mcpField
S
Solana Security Standard

Solana Security Standard

Local
github.comSecurity38Updated 17w ago
RepositoryVisit website

About Solana Security Standard

Solana Security Standard MCP server brings the SOL-0XX Solana security standard to MCP-compatible clients. It scans Anchor and Rust snippets for advisory findings and returns the full ruleset so an assistant can write and review Solana code. The scanner runs entirely on the local machine with no network calls.

Key features

  1. 01Scans Solana/Anchor code against SOL-0XX fast patterns
  2. 02Reports rule ID, line and column with fix hints
  3. 03Returns the full standard with 52 numbered rules
  4. 04Excludes client, CLI, SDK and test paths from scans
  5. 05Runs locally with no network calls or telemetry

Use cases

  1. 01Checking Solana programs against security rules while writing code
  2. 02Reviewing Anchor code snippets for potential issues
  3. 03Loading Solana security rules into an editor's AI assistant

MCP support

The server speaks JSON-RPC 2.0 over stdio and exposes two tools, scan_solana_code and list_solana_security_rules. MCP clients call these tools to scan code and retrieve the complete SOL-0XX ruleset.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "copenhagen0x-solana-security": {
      "command": "npx",
      "args": [
        "-y",
        "@jelleo/solana-security-mcp"
      ]
    }
  }
}
Run commandnpx -y @jelleo/solana-security-mcp

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@jelleo/solana-security-mcp1.5.0

Tools

2

Saved tool list · updated 2w ago

ParameterTypeRequiredDescription
codestringYesThe Rust source to scan.
filenamestringNoOptional path/name; used for off-chain exclude matching (e.g. tests/foo.rs).

Details

From the project README

Solana Security Standard - MCP server

A Model Context Protocol server that brings the Solana Security Standard (SOL-0XX) to any MCP client - Cline, GitHub Copilot, Cursor, Claude, Windsurf, and more. One integration, every tool.

What it gives your assistant

Two tools:

  • scan_solana_code - scan a snippet of Solana/Anchor Rust against the SOL-0XX fast patterns; returns advisory findings (rule id + line:col + fix hint). A match means "look here," not a confirmed bug. Off-chain paths (client/cli/offchain/sdk/tests) are excluded.
  • list_solana_security_rules - return the full standard: threat model, review checklist, and all 52 numbered rules with fixes, so the assistant can write and review Solana code safely.

Install

Add it to your MCP client config (no global install needed):

{
  "mcpServers": {
    "solana-security-standard": {
      "command": "npx",
      "args": ["-y", "@jelleo/solana-security-mcp"]
    }
  }
}

That's the whole setup. The server speaks JSON-RPC 2.0 over stdio.

Privacy Policy

100% local. This server runs the same zero-dependency scanner as the CLI entirely on your machine - no network calls, no telemetry, nothing fetched at runtime. The scanner core and rules are vendored into the package.

  • Data collection: none - the code you scan and the rules you fetch never leave your machine.
  • Usage & storage: inputs are processed in memory to produce the scan result; nothing is stored or logged.
  • Third-party sharing: none.
  • Retention: none - no data is persisted by this server.
  • Contact: [email protected]

Full policy: https://jelleo.com/privacy.html

How it fits

This is the MCP layer of the Solana Security Standard. The same SOL-0XX rules also ship as a CLI, a GitHub Action, a Semgrep ruleset, editor rules files (integrations/), and a VS Code extension.

MIT. By Jelleo.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.