Pump SDK MCP Server
NPM · PUMP-FUN-MCP · SCANNED SEP 20
Build extend and maintain pump - Token creation buying selling migration fee collection
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security89
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects toml 3.0.0, reached via @nirholas/pump-sdk > @coral-xyz/anchor > toml. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 59 of 182 dependencies flagged as unhealthy (2 deprecated). View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 47 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability82
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 3522 tokens (~51/item across 68 items; 67 tools + 1 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "build_amm_withdraw" implies "withdraw" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 68 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Pump SDK MCP Server server?
Pump SDK MCP Server runs locally as an npm package, launched with npx -y pump-fun-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · pump-fun-mcp
claude mcp add nirholas-pump-fun-sdk -- npx -y pump-fun-mcp
{
"mcpServers": {
"nirholas-pump-fun-sdk": {
"command": "npx",
"args": [
"-y",
"pump-fun-mcp"
]
}
}
} {
"servers": {
"nirholas-pump-fun-sdk": {
"command": "npx",
"args": [
"-y",
"pump-fun-mcp"
]
}
}
} codex mcp add nirholas-pump-fun-sdk -- npx -y pump-fun-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nirholas-pump-fun-sdk": {
"type": "local",
"command": [
"npx",
"-y",
"pump-fun-mcp"
],
"enabled": true
}
}
} openclaw mcp add nirholas-pump-fun-sdk --command npx --arg -y --arg pump-fun-mcp
mcp_servers:
nirholas-pump-fun-sdk:
command: "npx"
args: ["-y", "pump-fun-mcp"] {
"McpServers": {
"nirholas-pump-fun-sdk": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"pump-fun-mcp"
]
}
}
} assistant mcp add nirholas-pump-fun-sdk -t stdio -c npx -a -y pump-fun-mcp
{
"mcpServers": {
"nirholas-pump-fun-sdk": {
"command": "npx",
"args": [
"-y",
"pump-fun-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 −3
- Stability: pass → 0.83 functional
- 19 Sept 26 +1
- Stability: 0.97 → pass security
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 −4
- Stability: pass → 0.77 functional
- 11 Sept 26 +1
- Stability: 0.97 → pass security
- 9 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/pump-fun-mcp@1.0.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 5 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-3gc7-fjrx-p6mg | CVE-2025-3194 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | no |
| GHSA-528h-pc64-c93x | CVE-2026-71429 | medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-82x6-q7mm-w9cf | CVE-2026-77465 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
| GHSA-v5mp-jgw5-2x6j | CVE-2026-63376 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L | yes |
| GHSA-w5hq-g745-h8pq | CVE-2026-41907 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 182 packages
| Packages resolved | 182 |
|---|---|
| Deprecated | 2 |
| Stale | 55 |
| No linked repository | 3 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
build_amm_deposit ~94
Build instructions to deposit liquidity into a PumpAMM pool
| Name | Type | Req | Description |
|---|---|---|---|
| maxBaseAmountIn | string | yes | Max token amount to deposit |
| maxQuoteAmountIn | string | yes | Max SOL amount in lamports |
| minLpTokenAmountOut | string | yes | Min LP tokens to receive |
| mint | string | yes | Token mint address (graduated) |
| user | string | yes | Depositor wallet address |
No output schema declared.
No examples provided.
build_amm_swap ~82
Build swap instructions for graduated tokens on PumpAMM (buy or sell)
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Input amount |
| minOutput | string | yes | Minimum output amount (slippage protection) |
| mint | string | yes | Token mint address (must be graduated) |
| side | string | yes | Trade side |
| user | string | yes | User wallet address |
No output schema declared.
No examples provided.
build_amm_withdraw ~92
Build instructions to withdraw liquidity from a PumpAMM pool
| Name | Type | Req | Description |
|---|---|---|---|
| lpTokenAmountIn | string | yes | LP tokens to burn |
| minBaseAmountOut | string | yes | Min tokens to receive |
| minQuoteAmountOut | string | yes | Min SOL to receive (lamports) |
| mint | string | yes | Token mint address (graduated) |
| user | string | yes | Withdrawer wallet address |
No output schema declared.
