solana-mcp-server

MCPcommunity
v1.1.1ExpertVagabondMITUpdated 9d agonpmGitHub

Solana MCP server for wallet management, transaction handling, and program interactions on Solana blockchain

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
72Downloads/wk
1GitHub stars
1Forks
9d agoLast update
Package
AuthorExpertVagabond
LicenseMIT
Version1.1.1
Sourcenpm+mcp-registry
npmsolana-mcp-server
GitHubExpertVagabond/solana-mcp-server
SBOMCycloneDX 1.6 ↓
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies60 resolved · 2 with advisories
Tool surface25 tools · none privileged
Security scan⚠ Warnings (3)v1.1.1 · todayHow well does this scan work?
HIGHtoml@3.0.0toml-node: Uncontrolled Recursion · transitiveHIGHtoml@3.0.0toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization · transitiveMODERATEuuid@8.3.2uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided · transitive
EvalsNone
IndexedOct 17, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

25 tools · none privileged
Statically extracted from the published packagev1.1.1 · 7h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

create_walletCreate a new Solana wallet

Create a new Solana wallet

No input schema was published for this tool.

import_walletImport an existing wallet from private key or mnemonic

Import an existing wallet from private key or mnemonic

No input schema was published for this tool.

list_walletsList all created/imported wallets

List all created/imported wallets

No input schema was published for this tool.

get_balanceGet SOL balance for a wallet

Get SOL balance for a wallet

No input schema was published for this tool.

get_token_balanceGet SPL token balance for a wallet

Get SPL token balance for a wallet

No input schema was published for this tool.

transfer_solTransfer SOL between wallets

Transfer SOL between wallets

No input schema was published for this tool.

transfer_tokensTransfer SPL tokens between wallets

Transfer SPL tokens between wallets

No input schema was published for this tool.

airdrop_solRequest SOL airdrop for testing (devnet/testnet only)

Request SOL airdrop for testing (devnet/testnet only)

No input schema was published for this tool.

get_account_infoGet detailed account information

Get detailed account information

No input schema was published for this tool.

get_transactionGet transaction details by signature

Get transaction details by signature

No input schema was published for this tool.

get_recent_blockhashGet recent blockhash for transaction building

Get recent blockhash for transaction building

No input schema was published for this tool.

switch_networkSwitch Solana network

Switch Solana network

No input schema was published for this tool.

get_network_infoGet current network information

Get current network information

No input schema was published for this tool.

create_token_accountCreate associated token account for SPL tokens

Create associated token account for SPL tokens

No input schema was published for this tool.

get_token_accountsGet all token accounts for a wallet

Get all token accounts for a wallet

No input schema was published for this tool.

create_spl_tokenCreate a new SPL token with specified decimals

Create a new SPL token with specified decimals

No input schema was published for this tool.

mint_tokensMint tokens to a specific account

Mint tokens to a specific account

No input schema was published for this tool.

burn_tokensBurn tokens from a wallet

Burn tokens from a wallet

No input schema was published for this tool.

freeze_accountFreeze a token account to prevent transfers

Freeze a token account to prevent transfers

No input schema was published for this tool.

thaw_accountThaw a frozen token account to allow transfers

Thaw a frozen token account to allow transfers

No input schema was published for this tool.

set_token_authoritySet or change authority for a token mint or account

Set or change authority for a token mint or account

No input schema was published for this tool.

get_token_supplyGet the total supply of a token

Get the total supply of a token

No input schema was published for this tool.

close_token_accountClose a token account and reclaim rent

Close a token account and reclaim rent

No input schema was published for this tool.

approve_delegateApprove a delegate to transfer tokens on your behalf

Approve a delegate to transfer tokens on your behalf

No input schema was published for this tool.

revoke_delegateRevoke a delegate's authority to transfer tokens

Revoke a delegate's authority to transfer tokens

No input schema was published for this tool.

25 of 25 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Solana MCP server for wallet management, transaction handling, and program interactions on Solana blockchain

Keywords
mcpsolanablockchainwalletdefiweb3smart-contractsspl-tokensanchor
Alternatives
Comparing tool surfaces…

Tools exposed

25 tools · none privileged · observed by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-20 — observed resolution, not a publisher declaration.

60 packages resolved · 6 direct · 2 carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

73 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+61 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies, optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in crypto & web3