Solana Security Standard - MCP server

A Model Context Protocol server that brings the Solana Security Standard (SOL-0XX) to any MCP client - Cline, GitHub Copilot, Cursor, Claude, Windsurf, and more. One integration, every tool.

What it gives your assistant

Two tools:

• scan_solana_code - scan a snippet of Solana/Anchor Rust against the SOL-0XX fast patterns; returns advisory findings (rule id + line:col + fix hint). A match means "look here," not a confirmed bug. Off-chain paths (client/cli/offchain/sdk/tests) are excluded.
• list_solana_security_rules - return the full standard: threat model, review checklist, and all 37 numbered rules with fixes, so the assistant can write and review Solana code safely.

Install

Add it to your MCP client config (no global install needed):

{
  "mcpServers": {
    "solana-security-standard": {
      "command": "npx",
      "args": ["-y", "@jelleo/solana-security-mcp"]
    }
  }
}

That's the whole setup. The server speaks JSON-RPC 2.0 over stdio.

Privacy

100% local. It runs the same zero-dependency scanner as the CLI on your machine - no network calls, no telemetry. The scanner core and rules are vendored into the package; nothing is fetched at runtime.

How it fits

This is the MCP layer of the Solana Security Standard. The same SOL-0XX rules also ship as a CLI, a GitHub Action, a Semgrep ruleset, editor rules files (integrations/), and a VS Code extension.

MIT. By Jelleo.