ETH Security MCP

What is ETH Security MCP?

ETH Security MCP is a collection of Model Context Protocol (MCP) servers designed for Ethereum security analysts, auditors, and incident response teams. It integrates Dune, Sources (4byte and Sourcify), and Foundry's Cast to provide transaction analysis, function signature resolution, contract source code retrieval, and transaction simulation.

How to use ETH Security MCP?

Install dependencies (Node.js, npm, just), clone the repository, copy .env.example to .env, and fill in required API keys. Use just build <workspace> and just debug <workspace> for development. To integrate with Claude Desktop, run just setup-<machine> <mcp-server> and add the generated configuration to claude_desktop_config.json.

Key features of ETH Security MCP

• Dune server for transaction analysis and blockchain data retrieval
• Sources server for function signatures and contract source code
• Cast server for transaction simulation and debugging
• Provides structured transaction, token activity, and log data
• Uses npm workspaces for modular server organization

Use cases of ETH Security MCP

• Investigate transactions for a specific Ethereum address
• Look up function signatures by selector for contract analysis
• Retrieve verified contract source code from Sourcify
• Simulate transactions to debug failures or inspect state changes
• Support security audits and incident response workflows

FAQ from ETH Security MCP

What dependencies does ETH Security MCP require?

Node.js, npm, and the just command runner are required.

How do I install ETH Security MCP into Claude Desktop?

Run just setup-linux <mcp-server> or just setup-macos <mcp-server>, then copy the generated claude.config.tmp.json into your Claude Desktop configuration file under mcpServers.

Do I need API keys to use ETH Security MCP?

Yes. Refer to the .env.example file for required environment variables such as Dune API keys.

What tools are available in ETH Security MCP?

Five tools: get_transactions_by_address, get_activity_by_address, retrieve_function_signature, retrieve_source_code, and run_transaction.

Does ETH Security MCP require a local Ethereum node?

No. The Cast server uses an RPC URL you provide for transaction simulation, while Dune and Sources rely on external APIs.