bug-bounty-intelligence-mcp - Smart Contract Security¶
AI-powered smart contract security analysis trained on 27,681 real-world findings from Sherlock and Code4rena audit contests. Pay-per-scan via x402 USDC micropayments on Base.
Installation¶
npx -y bug-bounty-intelligence-mcp
Config¶
{
"mcpServers": {
"bug-bounty": { "command": "npx", "args": ["-y", "bug-bounty-intelligence-mcp"] }
}
}
Key Tools¶
| Tool | Description |
|---|---|
scan_contract |
Analyze a smart contract for vulnerabilities |
get_finding_detail |
Detailed report on a specific vulnerability class |
list_audit_contests |
Browse past Sherlock/Code4rena contests |
Operator Use Cases¶
- Web3 operators: pre-audit smart contracts before formal audit firms
- DeFi teams: continuous security scanning in CI/CD
- Bug bounty hunters: AI-assisted vulnerability research
Integration with CorpusIQ¶
CorpusIQ is the connector layer that lets AI assistants read the systems a business already runs on - accounting, payments, CRM, email, files and analytics - and answer with the source named. It is read-only by design: it retrieves data and never writes to, or acts in, a connected system, which is what makes it safe to point at live accounts.
This page is part of the CorpusIQ directory, the reference we maintain for the MCP server and agent-skill ecosystem. Run alongside CorpusIQ, a third-party server like this one can be combined with a company's own business data in a single answer.