Trail of Bits Blog
Follow
Level up your Solidity LLM tooling with Slither-MCP
Slither-MCP is a new tool that integrates Slither's static analysis engine with Large Language Models (LLMs). This integration enhances LLM capabilities across various use cases, including faster code discovery and more efficient code navigation. Slither-MCP acts as an MCP server, exposing Slither's analysis API through tools, making complex code information accessible. Previously, LLMs relied on less precise tools like grep, leading to error-prone tasks. Slither-MCP provides a ground truth for LLM analysis, reducing token usage and improving accuracy. For example, an LLM tasked with auditing ERC20.transfer() can now directly query Slither-MCP to find the function's source code, avoiding complex file resolution. Setting up Slither-MCP is straightforward for platforms like Claude Code and Cursor. The tool currently offers functionalities such as extracting source code, identifying function callers and callees, and running Slither's detectors. Slither-MCP is licensed under AGPLv3, but dual licensing options are available for commercial web applications. This dual licensing allows developers to use Slither and Slither-MCP without publishing their entire source code.
