Skip to content
mcp/harbor
VS Code

Contract Security Scanner for VS Code

io.github.fino-oss/contract-scanner

Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.

client:VS Code transport:stdio runtime:npm

Install Contract Security Scanner in VS Code

.vscode/mcp.json 

{
  "inputs": [
    {
      "type": "promptString",
      "id": "basescan-api-key",
      "description": "BASESCAN_API_KEY",
      "password": true
    }
  ],
  "servers": {
    "contract-scanner": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@fino314-oss/contract-scanner-mcp"
      ],
      "env": {
        "BASESCAN_API_KEY": "${input:basescan-api-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

Contract Security Scanner in other clients

Contract Security Scanner MCP server