Solana Mcp

io.github.sylenzorPublished by GitHub account sylenzorv1.2.4Updated Oct 24, 2026

Read-only Solana MCP: rug-risk, bundle & deployer checks, live market, full audit. No keys.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

A read-only Solana MCP server that lets an assistant check wallet balances, inspect tokens, and assess rug-pull risk on pump.fun tokens.

What you can do
Look up a wallet's SOL balance and major SPL token holdings, and inspect a token's metadata, supply and bonding-curve progress. Assess rug risk from mint/freeze authority status and top-holder concentration. Detect bundled buys through fresh-wallet holders and shared funding wallets, and review a token's deployer history. Pull a live market snapshot with price, market cap, liquidity, volume and buy/sell flow. Run a full audit that combines these checks into one verdict with top reasons.
When to use it
Useful when you want an assistant to research Solana wallets and tokens, especially pump.fun launches, before acting on them. It suits quick due-diligence questions such as whether a token looks like a rug or who launched it.
Requirements
Runs locally over stdio, typically launched with npx from the npm package. Needs Node.js and network access to a Solana RPC endpoint. The SOLANA_RPC_URL environment variable sets the endpoint and defaults to public mainnet; a Helius or Triton key is recommended for heavier use.
Before you install
Read-only: it holds no private keys and does not sign or move funds. Queries go from your machine to the configured RPC provider, so that provider sees the addresses you look up. The rug-risk rating is a heuristic over public data and cannot catch every risk; outputs are not financial advice.

Installation

In SourceWeft

  1. Open Solana Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

✦ Rigel — Solana MCP server

Give your AI agent eyes on Solana. Rigel is an open-source MCP server that connects Claude Desktop, Claude Code, Cursor, and any stdio MCP client to the Solana blockchain and the pump.fun ecosystem.

Read-only by design. No private keys, no signing, no custody — the only configuration is which RPC to read from.

Tools

ToolInputReturns
rigel_get_wallet_balancewalletAddressSOL balance + major SPL token holdings
rigel_inspect_token_datatokenAddressMetadata, supply, bonding-curve SOL, curve completion %
rigel_analyze_rug_risktokenAddressMint/freeze authority status, top-holder concentration, risk rating
rigel_check_first_buyerstokenAddressBundle detection: fresh-wallet holders, shared funding wallets, supply concentration
rigel_deployer_historytokenAddressDeployer rap sheet: who launched it, wallet age, activity, remaining bag
rigel_market_snapshottokenAddressLive price, market cap, liquidity, volume, buys/sells flow, momentum read
rigel_full_audittokenAddressThe whole battery in one call, with a combined verdict and top reasons

Quick start (Claude Desktop)

Paste into claude_desktop_config.json and restart Claude:

json
{  "mcpServers": {    "rigel-solana": {      "command": "npx",      "args": ["-y", "@rigel-protocol/solana-mcp"],      "env": { "SOLANA_RPC_URL": "https://api.mainnet-beta.solana.com" }    }  }}

Then ask your agent things like:

  • "What's in this wallet? FC5i…"
  • "Inspect this pump.fun token: 7xKq…"
  • "Is this token a rug?"

Build from source

bash
npm installnpm run buildnode dist/index.js   # speaks MCP over stdio

Configuration

Env varDefaultPurpose
SOLANA_RPC_URLhttps://api.mainnet-beta.solana.comAny Solana RPC — public, Helius, Triton, or your own node

The public mainnet RPC rate-limits aggressively; a free Helius key is recommended for heavy use.

Security posture

  • No private keys, seed phrases, or signing code anywhere in this codebase.
  • Local stdio transport — queries go from your machine to your RPC, nothing in between.
  • Logs go to stderr; stdout is reserved for MCP protocol traffic.
  • Zod-validated inputs; friendly errors for invalid public keys and RPC failures.

Disclaimer

Rigel reports on-chain facts. The rug-risk rating is a heuristic over public data (authority status, holder concentration) — it cannot detect every risk, and nothing it outputs is financial advice.

License

MIT

Source: mcp/README.md at commit 03a72eb

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.2.4LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts