Blockchain Web3
Security scan passedGives your coding agent a blockchain developer and skills for secure Solidity, DeFi protocol templates, NFT standards and Web3 testing.

Let your agent read function selectors, arguments, state mutability and storage from deployed EVM contract bytecode, all on your machine.
by cdump· Crypto & Web3Unclaimed · Yours? Claim it
4 images
About
EVMole is an open-source analyzer for deployed EVM runtime bytecode, made by Maxim Andreev (cdump on GitHub). Its local MCP server gives your agent one tool, analyze_evm_bytecode, that returns structured facts about a smart contract, even one whose source was never verified: its function selectors, their inferred arguments and state mutability, its storage layout and its compiler metadata. What you can do with it - List a contract's function selectors and where they dispatch, including selectors handled by fallback logic. - Infer each function's argument types and state mutability (pure, view, payable or nonpayable). - Infer persistent and transient storage slots and their types. - Read the compiler metadata stored in the bytecode. - On request, get the disassembly, basic blocks and a control-flow graph. These are off by default because their output can be large. - Page through long results with offset and limit. How it connects It runs on your computer with npx -y evmole-mcp@latest (Node.js 22 or newer) and talks to your agent over stdio. It needs no account and no API key. EVMole's docs show setup for Claude Code, Codex and OpenCode, plus a config block for other MCP clients. EVMole also ships a JSON command-line tool and an Agent Skill (evm-bytecode-analysis) for agents that don't use MCP. Good to know - You give it the runtime bytecode itself, as hex. It doesn't fetch contracts by address, read files or make network requests, and it writes no files. - Selectors come straight from the bytecode, but arguments, mutability and storage types are inferred, not verified source facts. It doesn't decode calldata, resolve function names, verify source or decompile to source code. - It only reads bytecode: it doesn't send transactions or touch a wallet. - It's an MIT-licensed community project by an individual developer, also available as JavaScript, Rust, Python and Go libraries.
Once it’s added
“Which functions does this contract expose? Here's its runtime bytecode.”
“Infer the argument types and state mutability for each function in this bytecode.”
“What storage slots does this contract use, and what types do they look like?”
“Read the compiler metadata from this contract's bytecode.”
Before you add it
Reads only
Function selectors and dispatch locations · Inferred arguments and state mutability · Inferred storage layout and compiler metadata · Disassembly, basic blocks and control-flow graph, on request
From people who use it
Step by step
Nothing new reaches your agent until a person has looked at it.
Plugins people install alongside EVMole.
No reviews yet. Used EVMole? Say how it went.
Write a reviewRuns on your machine.
claude_desktop_config.json{
"mcpServers": {
"evmole": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Runs on your machine.
Add to VS Codecode --add-mcp '{"name":"evmole","command":"npx","args":["-y","[email protected]"]}'copilot mcp add evmole -- npx -y [email protected]
Runs on your machine.
Add to Cursor.cursor/mcp.json{
"mcpServers": {
"evmole": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Runs on your machine.
claude mcp add evmole -- npx -y [email protected]
Runs on your machine.
codex mcp add evmole -- npx -y [email protected]
Runs on your machine.
~/.gemini/config/mcp_config.json{
"mcpServers": {
"evmole": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Runs on your machine.
gemini mcp add evmole npx -y [email protected]
Runs on your machine.
Runs on your machine.
opencode mcp add evmole -- npx -y [email protected]
Runs on your machine.
~/.hermes/config.yaml{
"mcp_servers": {
"evmole": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Scanned and passed · checked 11 h ago
Plugins people install alongside EVMole.
Gives your coding agent a blockchain developer and skills for secure Solidity, DeFi protocol templates, NFT standards and Web3 testing.
Kraken's official CLI and MCP server: your agent reads market data and paper trades on Kraken, or trades live once you add API keys.
Gives your agent Pyth's real-time and historical prices for crypto, equities, FX, metals and commodities, using your Pyth Pro key.
Circle's skills for building with USDC: payments, crosschain transfers, wallets and smart contracts, plus its MCP server for current docs.
Nobody has shared how they use EVMole yet.
“Give me the control-flow graph for this bytecode.”
Scanned on every change, and again when our rules improve.
Tell us and a person on the trust team will look at it. Or email [email protected].
Security scan
Passed
Safe to install in every agent it supports. Runs on your machine.