No examples provided.
build_buy_by_sol_amount ~91
Build bonding-curve buy instructions for a given SOL budget — SDK computes expected token output automatically
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address (must be on bonding curve, not graduated) |
| slippage | number | – | Slippage tolerance (0.05 = 5%) |
| solAmount | string | yes | SOL to spend in lamports |
| user | string | yes | Buyer wallet address |
No output schema declared.
No examples provided.
build_buy_instructions ~78
Build transaction instructions to buy tokens on the bonding curve with SOL
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
| slippage | number | – | Slippage tolerance percentage (0-100, default 1%) |
| solAmount | string | yes | SOL amount in lamports to spend |
| user | string | yes | Buyer wallet address |
No output schema declared.
No examples provided.
build_claim_cashback ~28
Build instructions to claim accumulated cashback rewards
| Name | Type | Req | Description |
|---|---|---|---|
| user | string | yes | User wallet address |
No output schema declared.
No examples provided.
build_claim_incentives ~47
Build instructions to claim token incentives from both Pump and PumpAMM programs
| Name | Type | Req | Description |
|---|---|---|---|
| payer | string | yes | Transaction fee payer address |
| user | string | yes | User wallet address |
No output schema declared.
No examples provided.
build_claim_share ~29
Build instructions to distribute accumulated fees to all shareholders
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
build_collect_creator_fees ~38
Build instructions for a creator to collect accumulated fees from both Pump and PumpAMM
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address |
No output schema declared.
No examples provided.
build_create_and_buy ~82
Build instructions to launch a new token AND make the initial buy in a single transaction
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address |
| name | string | yes | Token name |
| solAmount | string | yes | SOL to spend on initial buy (lamports) |
| symbol | string | yes | Token symbol |
| uri | string | yes | Metadata JSON URI |
No output schema declared.
No examples provided.
build_create_fee_sharing ~62
Build instructions to create a fee sharing config for a token (enables revenue sharing)
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address |
| mint | string | yes | Token mint address |
| pool | string | – | AMM pool address (if graduated) |
No output schema declared.
No examples provided.
build_create_token ~62
Build instructions to launch a new token on PumpFun with createV2
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address |
| name | string | yes | Token name |
| symbol | string | yes | Token symbol |
| uri | string | yes | Metadata JSON URI |
No output schema declared.
No examples provided.
build_distribute_fees ~35
Build instructions to distribute accumulated fees to all shareholders
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address with fee sharing config |
No output schema declared.
No examples provided.
build_migrate_instructions ~61
Build instructions to migrate (graduate) a token from bonding curve to PumpAMM
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address to graduate |
| user | string | yes | User triggering migration |
| withdrawAuthority | string | yes | Withdraw authority address |
No output schema declared.
No examples provided.
build_revoke_admin ~44
Build instructions to permanently lock fee sharing config (irreversible!)
| Name | Type | Req | Description |
|---|---|---|---|
| authority | string | yes | Current admin authority to revoke |
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
build_routed_buy ~80
Build buy instructions that auto-route to bonding curve or PumpAMM depending on graduation status
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
| slippage | number | – | Slippage tolerance (0.05 = 5%) |
| solAmount | string | yes | SOL to spend in lamports |
| user | string | yes | Buyer wallet address |
No output schema declared.
