Skip to content

Feature idea: integrate Bug Bounty Intelligence MCP for security scanning alongside Foundry tests #16

Description

@holistis

Hi! Huge fan of this project. Foundry MCP + AI agents for Solidity is exactly the right direction.

One natural extension: after running Foundry tests via MCP, an agent could also run a security scan trained on real audit findings. We built Bug Bounty Intelligence for exactly this workflow.

What it does:

  • MCP server that scans a GitHub repo for Solidity vulnerabilities
  • Trained on 27,681 real findings from Sherlock and Code4rena contests (accepted findings only, not false positives)
  • Returns ranked findings with acceptance rates from historical data
  • Cost: $5 USDC on Base via x402 (agent pays autonomously, no human needed)

Why it complements Foundry MCP:

  • Foundry MCP runs tests and checks compilation
  • Bug Bounty Intelligence catches semantic patterns that unit tests miss (oracle manipulation, rounding errors, access control gaps)
  • An agent could run both in one workflow: compile → test → security scan → report

Integration:
MCP repo: https://github.com/holistis/bug-bounty-intelligence-mcp
Live API: https://wazir-x402.duckdns.org/.well-known/x402

Would love to know if this fits your vision for the project. Happy to provide a free scan of foundry-mcp-server itself as a demo.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions