dev.weakspot/weakspot

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

What does this entry provide?

dev.weakspot/weakspot is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 93/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding dev.weakspot/weakspot to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: Official MCP Registry
Quality: 93/100
Install method: npm
Repo: Registry only
Repo updated: Sep 5, 2026

Install command

npx -y weakspot-mcp@0.1.1

Install method: npm

Review the upstream source before running this command.

Source entry

Quality

Repo stars

Repo updated

Sep 5, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-09-05T11:51:20.712038Z",
      "publishedAt": "2026-09-05T11:51:20.712038Z",
      "statusChangedAt": "2026-09-05T11:51:20.712038Z"
    }
  },
  "server": {
    "name": "dev.weakspot/weakspot",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.1.1",
    "packages": [
      {
        "version": "0.1.1",
        "transport": {
          "type": "stdio"
        },
        "identifier": "weakspot-mcp",
        "registryType": "npm",
        "environmentVariables": [
          {
            "name": "WEAKSPOT_PRIVATE_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one."
          },
          {
            "name": "WEAKSPOT_MAX_USD",
            "format": "number",
            "default": "4",
            "description": "Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control."
          },
          {
            "name": "WEAKSPOT_URL",
            "format": "string",
            "default": "https://weakspot.dev",
            "description": "Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance."
          },
          {
            "name": "WEAKSPOT_RPC_URL",
            "format": "string",
            "description": "Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it."
          }
        ]
      }
    ],
    "websiteUrl": "https://weakspot.dev",
    "description": "Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402."
  }
}

Report an issue with this listing