audit_contract
Run Slither on a verified EVM contract and return a finding summary.
Zero-arg shape: ``audit_contract()`` with no arguments returns a pre-
cached Slither summary from a phase-3.5 live scan of Uniswap V3
Factory (78 findings; 1 High, 42 Medium, 9 Low, 26 Informational).
Real data from our pipeline, NOT fabricated. Pointers to the arg'd
form are included in the ``demo_note`` field.
fetch_contract_source
Return the verified Solidity source of a contract (no Slither).
Complement to ``audit_contract``: for clients that want to run their own
analyser, diff against a local fork, or just read the deployed source.
list_security_contacts
Look up security.txt Contact entries from a static 319-domain snapshot.
Useful for clients that have just run ``audit_contract`` and now want
to know where to disclose a finding. The snapshot was computed from a
2026-04-18 survey across DeFi / infra / audit-ecosystem domains. No
live HTTP fetches — consult ``snapshot_date`` in the response for
freshness.
probe_mcp_endpoint
Run a bounded JSON-RPC conformance probe against another MCP server.
The input is a registry ``namespace/name`` string (e.g.
``"com.trycloudflare.candy-josh-writers-balance/yultrace-audit"``);
the tool looks up the registry-published ``remotes[].url`` and runs
the probe against that URL. Arbitrary URLs are NOT accepted —
targets are whitelisted to the official MCP Registry's isLatest+active
entries.
The probe runs five bounded sub-tests (initialize, tools/list,
malformed-body, unknown-method, oversized-params) under hard caps
(10 HTTP requests; 30 s wall-clock; 500 KB per response; 50 KB
final return size).
supported_chains
Return the list of chain aliases the audit tool accepts.