pump.fun Solana Data
NPM · @THREE-WS/PUMPFUN-MCP · SCANNED SEP 20
Free, read-only pump.fun + Solana MCP: token discovery, on-chain analysis, SNS, 3D snapshots.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (SEE LICENSE IN LICENSE) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 8 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability73
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1812 tokens (~78/item across 23 items; 23 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage84
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 44% of tool parameters carry a description.Partial
- Structured output schemas are declared (13% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 23 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the pump.fun Solana Data MCP server?
pump.fun Solana Data runs locally as an npm package, launched with npx -y @three-ws/pumpfun-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @three-ws/pumpfun-mcp
claude mcp add nirholas-pumpfun-solana-mcp -- npx -y @three-ws/pumpfun-mcp
{
"mcpServers": {
"nirholas-pumpfun-solana-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/pumpfun-mcp"
]
}
}
} {
"servers": {
"nirholas-pumpfun-solana-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/pumpfun-mcp"
]
}
}
} codex mcp add nirholas-pumpfun-solana-mcp -- npx -y @three-ws/pumpfun-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nirholas-pumpfun-solana-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@three-ws/pumpfun-mcp"
],
"enabled": true
}
}
} openclaw mcp add nirholas-pumpfun-solana-mcp --command npx --arg -y --arg @three-ws/pumpfun-mcp
mcp_servers:
nirholas-pumpfun-solana-mcp:
command: "npx"
args: ["-y", "@three-ws/pumpfun-mcp"] {
"McpServers": {
"nirholas-pumpfun-solana-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@three-ws/pumpfun-mcp"
]
}
}
} assistant mcp add nirholas-pumpfun-solana-mcp -t stdio -c npx -a -y @three-ws/pumpfun-mcp
{
"mcpServers": {
"nirholas-pumpfun-solana-mcp": {
"command": "npx",
"args": [
"-y",
"@three-ws/pumpfun-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 −3
- Stability: pass → 0.80 functional
- 18 Sept 26 0
- Stability: 0.97 → pass security
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 −1
- Stability: pass → 0.93 functional
- 15 Sept 26 0
- Stability: 0.97 → pass security
- Package version: 0.2.4 → 0.2.5 functional
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@three-ws/pumpfun-mcp@0.2.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_bonding_curve Bonding Curve ~165
Bonding curve analysis: real reserves, virtual reserves, and graduation progress (on-chain). Pre-graduation only: the reserves come from the pump program bonding-curve account, not from a PumpSwap pool. Pump renamed the quote-side fields (real_sol_reserves → real_quote_reserves, virtual_sol_reserves → virtual_quote_reserves) when a non-SOL quote asset became possible; the response keys below keep their original names and are still denominated in SOL, because the curve quote_mint is the SOL default on every coin created to date. Once complete=true the curve is retired and pricing moves to the PumpSwap pool, so use pumpfun_quote_swap from that point on.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | – |
| network | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| complete | boolean | yes | true once the curve has graduated |
| graduationPercent | number | yes | 0–100 graduation progress |
| mint | string | yes | – |
| network | string | yes | – |
| solReserves | string | yes | Real quote reserves in SOL (4-decimal string). On-chain field: real_quote_reserves. |
| tokenReserves | string | yes | Real token reserves (raw base units) |
| virtualSolReserves | string | yes | Virtual quote reserves in lamports. On-chain field: virtual_quote_reserves. Spot price = virtual_quote_reserves / virtual_token_reserves. Distinct from the identically-named PumpSwap Pool.virtual_quo… |
| virtualTokenReserves | string | yes | Virtual token reserves (raw base units) |
No examples provided.
get_creator_profile Creator Profile ~30
All tokens by a creator wallet, with rug-pull risk flags.
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | – |
No output schema declared.
No examples provided.
get_graduated_tokens Graduated Tokens ~32
Tokens that graduated from the bonding curve to Raydium AMM.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
get_king_of_the_hill King of the Hill ~23
Highest-market-cap token still on the bonding curve.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_new_tokens New Tokens ~23
Most recently launched pump.fun tokens.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
get_token_details Token Details ~28
Full details for a specific pump.fun token by mint address.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | – |
No output schema declared.
