TokenOS Contract Audit
Oct 9, 2026 · 2 saved observations
Technical updates
Discoverability changed from “UNLISTED” to “LISTED”.
Metadata evidence →Listing evidence →← Plugin catalog
Developer Tools
TokenOS Contract Audit
TokenOS v1.0.3
Publisher description
From the marketplace listing
Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored. Tools: • quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade. Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”. Documentation: https://tokenos.ai/mcp/contract-audit Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.
Language: English · Automatically detected from descriptions.
Publisher keywords
Search terms declared by the publisher.
audit my solidity contractListing · Package
smart contract security checkerListing · Package
is this contract safeListing · Package
solidity vulnerability scannerListing · Package
anchor program auditListing · Package
reentrancy checkListing · Package
solana smart contract auditListing · Package
smart contract audit toolListing · Package
Matches for “wallet”
Exact text from the indicated source. A mention alone does not establish support for your task.
Publisher full description
Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored. Tools: • quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade. Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”. Documentation: https://tokenos.ai/mcp/contract-audit Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.
Changes
Files & skills
File archives
Plugin package6 files · 234 KBBrowse files →
Publisher release notes
1.0.3: TokenOS-branded display name; widgets now implement the MCP Apps standard (_meta.ui.resourceUri + ui/* bridge) alongside the openai/* aliases; listing update — revised descriptions and capabilities, runnable inline review test cases, demo recording URL. quick_audit is the only tool (deep_audit removed, no commerce). Scanner now catches block.timestamp / block.number randomness inside hashes or modulo and any public setter that changes state without checking the caller; single-line pastes no longer show L1 on every finding. Review test cases carry the exact line numbers the scanner reports. Tools: quick_audit.
Declared in the saved package. Remote tools may change independently.
Package details
Publisher declarations from the archived package. These are separate from our research and the live service's terms.
- Package author
- TokenOS
- Keywords
- See publisher keywords
- Commerce declaration
- Does not support commerceThis does not establish whether access is free or paid.
- Publisher review scenarios
- 5 positive · 3 negativeDeclared scenarios, not independently verified test results.
Declared capabilities
- Heuristic security scan for Solidity
- Heuristic security scan for Solana Anchor / Rust
- Findings with severity, lines and fixes
- Letter grade per contract
Package observed Oct 9, 2026.
Technical details
- First seen
- Oct 6, 2026 · 00:00 UTC
- Last seen
- Oct 9, 2026 · 00:00 UTC
- Collection status
- Collected
plugin_asdk_app_6ac05dd7a5d88191a8ffe686556b9a3b
Download plugin data (JSON)Before you connect TokenOS Contract Audit
How do I connect it?
Open the publisher's marketplace listing to check current availability and follow its connection instructions. This directory does not install plugins. Check the requested access and any account requirements before connecting.
Check marketplace availability ↗
Does it require paid access?
We have not established the pricing or subscription requirements for this plugin. An absent price does not mean free access.
Compare researched pricing and access models →
How can I evaluate it?
Check the declared skills and available files, then try a small task whose result you can verify. Our archived descriptions and instructions establish publisher claims, not tested runtime quality. Review sources and coverage limits.