--- bezeichner: "dev.weakspot/weakspot" art: "mcp_server" slug: "dev-weakspot-weakspot" paketkoordinate: "npm:weakspot-mcp" status: "aktiv" homepage: "https://weakspot.dev" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "dev.weakspot" registerseite: "https://tracevero.de/mcp/dev-weakspot-weakspot" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: false roh_beschreibung: "Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402." version: "0.1.1" roh_umgebungsvariablen: "WEAKSPOT_PRIVATE_KEY, WEAKSPOT_MAX_USD, WEAKSPOT_URL, WEAKSPOT_RPC_URL" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-05" roh_aktualisiert_am: "2026-09-05" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "" roh_repository_unterordner: "" roh_paketbezeichner: "weakspot-mcp" roh_paketversionen: "0.1.1" roh_laufzeithinweise: "" roh_umgebungsformate: "number, string" roh_umgebungsbeschreibungen: "WEAKSPOT_MAX_USD=Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control. · WEAKSPOT_PRIVATE_KEY=Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one. · WEAKSPOT_RPC_URL=Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it. · WEAKSPOT_URL=Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"weakspot-mcp\",\"version\":\"0.1.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"WEAKSPOT_PRIVATE_KEY\",\"description\":\"Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"WEAKSPOT_MAX_USD\",\"description\":\"Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"WEAKSPOT_URL\",\"description\":\"Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"WEAKSPOT_RPC_URL\",\"description\":\"Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # dev.weakspot/weakspot ## Gemessene Werte | Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe | | --- | --- | --- | --- | --- | --- | | Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Ausführungsort | lokal | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_transportarten: stdio | | Pfadargument vorhanden | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository-Adresse geführt | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_repository_url: | | Beschreibung (Rohangabe) | Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402. | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Deklarierte Version | 0.1.1 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Umgebungsvariablen (Rohangabe) | WEAKSPOT_PRIVATE_KEY, WEAKSPOT_MAX_USD, WEAKSPOT_URL, WEAKSPOT_RPC_URL | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Geheime Pflichtvariablen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Transportarten (Rohangabe) | stdio | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Pfadargumente (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Paketquellen (Rohangabe) | npm | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Geheime Pflichtkopfzeilen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Pfad-Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote-Adressen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote-Hosts (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Statusmeldung des Registers (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Im Register eingetragen am (Rohangabe) | 2026-09-05 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Im Register geändert am (Rohangabe) | 2026-09-05 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository-Plattform (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository-Unterordner (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Paketbezeichner (Rohangabe) | weakspot-mcp | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Paketversionen (Rohangabe) | 0.1.1 | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Laufzeithinweise (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Formate der Umgebungsvariablen (Rohangabe) | number, string | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Beschreibungen der Umgebungsvariablen (Rohangabe) | WEAKSPOT_MAX_USD=Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control. · WEAKSPOT_PRIVATE_KEY=Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one. · WEAKSPOT_RPC_URL=Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it. · WEAKSPOT_URL=Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance. | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Symbolformate (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"npm","identifier":"weakspot-mcp","version":"0.1.1","transport":"stdio","environment":[{"name":"WEAKSPOT_PRIVATE_KEY","description":"Private key of a funded Base wallet. This server SPENDS REAL USDC from it with no human in the loop — use a fresh wallet funded with only what you are willing to lose, never a personal or deployer key. Only weakspot_audit needs it; the pricing, status and wallet-status tools work without one.","format":"string","required":false,"secret":true},{"name":"WEAKSPOT_MAX_USD","description":"Hard cap in USD on any single audit (default 4, the highest tier). Checked twice: against the tier price, and again against the amount the server actually quotes. An LLM decides when to call the paying tool, so this is the main spend control.","format":"number","required":false,"secret":false},{"name":"WEAKSPOT_URL","description":"Base URL of the Weakspot deployment to use. Defaults to https://weakspot.dev; override to point at staging or a self-hosted instance.","format":"string","required":false,"secret":false},{"name":"WEAKSPOT_RPC_URL","description":"Base RPC endpoint, used only to read the wallet's USDC balance in weakspot_wallet_status. Nothing else needs it.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Verweise - Namensraum: [[namensraum/dev-weakspot|dev.weakspot]] --- - Registerseite: - Abgerufen am: 2026-10-10