Back to Home
Cyfrin icon

aderyn

Verified Safe

by Cyfrin

Overview

A powerful Solidity static analyzer that provides structured access to smart contract code, ASTs, and analysis results via a Model Context Protocol (MCP) server or Language Server Protocol (LSP), primarily intended for AI agents or advanced tooling.

Installation

Run Command
aderyn mcp http-stream --port 6277

Environment Variables

  • FOUNDRY_PROFILE
  • CARGO_TERM_COLOR
  • ADERYN_LOG

Security Notes

The project is implemented in Rust, which inherently provides strong memory safety guarantees. Network interactions are confined to documented functionalities such as update checks (connecting to GitHub API) and serving the MCP/LSP protocols (using `axum` and `tower-lsp`). No 'eval' or other dynamic code execution from untrusted sources, nor obvious hardcoded secrets, were identified. The `xtask` tools are for development/release processes (e.g., git operations, script execution), which, while interacting with the local system, are not exposed as runtime risks to typical end-users of the static analyzer. Overall, the codebase demonstrates a security-conscious design.

Similar Servers

Stats

Interest Score68
Security Score9
Cost ClassMedium
Avg Tokens1000
Stars668
Forks99
Last Update2025-12-04

Tags

SolidityStatic AnalysisSmart ContractsSecurityDeveloper ToolRustMCP