Shroud Audit
Autonomous Solidity smart-contract security auditor over x402: pay-per-call static analysis with severity-ranked findings, remediation hints and a 0-100 risk score. Remote MCP endpoint at https://audit.magras.app/mcp. Payments settle on Base (USDC) to 0x9a033397ffD48BB186C2a7b77aB550B26ee90c35 (EIP-55). Corrected payment address; please ignore any earlier submission naming a different wallet.
Hosted MCP Server
npx add-mcp 'https://audit.magras.app/mcp'Installs into Claude Code, Codex, Cursor and more
Documentation
Solidity audits, paid per call.
Deterministic static analysis of one Solidity contract. Returns JSON findings with severity, a 0–100 score and remediation hints. Payment is the only authentication: USDC on Base over x402 v2, settled through the public PayAI facilitator.
eip155:8453 · BaseUSDCx402 v2 exactno account
| Endpoint | Price | What you get |
|---|---|---|
POST /api/audit/surface | $0.05 | Static surface scan of one Solidity contract: exposed state-changing functions, access-control modifiers, external calls, upgradeability, and a machine-readable risk list. Returns JSON. |
POST /api/audit/full | $0.20 | Full automated audit of one Solidity contract: surface scan plus reentrancy / access-control / arithmetic / oracle patterns, severity ranking, and a patch suggestion per finding. Returns JSON. |
Call a route with no payment header and you get HTTP 402 plus an x402 challenge in the PAYMENT-REQUIRED header. Sign, retry with PAYMENT-SIGNATURE, get the audit.
Machine-readable: /openapi.json · /.well-known/x402 · /.well-known/x402.json · /.well-known/agent-card.json · /mcp (MCP) · /llms.txt
payTo 0x9a033397ffD48BB186C2a7b77aB550B26ee90c35 · network eip155:8453 · facilitator facilitator.payai.network