--- bezeichner: "dev.weakspot/weakspot" art: "mcp_server" slug: "dev-weakspot-weakspot" paketkoordinate: "npm:weakspot-mcp" status: "aktiv" homepage: "https://weakspot.dev" erhebungsstand: "2026-10-12T01:17:02.346Z" namensraum: "dev.weakspot" registerseite: "https://tracevero.com/mcp/dev-weakspot-weakspot" abgerufen_am: "2026-10-12" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: false roh_beschreibung: "Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402." version: "0.1.1" roh_umgebungsvariablen: "WEAKSPOT_PRIVATE_KEY, WEAKSPOT_MAX_USD, WEAKSPOT_URL, WEAKSPOT_RPC_URL" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-05" roh_aktualisiert_am: "2026-09-05" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "" roh_repository_unterordner: "" roh_paketbezeichner: "weakspot-mcp" roh_paketversionen: "0.1.1" roh_laufzeithinweise: "" roh_umgebungsformate: "number, string" roh_umgebungsbeschreibungen: "WEAKSPOT_MAX_USD=Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control. · WEAKSPOT_PRIVATE_KEY=Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one. · WEAKSPOT_RPC_URL=Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it. · WEAKSPOT_URL=Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"weakspot-mcp\",\"version\":\"0.1.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"WEAKSPOT_PRIVATE_KEY\",\"description\":\"Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"WEAKSPOT_MAX_USD\",\"description\":\"Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"WEAKSPOT_URL\",\"description\":\"Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"WEAKSPOT_RPC_URL\",\"description\":\"Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # dev.weakspot/weakspot ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_repository_url: | | Description (raw) | Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402. | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Declared version | 0.1.1 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Environment variables (raw) | WEAKSPOT_PRIVATE_KEY, WEAKSPOT_MAX_USD, WEAKSPOT_URL, WEAKSPOT_RPC_URL | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | First listed in the registry (raw) | 2026-09-05 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-09-05 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository platform (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Package identifiers (raw) | weakspot-mcp | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Package versions (raw) | 0.1.1 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Environment variable formats (raw) | number, string | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Environment variable descriptions (raw) | WEAKSPOT_MAX_USD=Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control. · WEAKSPOT_PRIVATE_KEY=Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one. · WEAKSPOT_RPC_URL=Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it. · WEAKSPOT_URL=Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance. | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"weakspot-mcp","version":"0.1.1","transport":"stdio","environment":[{"name":"WEAKSPOT_PRIVATE_KEY","description":"Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.","format":"string","required":false,"secret":true},{"name":"WEAKSPOT_MAX_USD","description":"Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.","format":"number","required":false,"secret":false},{"name":"WEAKSPOT_URL","description":"Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.","format":"string","required":false,"secret":false},{"name":"WEAKSPOT_RPC_URL","description":"Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/dev-weakspot|dev.weakspot]] --- - Registry page: - Retrieved on: 2026-10-12