No examples provided.
get_token_holders Token Holders ~43
Top holders of a token with concentration analysis (on-chain).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| mint | string | yes | – |
| network | string | – | – |
No output schema declared.
No examples provided.
get_token_trades Token Trades ~33
Recent buy/sell history for a token.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| mint | string | yes | – |
No output schema declared.
No examples provided.
get_trending_tokens Trending Tokens ~25
Top pump.fun tokens by market cap.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
kol_leaderboard KOL Leaderboard ~52
Top KOL traders ranked by P&L for a given time window. Returns wallet, pnlUsd, winRate, trades, rank.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| window | string | – | – |
No output schema declared.
No examples provided.
pumpfun_bot_status Indexer Status ~38
Returns the configuration and health status of the pump.fun indexer backend. Always available — does not require PUMPFUN_BOT_URL.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| configured | boolean | yes | true when PUMPFUN_BOT_URL is set on the server |
| error | string | – | Failure reason when healthy is false |
| healthy | boolean | yes | true when the indexer answered the health ping |
| latencyMs | number | – | Round-trip ms of the health ping (configured backends only) |
| message | string | – | Human-readable note when the indexer is unconfigured |
No examples provided.
pumpfun_first_claims First Creator Fee Claims ~74
First-ever pump.fun creator fee claims in a time window — a cash-out signal. Returns creators who have never claimed before, with creator wallet, mint, lamports, and timestamp.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| sinceMinutes | integer | – | How far back to look for new claimers (minutes) |
No output schema declared.
No examples provided.
pumpfun_list_claims List Creator Fee Claims ~74
List recent pump.fun fee-claim events for a creator wallet (on-chain, no indexer needed). Returns signature, mint, lamports, and Unix timestamp for each claim.
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address (base58) |
| limit | integer | – | – |
| network | string | – | – |
No output schema declared.
No examples provided.
pumpfun_quote_swap Swap Quote (Read-Only) ~252
Read-only price quote for a pump.fun (PumpSwap) AMM swap on a GRADUATED coin. No signing or tx sending. One of inputMint/outputMint must be wSOL (So11111111111111111111111111111111111111112). Returns amountOut, priceImpactBps, route, expiresAtMs. Pricing follows PumpSwap exactly: the quote side is the EFFECTIVE reserve, pool_quote_token_account.amount + pool.virtual_quote_reserves (non-zero on launchpad coins since 2026-07-20), while the base side is the raw pool_base_token_account.amount, unchanged. Coins still on the bonding curve have no pool, so use get_bonding_curve instead. The quote is a snapshot: honour expiresAtMs and re-quote after it.
| Name | Type | Req | Description |
|---|---|---|---|
| amountIn | number | yes | Input amount in raw base units (lamports for SOL). |
| inputMint | string | yes | Input token mint (base58). |
| network | string | – | – |
| outputMint | string | yes | Output token mint (base58). |
| slippageBps | number | – | Slippage tolerance in basis points (default 100 = 1%). |
| Name | Type | Req | Description |
|---|---|---|---|
| amountOut | string | yes | Expected output in raw base units (lamports when the output is wSOL), fee-inclusive. |
| base_reserve | string | – | Raw base vault balance (pool_base_token_account.amount). Unaffected by virtual reserves. |
| effective_quote_reserve | string | – | quote_reserve + virtual_quote_reserves. The reserve the quote is actually priced against. |
| expiresAtMs | number | yes | Unix ms after which this quote is stale and must be re-requested. |
| priceImpactBps | number | yes | Execution price vs. the pool spot price, in basis points. Spot is measured against the effective quote reserve (vault + virtual), so virtual liquidity correctly reads as depth rather than as impact. |
| quote_reserve | string | – | Raw quote vault balance (pool_quote_token_account.amount), before virtual reserves. |
| route | string | yes | PumpSwap pool address the quote was priced on. |
| virtual_quote_reserves | string | – | Pool.virtual_quote_reserves, an i128. Quote-side liquidity held outside the vault. 0 on non-boost pools. SIGNED: may be negative, so do not parse it unsigned. |
No examples provided.
pumpfun_token_3d Token 3D Snapshot ~120
Live 3D snapshot of a pump.fun / Solana token. Composes on-chain token metadata, bonding-curve graduation progress, and top-holder distribution, and returns a shareable three.ws /coin3d viewer deep-link (a spinning coin medallion textured with the token logo, a holder galaxy, and a graduation ring) plus an embeddable iframe and the underlying data. Read-only, free.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | SPL / pump.fun token mint address (base58). |
| network | string | – | – |
No output schema declared.
