Server data from the Official MCP Registry
MCP server for PumpFun on-chain intelligence — tokens, claims, holders, and bundles.
MCP server for PumpFun on-chain intelligence — tokens, claims, holders, and bundles.
Set these up before or after installing:
Environment variable: GITHUB_TOKEN
Environment variable: SOLANA_RPC_URL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-nirholas-pumpfun-claims-bot": {
"env": {
"GITHUB_TOKEN": "your-github-token-here",
"SOLANA_RPC_URL": "your-solana-rpc-url-here"
},
"args": [
"-y",
"pumpfun-claims-bot"
],
"command": "npx"
}
}
}The MCP server contains some concerning patterns including hardcoded API credentials and potential privilege escalation paths. Multiple vulnerabilities were identified including exposed cookies in source code and weak input validation, which raise moderate security concerns for an MCP server handling blockchain and social media APIs. Supply chain analysis found 6 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue.
Scanned 4 files · 11 findings
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Be the first to review this server!