# Delegatecall Vulnerability MCP

> Delegatecall Vulnerability MCP is a paid API for AI agents from api.m2mcent.com, paid per call via x402, $0.35/call, status unknown (last checked 2026-10-15).

Analyzes smart contract code or bytecode to detect delegatecall-related vulnerabilities and security risks.

## Facts

- Endpoint: POST https://api.m2mcent.com/delegatecall-vulnerability-mcp/api/process?utm_source=zero.xyz
- Price: $0.35/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/delegatecall-vulnerability-mcp-855db3f5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0jOlX4lee6BMSJwAqdj0d

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability delegatecall-vulnerability-mcp-855db3f5 -d '<json body>'
```

Example prompt: Can you scan this Solidity smart contract for delegatecall vulnerabilities and tell me which functions or patterns are at risk? Here's the code: [paste contract source].

## When to prefer this

Use this endpoint when you need targeted, automated detection of delegatecall-specific vulnerabilities in Ethereum smart contracts, especially for proxy patterns, upgradeable contracts, or any contract using delegatecall. Prefer this over general-purpose static analysis when delegatecall risk is the primary concern, or when you need a fast, pay-per-call check without spinning up a full audit toolchain.

## Known failure modes

- Malformed or empty 'data' field returns an error or empty result
- Non-Solidity or non-EVM input may produce no findings or incorrect analysis
- Highly obfuscated bytecode may yield incomplete vulnerability detection
- Rate limiting or payment failure results in HTTP 402 or rejection
- Very large contracts may time out or return partial results

## How this service works

The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.

## Output

A structured report identifying delegatecall-related vulnerabilities in the submitted contract data, including affected functions or code sections, risk severity, and descriptions of the specific vulnerability patterns detected (e.g. storage collisions, unauthorized delegatecall, unprotected proxy patterns).

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "success": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/delegatecall-vulnerability-mcp-855db3f5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.m2mcent.com](https://www.zero.xyz/host/api.m2mcent.com/llms.txt)