READ-ONLY — fetch a Jupiter v6 swap quote for previewing the route, expected output, slippage, and price impact before committing to a transaction. Parallel to EVM's get_swap_quote (which uses LiFi). Calls the Jupiter aggregator at lite-api.jup.ag/swap/v1/quote, returns the opaque quoteResponse (...
AI agents call get_solana_swap_quote to retrieve information from VaultPilot MCP without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
| Parameter | Type | Required | Description |
|---|---|---|---|
dexes | array | — | Restrict Jupiter routing to a specific set of DEXes. Common values: "Raydium", "Orca V2", "Meteora", "Meteora DLMM", "Phoenix", "Lifinity V2", "Whirlpool". When |
amount | string | Yes | Raw integer amount in base units (NOT decimal-adjusted). For ExactIn swaps this is how much inputMint to sell; for ExactOut it's how much outputMint to buy. Exa |
swapMode | string | — | ExactIn: sell exactly `amount` inputMint, receive at least minOutput. ExactOut: buy exactly `amount` outputMint, sell at most maxInput. |
inputMint | string | Yes | Base58 mint address of the token being sold. For native SOL use the wrapped-SOL mint So11111111111111111111111111111111111111112 — Jupiter auto-wraps/unwraps. |
outputMint | string | Yes | Base58 mint address of the token being bought. Same wrapped-SOL convention as inputMint. |
slippageBps | integer | — | Slippage tolerance in basis points. 50 bps = 0.5%. Default 50. |
excludeDexes | array | — | Blocklist version of `dexes` — DEXes Jupiter must avoid. Use when the user says "not via Raydium" or "avoid Orca". Independent of `dexes`: pass both to constrai |
Parameters from the server's own tool schema.
Even though get_solana_swap_quote only reads data, uncontrolled read access leaks sensitive information and racks up API costs — an agent caught in a retry loop can make thousands of calls a minute without anyone noticing.
Attacks that exploit this kind of access
READ-ONLY — fetch a Jupiter v6 swap quote for previewing the route, expected output, slippage, and price impact before committing to a transaction. Parallel to EVM's get_swap_quote (which uses LiFi). Calls the Jupiter aggregator at lite-api.jup.ag/swap/v1/quote, returns the opaque quoteResponse (which must be passed back verbatim to prepare_solana_swap) plus human-facing fields (symbols, amounts with decimals applied, route labels like 'Meteora DLMM' / 'Raydium CLMM', price impact %). Pass raw integer amounts in base units (e.g., '1000000' for 1 USDC). For native SOL, use the wrapped-SOL mint So11111111111111111111111111111111111111112 — Jupiter auto-wraps/unwraps at swap time. It is categorised as a Read tool in the VaultPilot MCP MCP Server, which means it retrieves data without modifying state.
get_solana_swap_quote accepts 7 parameters: dexes, amount, swapMode, inputMint, outputMint, slippageBps, excludeDexes. Required: amount, inputMint, outputMint. The full parameter table on this page comes from the server's own tool schema.
Register the VaultPilot MCP server in PolicyLayer and add a rule for get_solana_swap_quote: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches VaultPilot MCP. Nothing to install.
get_solana_swap_quote is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the get_solana_swap_quote rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for get_solana_swap_quote. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
get_solana_swap_quote is provided by the VaultPilot MCP server (vaultpilot-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.