# PnL Labs — Solana Trust & Risk Checks (remote · api.pnllabs.com)

Trust checks for Solana trading: realized-PnL wallet trust, token safety, trade cost, forensics.

- Trust score: 71/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `api.pnllabs.com`: 71/100 (this document), [markdown](https://verifymcp.io/servers/pnllabs-pnllabs/api.md), [page](https://verifymcp.io/servers/pnllabs-pnllabs/api)

## Channel facts

- Endpoint: `https://api.pnllabs.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 74/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 74/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 551 tokens (~137/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 10/100
  - Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http pnllabs-pnllabs https://api.pnllabs.com/mcp
```

### Codex

```toml
[mcp_servers.pnllabs-pnllabs]
url = "https://api.pnllabs.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "pnllabs-pnllabs": {
      "type": "remote",
      "url": "https://api.pnllabs.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add pnllabs-pnllabs --url https://api.pnllabs.com/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  pnllabs-pnllabs:
    url: "https://api.pnllabs.com/mcp"
```

### Other

```json
{
  "mcpServers": {
    "pnllabs-pnllabs": {
      "type": "http",
      "url": "https://api.pnllabs.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 71, +8)

- [security improvement] Authorization: unverified → partial
- [security] Tool “check_wallet_trust” rewrote its description, which is the text the model reads
- [security] Tool “check_token_safety” rewrote its description, which is the text the model reads
- [security] Tool “check_trade_cost” rewrote its description, which is the text the model reads
- [security] Tool “check_wallet_forensics” rewrote its description, which is the text the model reads
- [cosmetic] “check_wallet_forensics” reworded the description of “address”
- [cosmetic] “check_wallet_trust” reworded the description of “address”
- [cosmetic] “check_token_safety” reworded the description of “mint”
- [cosmetic] “check_trade_cost” reworded the description of “size_sol”
- [cosmetic] Tool “check_wallet_trust” changed its title: Check Wallet Trust
- [cosmetic] Tool “check_token_safety” changed its title: Check Token Structural Risk
- [cosmetic] Tool “check_trade_cost” changed its title: Estimate Trade Execution Cost
- [cosmetic] Tool “check_wallet_forensics” changed its title: Trace Wallet Funding Origin

### 2026-08-01 (score 63, +10)

- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Stability: unverified → 0.03

### 2026-07-31 (score 53)

First indexed and scored.

## MCP tools (4)

### `check_wallet_trust` (~129 tokens)

Check Wallet Trust

Recomputes the realized SOL profit and loss of a Solana wallet from its on-chain transaction history and returns a trust verdict. Returns: verdict (TRUSTED, NEUTRAL, UNTRUSTED, INSUFFICIENT, UNVERIFIABLE), a confidence level, realized profit/loss in SOL, the number of coins analyzed, stable reason codes, and flags such as known_sniper_bot. Returns UNVERIFIABLE when the history cannot be reconstructed reliably rather than estimating.

Input parameters:

- `address` (string, required): Solana wallet address (base58, 32-44 chars)

### `check_wallet_forensics` (~92 tokens)

Trace Wallet Funding Origin

Traces where a Solana wallet's funding came from and how old it is, using on-chain transfer history. Returns: origin classification (CEX_FUNDED, WALLET_FUNDED, UNKNOWN_ORIGIN, UNVERIFIABLE_ORIGIN), the funding transaction, wallet age, and a fresh_wallet flag.

Input parameters:

- `address` (string, required): Solana wallet address (base58, 32-44 chars)

### `check_trade_cost` (~119 tokens)

Estimate Trade Execution Cost

Estimates what a trade of a given size would cost in a Solana token's main liquidity pool. Returns: expected slippage in percent, an estimated round-trip cost calibrated against measured live execution overhead, a recommended maximum size in SOL, pool liquidity, and a verdict (ACCEPTABLE_COST, ELEVATED_COST, HIGH_COST, UNTRADEABLE, NO_POOL, UNKNOWN).

Input parameters:

- `mint` (string, required): Solana token mint address (base58)
- `size_sol` (number): Trade size in SOL (default 0.5)

### `check_token_safety` (~133 tokens)

Check Token Structural Risk

Analyzes structural risk of a Solana token from on-chain data: real-holder concentration with bonding-curve and liquidity-pool accounts excluded, presence of known sniper-bot addresses among early buyers, and a simulated buy/sell round trip to detect honeypot behavior. Returns: verdict (LOW_RISK, ELEVATED, HIGH_RISK, CRITICAL, UNKNOWN), stable reason codes, and top-holder percentages. Scope is structural only; it does not detect risk that exists purely in trading behavior.

Input parameters:

- `mint` (string, required): Solana token mint address (base58, 32-44 chars)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/pnllabs-pnllabs/api#diagnostics

## Score history

- 2026-08-03: 71
- 2026-08-02: 63
- 2026-08-01: 63
- 2026-07-31: 53

## Links

- Remote endpoint: https://api.pnllabs.com/mcp
- Repository: https://github.com/PnLlabs/pnllabs-mcp
- Website: https://pnllabs.com/
- Changelog RSS feed: https://verifymcp.io/servers/pnllabs-pnllabs/api/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/pnllabs-pnllabs/api/changelog.json
- HTML version of this page: https://verifymcp.io/servers/pnllabs-pnllabs/api