pump.fun Solana Data
NPM · @THREE-WS/PUMPFUN-MCP
Free, read-only pump.fun + Solana MCP: token discovery, on-chain analysis, SNS, 3D snapshots.
Available components
Last scanned (18 hours ago)
Scores higher than 72% of npm servers
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 30 of 92 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 24 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability69
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2539 tokens (~110/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage84
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 44% of tool parameters carry a description.Partial
- Structured output schemas are declared (13% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 23 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 30 Oct 26 0
- Stability: 0.97 → pass security
- 29 Oct 26 0
- Stability: pass → 0.97 functional
- 23 Oct 26 0
- Stability: 0.97 → pass security
- 22 Oct 26 0
- Stability: pass → 0.97 functional
- 16 Oct 26 0
- Stability: 0.97 → pass security
- 15 Oct 26 +43
- Injection markers: unverified → pass ▲ security
- Schema quality: pass → fail ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.97 ▲ functional
- Package version: 0.2.5 → 0.2.7 functional
- 12 Oct 26 +16
- Malware scan: unverified → pass ▲ security
- Security disclosure: unverified → pass ▲ functional
- Package version: 0.2.5 → 0.2.7 functional
- 11 Oct 26 −55
- Malware scan: pass → unverified ▼ security
- Stability: 0.83 → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Security disclosure: pass → unverified ▼ functional
- License: unverified → pass ▲ functional
- Licence: Apache-2.0 functional
- Package version: 0.2.5 → 0.2.7 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/@three-ws/pumpfun-mcp@0.2.7
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 92 packages
| Packages resolved | 92 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_bonding_curve Bonding Curve ~233
Bonding curve analysis: real reserves, virtual reserves, and graduation progress (on-chain). Pre-graduation only: these reserves come from the pump program bonding-curve account, not from a PumpSwap pool. Pump renamed the quote-side fields on-chain (real_sol_reserves -> real_quote_reserves, virtual_sol_reserves -> virtual_quote_reserves) once a non-SOL quote asset became possible; the response keys below keep their original names and are still denominated in SOL, because the curve quote_mint is the SOL default on every coin created to date. A v3 buy that empties the curve completes it and buys the rest through a synthetic migration, priced on the reserves the PumpSwap pool will open with, so a large final buy is not capped at realTokenReserves. Once complete=true the curve is retired and pricing moves to the PumpSwap pool, so use pumpfun_quote_swap from that point on. Use this to read graduation progress or the curve spot price of a coin that has not graduated yet.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | – |
| network | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| complete | boolean | yes | true once the curve has graduated |
| graduationPercent | number | yes | 0–100 graduation progress |
| mint | string | yes | – |
| network | string | yes | – |
| solReserves | string | yes | Real quote reserves in SOL (4-decimal string). On-chain field: real_quote_reserves. |
| tokenReserves | string | yes | Real token reserves (raw base units) |
| virtualSolReserves | string | yes | Virtual quote reserves in lamports. On-chain field: virtual_quote_reserves. Spot price = virtual_quote_reserves / virtual_token_reserves. Distinct from the identically-named PumpSwap Pool.virtual_quo… |
| virtualTokenReserves | string | yes | Virtual token reserves (raw base units) |
No examples provided.
get_creator_profile Creator Profile ~59
All tokens by a creator wallet, with rug-pull risk flags. Use this to vet a dev wallet's launch history before buying one of its coins; for its fee cash-outs call pumpfun_list_claims.
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | – |
No output schema declared.
