← Back to search

@swig-wallet/mcp-server

GitHub Actions Scanned 13d ago

MCP server for Swig smart wallet operations on Solana

npm ↗
D
57.3 / 100

Versions

1.1.3latest
Jun 6, 2026
1.1.2
May 7, 2026
1.1.1
Apr 16, 2026
1.1.0
Apr 4, 2026
1.0.7
Mar 24, 2026
+ show 7 moreshow less
1.0.6
Mar 23, 2026
1.0.5
Mar 20, 2026
1.0.4
Mar 10, 2026
1.0.3
Mar 9, 2026
1.0.2
Mar 2, 2026
1.0.1
Feb 27, 2026
1.0.0
Feb 25, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 14

configure_rpc
annotations: none low

Configure the Solana RPC endpoint. Call this before any other tool.

configure_paymaster
annotations: none low

Configure Swig Paymaster for gasless transactions. Get credentials from dashboard.onswig.com.

configure_gas_sponsor
annotations: none low

Configure a custom gas sponsorship server URL for fee-sponsored transactions.

generate_agent_keypair
annotations: none low

Generate a new Ed25519 keypair for the agent. Returns the public key. The user must fund this address with SOL before transactions can be sent.

configure_agent_keypair
annotations: none low

Load an existing keypair for the agent from a JSON file or base58 secret key.

get_balance
annotations: none low

Get the SOL balance of an address.

create_swig_wallet
annotations: none low

Create a new Swig smart wallet on Solana. Returns the Swig account address and wallet address.

fetch_swig_wallet
annotations: none low

Fetch a Swig wallet and return its details including all roles/authorities.

add_authority
annotations: none low

Add a new authority (keypair/key) to a Swig wallet with specific permissions.

remove_authority
annotations: none low

Remove an authority from a Swig wallet.

roleIdToRemove number
update_authority
annotations: none low

Update the permissions of an existing authority on a Swig wallet.

roleIdToUpdate number
transact_sol_transfer
annotations: none low

Transfer SOL from a Swig wallet to a recipient.

recipientAddress string
transact_custom
annotations: none low

Execute a custom instruction through the Swig wallet. The Swig wallet will be the signer for the inner instruction.

pubkey string isSigner boolean programId string
swig-wallet
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, httpx, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, os, shutil
shell high
Server uses shell capabilities via: child_process, subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 73

low
Tool 'configure_rpc' has no annotations annotation_checker · 100%
low
Tool 'configure_paymaster' has no annotations annotation_checker · 100%
low
Tool 'configure_gas_sponsor' has no annotations annotation_checker · 100%
low
Tool 'generate_agent_keypair' has no annotations annotation_checker · 100%
low
Tool 'configure_agent_keypair' has no annotations annotation_checker · 100%
low
Tool 'get_balance' has no annotations annotation_checker · 100%
low
Tool 'create_swig_wallet' has no annotations annotation_checker · 100%
low
Tool 'fetch_swig_wallet' has no annotations annotation_checker · 100%
low
Tool 'add_authority' has no annotations annotation_checker · 100%
low
Tool 'remove_authority' has no annotations annotation_checker · 100%
low
Tool 'update_authority' has no annotations annotation_checker · 100%
low
Tool 'transact_sol_transfer' has no annotations annotation_checker · 100%
low
Tool 'transact_custom' has no annotations annotation_checker · 100%
low
Tool 'swig-wallet' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 92 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: ws@8.18.1 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.1 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: nx@21.1.2 (GHSA-g2r8-wvmj-jf5w) dependency_analyzer · 95%
medium
Vulnerable dependency: nx@21.1.2 (GHSA-vp3h-ghgh-jr7g) dependency_analyzer · 95%
medium
Vulnerable dependency: bn.js@5.2.2 (GHSA-378v-28hj-76wf) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.2.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.1.0 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.5 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: @solana/web3.js@1.87.0 (GHSA-8m45-2rjm-j347) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.28,<1 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.28,<1 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in anagrambuild-swig-ts-6fc9e22/packages/developer-sdk/python/scripts/local_transaction_e2e.py:69 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in anagrambuild-swig-ts-6fc9e22/packages/developer-sdk/python/src/swig_developer_sdk/passkeys.py:15 entropy_analyzer · 70%
medium
Buffer.from base64 in anagrambuild-swig-ts-6fc9e22/packages/developer-sdk/typescript/scripts/local-transaction-smoke.ts:231 entropy_analyzer · 75%
medium
Buffer.from base64 in anagrambuild-swig-ts-6fc9e22/packages/developer-sdk/typescript/scripts/local-transaction-smoke.ts:634 entropy_analyzer · 75%
medium
Buffer.from base64 in anagrambuild-swig-ts-6fc9e22/examples/swap/index.ts:46 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: configure_rpc manifest_parser · 70%
info
Tool: configure_paymaster manifest_parser · 70%
info
Tool: configure_gas_sponsor manifest_parser · 70%
info
Tool: generate_agent_keypair manifest_parser · 70%
info
Tool: configure_agent_keypair manifest_parser · 70%
info
Tool: get_balance manifest_parser · 70%
info
Tool: create_swig_wallet manifest_parser · 70%
info
Tool: fetch_swig_wallet manifest_parser · 70%
info
Tool: add_authority manifest_parser · 70%
info
Tool: remove_authority manifest_parser · 70%
info
Tool: update_authority manifest_parser · 70%
info
Tool: transact_sol_transfer manifest_parser · 70%
info
Tool: transact_custom manifest_parser · 70%
info
Tool: swig-wallet manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (15) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'configure_rpc': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 91 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%