# Divigent SDK and MCP security audit

Divigent is the treasury layer for x402 agent wallets on Base; this audit covered its MCP SDK for AI agents. Divigent provides adaptive reserves, just-in-time recall, venue monitoring and yield on idle USDC.

Codezen audited Divigent SDK and MCP together with Oak Security. Technologies in scope: AI and MCP. We reported 36 findings: 3 major, 21 minor and 12 informational.

- Audit type: SDK audit
- Technologies: AI, MCP
- Delivered with: Oak Security
- Report date: 17 June 2026
- Full report (PDF): https://github.com/oak-security/audit-reports/blob/main/Divigent/2026-06-17%20Audit%20Report%20-%20Divigent%20SDK%20and%20MCP%20v1.0.pdf
- Project website: https://divigent.ai
- Page: https://www.codezen.tech/audits/divigent-mcp-sdk/

## Findings by severity

| Severity | Count |
| --- | --- |
| Critical | 0 |
| Major | 3 |
| Minor | 21 |
| Info | 12 |
| Total | 36 |

Need a similar audit? Email info@codezen.tech or visit https://www.codezen.tech/.