Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
MCP server exposing 3ilm, a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled Sherlock audit contests.
Built for AI agents, security researchers, and audit tools that need structured data on which bug classes get paid, at what rates, and why.
3ilm (Arabic: علم, "knowledge") contains:
| Tool | Description |
|---|---|
search_vulnerabilities | Keyword search across all 12 categories. Returns matching patterns with acceptance rates and examples. |
get_pattern_details | Full stats table for one specific pattern: totals, acceptance rate, Sherlock-specific note, examples. |
list_patterns | All 12 patterns ranked by volume with 🟢🟡🔴 acceptance indicators. |
npx 3ilm-mcp
Claude Desktop (add to claude_desktop_config.json):
{
"mcpServers": {
"3ilm": {
"command": "npx",
"args": ["-y", "3ilm-mcp"]
}
}
}
Cursor (add to .cursor/mcp.json):
{
"mcpServers": {
"3ilm": {
"command": "npx",
"args": ["-y", "3ilm-mcp"]
}
}
}
Ask your AI assistant:
Same underlying dataset as vulnerability-acceptance-rates.json, CC0, downloadable directly, no server required. That file is the canonical, publicly reproducible source; the numbers here are copied from it, not independently computed. Findings are reconciled against actual contest outcomes, no scraping, no estimates. See METHODOLOGY.md for the exact reconciliation method.
The 12 patterns: fee-miscalculation, dos-griefing, reentrancy, trusted-actor, overflow, staleness, rounding, access-control, oracle-manipulation, mev-slippage, liquidation, flash-loan.
Both MCP servers read the same verified data. They differ in scope:
| 3ilm-mcp (this repo) | bug-bounty-intelligence-mcp | |
|---|---|---|
| Pattern search / acceptance rates | Free | Free (list_vulnerability_patterns) |
| Full-repo contract scan | Not offered | $5 USDC via x402 (scan_contract) |
| Cost | Always free, no paid tier | Free tools + one paid tool |
| Best for | Just want the pattern data via MCP, nothing else | Also want an actual scan of your own contracts |
If you only need to query acceptance rates, either server works identically for that. Use 3ilm-mcp if you want the smaller, free-only package; use bug-bounty-intelligence-mcp if you also want the paid full-repo scan tool.
https://wazir-x402.duckdns.org/api/vuln-search?q=oracle/api/statusMIT
Source-derived launch command. Check the maintainer’s required arguments and credentials before running:
npx -y 3ilm-mcpMerge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.
{
"mcpServers": {
"io-github-holistis-3ilm-mcp": {
"command": "npx",
"args": [
"-y",
"3ilm-mcp"
]
}
}
}Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.
Claude Desktop setup reference3ilm-mcpnpmio.github.holistis/3ilm-mcp works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.
~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.~/.cursor/mcp.jsonRestart Cursor for changes to take effect..vscode/mcp.jsonReload VS Code window for changes to take effect.~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect..mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.