A Model Context Protocol server that turns the three.ws pump.fun alerts surface into an agent-drivable control plane over stdio. Define rules on pump.fun events — graduations, market-cap crossings, whale buys, new launches — and let the three.ws cron evaluate them against the live event stream and deliver across in-app, webhook, and Telegram. Read back what actually fired, with per-channel delivery health.

Rules are account-scoped: every call carries your three.ws session, so the server reads and writes only your rules and your alert history. The pumpfun-monitor cron does the watching server-side, so your rules fire across devices with no dashboard open.

Install

npm install @three-ws/alerts-mcp

Or run with npx (no install):

npx @three-ws/alerts-mcp

Quick start

Claude Code, one line:

claude mcp add alerts -e THREE_WS_SESSION=your-__Host-sid-cookie -- npx -y @three-ws/alerts-mcp

Claude Desktop / Cursor (claude_desktop_config.json or mcp.json):

{
	"mcpServers": {
		"alerts": {
			"command": "npx",
			"args": ["-y", "@three-ws/alerts-mcp"],
			"env": {
				"THREE_WS_SESSION": "your-__Host-sid-cookie"
			}
		}
	}
}

Inspect the surface with the MCP Inspector:

THREE_WS_SESSION=… npx -y @modelcontextprotocol/inspector npx @three-ws/alerts-mcp

Authentication

Every tool is account-scoped. Set THREE_WS_SESSION to the value of your __Host-sid cookie from a signed-in three.ws browser session (DevTools → Application → Cookies → __Host-sid). The server sends it the same way your browser does; for writes it first fetches a one-time CSRF token from /api/csrf-token and echoes it, exactly like the site. Treat the session value like a password. No Solana key or signer is involved.

Tools

| Tool | Type | What it does | | ------------------- | --------------------- | ----------------------------------------------------------------------------------------------------------------- | | list_alert_rules | read-only | List your alert rules with live delivery health — last_fired_at, recent failures, recent per-channel outcomes. | | create_alert_rule | write (appends) | Define a new rule on a pump.fun event. Not idempotent — each call adds a rule (max 50). | | update_alert_rule | write (idempotent) | Retune a threshold, pause/resume (enabled), swap delivery channels, or change kind. Only passed fields change. | | delete_alert_rule | write (destructive) | Permanently remove a rule and its fire/delivery history. Prefer update_alert_rule with enabled:false to pause. | | get_alert_history | read-only | Read the alerts that actually fired, newest first — each with a summary, originating rule_id, and full payload. |

Rule kinds & targeting

| kind | Target | threshold | | -------------- | ------------------------------- | ------------------------- | | graduation | global, or target_mint / target_agent | — | | price_above | target_mint (required) | USD market cap | | price_below | target_mint (required) | USD market cap | | whale_buy | target_mint (required) | minimum buy size in SOL | | new_mint | target_agent (required) | — |

At least one delivery channel must be on: deliver_in_app (default true), webhook_url (HTTPS — a per-rule webhook_secret is generated for verifying the webhook-signature header), and/or telegram_chat (numeric chat id or @username). cooldown_seconds (5–86400, default 300) throttles repeat fires.

Any coin referenced in a rule is runtime input you supply. three.ws promotes only $THREE (FeMbDoX7R1Psc4GEcvJdsbNbZA3bfztcyDCatJVJpump).

Example

// create_alert_rule — alert when a tracked agent's coin graduates, via webhook + Telegram
> {
    "kind": "graduation",
    "target_agent": "8a1c…-uuid",
    "webhook_url": "https://hooks.example.com/pump",
    "telegram_chat": "123456789",
    "cooldown_seconds": 600
  }
{
  "ok": true,
  "rule": {
    "id": "…", "kind": "graduation", "label_display": "Graduations · tracked agent",
    "target_agent": "8a1c…-uuid", "deliver_in_app": true,
    "webhook_url": "https://hooks.example.com/pump",
    "webhook_secret": "whsec_…", "telegram_chat": "123456789",
    "cooldown_seconds": 600, "enabled": true,
    "last_fired_at": null, "recent_failures": 0, "recent_deliveries": []
  }
}

// get_alert_history — what fired, newest first
> { "limit": 2 }
{
  "ok": true, "count": 2, "unread_count": 1,
  "alerts": [
    { "id": 1841, "fired_at": "2026-06-24T…Z", "read": false,
      "summary": "Whale bought 12.50 SOL ($2,310) of $THREE",
      "rule_id": "…", "kind": "whale_buy", "mint": "FeMb…pump", "symbol": "THREE",
      "event": { "amount_sol": 12.5, "amount_usd": 2310, "buyer": "…", "tx": "…" } }
  ]
}

Requirements

• Node.js >= 20.
• A signed-in three.ws session (THREE_WS_SESSION).
• Network access to https://three.ws (or your own THREE_WS_BASE).

Environment variables

| Variable | Required | Default | Notes | | --------------------- | -------- | ------------------ | ------------------------------------------------------------ | | THREE_WS_SESSION | yes | — | Your __Host-sid cookie value. Account credential — secret. | | THREE_WS_BASE | no | https://three.ws | Override only for self-hosting / preview deployments. | | THREE_WS_TIMEOUT_MS | no | 20000 | Per-request timeout (ms). |

Links

• Homepage: https://three.ws
• Changelog: https://three.ws/changelog
• Issues: https://github.com/nirholas/three.ws/issues
• License: Apache-2.0 — see LICENSE