CREW / CrewPay
NPM · CREWPAY-MCP · 2 COMPONENTS
CrewPay MCP: Pump.fun/Bags/Zora unsigned launches with KOL Autohire and on-chain fee-shares.
Available components
Last scanned (10 hours ago)
Scores higher than 40% of npm servers
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 108 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability75
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2546 tokens (~141/item across 18 items; 16 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage84
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 52% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 16 Oct 26 +2
- Tool safety: pass → unverified ▼ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Stability: unverified → 0.07 ▲ functional
- Package version: 1.2.8 → 1.2.9 functional
- 14 Oct 26 +30
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: fail functional
- First check of Destructive annotations: pass functional
- First check of Tool coverage: 51 functional
- First check of Schema quality: good functional
- 13 Oct 26 +10
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 0.87 ▲ functional
- 12 Oct 26 28
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Analysed npm/crewpay-mcp@1.2.9
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 108 packages
| Packages resolved | 108 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
crew_autohire Narrative Autohire KOLs ~127
Preview convenience Autohire: match a token name/ticker/vibe to a candidate KOL pack. Prefer explicit crew selection via crew_list_kols; Autohire is a fallback. Works keyless for previews.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Narrative / vibe (≤204 — leaves room for “Launched from CrewPay.dev platform”) |
| name | string | – | Token name (2–32 on launch) |
| seats | integer | – | Crew seats 1–8 (default 5) |
| ticker | string | – | Token ticker (2–13 on launch) |
No output schema declared.
No examples provided.
crew_build_unsigned Build UNSIGNED launch transactions ~385
Create UNSIGNED launch transactions. platform defaults to pumpfun (Solana v0 messages). bags = Bags.fm Solana fee-claimers (needs BAGS_API_KEY). zora = Zora content coins on Base (EIP-1559; needs ZORA_ENABLED). clanker = Clanker v4 on Base (EIP-1559; needs CLANKER_ENABLED). vibevibe = vibe/vibe on Robinhood Chain (EIP-1559; needs VIBEVIBE_ENABLED). Prefer explicit crew[] from crew_list_kols; Autohire is fallback. optInOnly default off. Fee map: 60% to the KOL crew, 15% to the launching agent, 25% to the treasury (5% referrer when bound). Optional treasuryBps 2000–3000.
| Name | Type | Req | Description |
|---|---|---|---|
| crew | array | – | – |
| description | string | – | – |
| imageBase64 | string | – | – |
| imageUrl | string | – | – |
| initialBuySol | number | – | – |
| launcherKey | string | – | FORBIDDEN — rejected if set. Use CREW_LAUNCHER_KEY in MCP env only. |
| launcherPubkey | string | yes | – |
| mintPubkey | string | – | – |
| mode | string | – | – |
| name | string | yes | – |
| optInOnly | boolean | – | – |
| platform | string | – | Launch venue. Default pumpfun. bags=Bags.fm (Solana). zora=Zora coins (Base). |
| privateKey | string | – | FORBIDDEN — rejected if set. |
| seats | integer | – | – |
| secretKey | string | – | FORBIDDEN — rejected if set. |
| ticker | string | yes | – |
| treasuryBps | integer | – | – |
| string | – | – | |
| website | string | – | – |
No output schema declared.
No examples provided.
crew_claim_key Claim a self-serve CREW API key ~203
Mint a crew_ak_… agent API key with no operator signup (POST /api/agent/keys/claim). Optional referral_code (or CREWPAY_REFERRAL_CODE env) permanently binds a KOL referrer — referred launches use fee map 60/15/5/20. Returns the secret once — store it as CREW_AGENT_API_KEY or pass as x-crew-api-key. Rate-limited 5/hour/IP. Default 5 launches/hour. Use before autohire/launch when you have no key.
| Name | Type | Req | Description |
|---|---|---|---|
| agentName | string | – | Your agent name for the label |
| label | string | – | Key label (default agent) |
| model | string | – | Model id e.g. claude, gpt, grok |
| referral_code | string | – | KOL referral code (crewpay.dev/r/<code>). Bound permanently on this key. Falls back to CREWPAY_REFERRAL_CODE env. |
No output schema declared.
No examples provided.
crew_crank_remits Crank creator fee remits ~139
Distribute accrued creator fees (sweep + distributeCreatorFeesV2). Permissionless on-chain — uses CREW_LAUNCHER_KEY if set, else server CREW_OPS_KEY. Prefers OnlinePumpSdk builder so unswept bonding-curve fees do not fail with CreatorFeesNotSwept.
| Name | Type | Req | Description |
|---|---|---|---|
| launcherKey | string | – | FORBIDDEN — rejected if set. Use CREW_LAUNCHER_KEY in MCP env only. |
| mint | string | yes | – |
| privateKey | string | – | FORBIDDEN — rejected if set. |
| secretKey | string | – | FORBIDDEN — rejected if set. |
No output schema declared.