No examples provided.
get_graduated_tokens Graduated Tokens ~64
Tokens that graduated from the bonding curve to their PumpSwap (pump_amm) pool. Use this to list coins that now trade on a PumpSwap pool, where pumpfun_quote_swap applies instead of get_bonding_curve.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
get_king_of_the_hill King of the Hill ~49
Highest-market-cap token still on the bonding curve. Use this to find the coin closest to graduating among those still on the curve; for the full ranking call get_trending_tokens.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_new_tokens New Tokens ~47
Most recently launched pump.fun tokens. Use this to catch launches in their first minutes; for the largest coins by market cap call get_trending_tokens instead.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
get_token_details Token Details ~66
Full details for a specific pump.fun token by mint address. Use this when you already have a mint and need its metadata, market cap, and curve status; for holder concentration call get_token_holders, for recent fills call get_token_trades.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | – |
No output schema declared.
No examples provided.
get_token_holders Token Holders ~67
Top holders of a token with concentration analysis (on-chain). Use this to check whether a few wallets control the supply before buying; for price and volume call get_token_details instead.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| mint | string | yes | – |
| network | string | – | – |
No output schema declared.
No examples provided.
get_token_trades Token Trades ~63
Recent buy/sell history for a token. Use this to read recent buy and sell flow on one coin; to see only large trades as they land, call pumpfun_watch_whales instead.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| mint | string | yes | – |
No output schema declared.
No examples provided.
get_trending_tokens Trending Tokens ~59
Top pump.fun tokens by market cap. Use this to scan the largest coins on pump.fun right now; for fresh launches call get_new_tokens, for coins that left the curve call get_graduated_tokens.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
kol_leaderboard KOL Leaderboard ~83
Top KOL traders ranked by P&L for a given time window. Returns wallet, pnlUsd, winRate, trades, rank. Use this to find which trader wallets are worth following; to see whether they hold a given coin, call get_coin_intel or get_token_holders.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| window | string | – | – |
No output schema declared.
No examples provided.
pumpfun_bot_status Indexer Status ~79
Returns the configuration and health status of the pump.fun indexer backend. Always available; does not require PUMPFUN_BOT_URL. Use this first when search_tokens, get_graduated_tokens, get_king_of_the_hill, or get_creator_profile fail or are missing, to see whether the indexer is configured and healthy.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| configured | boolean | yes | true when PUMPFUN_BOT_URL is set on the server |
| error | string | – | Failure reason when healthy is false |
| healthy | boolean | yes | true when the indexer answered the health ping |
| latencyMs | number | – | Round-trip ms of the health ping (configured backends only) |
| message | string | – | Human-readable note when the indexer is unconfigured |
No examples provided.
pumpfun_first_claims First Creator Fee Claims ~102
First-ever pump.fun creator fee claims in a time window: a cash-out signal. Returns creators who have never claimed before, with creator wallet, mint, lamports, and timestamp. Use this to spot creators cashing out for the first time across all coins; for one creator's history call pumpfun_list_claims.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| sinceMinutes | integer | – | How far back to look for new claimers (minutes) |
No output schema declared.
No examples provided.
pumpfun_list_claims List Creator Fee Claims ~158
List recent pump.fun fee-claim events for a creator wallet (on-chain, no indexer needed). Returns signature, mint, lamports, and Unix timestamp for each claim. Creator fees from the v3 curve and v2 pool trades wait on the curve and pool until a sweep_creator_fee moves them to the creator vault, so a claim covers only what was swept (usually in the same transaction) and fees still waiting appear in no claim yet. Use this to audit how much a creator has already cashed out; for only the claims inside a recent window call pumpfun_watch_claims.
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address (base58) |
| limit | integer | – | – |
| network | string | – | – |
No output schema declared.
