Aderyn
Solidity Static Analyzer that easily integrates into your editor
What is Aderyn?
Aderyn is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to solidity static analyzer that easily integrates into your editor
Solidity Static Analyzer that easily integrates into your editor
This server falls under the Security and Developer Tools categories on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- Solidity Static Analyzer that easily integrates into your ed
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx aderynConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use Aderyn
Aderyn is an open-source Rust-based Solidity smart contract static analyzer developed by Cyfrin that scans your contracts for security vulnerabilities without requiring any special configuration for Foundry or Hardhat projects. It integrates directly into your editor via a VSCode extension or can be run as a CLI tool to produce detailed Markdown, JSON, or SARIF vulnerability reports. Security researchers and protocol engineers use it to catch issues like reentrancy, access control flaws, and other common Solidity pitfalls before deployment. The MCP server integration surfaces Aderyn's analysis capabilities directly inside AI coding assistants.
Prerequisites
- Node.js 18+ or Rust toolchain (for npm or source-based install)
- A Solidity project using Foundry or Hardhat
- Aderyn CLI installed via npm, Homebrew, or the Cyfrin installer
- An MCP client such as Claude Desktop or Claude Code
Install Aderyn CLI
Install Aderyn using your preferred method. npm is the quickest for most users; Homebrew and the Cyfrin curl installer are alternatives that support in-place upgrades.
npm install @cyfrin/aderyn -gVerify the installation
Confirm Aderyn is on your PATH and reports the correct version before integrating it with an MCP client.
aderyn --versionRun a baseline analysis on your project
Navigate to the root of your Solidity project and run Aderyn to ensure it can compile and scan your contracts. A report.md file is generated in the current directory.
cd path/to/solidity/project
aderynConfigure the MCP server in your client
Add Aderyn to your MCP client configuration file. Because Aderyn ships as a CLI, the MCP server wraps the npx invocation so the AI can invoke analysis on demand.
{
"mcpServers": {
"aderyn": {
"command": "npx",
"args": ["aderyn"]
}
}
}Restart your MCP client
After saving the configuration, restart Claude Desktop or reload your editor extension so it picks up the new MCP server definition.
Run analysis through the AI
With the MCP server active, ask your AI assistant to analyze a specific Solidity file or your entire contracts directory. Aderyn will scan the code and return a structured report of detected issues.
Aderyn Examples
Client configuration
Add this block to your claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json) to register Aderyn as an MCP server.
{
"mcpServers": {
"aderyn": {
"command": "npx",
"args": ["aderyn"]
}
}
}Prompts to try
Use these prompts after the MCP server is connected and your Solidity project is open.
- "Analyze my Solidity contracts for security vulnerabilities using Aderyn"
- "Generate an Aderyn report for the contracts in src/ and summarize the high-severity findings"
- "What reentrancy issues does Aderyn detect in this contract?"
- "Run Aderyn and list all detectors that triggered on my project"Troubleshooting Aderyn
aderyn: command not found after npm install
Ensure your npm global bin directory is on your PATH. Run `npm bin -g` to find it and add that path to your shell profile (e.g. ~/.zshrc or ~/.bash_profile).
Aderyn fails to compile the project with 'foundry not found'
Aderyn requires Foundry to be installed for Foundry-based projects. Run `curl -L https://foundry.paradigm.xyz | bash && foundryup` to install it, then retry.
MCP server not appearing in Claude Desktop
Verify the JSON in claude_desktop_config.json is valid (no trailing commas), then fully quit and reopen Claude Desktop. Check the Aderyn CLI works standalone with `aderyn --version` first.
Frequently Asked Questions about Aderyn
What is Aderyn?
Aderyn is a Model Context Protocol (MCP) server that solidity static analyzer that easily integrates into your editor It connects AI assistants to external tools and data sources through a standardized interface.
How do I install Aderyn?
Follow the installation instructions on the Aderyn GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with Aderyn?
Aderyn works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is Aderyn free to use?
Yes, Aderyn is open source and available under the GPL-3.0 license. You can use it freely in both personal and commercial projects.
Aderyn Alternatives — Similar Security Servers
Looking for alternatives to Aderyn? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up Aderyn in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use Aderyn?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.