@phantom/mcp-server

Name: @phantom/mcp-server
Author: Unknown

MCPattested

v1.2.7UnknownUnknownUpdated 3mo agonpm GitHub

MCP Server for Phantom Wallet

Phantom MCP server — exposes the Phantom CLI as an MCP server over stdio. Sign transactions, transfer tokens, and swap on Solana and Ethereum. Powered by Phantom. This installs the phantom-mcp binary. Register with your MCP-compatible agent: Or start the server directly: This is equivalent to running phantom --mcp. The server exposes the following MCP tools: | Tool | Description

Attested build

A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.

16kDownloads/wk

3mo agoLast update

Package

AuthorUnknown

LicenseUnknown

Version1.2.7

Sourcenpm

npm@phantom/mcp-server

GitHubphantom/phantom-connect-sdk

Trust Status

85/100Trusted

✓Listed in Forge index+10/10

✓Identity verified · attested build+20/20

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓npm Trusted Publishing (Sigstore)+5/5

—npm maintainer match+0/5

→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusIdentity verified

PublisherUnverified

SignatureUnsigned

Domain—

Provenance✓ Sigstore-verified · 872944c

Dependencies60 resolved · 1 with advisories

Tool surface—

Security scan⚠ Warnings (3)v1.2.7 · 2d ago

HIGHaxios@1.15.1axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` · transitive HIGHaxios@1.15.1axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge · transitive MODERATEaxios@1.15.1Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` · transitive

EvalsNone

IndexedMay 24, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About