Stillos Swap Mcp

io.github.stillmarcus24Published by GitHub account stillmarcus24v1.0.0Updated Oct 24, 2026

Non-custodial Solana swap via Jupiter, 0.25% fee, free scam-check on every token you buy.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that builds unsigned Solana token swap transactions via Jupiter and runs a free on-chain scam check on tokens.

What you can do
  • Build unsigned Solana swap transactions with expected output, route and router fee
  • Run a read-only scam check on a token mint, returning a verdict plus mint and freeze authority flags
  • Return a safety verdict alongside swaps when buying a non-stablecoin
  • Run the same check or swap from a command line
When to use it
Useful when an assistant needs to prepare Solana swaps for a user who signs and broadcasts transactions themselves, or to screen a token's mint and freeze authorities before buying.
Requirements
Runs locally via npx (Node.js). No accounts, API keys or headers are declared. Uses a public Solana RPC by default; the SOLANA_RPC environment variable can override it. Desktop only.
Before you install
The server returns unsigned transactions that the user must sign with their own key and broadcast; custody stays with the user. A 0.25% router fee applies to swaps. Swap requests and token mints are sent to Jupiter and a Solana RPC endpoint. Scam verdicts are heuristic and do not guarantee a token is safe.

Installation

In SourceWeft

  1. Open Stillos Swap Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

stillos-swap-mcp

Non-custodial Solana swap routing for agents. Best-price execution via Jupiter, a flat 0.25% router fee (cheaper than Trojan/Photon/GMGN at 0.5–1%), and a free on-chain scam-check on every token you buy.

You keep custody. The tool returns an unsigned transaction — you sign it with your own key and broadcast. StillOS never touches your funds.

MCP

json
{  "mcpServers": {    "stillos-swap": { "command": "npx", "args": ["-y", "stillos-swap-mcp", "mcp"] }  }}

Tools

  • build_solana_swap — { userPublicKey, inputMint, outputMint, amount } → { swapTransaction (base64, unsigned), expectedOut, route, routerFee, safety }. Sign and send the transaction yourself. When buying a non-stablecoin, safety carries an on-chain verdict (CLEAN / TRAP) based on live mint & freeze authority.
  • token_scam_check — { mint } → { verdict (CLEAN/RISK/UNKNOWN), mintAuthority, freezeAuthority, flags }. Established issuer tokens (USDC/USDT/SOL) are allowlisted. Read-only, no keys.

CLI

npx stillos-swap-mcp check <mint>npx stillos-swap-mcp swap <yourPubkey> SOL USDC 0.5

Why the scam-check matters

A live mint authority means the dev can print unlimited supply and dilute you to zero. A live freeze authority means the dev can freeze your tokens so you can never sell. Both are the most common rug vectors on pump.fun. This checks them before you buy — free.

SOLANA_RPC env var overrides the default public RPC for the safety check.

MIT · StillOS / NolaWealth

Source: README.md at commit 93ceac8

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts