# Solana Security Standard

Gives your assistant the SOL-0XX ruleset plus a scanner for Solana and Anchor code. Useful before an audit, or while writing a program.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 38
- Author: Copenhagen0x
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Copenhagen0x/solana-security-standard/tree/HEAD/mcp
- Updated: 2026-09-16
- HTML: https://affpapa.org/en/nevibecode/mcp/solana-security-standard

## What it does

The server exposes two tools. `scan_solana_code` runs a Rust snippet for Solana or Anchor through the SOL-0XX fast patterns and answers with advisory findings: rule id, line and column, and a hint on the fix. A hit tells you where to look, it does not confirm a bug. Off-chain paths such as client, cli, offchain, sdk and tests are skipped.

\`list_solana_security_rules` returns the whole standard instead: the threat model, the review checklist, and 52 numbered rules with their fixes. Your assistant leans on those when it writes or reviews Solana code.

Setup is a single entry in your MCP client config, nothing installed globally. The server talks JSON-RPC 2.0 over stdio. Scanning happens on your machine: no network calls, no telemetry, with the scanner core and the rules vendored into the package. Inputs are handled in memory and nothing is written down.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add solana-security-mcp -- npx -y @jelleo/solana-security-mcp
```

### Codex

**Platform CLI**
```bash
codex mcp add mcp -- npx -y @jelleo/solana-security-mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@jelleo/solana-security-mcp"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "mcp": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@jelleo/solana-security-mcp"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add mcp npx -y @jelleo/solana-security-mcp
```

## When to use it
- catch common Anchor mistakes before an audit
- keep the SOL-0XX ruleset at hand inside the editor
- check a Rust snippet for risky patterns
- teach the assistant how to write Solana code safely
- scan code without shipping it to a third party

## Example prompts
- Run `scan_solana_code` on this Anchor snippet and list the rules it flags
- Call `list_solana_security_rules` and walk my program through the checklist
- Scan `programs/vault/src/lib.rs` and tell me what to fix

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md