No examples provided.
pumpfun_quote_swap Swap Quote (Read-Only) ~287
Read-only price quote for a pump.fun (PumpSwap) AMM swap on a GRADUATED coin. No signing or tx sending. One of inputMint/outputMint must be wSOL (So11111111111111111111111111111111111111112). Returns amountOut, priceImpactBps, route, expiresAtMs. Pricing follows PumpSwap exactly: the quote side is the EFFECTIVE reserve, pool_quote_token_account.amount + pool.virtual_quote_reserves (a SIGNED i128, commonly negative because PumpSwap v2 trades keep waiting protocol and creator fees in the vault and subtract them there), while the base side is the raw pool_base_token_account.amount, unchanged. Coins still on the bonding curve have no pool, so use get_bonding_curve instead. The quote is a snapshot: honour expiresAtMs and re-quote after it. Use this to size a trade on a graduated coin, or to measure its pool depth, before executing anywhere.
| Name | Type | Req | Description |
|---|---|---|---|
| amountIn | number | yes | Input amount in raw base units (lamports for SOL). |
| inputMint | string | yes | Input token mint (base58). |
| network | string | – | – |
| outputMint | string | yes | Output token mint (base58). |
| slippageBps | number | – | Slippage tolerance in basis points (default 100 = 1%). |
| Name | Type | Req | Description |
|---|---|---|---|
| amountOut | string | yes | Expected output in raw base units (lamports when the output is wSOL), fee-inclusive. |
| base_reserve | string | – | Raw base vault balance (pool_base_token_account.amount). Unaffected by virtual reserves. |
| effective_quote_reserve | string | – | quote_reserve + virtual_quote_reserves. The reserve the quote is actually priced against. Never negative (the program guarantees it); may be below quote_reserve. |
| expiresAtMs | number | yes | Unix ms after which this quote is stale and must be re-requested. |
| priceImpactBps | number | yes | Execution price vs. the pool spot price, in basis points. Spot is measured against the effective quote reserve (vault + virtual), so virtual liquidity correctly reads as depth rather than as impact. |
| quote_reserve | string | – | Raw quote vault balance (pool_quote_token_account.amount), before virtual reserves. Includes protocol and creator fees waiting for a sweep, so it overstates liquidity on its own; price on effective_q… |
| route | string | yes | PumpSwap pool address the quote was priced on. |
| virtual_quote_reserves | string | – | Pool.virtual_quote_reserves, a SIGNED i128 serialized as a decimal string. Positive values add depth held outside the vault; negative values remove fees that sit in the vault waiting for a sweep (com… |
No examples provided.
pumpfun_token_3d Token 3D Snapshot ~151
Live 3D snapshot of a pump.fun / Solana token. Composes on-chain token metadata, bonding-curve graduation progress, and top-holder distribution, and returns a shareable three.ws /coin3d viewer deep-link (a spinning coin medallion textured with the token logo, a holder galaxy, and a graduation ring) plus an embeddable iframe and the underlying data. Read-only, free. Use this to hand a user a visual, shareable view of a coin; for the raw numbers alone call get_token_details and get_token_holders.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | SPL / pump.fun token mint address (base58). |
| network | string | – | – |
No output schema declared.
No examples provided.
pumpfun_vanity_mint Vanity Mint Keypair ~124
Generate a Solana keypair whose address ends/starts with a vanity pattern. Returns publicKey + secretKey (base58). Caller must save the secret key immediately; it is never stored. Hard timeout: 60 s. Use this before launching a coin when its mint address should carry a recognizable prefix or suffix.
| Name | Type | Req | Description |
|---|---|---|---|
| caseSensitive | boolean | – | – |
| maxAttempts | integer | – | – |
| prefix | string | – | Desired address prefix (case-insensitive by default) |
| suffix | string | – | Desired address suffix (case-insensitive by default) |
No output schema declared.
No examples provided.
pumpfun_watch_claims Watch Creator Fee Claims ~104
Return all pump.fun fee-claim events for a creator wallet within a look-back window (durationMs). Use this for batch collection after a delay; for a creator's full recent claim history call pumpfun_list_claims.
| Name | Type | Req | Description |
|---|---|---|---|
| creator | string | yes | Creator wallet address (base58) |
| durationMs | number | – | Look-back window in ms (default 300000 = 5 min, max 1800000) |
| network | string | – | – |
No output schema declared.