No examples provided.
crew_discover Discover CREW Agent API ~59
Load CREW / CrewPay discovery for crypto agents: Autohire KOLs, launch Pump.fun coins, fee-shares, OpenAPI links. Use this first when working on Solana meme coins, KOLs, or CrewPay.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
crew_launch Launch Pump coin via CrewPay (MAINNET) ~383
MAINNET launch: Prefer explicit crew[] (from crew_list_kols). Autohire is a fallback convenience. Creates a Pump.fun coin with on-chain fee-shares (60/15/25 default; 60/15/5/20 with referral). Approval optional; requires CREW_AGENT_API_KEY + CREW_LAUNCHER_KEY. Check feeShareLocked.
| Name | Type | Req | Description |
|---|---|---|---|
| agentModel | string | – | e.g. claude, gpt, gemini, grok |
| agentName | string | – | – |
| agentObjective | string | – | – |
| crew | array | – | Explicit crew (shares must total 100%) overrides Autohire when provided |
| description | string | – | ≤204 chars; attribution appended to reach ≤240 final |
| dryRunId | string | – | Optional unless the API key has requireApproval=true |
| holderKol | boolean | – | Open Holder-KOL (fees unlocked until crew_lock_holder_kol) |
| idempotencyKey | string | – | Retry-safe key; replays cached launch for 15m |
| imageBase64 | string | – | – |
| imageUrl | string | – | Public image URL (or use imageBase64) |
| initialBuySol | number | – | Dev buy 0–10 SOL (site+API aligned) |
| launcherKey | string | – | FORBIDDEN — rejected if set. Use CREW_LAUNCHER_KEY in MCP env only. |
| mode | string | – | – |
| name | string | yes | – |
| privateKey | string | – | FORBIDDEN — rejected if set. |
| seats | integer | – | Autohire seats when crew omitted |
| secretKey | string | – | FORBIDDEN — rejected if set. |
| ticker | string | yes | – |
| string | – | X / Twitter handle or URL | |
| website | string | – | – |
No output schema declared.
No examples provided.
crew_launch_dry_run Dry-run a CREW launch (no chain tx) ~337
Dry-run a launch (default) or wire-fees (intent=wire-fees). platform defaults to pumpfun; bags/zora check enablement (BAGS_API_KEY / ZORA_ENABLED) without sending chain txs. Prefer explicit crew[] from crew_list_kols; Autohire is a fallback. Returns dryRunId + approvalUrl. Requires CREW_AGENT_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| agentModel | string | – | – |
| agentName | string | – | – |
| agentObjective | string | – | – |
| crew | array | – | – |
| description | string | – | ≤204 chars; attribution appended to reach ≤240 final |
| holderKol | boolean | – | – |
| imageBase64 | string | – | – |
| imageUrl | string | – | Public image URL (or use imageBase64) |
| initialBuySol | number | – | – |
| intent | string | – | launch (default) or wire-fees |
| launcherKey | string | – | FORBIDDEN — rejected if set. Use CREW_LAUNCHER_KEY in MCP env only. |
| launcherPubkey | string | – | Optional public launcher address for balance check (never a secret) |
| mint | string | – | Required when intent=wire-fees |
| mode | string | – | – |
| name | string | – | – |
| platform | string | – | – |
| privateKey | string | – | FORBIDDEN — rejected if set. |
| seats | integer | – | – |
| secretKey | string | – | FORBIDDEN — rejected if set. |
| ticker | string | – | – |
| string | – | – | |
| website | string | – | – |
No output schema declared.
No examples provided.
crew_list_kols Browse CREW KOL directory ~113
List/browse CREW KOL profiles (optionally filtered by q). Use this to select explicit crew wallets before launching on pumpfun, bags, or zora. Manual pick first; Autohire is a fallback. For Zora, prefer registered evm_wallet / pass Base addresses.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max results (default 50) |
| offset | integer | – | Offset for pagination (default 0) |
| q | string | – | Optional: handle, pump username, or wallet substring |
No output schema declared.
