1.0.1

npm

3ilm-mcp

MCP server exposing 3ilm — a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled Sherlock audit contests. Search patterns by keyword, get acceptance rates, and learn from real accepted/rejected examples.

Published26 Jul 2026

Direct dependencies4

Transitive dependenciesNot calculated

README

Current package documentation

3ilm MCP Server

MCP server exposing 3ilm — a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled Sherlock audit contests.

Built for AI agents, security researchers, and audit tools that need structured data on which bug classes get paid, at what rates, and why.

What it is

3ilm (Arabic: علم, "knowledge") contains:

1,032 verified findings from 10 Sherlock contests (fully reconciled against contest outcomes)
12 vulnerability pattern categories with real acceptance rates, not estimates
Accepted and rejected examples per category — learn what passes triage

Tools

Tool	Description
`search_vulnerabilities`	Keyword search across all 12 categories. Returns matching patterns with acceptance rates and examples.
`get_pattern_details`	Full stats table for one specific pattern: totals, acceptance rate, Sherlock-specific note, examples.
`list_patterns`	All 12 patterns ranked by volume with 🟢🟡🔴 acceptance indicators.

Install

npx 3ilm-mcp

Add to Claude / Cursor

Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "3ilm": {
      "command": "npx",
      "args": ["-y", "@holistis/3ilm-mcp"]
    }
  }
}

Cursor — add to .cursor/mcp.json:

{
  "mcpServers": {
    "3ilm": {
      "command": "npx",
      "args": ["-y", "@holistis/3ilm-mcp"]
    }
  }
}

Example queries

Ask your AI assistant:

"What is the acceptance rate for oracle manipulation findings on Sherlock?"
"Show me all vulnerability patterns and their payout rates"
"Search for reentrancy vulnerabilities — what percentage get accepted?"
"What does a accepted flash loan finding look like vs a rejected one?"

Data source

All data from the verified sherlock/_index.json in the 3ilm knowledge base. Findings are reconciled against actual contest outcomes — no scraping, no estimates.

The 12 patterns: fee-miscalculation, dos-griefing, reentrancy, trusted-actor, overflow, staleness, rounding, access-control, oracle-manipulation, mev-slippage, liquidation, flash-loan.

HTTP API (pay-per-query, USDC on Base): https://wazir-x402.duckdns.org/api/vuln-search?q=oracle
x402 Tollbooth: all endpoints listed at /api/status

License

MIT

Downloads & popularity

Awaiting observations

No metric observations yet

Download counts and popularity will appear here as the collector receives them.

Declared dependencies 4

Native requirements

4 direct targetsNot calculated transitive count

Package / target	Requirement	Relationship
@modelcontextprotocol/sdk Environment { "local_name": "@modelcontextprotocol/sdk", "alias": false, "peer_metadata": null }	`^1.29.0`	runtime
zod Environment { "local_name": "zod", "alias": false, "peer_metadata": null }	`^3.23.8`	runtime
typescript Environment { "local_name": "typescript", "alias": false, "peer_metadata": null }	`^5.4.5`	development
@types/node Environment { "local_name": "@types/node", "alias": false, "peer_metadata": null }	`^20.12.7`	development

Distribution files

1 collected

Distribution 1

Source distribution

Source file

Checksums from source

{
  "integrity": "sha512-+d4JVnVO1bBxYuUSxFnYOQsgHMfYCmihFyt8o5TbMlZOAJ5vxZzOUXR0CXAfOmkwD3TbJMR3pv56y8kpuhLvbg==",
  "shasum": "c100ace9acb017b70625f9141c88985d2925432e",
  "tarball": "https://registry.npmjs.org/3ilm-mcp/-/3ilm-mcp-1.0.1.tgz",
  "fileCount": 11,
  "unpackedSize": 49899,
  "signatures": [
    {
      "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
      "sig": "MEUCIQDTUNx8cBLfBVfzwBgc3JZN+O6+UmMbemOybggedilmnAIgaz39sDuKZ7VL0/Fb+doBgJ9IjYJaDBbQruJkx2yV5VU="
    }
  ]
}

Repository

PENDING

holistis/3ilm-mcp

Shared repository data · GitHub

License detected in repository: Not collected

Metadata history

Meaningful changes

Current collected state Current

Observed since 20 Oct, 19:46 UTC

No superseded metadata states collected. Unchanged observations do not create new revisions.

Record identity

package_version:387a26f4840f030d3631514b948e2ae18a28cdd84571fafae984afffda110116

Other collected versions

1.0.026 Jul View all collected versions →