solana-sniper-mcpSAFE
Lightweight, embeddable pump.fun sniper engine for 3D AI agents — multi-agent, multi-user, with pluggable wallet/store/RPC adapters. Library + CLI + MCP server + x402 paid API.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/nirholas/solana-sniper-mcp/stargazers) [](https://github.com/nirholas/solana-sniper-mcp/blob/HEAD/LICENSE) [](https://github.com/nirholas/solana-sniper-mcp/commits) [](https://github.com/nirholas/solana-sniper-mcp/pulls) [](https://github.com/nirholas/solana-sniper-mcp/blob/HEAD/AGENTS.md)
A lightweight, embeddable pump.fun sniper engine for 3D AI agents. One trade loop — feed a stream of new launches, score each against a per-agent strategy, run the pre-trade guards, buy, then sweep open positions on an interval and exit on stop-loss / take-profit / trailing-stop / timeout / sentiment-flip. It is multi-agent and multi-user by construction (one wallet per agentId), and every external dependency — wallet custody, persistence, RPC/venue, launch feed — is a pluggable adapter, so the same engine runs locally with in-memory state or hosted across thousands of tenants. The package ships with four faces over that one engine: a library, a CLI, an MCP server, and an x402 paid HTTP API.
Why — the adapter architecture
The engine is pure orchestration. It owns the decision pipeline; it owns nothing about where the money, the data, or the chain live. Five adapter interfaces (src/types.js) are the seams, and a default implementation ships for each:
┌──────────────────────────── engine ────────────────────────────┐
Feed ──{mint|intel|claim}─▶ score ──▶7ef29caf810bOBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add agent-sniper --env SOLANA_SECRET_KEY=${SOLANA_SECRET_KEY} -- npx -y @three-ws/[email protected] mcpExposed tools (7)
7 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
arm_strategy | read | |
close_position | read | |
disarm_strategy | read | |
list_positions | read | |
list_strategies | read | |
snipe_now | read | |
sniper_status | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (5)
console.log(` filled identifier=${filledId} password=${filledPw}`);.nojekyll
const { sql } = await import('../../../api/_lib/db.js');const { version: PKG_VERSION } = createRequire(import.meta.url)('../../package.json');@modelcontextprotocol/sdk, @nirholas/pump-sdk, @pump-fun/pump-sdk, @pump-fun/pump-swap-sdk, @solana/spl-token, @solana/web3.js, @three-ws/agent-payments, @three-ws/x402-server
Gates applied: no_behavioural_pass.
7ef29caf810bfull audit observations/trust-audit/mcp-server/nirholas__solana-sniper-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 7ef29caf810b | SAFE | B | 89 | first audit |
Questions
What is the solana-sniper-mcp MCP server?
Lightweight, embeddable pump.fun sniper engine for 3D AI agents — multi-agent, multi-user, with pluggable wallet/store/RPC adapters. Library + CLI + MCP server + x402 paid API.
What tools does solana-sniper-mcp expose?
7 in total: 7 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is solana-sniper-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does solana-sniper-mcp need?
It reads HELIUS_API_KEY, SNIPER_ADMIN_TOKEN, SNIPER_KEYSTORE_DIR, SOLANA_SECRET_KEY and TELEGRAM_BOT_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does solana-sniper-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @three-ws/agent-sniper at 0.1.7.
How current is this page?
The grade is for one exact copy of the source (7ef29caf810b), read on 2026-10-10. The repository is watched and re-audited when it changes.