No examples provided.
pumpfun_vanity_mint Vanity Mint Keypair ~106
Generate a Solana keypair whose address ends/starts with a vanity pattern. Returns publicKey + secretKey (base58). Caller must save the secret key immediately — it is never stored. Hard timeout: 60 s.
| Name | Type | Req | Description |
|---|---|---|---|
| caseSensitive | boolean | – | – |
| maxAttempts | integer | – | – |
| prefix | string | – | Desired address prefix (case-insensitive by default) |
| suffix | string | – | Desired address suffix (case-insensitive by default) |
No output schema declared.
No examples provided.
pumpfun_watch_claims Watch Creator Fee Claims ~88
Return all pump.fun fee-claim events for a creator wallet within a look-back window (durationMs). Useful for batch collection after a delay.
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address (base58) |
| durationMs | number | – | Look-back window in ms (default 300000 = 5 min, max 1800000) |
| network | string | – | – |
No output schema declared.
No examples provided.
pumpfun_watch_whales Watch Whale Trades ~93
Collect whale trades on a pump.fun token for a short window (max 10 s). Returns all trades whose USD value meets minUsd.
| Name | Type | Req | Description |
|---|---|---|---|
| durationMs | number | – | Collection window in ms (default 5000, max 10000) |
| minUsd | number | – | Minimum trade value in USD (default 5000) |
| mint | string | yes | SPL mint pubkey (base58) |
No output schema declared.
No examples provided.
search_tokens Search Tokens ~35
Search pump.fun tokens by name, symbol, or mint address.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| query | string | yes | – |
No output schema declared.
No examples provided.
sns_resolve Resolve .sol Domain ~44
Resolve a .sol Solana Name Service domain to its owner wallet address.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | .sol domain name, e.g. "bonfida.sol" |
No output schema declared.
No examples provided.
sns_reverseLookup Reverse .sol Lookup ~38
Reverse-lookup a Solana wallet address to its primary .sol domain name.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Base58 Solana wallet address |
No output schema declared.
No examples provided.
social_cashtag_sentiment Cashtag Sentiment ~71
Score social-post sentiment for a cashtag using a deterministic lexicon. Returns score (-1..1), positive/negative/neutral percentages, and example posts.
| Name | Type | Req | Description |
|---|---|---|---|
| posts | array | yes | Array of post objects. Each must have a text field; id, ts, and author are optional. |
No output schema declared.
No examples provided.
social_x_post_impact X Post Price Impact ~163
Correlate an X (Twitter) post to a memecoin price impact. Fetches post metadata via oEmbed (no API key) and computes price delta from the pump.fun bonding curve in a ±windowMin window around the post. Bonding-curve pricing (virtual_quote_reserves / virtual_token_reserves), so it applies to coins that have not graduated; a graduated coin has no curve and the call fails rather than returning a zero price.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Solana token mint address (base58) |
| network | string | – | – |
| postUrl | string | yes | X post URL (e.g. https://x.com/user/status/123) |
| windowMin | integer | – | ±window in minutes around the post time |
No output schema declared.
No examples provided.
What is the pump.fun Solana Data MCP server?
pump.fun Solana Data is an MCP server listed in the public MCP registry as io.github.nirholas/pumpfun-solana-mcp. Free, read-only pump.fun + Solana MCP: token discovery, on-chain analysis, SNS, 3D snapshots. This page covers its npm package (@three-ws/pumpfun-mcp).
Is the pump.fun Solana Data MCP server safe to use?
pump.fun Solana Data scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the pump.fun Solana Data MCP server expose?
pump.fun Solana Data exposes 23 tools: search_tokens, get_token_details, get_bonding_curve, get_token_trades, get_trending_tokens, and 18 more. Their descriptions and schemas cost roughly 1,650 tokens of context every time the server is loaded.
Is the pump.fun Solana Data MCP server still maintained?
pump.fun Solana Data is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.