3ilm MCP

MCP server exposing 3ilm - a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled Sherlock audit contests. Its README documents 3 tools, including search_vulnerabilities, get_pattern_details, list_patterns. It runs locally over stdio via the published package.

People connecting database tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-20 · ★ 2 · #72 OF 151 MAINTAINED DATABASE · VERIFIED 2026-08-25

MIT · JavaScript servers · how we verify → /methodology

01 · Install 3ilm MCP

Claude Code

claude mcp add holistis-3ilm-mcp -- npx -y 3ilm-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "holistis-3ilm-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "3ilm-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-07-26 - young repo, little track record yet

license MIT - declared in the repository

npm package 3ilm-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.holistis is GitHub-verified and matches the repo owner

03 · What 3ilm MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 3 documented tools, including search_vulnerabilities, get_pattern_details, list_patterns.

The 3 tools it gives your agent

Extracted from the project's README - what 3ilm-mcp lets an agent do.

search_vulnerabilities: - Keyword search across all 12 categories. Returns matching patterns with acceptance rates and examples.
get_pattern_details: - Full stats table for one specific pattern: totals, acceptance rate, Sherlock-specific note, examples.
list_patterns: - All 12 patterns ranked by volume with 🟢🟡🔴 acceptance indicators.

04 · Who maintains 3ilm MCP

3ilm-mcp is maintained by holistis. We track 2 MCP servers from holistis - 2 actively maintained, 9 combined GitHub stars, oldest repo from Jul 2026. Full record: all servers from holistis.

Bug Bounty Intelligence AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates. ★ 7

05 · Facts

repository: github.com/holistis/3ilm-mcp
category: database - ranked #72 of 151 actively-maintained database servers as of 2026-08-25.
registry: io.github.holistis/3ilm-mcp (active, first published 2026-07-26)
packages: npm:3ilm-mcp

06 · 3ilm MCP FAQ

Is 3ilm MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-20. We re-verify nightly.

What can 3ilm MCP do?

An agent gets 3 documented tools, including search_vulnerabilities, get_pattern_details, list_patterns.

How do I install 3ilm MCP?

Run `npx -y 3ilm-mcp`. You can also paste the ready-made client config above.

Does 3ilm MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to 3ilm MCP

Alternatives to 3ilm MCP

Maintained database servers if 3ilm MCP isn't the fit.

Pairs well with

Servers that cover what 3ilm MCP doesn't - only shown when the pairing reason fits the companion.

More database MCP servers · Servicebricks · Read Only Local MySQL MCP Server · Read Only Local Postgres MCP Server · Wso2 Docs MCP Server · DB Conn MCP

More JavaScript MCP servers · Bug Bounty Intelligence · Hostinger API MCP · Fmp · Lm · see all