Summary
The unverified case is the reason to use it.
Reading a verified contract is easy enough anywhere; the value here is that an address with no published source still produces something to read, because the server falls back to decompilation. Treat recovered source as a lead rather than ground truth — it is reconstructed, not the original — and keep the analysis as one input into a review rather than the review itself.
What it is
A Node MCP server that interacts with the Monad blockchain to retrieve smart contract source code and analyse it for functionality and security.
What you get
- Contract source fetched by address from the configured BlockVision endpoint
- A decompilation fallback for unverified contracts, so an address without published source is still reviewable
- Analysis covering both what the contract does and where it is risky, rather than only a listing
- Setup paths for both Cursor and Claude Desktop, with the same environment block
Requirements
Node.js v16 or later, `npm install` and `npm run build`. Three environment variables in the client: `API_URL` for the contract source endpoint, `API_KEY` for it, and `DECOMPILE_URL` for the decompiler used on unverified contracts.