weakspot

Name: weakspot
Author: weakspot.dev

本地服务

weakspot.dev安全

访问官网

关于 weakspot

在编辑器中审计 Solidity 和 Rust 智能合约。通过 x402 按每次审计以 USDC 付款。

配置

本地服务的配置在各客户端中通用，复制后粘贴到客户端的 MCP 配置文件即可。

mcp.json · 通用配置

{
  "mcpServers": {
    "dev-weakspot-weakspot": {
      "command": "npx",
      "args": [
        "-y",
        "weakspot-mcp"
      ],
      "env": {
        "WEAKSPOT_PRIVATE_KEY": "<WEAKSPOT_PRIVATE_KEY>",
        "WEAKSPOT_MAX_USD": "<WEAKSPOT_MAX_USD>",
        "WEAKSPOT_URL": "<WEAKSPOT_URL>",
        "WEAKSPOT_RPC_URL": "<WEAKSPOT_RPC_URL>"
      }
    }
  }
}

启动命令npx -y weakspot-mcp

需要配置的环境变量

WEAKSPOT_PRIVATE_KEY密钥Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.

WEAKSPOT_MAX_USDHard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.

WEAKSPOT_URLBase URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.

WEAKSPOT_RPC_URLBase RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.

本地服务需要在你的电脑上安装运行环境（如 Node.js 18+）。各客户端的配置文件位置不同，请参考客户端文档。

安装包

npmweakspot-mcp0.1.1stdio