← Back to search Server uses shell capabilities via: child_process, spawn() Server uses env_vars capabilities via: process.env
io.github.ExpertVagabond/solana
Solana MCP server for wallet, transactions & programs
? Not scanned yet
Versions
1.0.1latestfirst seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 2
shell high env_vars low Scan Findings 11
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.20.0 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.20.0 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.20.0 (GHSA-w48q-cv73-mx4w)
info
package.json metadata
info
Transport: stdio
info
Sandbox failed to start for output poisoning scan
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 580 components
medium
No build provenance detected (SLSA L0)