No examples provided.
build_routed_sell ~92
Build sell instructions that auto-route to bonding curve or PumpAMM depending on graduation status
| Name | Type | Req | Description |
|---|---|---|---|
| cashback | boolean | – | Enable cashback volume tracking |
| mint | string | yes | Token mint address |
| slippage | number | – | Slippage tolerance (0.05 = 5%) |
| tokenAmount | string | yes | Token amount in raw units to sell |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
build_sell_all ~65
Build sell instructions that sell the user's entire token balance (closes ATA, returns rent)
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
| slippage | number | – | Slippage tolerance (0.05 = 5%) |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
build_sell_by_percentage ~98
Build sell instructions for a percentage of the user's token balance (e.g. 50 = sell half)
| Name | Type | Req | Description |
|---|---|---|---|
| cashback | boolean | – | Enable cashback volume tracking |
| mint | string | yes | Token mint address |
| percent | number | yes | Percentage of balance to sell (0.01–100) |
| slippage | number | – | Slippage tolerance (0.05 = 5%) |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
build_sell_chunked ~95
Build chunked sell instructions for very large amounts that exceed the safe single-tx overflow limit — returns multiple transaction groups
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address (must be on bonding curve) |
| slippage | number | – | Slippage tolerance per chunk (0.05 = 5%) |
| tokenAmount | string | yes | Total tokens to sell in raw units |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
build_sell_instructions ~79
Build transaction instructions to sell tokens back to the bonding curve for SOL
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
| slippage | number | – | Slippage tolerance percentage (0-100, default 1%) |
| tokenAmount | string | yes | Token amount in raw units to sell |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
build_sell_to_target_sol ~98
Build sell instructions that yield approximately a target SOL amount — SDK computes the required token amount
| Name | Type | Req | Description |
|---|---|---|---|
| cashback | boolean | – | Enable cashback volume tracking |
| mint | string | yes | Token mint address (must be on bonding curve) |
| slippage | number | – | Slippage tolerance (0.05 = 5%) |
| targetSol | string | yes | Desired SOL output in lamports |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
build_update_fee_shares ~77
Build instructions to update shareholder allocation (BPS must total 10000)
| Name | Type | Req | Description |
|---|---|---|---|
| authority | string | yes | Current admin authority |
| currentShareholders | array | yes | Current shareholders |
| mint | string | yes | Token mint address |
| newShareholders | array | yes | New shareholders (total BPS must equal 10000) |
No output schema declared.
No examples provided.
build_update_shareholders ~72
Build instructions to update fee sharing shareholders and their BPS allocations
| Name | Type | Req | Description |
|---|---|---|---|
| authority | string | yes | Admin authority |
| currentShareholders | array | yes | Current shareholders |
| mint | string | yes | Token mint address |
| newShareholders | array | yes | New shareholders (BPS must total 10000) |
No output schema declared.
No examples provided.
estimate_vanity_time ~71
Estimate how long it will take to generate a vanity address with a given pattern
| Name | Type | Req | Description |
|---|---|---|---|
| keysPerSecond | number | – | Generation speed (keys/sec, default 1000 for TS, 100000 for Rust) |
| prefix | string | – | Desired prefix |
| suffix | string | – | Desired suffix |
No output schema declared.
No examples provided.
fetch_multiple_bonding_curves ~49
Batch-fetch bonding curve state for multiple mints in a single RPC call (max 100)
| Name | Type | Req | Description |
|---|---|---|---|
| mints | array | yes | Array of token mint addresses (max 100) |
No output schema declared.
No examples provided.
generate_keypair ~29
Generate a new Solana keypair (Ed25519). Key material is zeroized after return.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
generate_vanity_address ~72
Generate a Solana keypair with a vanity prefix and/or suffix pattern
| Name | Type | Req | Description |
|---|---|---|---|
| maxAttempts | number | – | Maximum generation attempts |
| prefix | string | – | Desired prefix (case-insensitive, max 5 chars) |
| suffix | string | – | Desired suffix (case-insensitive, max 5 chars) |
No output schema declared.
No examples provided.
get_amm_pool ~42
Get PumpAMM pool state for a graduated token: reserves, LP supply, mint addresses
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address (graduated) |
No output schema declared.
No examples provided.
get_amm_price ~35
Get the current token price derived from AMM pool reserves
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address (graduated) |
No output schema declared.
No examples provided.
get_amm_quote ~96
Get a quote for trading a graduated token on PumpAMM
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Input amount (lamports for buy, raw tokens for sell) |
| mint | string | yes | Token mint address (must be graduated) |
| side | string | yes | Trade side |
| slippage | number | – | Slippage tolerance as a decimal (0.05 = 5%) |
| user | string | yes | User wallet address |
No output schema declared.
