TON Dev Skills MCP Server

<p align="center"> <h1 align="center">🔒 TON Dev Skills</h1> <p align="center"> <strong>Security scanner, migration engine, MCP server & CLI for TON smart contracts</strong> </p> <p align="center"> <a href="https://www.npmjs.com/package/@tesserae/ton-dev-skills"><img src="https://img.shields.io/npm/v/@tesserae/ton-dev-skills" alt="npm"></a> <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License"></a> </p> </p>

---

TON Dev Skills is a comprehensive development and security platform for the TON blockchain. It scans FunC, Tact, and Tolk contracts for vulnerabilities, migrates Solidity contracts to TON-native equivalents, and integrates directly into your AI-powered IDE via MCP.

✨ What You Get

| Feature | Description | |---------|-------------| | Security Scanner | 50+ rules across 21 categories — from reentrancy to TEP compliance | | Migration Engine | Convert ERC-20, ERC-721, ERC-1155 and more from EVM → TON (Jettons, NFTs, SBTs) | | MCP Server | Use scanner, migration, and contract tools directly in Claude, Cursor, Windsurf, etc. | | CLI | Audit, compile, deploy, scaffold, and test-generate from the command line | | Contract Templates | Production-ready Jetton, NFT, DAO, DEX, and multisig templates |

🚀 Getting Started

# Install from npm
npm install -g @tesserae/ton-dev-skills

# Run your first audit
ton-dev audit ./contracts/my-contract.fc

# Scaffold a new contract
ton-dev scaffold jetton --name "MyToken" --symbol "MTK"

# Compile a contract
ton-dev compile ./contracts/my-contract.fc

# Start the MCP server (for Claude, Cursor, etc.)
ton-dev mcp start

👉 Full Getting Started Guide →

🔍 Scanner Categories

The security scanner checks 50+ rules across these categories:

| | | | | |---|---|---|---| | Access Control | Arithmetic Safety | Bounced Messages | Cell Overflow | | Code Injection | Compilation | Data Validation | Denial of Service | | External Messages | Gas & Fees | Integer Handling | Randomness | | Replay Protection | Reentrancy | State Management | Storage | | TEP Compliance | Timestamp | Upgradeability | TVM Internals | | Cross-Contract Safety | | | |

📊 Sample Output

$ ton-dev audit contracts/my-jetton.fc

  TON Dev Skills — Security Audit
  ═══════════════════════════════════

  Contract: contracts/my-jetton.fc
  Language:  FunC
  Rules:     53 checked

  ┌──────────┬────────────────────────────────────┬──────────┐
  │ Severity │ Finding                            │ Line     │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🔴 HIGH  │ Missing sender validation on       │ L42      │
  │          │ internal_transfer handler           │          │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🟡 MED   │ No bounce handler for failed       │ L87      │
  │          │ token transfers                     │          │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🔵 LOW   │ Gas estimation missing on          │ L103     │
  │          │ cross-contract call                 │          │
  ├──────────┼────────────────────────────────────┼──────────┤
  │ 🟢 INFO  │ Consider TEP-74 metadata           │ L12      │
  │          │ extension for discoverability       │          │
  └──────────┴────────────────────────────────────┴──────────┘

  Summary: 1 high · 1 medium · 1 low · 1 info
  Full report: ./audit-report-1708099200.json

🔄 Migration Example

$ ton-dev migrate --from solidity --contract contracts/MyToken.sol

  TON Dev Skills — Migration Engine
  ═══════════════════════════════════

  Source:     contracts/MyToken.sol (ERC-20)
  Target:     Jetton (TEP-74) + Jetton Wallet (TEP-89)
  Language:   Tact

  ✅ Token metadata mapped (name, symbol, decimals)
  ✅ Mint/burn logic converted to Jetton master ops
  ✅ Transfer → internal_transfer + transfer_notification
  ✅ Approval pattern removed (not applicable on TON)
  ✅ TEP-74 compliance verified
  ✅ Security audit passed (0 high, 0 medium findings)

  Output: ./output/my-token-jetton.tact
          ./output/my-token-wallet.tact
          ./output/migration-report.md

🛠️ CLI Commands

| Command | Description | Plan | |---------|-------------|------| | ton-dev audit <path> | Security audit a contract or directory | Free | | ton-dev compile <file> | Compile a FunC, Tact, or Tolk contract | Free | | ton-dev scaffold <template> | Generate a contract from template | Free | | ton-dev init | Initialize a TON project | Free | | ton-dev deploy <boc> | Deploy a compiled contract | Free | | ton-dev debug <exit-code> | Explain a TVM exit code | Free | | ton-dev gas estimate <boc> | Estimate gas usage | Free | | ton-dev migrate <file> | Migrate an EVM contract to TON | Pro | | ton-dev test-gen <file> | Generate test cases | Pro | | ton-dev mcp start | Start the MCP server | Pro |

🤖 MCP Integration

Add to your Claude Desktop or Cursor config:

{
  "mcpServers": {
    "ton-dev": {
      "command": "ton-dev",
      "args": ["mcp", "start"]
    }
  }
}

Then ask your AI assistant things like:

• "Audit this FunC contract for security issues"
• "Migrate this ERC-20 to a TON Jetton"
• "Scaffold a new NFT collection contract"
• "Check if this contract is TEP-74 compliant"

👉 MCP Server Docs →

💰 Pricing

| | Free | Pro | Enterprise | |---|---|---|---| | Security Audits | 5/day | Unlimited | Unlimited | | Scanner Rules | 50+ | 50+ | 50+ + custom rules | | Migration Engine | — | ✅ | ✅ | | MCP Server | — | ✅ | ✅ | | Contract Templates | Basic | All | All + custom | | CLI Tools | Core (audit, compile, scaffold, deploy, debug, gas) | Full suite | Full suite | | Support | Community | Priority | Dedicated | | Price | $0 | $29/mo | Contact us |

📚 Documentation

• Getting Started
• Security Scanner
• Migration Engine
• MCP Server
• CLI Reference
• Contract Templates
• API / Tool Schemas

🔗 Links

• npm: @tesserae/ton-dev-skills
• GitHub: TesseraeVentures/ton-dev-skills

📄 License

MIT — see LICENSE for details.

Core scanner rules and migration logic are proprietary. The CLI, MCP server interface, and this repository are open source.