// SCAN REPORT

Solana MCP Server

38 tools. 5 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 30 Jun 2026

5 can modify or destroy data

33 read-only

38 tools total

Community server · catalogue entry verified 30/06/2026

How to control Solana MCP Server ↓

TOOL MAP

What Solana MCP Server exposes to your agents

Read (33) Write / Execute (1) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Solana MCP Server tools

Financial · Critical transfer_sol This tool directly moves cryptocurrency (SOL) from one wallet to another, which is a financial transaction that commits monetary value. Financial · Critical transfer_token Token transfers on blockchain networks are inherently financial operations that move real monetary value. Financial · Critical execute_swap Token swaps directly exchange one cryptocurrency asset for another, committing financial value irreversibly on the blockchain. Destructive · Critical burn_tokens Burning tokens permanently removes them from existence; this action cannot be undone.

5 of Solana MCP Server's 38 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Solana MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Solana MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "execute_swap": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "burn_tokens": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "create_token": {
    "limits": [
      {
        "counter": "create_token_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_account_info": {
    "limits": [
      {
        "counter": "get_account_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Solana MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SOLANA →

Instant setup, no code required.

FULL CATALOGUE

All 38 Solana MCP Server tools

FINANCIAL 3 tools

Financial execute_swap Execute a token swap on Jupiter DEX aggregator. Requires PRIVATE_KEY. Financial transfer_sol Transfer SOL from the configured wallet to a destination address. Requires PRIVATE_KEY environment variable. Financial transfer_token Transfer SPL tokens from the configured wallet to a destination. Requires PRIVATE_KEY.

DESTRUCTIVE 1 tools

Destructive burn_tokens Burn SPL tokens from the configured wallet. Requires PRIVATE_KEY.

WRITE 1 tools

Write create_token Create a new SPL token mint. Requires PRIVATE_KEY.

READ 33 tools

Read get_account_info Get detailed account information for a Solana address including owner, lamports, data size, and executable sta Read get_balance Get the SOL balance of a Solana wallet address Read get_block Get block details by slot number Read get_block_height Get the current block height Read get_cluster_nodes Get info about all nodes in the Solana cluster Read get_epoch_info Get current epoch information including slot, epoch progress, and timing Read get_health Check if the Solana RPC node is healthy Read get_largest_accounts Get the largest SOL-holding accounts on the network Read get_largest_token_holders Get the largest holders of an SPL token Read get_minimum_balance_for_rent Calculate the minimum SOL balance needed to keep an account rent-exempt Read get_nft_collection_info Get info about an NFT collection by checking a sample NFT from the collection Read get_nft_metadata Get on-chain metadata for an NFT by its mint address Read get_nfts_by_owner Get all NFTs owned by a wallet address Read get_program_accounts Get all accounts owned by a program with optional filters Read get_recent_transactions Get recent transaction signatures for a Solana address Read get_slot Get the current slot number Read get_sol_price Get the current SOL price in USD via Jupiter Read get_stake_accounts Get all stake accounts for a Solana wallet Read get_supply Get the total SOL supply and circulation info Read get_swap_quote Get a swap quote from Jupiter DEX aggregator Read get_token_accounts Get all SPL token accounts owned by a wallet address Read get_token_balance Get the SPL token balance of a wallet for a specific token mint Read get_token_info Get metadata and supply info for an SPL token by its mint address Read get_token_price Get the current USD price of a Solana token using Jupiter price API Read get_token_supply Get the total and circulating supply of an SPL token Read get_tps Get the current transactions per second (TPS) on Solana Read get_transaction Get details of a Solana transaction by its signature Read get_wallet_address Get the public wallet address from the configured PRIVATE_KEY Read identify_program Look up a well-known Solana program by its address Read is_program Check if a Solana address is an executable program Read mint_tokens Mint SPL tokens to a destination wallet. Requires PRIVATE_KEY with mint authority. Read read_account_data Read and return the raw data of a Solana account (base64 encoded) Read request_airdrop Request a SOL airdrop on devnet or testnet (for testing purposes only)

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Solana MCP Server

Can an AI agent move money through the Solana MCP Server MCP server? +

Yes. The Solana MCP Server server exposes 3 financial tools including execute_swap, transfer_sol, transfer_token. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Solana MCP Server MCP server? +

Yes. The Solana MCP Server server exposes 1 destructive tools including burn_tokens. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Solana MCP Server? +

The Solana MCP Server server has 1 write tools including create_token. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Solana MCP Server.

How many tools does the Solana MCP Server MCP server expose? +

38 tools across 4 categories: Execute, Financial, Read, Write. 33 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on Solana MCP Server? +

Register the Solana MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Solana MCP Server tool call.

Deterministic rules across all 38 Solana MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SOLANA →

Instant setup, no code required.

38 Solana MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.