Soldefi Mcp

io.github.thomenzPublished by GitHub account thomenzv0.5.2Updated Oct 24, 2026

Solana DeFi risk intel over x402: rug/honeypot scans, pool analysis, wash-filtered pools.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

Local MCP server giving assistants paid Solana DeFi risk checks — honeypot scans, pool analysis and exit-risk — settled per call in USDC via x402.

What you can do
  • Scan tokens and wallets for rug/honeypot risk, with risk scores and verdicts, singly or in batches
  • Analyze liquidity pools across Raydium, Orca, Meteora and pumpswap, and rank the best risk-adjusted pools
  • Check sellability and exit risk at a chosen USD size, plus deployer reputation and LP durability
  • Run a bundled full workup combining honeypot, LP, deployer and exit-risk into one verdict
  • Build an unsigned guarded Jupiter swap with a rug check in front, and validate mint addresses for free
When to use it
Useful when an assistant is asked to vet Solana tokens or pools before trading, to judge whether a position can actually be exited, or to screen a wallet's holdings for rug exposure. It is a paid, per-call service, so it suits users who already hold USDC on Solana or Base and want automated due diligence inside a chat.
Requirements
Runs locally via npx (Node.js). Needs a funded paying wallet: SOLANA_PRIVATE_KEY and/or EVM_PRIVATE_KEY, holding USDC on the chosen chain. Optional SOLANA_RPC_URL, SOLDEFI_BASE_URL and X402_NETWORK (base-sepolia for testnet). Network access to the hosted API by default.
Before you install
The private keys control real funds and every paid tool spends USDC; use a dedicated wallet with a small balance, never a personal or treasury key, since anything reading the process environment can spend from it. build_guarded_swap returns an unsigned transaction with a 0.5% fee when selling into USDC/SOL, which your wallet must sign. Token and pool data is sent to the hosted third-party API unless self-hosted.

Installation

In SourceWeft

  1. Open Soldefi Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

soldefi-mcp

An MCP (Model Context Protocol) server that gives AI agents paid access to Solana DeFi risk intelligence — rug/honeypot scans, deep liquidity-pool analysis, and a wash-trade-filtered "real best pools" ranking. Each paid call settles an x402 micropayment in USDC (on Solana or Base) automatically, using a wallet you configure. A call is charged only on success — malformed input is rejected for free.

It talks to the hosted Solana DeFi Intelligence API (https://soldefi.thomenz.me by default). This package is a thin payment-client bridge; the intelligence runs server-side.

Tools

ToolPriceWhat it does
scan_honeypot$0.005Rug/honeypot scan of an SPL token by mint: mint/freeze authority renounced?, Token-2022 transfer tax, top-holder concentration, and a live Jupiter buy→sell round trip as a strong signal the token is sellable at scan time (catches most honeypots). Returns a 0–100 risk score + AVOID/CAUTION/LOW RISK verdict.
analyze_pools$0.015Deep liquidity-pool analysis across Raydium/Orca/Meteora/pumpswap: real fee APR, wash-trade risk, age, TVL, a token rug verdict, and a real Jupiter slippage ladder ($100/$1k/$10k). Recommends the best risk-adjusted pool.
top_pools$0.02The real best Solana DEX pools — wash-traded/fake-volume pools filtered out, the rest ranked by risk-adjusted fee yield, with an excluded list of what was dropped and why.
check_lp_status$0.005Liquidity durability / rug-pull exposure: pools (TVL, age, DEX), largest-pool depth, burned-supply share, and whether mint/freeze authority is still live. Returns a 0-100 liquidity-risk score + verdict (DURABLE/SHAKY/FRAGILE/RUG-PRONE).
check_deployer$0.01Deployer reputation: creator wallet address, creator's remaining holding %, wallet age, and token age. Verdict flags fresh wallets, heavy insider holding, and brand-new tokens.
can_i_sell$0.003Real-time sellability check at YOUR size: simulates exiting a specific USD amount of a Solana token via a live Jupiter buy→sell round trip and reports USDC recovered, real sell price impact, and tax/friction loss.
check_exit_risk$0.015Can I get out, and at what cost? Crosses Birdeye smart-money flow (whale net buy/sell 24h, bundler/sniper manipulation tags, 1h sell-pressure, holder count) with a live Jupiter exit-slippage ladder ($1k/$10k) → LOW/ELEVATED/HIGH exit-risk. The sellability wedge: are whales dumping into a thin book that traps you?
full_scan$0.03One-call full workup: bundles honeypot + LP durability + deployer + exit-risk into a single verdict with an aggregated overall {riskScore, riskLevel, verdict, topFlags} — cheaper than buying the four separately (~$0.035).
scan_wallet_risk$0.03Portfolio rug scan: reads a wallet's SPL holdings and runs the full honeypot/rug scan on each (up to 10 positions), returning per-token risk and which mints to exit.
scan_honeypot_batch$0.02Batch rug/honeypot scan: submit up to 10 Solana token mints and get the full per-token honeypot verdict for each in one paid call (cheaper than scanning individually).
build_guarded_swap$0.001 + 0.5%Build a ready-to-sign Jupiter swap with the rug check in front: a critical verdict on the token you are BUYING returns the verdict and no transaction. Returns an UNSIGNED versioned transaction — your wallet signs, this service never custodies funds. The 0.5% platform fee applies only when SELLING into USDC/SOL (buying is fee-free) and rides inside the transaction you sign.
validate_mintfreeLocal base58 mint-address format check. No payment.

Install & configure

Add it to your MCP client (Claude Code, Claude Desktop, …). Only a paying wallet is required — everything else defaults to production.

json
{  "mcpServers": {    "soldefi": {      "command": "npx",      "args": ["-y", "soldefi-mcp"],      "env": {        "SOLANA_PRIVATE_KEY": "<base58-or-JSON-array secret key of a DEDICATED Solana wallet holding USDC>"      }    }  }}

You can pay on Base instead of (or in addition to) Solana by setting EVM_PRIVATE_KEY (0x…). If both are set, the x402 layer uses whichever rail the server's payment challenge advertises.

Environment

VarDefaultNotes
SOLANA_PRIVATE_KEY—base58 or JSON-array secret key (32 or 64 bytes) of the paying Solana wallet.
EVM_PRIVATE_KEY—0x-prefixed key of the paying Base wallet.
SOLDEFI_BASE_URLhttps://soldefi.thomenz.mePoint at your own Worker if self-hosting.
X402_NETWORKbasebase (mainnet → Solana mainnet) or base-sepolia (testnet → Solana devnet).
SOLANA_RPC_URL—Optional RPC used to build the Solana payment (e.g. a Helius URL). Public default otherwise.

🔐 Security: these keys control real funds. Use a dedicated wallet with a small balance, never a personal/treasury key. Anything that can read this process' environment can spend from it.

The wallet needs

  • A little USDC on the chosen chain to pay per call.
  • On Solana, a tiny bit of SOL is not required for the payment itself (the facilitator sponsors the transaction fee), but the receiving side must have a USDC token account — which it does on the hosted service.

Develop

bash
pnpm installpnpm --filter soldefi-mcp build      # tsc → dist/SOLANA_PRIVATE_KEY=… pnpm --filter soldefi-mcp dev   # run from source

License

MIT

Source: README.md at commit 78557d0

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.5.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts