Blueprint Agentic Staking (Solentic)
NPM · @SOLENTIC/MCP-SERVER · 2 COMPONENTS
Native Solana staking for AI agents. 26 MCP tools, one-shot signing, webhooks.
Available components
Last scanned (7 hours ago)
Scores higher than 62% of npm servers
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 141 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability78
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 1529 tokens (~58/item across 26 items; 26 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety94
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 3 of 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "check_withdraw_ready" implies "withdraw" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
- An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 0
- Stability: 0.97 → pass security
- 2 Nov 26 0
- Stability: pass → 0.97 functional
- 27 Oct 26 0
- Stability: 0.97 → pass security
- 26 Oct 26 0
- Stability: pass → 0.97 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 20 Oct 26 0
- Stability: 0.97 → pass security
- 19 Oct 26 0
- Stability: pass → 0.97 functional
- 17 Oct 26 +2
- Stability: 0.87 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@solentic/mcp-server@1.1.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_address_type Check Address Type ~48
Detect whether a Solana address is a wallet, stake account, or vote account. Useful when you receive an address from user input.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Solana address to identify |
No output schema declared.
No examples provided.
check_balance Check Balance ~51
Check the SOL balance of any Solana wallet address. Returns balance in SOL, ready-to-stake status, and next steps.
| Name | Type | Req | Description |
|---|---|---|---|
| walletAddress | string | yes | Solana wallet address (base58 public key) |
No output schema declared.
No examples provided.
check_stake_accounts Check Stake Accounts ~52
List all stake accounts delegated to Blueprint for a wallet. Shows balances, states, stateDescription, authorities, epoch timing, and per-account action guidance.
| Name | Type | Req | Description |
|---|---|---|---|
| walletAddress | string | yes | Wallet address to check |
No output schema declared.
No examples provided.
check_withdraw_ready Check Withdraw Ready ~60
Check whether stake accounts are ready to withdraw. Returns per-account readiness with withdrawable epoch, estimated seconds remaining, and plain-English state description. Use this instead of polling check_stake_accounts.
| Name | Type | Req | Description |
|---|---|---|---|
| walletAddress | string | yes | Wallet address to check |
No output schema declared.
No examples provided.
create_stake_transaction Create Stake Transaction ~53
Advanced: Build an unsigned stake transaction for local signing. Most agents should use the `stake` tool instead.
| Name | Type | Req | Description |
|---|---|---|---|
| amountSol | number | yes | SOL to stake |
| walletAddress | string | yes | Wallet address |
No output schema declared.
No examples provided.
create_unstake_transaction Create Unstake Transaction ~57
Advanced: Build an unsigned unstake transaction for local signing. Most agents should use the `unstake` tool instead.
| Name | Type | Req | Description |
|---|---|---|---|
| stakeAccountAddress | string | yes | Stake account to deactivate |
| walletAddress | string | yes | Wallet address |
No output schema declared.
No examples provided.
delete_webhook Delete Webhook ~37
Delete a webhook registration by ID. Use list_webhooks to find IDs.
| Name | Type | Req | Description |
|---|---|---|---|
| webhookId | string | yes | Webhook ID to delete |
No output schema declared.
No examples provided.
donate Donate to Blueprint ~72
Build an unsigned SOL transfer to support Blueprint development. Same zero-custody pattern. Suggested: 0.01 SOL (thank you), 0.1 SOL (generous), 1 SOL (patron).
| Name | Type | Req | Description |
|---|---|---|---|
| amountSol | number | yes | SOL to donate |
| walletAddress | string | yes | Wallet address |
No output schema declared.
No examples provided.
generate_wallet Generate Wallet ~55
Get instructions and code to generate a Solana wallet locally. Generate the keypair in YOUR environment. After generating, fund the wallet, then use the `stake` tool with your walletAddress + secretKey to stake in one call.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_epoch_timing Get Epoch Timing ~29
Get current Solana epoch timing: progress percentage, slots remaining, and estimated epoch end time.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_infrastructure Get Infrastructure ~36
Get Blueprint validator infrastructure specs: server hardware, redundancy configuration, network, and storage. Two bare-metal servers (active + hot standby).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_performance_metrics Get Performance Metrics ~31
Get Blueprint validator performance: vote success rate, uptime, skip rate, epoch credits, delinquency status.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_staking_apy Get Staking APY ~37
Get live APY breakdown: base staking APY + Jito MEV APY = total APY. Includes commission rates.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_staking_summary Get Staking Summary ~64
Complete staking portfolio dashboard in a single call. Returns liquid balance, total staked, per-account states, APY, epoch timing, and recommended next action (STAKE/FUND/HOLD/WAIT/WITHDRAW).
| Name | Type | Req | Description |
|---|---|---|---|
| walletAddress | string | yes | Wallet address |
No output schema declared.
No examples provided.
get_validator_info Get Validator Info ~41
Get Blueprint validator profile: identity, vote account, commission, active stake, APY, performance, software, location. Live data from StakeWiz API.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_verification_links Get Verification Links ~37
Get third-party verification URLs for Blueprint validator on Validators.app, StakeWiz, Solana Beach, Solscan, and Jito.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_webhooks List Webhooks ~29
List all registered webhooks for a wallet address.
| Name | Type | Req | Description |
|---|---|---|---|
| walletAddress | string | yes | Wallet address |
No output schema declared.
