Solana Security Standard — Claude Code MCP server: code scanning
Gives your assistant the SOL-0XX ruleset plus a scanner for Solana and Anchor code. Useful before an audit, or while writing a program.
claude mcp add solana-security-mcp -- npx -y @jelleo/solana-security-mcpWhat Solana Security Standard does
The server exposes two tools. scan_solana_code runs a Rust snippet for Solana or Anchor through the SOL-0XX fast patterns and answers with advisory findings: rule id, line and column, and a hint on the fix. A hit tells you where to look, it does not confirm a bug. Off-chain paths such as client, cli, offchain, sdk and tests are skipped.
list_solana_security_rules returns the whole standard instead: the threat model, the review checklist, and 52 numbered rules with their fixes. Your assistant leans on those when it writes or reviews Solana code.
Setup is a single entry in your MCP client config, nothing installed globally. The server talks JSON-RPC 2.0 over stdio. Scanning happens on your machine: no network calls, no telemetry, with the scanner core and the rules vendored into the package. Inputs are handled in memory and nothing is written down.
What it helps with
- catch common Anchor mistakes before an audit
- keep the SOL-0XX ruleset at hand inside the editor
- check a Rust snippet for risky patterns
- teach the assistant how to write Solana code safely
- scan code without shipping it to a third party
Example prompts for the agent
- Run
scan_solana_codeon this Anchor snippet and list the rules it flags - Call
list_solana_security_rulesand walk my program through the checklist - Scan
programs/vault/src/lib.rsand tell me what to fix
How to install Solana Security Standard
Platform CLI
claude mcp add solana-security-mcp -- npx -y @jelleo/solana-security-mcpPlatform CLI
codex mcp add mcp -- npx -y @jelleo/solana-security-mcpConfig file
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@jelleo/solana-security-mcp"
]
}
}
}Config file
{
"servers": {
"mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@jelleo/solana-security-mcp"
]
}
}
}Platform CLI
gemini mcp add mcp npx -y @jelleo/solana-security-mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Solana Security Standard
How do I install Solana Security Standard in Claude Code?
Run claude mcp add solana-security-mcp -- npx -y @jelleo/solana-security-mcp. There is no global install; the server starts through npx.
What does Solana Security Standard do?
It hands your assistant two tools: a scanner for Solana and Anchor code against the SOL-0XX patterns, and the full ruleset with the threat model and review checklist.
Where does scanned code go?
Nowhere. The scanner and rules ship inside the package, everything runs locally, and inputs are processed in memory without being stored.