No examples provided.
get_amm_reserves ~35
Get current pool reserves in both token and SOL units
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address (graduated) |
No output schema declared.
No examples provided.
get_bonding_curve_state ~38
Get raw bonding curve account data: reserves, supply, completion status, creator
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_bonding_curve_summary ~43
Get a comprehensive summary of a token's bonding curve: reserves, market cap, price, graduation progress
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_buy_quote ~60
Calculate how many tokens you receive for a given SOL amount on the bonding curve
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
| solAmount | string | yes | SOL amount in lamports to spend |
| user | string | yes | Buyer wallet address |
No output schema declared.
No examples provided.
get_creator_profile ~29
Get creator profile including vault balance and fee earnings
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address |
No output schema declared.
No examples provided.
get_creator_vault_balance ~37
Check how much SOL a creator has accumulated in their fee vault across both programs
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address |
No output schema declared.
No examples provided.
get_current_day_tokens ~29
Preview the current day's projected token incentive earnings
| Name | Type | Req | Description |
|---|---|---|---|
| user | string | yes | User wallet address |
No output schema declared.
No examples provided.
get_distributable_amount ~34
Check the current distributable fee balance for a token's shareholders
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_fee_breakdown ~58
Decompose fees for a specific trade amount into platform, creator, and referral components
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Trade amount in lamports |
| mint | string | yes | Token mint address |
| side | string | yes | Trade side |
No output schema declared.
No examples provided.
get_fee_sharing_config ~30
Get the fee sharing configuration for a token
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_fee_tier ~38
Get the current fee tier (buy/sell fee percentages) based on token market cap
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_graduation_progress ~37
Check how close a token is to graduating from bonding curve to AMM pool
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_graduation_status ~35
Check whether a token has graduated to AMM and its progress percentage
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_market_cap ~34
Get the current market cap of a token on the bonding curve in SOL
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_minimum_distributable_fee ~34
Check the minimum fee threshold required before distribution to shareholders
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_pool_by_address ~48
Fetch PumpAMM pool state directly by pool account address (use when you have the pool PDA, not the mint)
| Name | Type | Req | Description |
|---|---|---|---|
| poolAddress | string | yes | PumpAMM pool account address |
No output schema declared.
No examples provided.
get_price_impact ~60
Calculate the price impact percentage of a buy or sell trade
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount in lamports (buy) or raw tokens (sell) |
| mint | string | yes | Token mint address |
| side | string | yes | Trade side |
No output schema declared.
No examples provided.
get_recent_trades ~30
Get guidance on fetching recent trades from transaction history
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
No output schema declared.
No examples provided.
get_sell_quote ~76
Calculate how much SOL you receive for selling a given number of tokens
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Token mint address |
| tokenAmount | string | yes | Token amount in raw units to sell |
| tokenProgram | string | – | Token program (optional — auto-detected from mint) |
| user | string | yes | Seller wallet address |
No output schema declared.
No examples provided.
What is the Pump SDK MCP Server server?
Pump SDK MCP Server is listed in the public MCP registry as io.github.nirholas/pump-fun-sdk. Build extend and maintain pump - Token creation buying selling migration fee collection. This page covers its npm package (pump-fun-mcp).
Is the Pump SDK MCP Server server safe to use?
Pump SDK MCP Server scores 79 out of 100 on VerifyMCP. We recorded 5 known advisories against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Pump SDK MCP Server server expose?
Pump SDK MCP Server exposes 67 tools: get_buy_quote, get_sell_quote, get_price_impact, get_market_cap, get_token_price, and 62 more. Their descriptions and schemas cost roughly 3,510 tokens of context every time the server is loaded.
Is the Pump SDK MCP Server server still maintained?
Pump SDK MCP Server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Pump SDK MCP Server server under?
Pump SDK MCP Server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.