klever/mcp-serverOr connect to the hosted public server:
claude mcp add -t http klever-vm https://mcp.klever.org/mcpSee MCP Client Integration for client-specific configuration.
mcp-klever-vm/
├── src/
│ ├── api/ # HTTP API routes with validation
│ ├── context/ # Context management service layer
│ ├── mcp/ # MCP protocol server implementation
│ ├── parsers/ # Klever contract parser and validator
│ ├── storage/ # Storage backends (memory/Redis)
│ │ ├── memory.ts # In-memory storage with size limits
│ │ └── redis.ts # Redis storage with optimized queries
│ ├── types/ # TypeScript type definitions
│ ├── utils/ # Utilities and ingestion tools
│ └── knowledge/ # Modular knowledge base (95+ entries)
│ ├── core/ # Core concepts and imports
│ ├── storage/ # Storage patterns and mappers
│ ├── events/ # Event handling and rules
│ ├── tokens/ # Token operations and decimals
│ ├── modules/ # Built-in modules (admin, pause)
│ ├── tools/ # CLI tools (koperator, ksc)
│ ├── scripts/ # Helper scripts
│ ├── examples/ # Complete contract examples
│ ├── errors/ # Error patterns
│ ├── best-practices/ # Optimization and validation
│ └── documentation/ # API reference
├── tests/ # Test files
└── docs/ # Documentationgit clone https://github.com/klever-io/mcp-klever-vm.git
cd mcp-klever-vmpnpm installcp .env.example .envchmod +x scripts/install-sdk.sh && ./scripts/install-sdk.shpnpm run buildEdit .env file to configure the server:
# Server Mode (http, mcp, or public)
MODE=http
# HTTP Server Port (only for http mode)
PORT=3000
# Storage Backend (memory or redis)
STORAGE_TYPE=memory
# Maximum contexts for in-memory storage (default: 10000)
MEMORY_MAX_SIZE=10000
# Redis URL (only if STORAGE_TYPE=redis)
REDIS_URL=redis://localhost:6379
# Node environment (development or production)
NODE_ENV=development# Add via npx (recommended)
claude mcp add klever-vm -- npx -y @klever/mcp-server
# Or connect to the public hosted server
claude mcp add -t http klever-vm https://mcp.klever.org/mcpAdd to your claude_desktop_config.json:
{
"mcpServers": {
"klever-vm": {
"command": "npx",
"args": ["-y", "@klever/mcp-server"]
}
}
}For detailed setup, see the Claude Desktop Installation Guide.
Add to your Cursor MCP settings (.cursor/mcp.json):
{
"mcpServers": {
"klever-vm": {
"command": "npx",
"args": ["-y", "@klever/mcp-server"]
}
}
}Add to .vscode/mcp.json in your project:
{
"servers": {
"klever-vm": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@klever/mcp-server"]
}
}
}For detailed setup, see the VS Code Installation Guide.
The Klever MCP Server can be hosted as a public shared service, allowing any developer to connect without running it locally.
# Add permanently (user-level)
claude mcp add -t http klever-vm https://mcp.klever.org/mcp
# Add for current project only
claude mcp add -t http -s project klever-vm https://mcp.klever.org/mcpThe public server exposes a read-only subset of tools for security:
| Tool | Description |
|---|---|
query_context | Search the Klever VM knowledge base |
get_context | Retrieve a specific context by ID |
find_similar | Find contexts similar to a given context |
get_knowledge_stats | Get knowledge base statistics |
enhance_with_context | Enhance queries with relevant Klever VM context |
Write operations (add_context) and shell-based tools (init_klever_project, add_helper_scripts) are disabled in public mode.
# Build and run
docker build -t mcp-klever-vm .
docker run -p 3000:3000 mcp-klever-vm
# Or using docker compose
docker compose up -dThen connect:
claude mcp add -t http klever-vm-local http://localhost:3000/mcppnpm install
pnpm run build
pnpm run start:public| Variable | Default | Description |
|---|---|---|
MODE | http | Set to public for hosted mode |
PORT | 3000 | Server port |
CORS_ORIGINS | _(unset)_ | Comma-separated allowed origins. Unset or * allows all origins |
RATE_LIMIT_MCP | 60 | MCP endpoint requests/min per IP |
RATE_LIMIT_API | 30 | API endpoint requests/min per IP |
BODY_SIZE_LIMIT | 1mb | Max request body size |
For production at mcp.klever.org:
mcp-session-id header and supports SSE (disable response buffering)The server automatically loads the Klever knowledge base based on your storage type:
#### Memory Storage (Default)
pnpm run ingest separately#### Redis Storage
# First, ingest the knowledge base (one time)
pnpm run ingest
# Then start the server
pnpm run devThis will load:
# Development mode
pnpm run dev
# Production mode
pnpm run build && pnpm startThe HTTP API will be available at http://localhost:3000/api
MODE=mcp pnpm startUse with any MCP-compatible client.
