Give an AI agent a real Solana wallet without giving it your money. The agent gets a spending allowance the SPL Token program enforces on-chain, plus guardrails (per-tx cap, daily cap, recipient and host allowlists, expiry, kill switch), x402 payments, an
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
OWNER_SECRET_KEYAPI keyoptionalOwner secret key, base58 or a JSON byte array. Optional: without it every owner action is returned as an unsigned transaction for Phantom, Solflare, Backpack, or a Ledger to sign.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
agent_payinjection riskSend tokens from the agent vault to a recipient, signed by the agent as the on-chain delegate. EverySend tokens from the agent vault to a recipient, signed by the agent as the on-chain delegate. Every
Send tokens from the agent vault to a recipient, signed by the agent asNo input schema was published for this tool.
agent_wallet_statusShow an agent wallet as it actually stands on-chain: vault balance, how much of the delegated allowance isShow an agent wallet as it actually stands on-chain: vault balance, how much of the delegated allowance is
No input schema was published for this tool.
approve_agent_allowanceSet how much the agent may spend from the vault, enforced by the SPL Token program. This REPLACES theSet how much the agent may spend from the vault, enforced by the SPL Token program. This REPLACES the
No input schema was published for this tool.
create_agent_walletCreate an agent wallet on Solana. Generates a fresh keypair for the agent, creates a vault token accountCreate an agent wallet on Solana. Generates a fresh keypair for the agent, creates a vault token account
No input schema was published for this tool.
deploy_agent_onchainMint the agent an on-chain identity in the Metaplex Agent Registry on Solana, carrying its EIP-8004Mint the agent an on-chain identity in the Metaplex Agent Registry on Solana, carrying its EIP-8004
No input schema was published for this tool.
export_agent_runtimeProduce the config that puts this agent wallet in front of a model: an mcp.json block, the equivalentProduce the config that puts this agent wallet in front of a model: an mcp.json block, the equivalent
No input schema was published for this tool.
fund_agent_walletMove tokens from your wallet into the agent vault, and optionally send the agent a little SOL for its ownMove tokens from your wallet into the agent vault, and optionally send the agent a little SOL for its own
No input schema was published for this tool.
onchain-agent-walletsNo description publishedThis tool published no description. Forge does not invent one.
list_agent_walletsList the agent wallets configured here, each with its live vault balance, remaining on-chain allowance, andList the agent wallets configured here, each with its live vault balance, remaining on-chain allowance, and
No input schema was published for this tool.
pay_x402Call an HTTP endpoint that charges with x402, paying from the agent allowance on Solana. The price is readCall an HTTP endpoint that charges with x402, paying from the agent allowance on Solana. The price is read
No input schema was published for this tool.
revoke_agent_walletCancel the agent's delegation on-chain. After this the SPL Token program refuses every transfer the agentCancel the agent's delegation on-chain. After this the SPL Token program refuses every transfer the agent
No input schema was published for this tool.
send_signed_transactionBroadcast a base64 transaction that Phantom, Solflare, Backpack, or a Ledger already signed, and wait forBroadcast a base64 transaction that Phantom, Solflare, Backpack, or a Ledger already signed, and wait for
No input schema was published for this tool.
set_guardrailsSet the rules this server enforces before it signs a spend: per-transaction cap, rolling 24h cap, allowedSet the rules this server enforces before it signs a spend: per-transaction cap, rolling 24h cap, allowed
No input schema was published for this tool.
spend_logThe audit trail for one agent: every spend that went through and every one the guardrails refused, with theThe audit trail for one agent: every spend that went through and every one the guardrails refused, with the
No input schema was published for this tool.
withdraw_from_vaultWithdraw tokens from an agent vault back to your own wallet. The vault is yours, so this always works,Withdraw tokens from an agent vault back to your own wallet. The vault is yours, so this always works,
No input schema was published for this tool.
14 of 15 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Give an AI agent a real Solana wallet without giving it your money. The agent gets a spending allowance the SPL Token program enforces on-chain, plus guardrails (per-tx cap, daily cap, recipient and host allowlists, expiry, kill switch), x402 payments, an
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
87 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+75 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies, optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.