No examples provided.
crew_list_launches List launches for this agent key ~60
Return launches attributed to your crew_ak_… key (mint, ticker, feeShareLocked, pumpUrl). Operator env keys see recent board launches. Use after crew_launch or to recover mint state across retries.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
crew_lock_holder_kol Lock Holder-KOL fee-shares ~137
Scan top holders ∩ CREW KOL directory and permanently lock fee-shares (one-shot). Use when launch used holderKol=true. Requires CREW_LAUNCHER_KEY in MCP env.
| Name | Type | Req | Description |
|---|---|---|---|
| launcherKey | string | – | FORBIDDEN — rejected if set. Use CREW_LAUNCHER_KEY in MCP env only. |
| mint | string | yes | – |
| mode | string | – | – |
| name | string | – | – |
| privateKey | string | – | FORBIDDEN — rejected if set. |
| secretKey | string | – | FORBIDDEN — rejected if set. |
| ticker | string | – | – |
No output schema declared.
No examples provided.
crew_notify_hired_crew Notify hired crew on Telegram ~92
DM hired KOLs via @CrewPay_Bot. Opt-in only: they must have linked Telegram, sent /start, and enabled alerts. Never uses channel member counts.
| Name | Type | Req | Description |
|---|---|---|---|
| handles | array | – | Optional hired handles if mint is omitted |
| message | string | – | Optional short note (≤500) |
| mint | string | – | Coin mint — notifies that launch’s hired crew |
No output schema declared.
No examples provided.
crew_proof Public CREW proof tape ~74
Load public proof tape: launches, remit totals, and buyback runs if any. Fee-shares lock 25% to CrewPay treasury (20% when the launching agent is referred); market buyback cron is not live yet — empty buyback rows ≠ failed fee-shares.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
crew_search_kols Search CREW KOL directory ~71
Search the CREW KOL / Pump profile directory by handle or wallet. Prefer manual crew selection from this directory; Autohire is a fallback/convenience.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max results (default 20) |
| q | string | yes | Handle, pump username, or wallet substring |
No output schema declared.
No examples provided.
crew_status Mint / fee-share status ~55
Check whether a CREW mint has fee-shares locked, Holder KOL open, and board presence. Use after launch (HTTP 202) or before wire/lock/crank.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Pump mint address |
No output schema declared.
No examples provided.
crew_submit_signed Submit signed CREW launch transactions ~75
Submit signed transactions from crew_build_unsigned. Pump.fun/Bags: Solana base64 (create then lock / fee-share then create). Zora: EIP-1559 hex (0xSplits then coin create). Pass platform to match the builder.
| Name | Type | Req | Description |
|---|---|---|---|
| platform | string | – | – |
| signed | array | yes | – |
No output schema declared.
No examples provided.
crew_wire_fees Wire / repair CREW fee-shares ~179
Create + lock fee-sharing for an existing mint. Approval is optional. Operators can require human approval per key (then pass dryRunId from intent=wire-fees after approvalUrl). Requires CREW_LAUNCHER_KEY in MCP env.
| Name | Type | Req | Description |
|---|---|---|---|
| crew | array | – | Optional — omit to reuse board crew from launch |
| dryRunId | string | – | Optional unless the API key has requireApproval=true |
| launcherKey | string | – | FORBIDDEN — rejected if set. Use CREW_LAUNCHER_KEY in MCP env only. |
| mint | string | yes | – |
| mode | string | – | – |
| name | string | – | – |
| privateKey | string | – | FORBIDDEN — rejected if set. |
| secretKey | string | – | FORBIDDEN — rejected if set. |
| ticker | string | – | – |
No output schema declared.
No examples provided.
How do I install the CREW / CrewPay MCP server?
CREW / CrewPay runs locally as an npm package, launched with npx -y crewpay-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · crewpay-mcp
claude mcp add fxams-crewpay-mcp -- npx -y crewpay-mcp
What is the CREW / CrewPay MCP server?
CREW / CrewPay is an MCP server listed in the public MCP registry as io.github.fxams/crewpay-mcp. CrewPay MCP: Pump.fun/Bags/Zora unsigned launches with KOL Autohire and on-chain fee-shares. This page covers its npm package (crewpay-mcp).
Is the CREW / CrewPay MCP server safe to use?
CREW / CrewPay scores 70 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 18 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the CREW / CrewPay MCP server expose?
CREW / CrewPay exposes 16 tools: crew_build_unsigned, crew_submit_signed, crew_discover, crew_claim_key, crew_search_kols, and 11 more. Their descriptions and schemas cost roughly 2,489 tokens of context every time the server is loaded.
Is the CREW / CrewPay MCP server still maintained?
CREW / CrewPay is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the CREW / CrewPay MCP server under?
CREW / CrewPay declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.