← 返回 Skills 市场
Openpump Solana Mcp
作者
fullstacktard
· GitHub ↗
· v1.2.0
· MIT-0
384
总下载
0
收藏
1
当前安装
4
版本数
在 OpenClaw 中安装
/install openpump-solana-mcp
功能描述
Solana token launch and trading tools via the OpenPump MCP server. Creates tokens on pump.fun, buys and sells tokens, runs market-making bots, snipes new tok...
安全使用建议
This skill appears to be what it says (OpenPump trading & launch tooling) but exposes high-impact capabilities: creating custodial wallets, batch wallet creation, multi‑wallet bundle launches, spam-launch campaigns, multi-hop obfuscation, and the ability to transfer SOL/tokens externally. Before installing: 1) Only use if you trust openpump.io and the @openpump/mcp npm package; verify the package publisher and pin an explicit version instead of using '@latest' with npx. 2) Treat OPENPUMP_API_KEY like a full-access secret — rotate it and avoid putting a high-value key in a shared file. 3) Prefer the HTTP MCP transport (remote server) if you do not want to run arbitrary npm code locally. 4) Start with minimal funds and use dryRun for transfer calls; test on tiny amounts. 5) Be cautious of features that enable obfuscation, spam launches, or mass batch operations — these can be used maliciously or violate laws/exchanges; ensure you understand legal/ethical implications. If you need higher assurance, ask the publisher for: (a) a pinned release/version, (b) source code or audit of @openpump/mcp, and (c) explicit documentation of API key scopes/permissions.
功能分析
Type: OpenClaw Skill
Name: openpump-solana-mcp
Version: 1.2.0
The bundle provides a comprehensive and well-documented Solana trading agent ('PumpBot') utilizing the OpenPump MCP server. While it possesses high-risk capabilities such as wallet management and SOL/token transfers (via tools like `transfer-sol` and `buy-token`), the instructions in `SOUL.md` and `HEARTBEAT.md` explicitly mandate strict safety guardrails, including mandatory user confirmation for all trades, risk-based circuit breakers, and mechanical stop-loss/take-profit logic. No evidence of malicious intent, credential theft, or unauthorized data exfiltration was found; the logic is consistently aligned with the stated purpose of disciplined, risk-managed crypto trading.
能力评估
Purpose & Capability
Name/description, required binaries (node, npx), primary env (OPENPUMP_API_KEY), and declared npm package @openpump/mcp all align with a remote MCP trading/tooling service. However, the advertised capabilities include spam-launch, bundle-launch (multi-wallet Jito bundles), batch-create-wallets, and explicit multi-hop obfuscation for mm-fund-pool — features that are more than 'simple trading' and can be used for high-risk or abusive activity. They are coherent with the skill's stated purpose (token launches & aggressive trading) but represent amplified capabilities that deserve extra scrutiny.
Instruction Scope
SKILL.md instructs the agent to create custodial wallets, batch-create wallets, transfer SOL/tokens to arbitrary addresses, run autonomous market-making sessions, and execute 'spam-launch' campaigns. It requires storing and using an OPENPUMP_API_KEY and offers both a local stdio npx flow and an HTTP MCP transport. The instructions do not read unrelated system files, but they do direct potentially sensitive actions (fund transfers, wallet creation, obfuscation hops) that have large security and financial impact. The doc repeatedly instructs to obtain user confirmations but also supports autonomous sessions and long-running heartbeat automation — a high blast radius if misconfigured or abused.
Install Mechanism
Install is via the npm package @openpump/mcp and the MCP config uses 'npx -y @openpump/mcp@latest'. Pulling and running the latest package at runtime via npx is convenient but raises risk: remote code from npm is fetched each execution (package contents can change), and '-y / @latest' means you don't pin a version. Using the official npm package on the public registry is expected for this kind of skill, but automatic unpinned npx execution increases supply-chain risk compared to a pinned release or a vetted binary.
Credentials
Only one environment variable is required: OPENPUMP_API_KEY. That matches the declared primary credential and is appropriate for an API-driven MCP server. The skill does not request unrelated credentials or system secrets. (Note: the key gives the remote service control over custodial wallets/actions, so protect it accordingly.)
Persistence & Privilege
The skill is not force-enabled (always: false). It relies on normal autonomous invocation (disable-model-invocation: false), which is the platform default. It does suggest storing the API key in ~/.openclaw/.env for persistence — standard but sensitive. It does not request or modify other skills' configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openpump-solana-mcp - 安装完成后，直接呼叫该 Skill 的名称或使用
/openpump-solana-mcp触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.0
Added batch-create-wallets tool (57 tools total)
v1.1.0
Added 33 new tools (23→56 total): vanity addresses, market making, sniping & stop-loss, spam launches, bundle-launch, cancel-job. Updated all documentation.
v1.0.1
Pin npm package version to @1.0.0, add user-confirmation gates to all trading actions
v1.0.0
OpenPump Solana MCP v1.0.0 – Initial Release
- Provides Solana token launch and trading tools via the OpenPump MCP server, covering the full pump.fun trading workflow.
- Supports token creation, bundle buys/sells, Jito tip integration, bonding curve analytics, wallet and fee management, and portfolio monitoring.
- Offers both local (Node.js) and remote (HTTP) server setup options.
- Includes 23 distinct tools for trading, transferring, wallet management, quoting, analytics, and automated workflows.
- Documentation details setup instructions, example workflows, and integration for autonomous agent trading patterns.
元数据
常见问题
Openpump Solana Mcp 是什么？
Solana token launch and trading tools via the OpenPump MCP server. Creates tokens on pump.fun, buys and sells tokens, runs market-making bots, snipes new tok... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 384 次。
如何安装 Openpump Solana Mcp？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openpump-solana-mcp」即可一键安装，无需额外配置。
Openpump Solana Mcp 是免费的吗？
是的，Openpump Solana Mcp 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Openpump Solana Mcp 支持哪些平台？
Openpump Solana Mcp 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux, darwin, win32）。
谁开发了 Openpump Solana Mcp？
由 fullstacktard（@fullstacktard）开发并维护，当前版本 v1.2.0。
推荐 Skills