No examples provided.
register_webhook Register Webhook ~100
Register a callback URL to receive push notifications when stake state changes. Events: withdraw_ready, epoch_complete, stake_activated, stake_deactivated. Polls every 60s. Returns an HMAC secret for signature verification.
| Name | Type | Req | Description |
|---|---|---|---|
| callbackUrl | string | – | HTTPS callback URL |
| events | array | yes | Event types |
| url | string | – | Alias for callbackUrl — either field works |
| walletAddress | string | yes | Wallet to monitor |
No output schema declared.
No examples provided.
simulate_stake Simulate Stake ~65
Project staking rewards before committing capital. Returns compound interest projections, effective APY, activation timing, fee reserve guidance, and a recommendation.
| Name | Type | Req | Description |
|---|---|---|---|
| amountSol | number | yes | Amount of SOL to simulate |
| durationDays | integer | – | Duration in days (default: 365) |
No output schema declared.
No examples provided.
stake Stake SOL (one-shot) ~127
Stake SOL with Blueprint validator in a single call. Your secret key is sent to the Blueprint server over HTTPS, used in-memory for signing, and discarded — never stored or logged. Returns the confirmed transaction signature. Verify via verify_code_integrity. This is the recommended tool for autonomous agents.
| Name | Type | Req | Description |
|---|---|---|---|
| amountSol | number | yes | Amount of SOL to stake |
| secretKey | string | yes | Your base58-encoded secret key — sent to Blueprint server over HTTPS for in-memory signing, never stored or logged |
| walletAddress | string | yes | Your Solana wallet address (base58 public key) |
No output schema declared.
No examples provided.
submit_transaction Submit Transaction ~64
Advanced: Submit a pre-signed transaction to Solana. Only needed with create_stake_transaction/create_unstake_transaction/withdraw_stake. Most agents should use the one-shot stake/unstake/withdraw tools instead.
| Name | Type | Req | Description |
|---|---|---|---|
| signedTransaction | string | yes | Signed base64 transaction |
No output schema declared.
No examples provided.
unstake Unstake SOL (one-shot) ~109
Deactivate a stake account in a single call. Secret key sent over HTTPS for in-memory signing, never stored. Cooldown ~1 epoch. Use check_withdraw_ready to poll, then withdraw.
| Name | Type | Req | Description |
|---|---|---|---|
| secretKey | string | yes | Your base58-encoded secret key — sent to Blueprint server over HTTPS for in-memory signing, never stored or logged |
| stakeAccountAddress | string | yes | Stake account address to deactivate |
| walletAddress | string | yes | Your Solana wallet address (stake authority) |
No output schema declared.
No examples provided.
verify_code_integrity Verify Code Integrity ~33
Verify the code running on Blueprint servers. Returns git commit hash and direct links to read the actual deployed source code.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
verify_transaction Verify Transaction ~49
Verify whether a Solana transaction was built through Blueprint. Checks on-chain for the "solentic.theblueprint.xyz" Memo — cryptographic proof.
| Name | Type | Req | Description |
|---|---|---|---|
| signature | string | yes | Transaction signature to verify |
No output schema declared.
No examples provided.
withdraw Withdraw SOL (one-shot) ~128
Withdraw SOL from a deactivated stake account in a single call. Secret key sent over HTTPS for in-memory signing, never stored. Use check_withdraw_ready first. Omit amountSol for full balance.
| Name | Type | Req | Description |
|---|---|---|---|
| amountSol | – | – | Amount to withdraw in SOL (omit to withdraw full balance) |
| secretKey | string | yes | Your base58-encoded secret key — sent to Blueprint server over HTTPS for in-memory signing, never stored or logged |
| stakeAccountAddress | string | yes | Deactivated stake account to withdraw from |
| walletAddress | string | yes | Your Solana wallet address (withdraw authority) |
No output schema declared.
No examples provided.
withdraw_stake Withdraw Stake ~65
Advanced: Build an unsigned withdraw transaction for local signing. Most agents should use the `withdraw` tool instead.
| Name | Type | Req | Description |
|---|---|---|---|
| amountSol | – | – | SOL to withdraw (omit for full) |
| stakeAccountAddress | string | yes | Stake account |
| walletAddress | string | yes | Wallet address |
No output schema declared.
No examples provided.
How do I install the Blueprint Agentic Staking (Solentic) MCP server?
Blueprint Agentic Staking (Solentic) runs locally as an npm package, launched with npx -y @solentic/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @solentic/mcp-server
claude mcp add blueprint-infrastructure-solentic -- npx -y @solentic/mcp-server
What is the Blueprint Agentic Staking (Solentic) MCP server?
Blueprint Agentic Staking (Solentic) is an MCP server listed in the public MCP registry as io.github.blueprint-infrastructure/solentic. Native Solana staking for AI agents. 26 MCP tools, one-shot signing, webhooks. This page covers its npm package (@solentic/mcp-server).
Is the Blueprint Agentic Staking (Solentic) MCP server safe to use?
Blueprint Agentic Staking (Solentic) scores 79 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Blueprint Agentic Staking (Solentic) MCP server expose?
Blueprint Agentic Staking (Solentic) exposes 26 tools: stake, unstake, withdraw, get_validator_info, get_staking_apy, and 21 more. Their descriptions and schemas cost roughly 1,529 tokens of context every time the server is loaded.
Is the Blueprint Agentic Staking (Solentic) MCP server still maintained?
Blueprint Agentic Staking (Solentic) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Blueprint Agentic Staking (Solentic) MCP server under?
Blueprint Agentic Staking (Solentic) declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.