contract scanner for VS Code

io.github.lordbasilaiassistant-sudo/contract-scanner

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

client:VS Code transport:stdio runtime:npm

Install contract scanner in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "rpc-url",
      "description": "RPC_URL",
      "password": true
    },
    {
      "type": "promptString",
      "id": "thryx-api-key",
      "description": "THRYX_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "basescan-api-key",
      "description": "BASESCAN_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "etherscan-api-key",
      "description": "ETHERSCAN_API_KEY",
      "password": true
    }
  ],
  "servers": {
    "contract-scanner": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@thryx/contract-scanner-mcp-server"
      ],
      "env": {
        "RPC_URL": "${input:rpc-url}",
        "THRYX_API_KEY": "${input:thryx-api-key}",
        "BASESCAN_API_KEY": "${input:basescan-api-key}",
        "ETHERSCAN_API_KEY": "${input:etherscan-api-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

contract scanner in other clients

contract scanner MCP server