io.github.ofirbaranesad-agent/contract-powers

Est-ce que io.github.ofirbaranesad-agent/contract-powers est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.ofirbaranesad-agent/contract-powers » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• check_any_contract≈ 204 tokens

  Free preview for ANY verified EVM contract on base, ethereum or polygon — including addresses not in the registry. Returns contract type, verification, name, whether it is a proxy, how many powers were found, how many owner-only functions went uncategorised, and whether an owner was found. The decision fields (which powers, the evidence, the admin address, the implementation) are withheld and listed by name. Use get_contract_powers first if the contract is already in the registry — that is free and complete.

  Paramètres, retour & exemple (2)

  Paramètres

  • chain · string · optionnel · base | ethereum | polygon
    Default base.
  • address · string · requis
    0x-prefixed 20-byte address.

  Exemple d'appel

  {"name": "check_any_contract", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_contract_powers≈ 226 tokens

  Full free analysis of one contract that is in the registry: verification, proxy pattern and implementation address, who the admin is and whether it is a single key, every retained power (upgrade / mint / grant-minter / pause / blacklist / seize / fees / sweep / burn-from / ownership transfer / limits) with the evidence and confidence behind it, reachable DELEGATECALL / SELFDESTRUCT / CREATE2 opcodes, and the owner-only functions the classifier could NOT categorise — which is where the unusual powers hide. Accepts an address or a symbol such as USDC or AERO.

  Paramètres, retour & exemple (2)

  Paramètres

  • chain · string · optionnel · base | ethereum | polygon
    Required if a symbol is ambiguous.
  • contract · string · requis
    A 0x address, or a symbol such as USDC.

  Exemple d'appel

  {"name": "get_contract_powers", "arguments": {"contract": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_watched_contracts≈ 229 tokens

  List the EVM contracts in the Contract Powers registry, with a one-line risk shape for each: is the code upgradeable, is the admin a single key (EOA) rather than a contract, how many powers are declared, and is it covered by a bug bounty. Use this to see what is already analysed before spending a lookup. Filters are optional and combine with AND.

  Paramètres, retour & exemple (4)

  Paramètres

  • chain · string · optionnel · base | ethereum | polygon
    Restrict to one chain.
  • limit · integer · optionnel
    Default 200.
  • upgradeable · boolean · optionnel
    true = only contracts whose code can still be replaced.
  • single_key_admin · boolean · optionnel
    true = only contracts whose admin is a plain wallet (EOA), not a contract/multisig/timelock.

  Exemple d'appel

  {"name": "list_watched_contracts", "arguments": {"chain": "base", "limit": 1, "upgradeable": true, "single_key_admin": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• recent_power_changes≈ 184 tokens

  What actually changed behind the watched contracts: implementation swapped, owner moved, a power appeared or disappeared, verification lost. Each event carries the before and after value and the window it was detected in. Severity is one of critical / material / low. Use this to answer "has anything changed behind this contract recently?".

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
    Default 25.
  • contract · string · optionnel
    Filter to one address or symbol.
  • severity · string · optionnel · critical | material | low
    Minimum severity to return.

  Exemple d'appel

  {"name": "recent_power_changes", "arguments": {"limit": 1, "contract": "texte", "severity": "critical"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://agent.zbang.net/api/mcp