What is io.github.eltociear/contract-guard-mcp?

EVM contract/token risk check + ERC20 approval (proxy, EIP-7702, unlimited-allowance). Zero deps.

How do I install io.github.eltociear/contract-guard-mcp?

Clone io.github.eltociear/contract-guard-mcp from https://github.com/eltociear/contract-guard-mcp and configure it as an MCP server in your client (Claude Desktop, Cursor, or VS Code).

Is io.github.eltociear/contract-guard-mcp open source?

Yes, io.github.eltociear/contract-guard-mcp is open source under the MIT license. Source code is available at https://github.com/eltociear/contract-guard-mcp.

What category does io.github.eltociear/contract-guard-mcp belong to?

io.github.eltociear/contract-guard-mcp is listed under Developer Tools MCP servers on MCPFind.

io.github.eltociear/contract-guard-mcp — MCP Server for Developer Tools

contract-guard-mcp

MCP server for a pre-interaction risk check on any EVM contract/token — what an agent needs before it approves, swaps, or trusts an address.

Tool: check_contract(address, chain="base") →

is-contract vs EOA / self-destructed
EIP-7702 delegated-EOA detection
upgradeable proxy detection (EIP-1967 + legacy zeppelinos)
ERC20 metadata (name / symbol / decimals / totalSupply)
risk score + actionable flags

Chains: Base, Ethereum. Pure public JSON-RPC, zero dependencies, no signing.

Also available as a pay-per-call x402 HTTP endpoint: https://eltociear-contract-guard.hf.space (POST /check, $0.005 USDC on Base).

Run

docker run -i --rm ghcr.io/eltociear/contract-guard-mcp:mcp-latest
# or
python3 server.py

MIT licensed.

Tools

check_contract(address, chain) — is-contract/EOA, EIP-7702, proxy, ERC20 metadata, risk score
check_approval(token, owner, spender, chain) — ERC20 allowance audit; flags unlimited approvals (the #1 drain vector)

Free MCP vs paid x402

This MCP server is free (run it locally / via your client). For server-side, batch, or no-install use, the same engine is a pay-per-call x402 HTTP API — POST https://eltociear-contract-guard.hf.space/check ($0.005 USDC on Base, no signup). Your agent's wallet pays per call.

Professional audit services

Maintained by the same author — paid services on Polar (Stripe checkout):

MCP Security Audit Report — $5 — one-off audit of your MCP server: 68 attack patterns, severity-rated PDF report with concrete fixes.
Security Pulse — $5/mo (annual $50) — monthly briefing on newly disclosed MCP server vulnerabilities, scan stats across 100+ tracked repos, mitigation playbooks.
Pro Audit Stack — $20/mo — for teams running MCP servers in CI/CD: 50 hosted scans/month, Discord access, 24h SLA on vulnerability questions.

Full catalog: polar.sh/eltociear

Also live: clean-read ($0.005 / call)

Same operator, same x402 rails: clean-read turns any URL into clean Markdown for AI agents — fetches the page, strips nav/ads/boilerplate (trafilatura), returns the main content with title and word count. POST https://eltociear-skill-audit.hf.space/read — $0.005 USDC on Base, no signup.

Set up in your AI client

AI clientOperating system

Merge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.

json

{
  "mcpServers": {
    "io-github-eltociear-contract-guard-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/contract-guard-mcp:mcp-1.1.0"
      ]
    }
  }
}

Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.

Claude Desktop setup reference

Compatible MCP Clients

io.github.eltociear/contract-guard-mcp works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.

Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.

Cursor~/.cursor/mcp.jsonRestart Cursor for changes to take effect.

VS Code.vscode/mcp.jsonReload VS Code window for changes to take effect.

Windsurf~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect.

Claude Code.mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.

io.github.eltociear/contract-guard-mcp