Kestrova: Solidity Vulnerability Scan
Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.
What it does
Kestrova: Solidity Vulnerability Scan is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 2h ago (live check)Hosted endpoint
https://kestrova.onrender.com/mcp?src=registrystreamable-http
In Claude Code: claude mcp add --transport http kestrova-solidity-vulnerability-scan https://kestrova.onrender.com/mcp?src=registry
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"kestrova-solidity-vulnerability-scan": {
"url": "https://kestrova.onrender.com/mcp?src=registry"
}
}
}Live check
Electra Index connected to the hosted endpoint 2h agoONLINE Kestrova: Solidity Vulnerability Scan answered an MCP connection on 25 Oct 2026 and introduced itself as kestrova 1.30.0 (MCP protocol 2025-06-18).
3 tools offered to AI assistants
scan_solidity_preview· FREE Solidity security check (Slither). Detects known vulnerability patterns (reentrancy, unchecked calls, tx.origin auth, arbitrary ETH sends and more) and returns severity counts plus High/Medium detector names. Use after writing or changscan_solidity_full· OPTIONAL, PAID ($1.00 USDC on Solana via x402). Structured Slither findings for Solidity: detector, impact, confidence, description and file/line locations, for fixing each issue. Without a valid x402 payment in _meta['x402/payment'] it retpayment_terms· FREE. Price, recipient, network, asset and how to pay for scan_solidity_full.
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Tasks it helps with
Share of each task's required capabilities it covers| Review pull requests Security Scanning | 50% |
| Scan code for vulnerabilities Security Scanning | 50% |
Similar tools
Listed for the same task: review pull requests- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- BlackVeil DNS & Email Security ScannerREMOTELOCALDNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits
- FSV — website security scannerREMOTELOCALScan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more
- EchelonGraph CVE & ExposureREMOTELOCALCVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless
Ready-made AI agents
- $20/mo
- $18/mo · free plan
- $24/mo · free plan
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://kestrova.onrender.com/mcp?src=registry | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Website | https://github.com/som2026-commits/kestrova-solidity-security | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Repository | https://github.com/som2026-commits/kestrova-solidity-security | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Version | 0.3.0 | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
Change history
- NEW25 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Kestrova: Solidity Vulnerability Scan still online?
Free alerts · no accountQuestions about Kestrova: Solidity Vulnerability Scan
How do I connect Kestrova: Solidity Vulnerability Scan?
Use the hosted endpoint https://kestrova.onrender.com/mcp?src=registry in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does Kestrova: Solidity Vulnerability Scan offer?
When Electra Index connected on 25 Oct 2026, it listed 3 tools: scan_solidity_preview, scan_solidity_full, payment_terms. The full list is in "Live check" above.
Is Kestrova: Solidity Vulnerability Scan online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 2h ago.
What can I use Kestrova: Solidity Vulnerability Scan for?
Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.