No examples provided.
pumpfun_watch_whales Watch Whale Trades ~118
Collect whale trades on a pump.fun token for a short window (max 10 s). Returns all trades whose USD value meets minUsd. Use this to see who is moving size on a coin right now; for the full recent tape call get_token_trades.
| Name | Type | Req | Description |
|---|---|---|---|
| durationMs | number | – | Collection window in ms (default 5000, max 10000) |
| minUsd | number | – | Minimum trade value in USD (default 5000) |
| mint | string | yes | SPL mint pubkey (base58) |
No output schema declared.
No examples provided.
search_tokens Search Tokens ~66
Search pump.fun tokens by name, symbol, or mint address. Use this to find a coin's mint when you only know its name or ticker, then pass the mint to get_token_details or get_coin_intel.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| query | string | yes | – |
No output schema declared.
No examples provided.
sns_resolve Resolve .sol Domain ~71
Resolve a .sol Solana Name Service domain to its owner wallet address. Use this when a wallet is named by its .sol domain and you need the address; for the reverse direction call sns_reverseLookup.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | .sol domain name, e.g. "bonfida.sol" |
No output schema declared.
No examples provided.
sns_reverseLookup Reverse .sol Lookup ~65
Reverse-lookup a Solana wallet address to its primary .sol domain name. Use this to label a raw wallet address with its human-readable .sol name; to go from name to address call sns_resolve.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Base58 Solana wallet address |
No output schema declared.
No examples provided.
social_cashtag_sentiment Cashtag Sentiment ~93
Score social-post sentiment for a cashtag using a deterministic lexicon. Returns score (-1..1), positive/negative/neutral percentages, and example posts. Use this to score posts you have already collected; it fetches nothing itself, so pass the posts in.
| Name | Type | Req | Description |
|---|---|---|---|
| posts | array | yes | Array of post objects. Each must have a text field; id, ts, and author are optional. |
No output schema declared.
No examples provided.
social_x_post_impact X Post Price Impact ~169
Correlate an X (Twitter) post to a memecoin price impact. Fetches post metadata via oEmbed (no API key) and computes price delta from the pump.fun bonding curve in a ±windowMin window around the post. Use this to measure how one X post moved a coin that is still on its bonding curve (pricing is virtual_quote_reserves / virtual_token_reserves); a graduated coin has no curve, so the call fails rather than returning a zero price.
| Name | Type | Req | Description |
|---|---|---|---|
| mint | string | yes | Solana token mint address (base58) |
| network | string | – | – |
| postUrl | string | yes | X post URL (e.g. https://x.com/user/status/123) |
| windowMin | integer | – | ±window in minutes around the post time |
No output schema declared.
No examples provided.
How do I install the pump.fun Solana Data MCP server?
pump.fun Solana Data runs locally as an npm package, launched with npx -y @three-ws/pumpfun-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @three-ws/pumpfun-mcp
claude mcp add nirholas-pumpfun-solana-mcp -- npx -y @three-ws/pumpfun-mcp
What is the pump.fun Solana Data MCP server?
pump.fun Solana Data is an MCP server listed in the public MCP registry as io.github.nirholas/pumpfun-solana-mcp. Free, read-only pump.fun + Solana MCP: token discovery, on-chain analysis, SNS, 3D snapshots. This page covers its npm package (@three-ws/pumpfun-mcp).
Is the pump.fun Solana Data MCP server safe to use?
pump.fun Solana Data scores 82 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the pump.fun Solana Data MCP server expose?
pump.fun Solana Data exposes 23 tools: search_tokens, get_token_details, get_bonding_curve, get_token_trades, get_trending_tokens, and 18 more. Their descriptions and schemas cost roughly 2,377 tokens of context every time the server is loaded.
Is the pump.fun Solana Data MCP server still maintained?
pump.fun Solana Data is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the pump.fun Solana Data MCP server under?
pump.fun Solana Data declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.