#### POST /api/context Ingest new context into the system.
{
"type": "code_example",
"content": "contract code here",
"metadata": {
"title": "Token Contract Example",
"description": "ERC20-like token implementation",
"tags": ["token", "fungible"],
"contractType": "token"
}
}#### GET /api/context/:id Retrieve specific context by ID.
#### POST /api/context/query Query contexts with filters.
{
"query": "transfer",
"types": ["code_example", "best_practice"],
"tags": ["token"],
"contractType": "token",
"limit": 10,
"offset": 0
}#### PUT /api/context/:id Update existing context.
#### DELETE /api/context/:id Delete context.
#### GET /api/context/:id/similar Find similar contexts.
#### POST /api/context/batch Batch ingest multiple contexts.
When running as MCP server, the following tools are available:
query_context: Search for relevant Klever development contextadd_context: Add new context to the knowledge baseget_context: Retrieve specific context by IDfind_similar: Find contexts similar to a given contextget_knowledge_stats: Get statistics about the knowledge baseinit_klever_project: Initialize a new Klever smart contract project with helper scriptsenhance_with_context: Automatically enhance queries with relevant Klever VM contextcode_example: Working code snippets and examples (Rust smart contract code)best_practice: Recommended patterns and practicessecurity_tip: Security considerations and warningsoptimization: Performance optimization techniquesdocumentation: General documentation and guideserror_pattern: Common errors and solutionsdeployment_tool: Deployment scripts and utilities (bash scripts, tools)runtime_behavior: Runtime behavior explanationsThe MCP server includes a comprehensive knowledge base with 95+ entries organized into 11 categories:
Use the built-in ingestion utilities to parse and import Klever contracts:
import { StorageFactory } from './storage/index.js';
import { ContextService } from './context/service.js';
import { ContractIngester } from './utils/ingest.js';
const storage = StorageFactory.create('memory');
const contextService = new ContextService(storage);
const ingester = new ContractIngester(contextService);
// Ingest a single contract
await ingester.ingestContract('./path/to/contract.rs', 'AuthorName');
// Ingest entire directory
await ingester.ingestDirectory('./contracts', 'AuthorName');
// Add common patterns
await ingester.ingestCommonPatterns();# Run tests
pnpm test
# Lint code
pnpm run lint
# Format code
pnpm run format
# Watch mode
pnpm run dev
# Ingest/update knowledge base
pnpm run ingestThe server can automatically validate Klever contracts and detect issues:
import { KleverValidator } from './parsers/validators.js';
const issues = KleverValidator.validateContract(contractCode);
// Returns array of detected issues with suggestionsValidation checks include:
Integrate with your IDE to provide context-aware suggestions for Klever contract development.
Automatically check contracts against best practices and security patterns.
Provide examples and explanations for developers learning Klever development.
Extract and organize contract documentation automatically.
For complete project implementation examples and specifications, see:
The MCP server includes a powerful project initialization tool that creates a new Klever smart contract project with all necessary helper scripts.
When connected via MCP, use the init_klever_project tool:
{
"name": "my-token-contract",
"template": "empty",
"noMove": false
}Parameters:
name (required): The name of your contracttemplate (optional): Template to use (default: "empty")noMove (optional): If true, keeps project in subdirectory (default: false)The tool creates the following scripts in the scripts/ directory:
# Via MCP tool
init_klever_project({"name": "my-contract"}) ./scripts/build.sh ./scripts/deploy.sh ./scripts/query.sh --endpoint getSum
./scripts/query.sh --endpoint getValue --arg myKey ./scripts/upgrade.shAll deployment history is tracked in output/history.json for easy reference.
The MCP server can automatically enhance queries with relevant Klever VM context. This ensures your MCP client always has access to the most relevant information.
Use the enhance_with_context tool to automatically add relevant context to any query:
{
"tool": "enhance_with_context",
"arguments": {
"query": "How do I create a storage mapper?",
"autoInclude": true
}
}This will:
For MCP clients that want to always check Klever context first:
// Always enhance Klever-related queries
if (query.match(/klever|kvm|smart contract|endpoint/i)) {
const enhanced = await callTool('enhance_with_context', { query });
// Use enhanced.enhancedQuery for processing
}The context enhancement feature automatically enriches queries with relevant Klever VM knowledge from the comprehensive knowledge base.
// Query for token transfer examples
const response = await fetch('http://localhost:3000/api/context/query', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
query: 'transfer',
types: ['code_example'],
contractType: 'token'
})
});# Using curl to add context
curl -X POST http://localhost:3000/api/context \
-H "Content-Type: application/json" \
-d '{
"type": "security_tip",
"content": "Always check for zero address",
"metadata": {
"title": "Zero Address Check",
"tags": ["security", "validation"]
}
}'Contributions are welcome! Please:
MIT License - see LICENSE file for details
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.