Cyber Risks · Trail of Bits Blog

Level up your Solidity LLM tooling with Slither-MCP

Summary: Trail of Bits released Slither-MCP, an MCP server that wraps Slither's static analysis engine and exposes its API as tools so LLMs can analyze Solidity projects built with Foundry, Hardhat, and similar frameworks. The tool lets models retrieve a function's source, callers and callees, inherited members, and signature-based implementations, and run Slither's detectors, instead of relying on grep and read_file calls that can return the wrong contract when a project contains two ERC20 contracts.

Bottom line: Slither-MCP is licensed AGPLv3, which requires publishing the full source code of any application that uses it in a web service or SaaS product; Trail of Bits is now offering dual licensing for Slither and Slither-MCP so LLM-based security web apps can use them without releasing their entire source code.

Read the original at Trail of Bits Blog ↗