Unclaimed Sol Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Unclaimed Sol Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for UnclaimedSOL — scan and reclaim dormant SOL from Solana wallets directly from AI assistants like Claude, ChatGPT, and others that support the Model Context Protocol.
See also:
Solana wallets accumulate rent-locked SOL in dormant token accounts (zero-balance ATAs) and program buffer accounts. This MCP server lets AI assistants:
scan_claimable_solCheck how much SOL a wallet can reclaim. Read-only — no transactions, no keypair needed.
Input: wallet_address (base58 public key; optional in claim-enabled mode, defaults to configured keypair wallet)
claim_solClaim reclaimable SOL. Requires a configured keypair. Uses a two-step flow:
execution_token valid for 60 seconds.dry_run: false and the execution_token to sign and broadcast.Inputs: wallet_address (optional in claim-enabled mode, defaults to configured keypair wallet), dry_run (default true), execution_token, max_transactions (default 10), exclude (optional token symbols/names to skip on execute)
This action is irreversible — closed accounts cannot be recovered.
claim_rewardsClaim uncollected DeFi rewards (cashback, creator fees, and more). Requires a configured keypair. Uses the same two-step dry-run/execute flow as claim_sol. Pump/PumpSwap are 3% capped at 1 SOL or 100 USDC; other rewards are 15%.
Inputs: wallet_address (optional in claim-enabled mode, defaults to configured keypair wallet), dry_run (default true), execution_token
claim_stakesClaim SOL from deactivated stake accounts. Requires a configured keypair. Uses the same two-step dry-run/execute flow. Optionally pass specific stake account addresses to claim.
Inputs: wallet_address (optional in claim-enabled mode, defaults to configured keypair wallet), dry_run (default true), execution_token, stake_accounts (optional array)
<wallet_address>?"<wallet_address> for reclaimable SOL"No clone/build required if your MCP client supports package commands:
npx -y @unclaimed-sol/mcpgit clone https://github.com/unclaimed-sol/unclaimed-sol-mcp.git && cd unclaimed-sol-mcp
npm install
npm run buildAll tools are exposed (scan_claimable_sol, claim_sol, claim_rewards, claim_stakes). Transactions are signed locally with your keypair and broadcast to the Solana network.
Using npm package (recommended):
{
"mcpServers": {
"unclaimed-sol": {
"command": "npx",
"args": ["-y", "@unclaimed-sol/mcp"],
"env": {
"SOLANA_KEYPAIR_PATH": "~/.config/solana/id.json",
"SOLANA_RPC_URL": "https://your-rpc-provider.com"
}
}
}
}Using local build:
{
"mcpServers": {
"unclaimed-sol": {
"command": "node",
"args": ["/absolute/path/to/unclaimed-sol-mcp/dist/index.js"],
"env": {
"SOLANA_KEYPAIR_PATH": "~/.config/solana/id.json",
"SOLANA_RPC_URL": "https://your-rpc-provider.com"
}
}
}
}Using npm package (recommended):
claude mcp add unclaimed-sol \
-e SOLANA_KEYPAIR_PATH=~/.config/solana/id.json \
-e SOLANA_RPC_URL=https://your-rpc-provider.com \
-- npx -y @unclaimed-sol/mcpUsing local build:
claude mcp add unclaimed-sol \
-e SOLANA_KEYPAIR_PATH=~/.config/solana/id.json \
-e SOLANA_RPC_URL=https://your-rpc-provider.com \
-- node /absolute/path/to/unclaimed-sol-mcp/dist/index.jsUsing npm package (recommended):
codex mcp add unclaimed-sol \
--env SOLANA_KEYPAIR_PATH=~/.config/solana/id.json \
--env SOLANA_RPC_URL=https://your-rpc-provider.com \
-- npx -y @unclaimed-sol/mcpUsing local build:
codex mcp add unclaimed-sol \
--env SOLANA_KEYPAIR_PATH=~/.config/solana/id.json \
--env SOLANA_RPC_URL=https://your-rpc-provider.com \
-- node /absolute/path/to/unclaimed-sol-mcp/dist/index.jsOnly the scan_claimable_sol tool is exposed. No transactions are signed or sent.
Using npm package:
{
"mcpServers": {
"unclaimed-sol": {
"command": "npx",
"args": ["-y", "@unclaimed-sol/mcp"]
}
}
}Using local build:
{
"mcpServers": {
"unclaimed-sol": {
"command": "node",
"args": ["/absolute/path/to/unclaimed-sol-mcp/dist/index.js"]
}
}
}claude mcp list and confirm unclaimed-sol is present.codex mcp list and confirm unclaimed-sol is present.scan wallet <your_wallet> and confirm scan_claimable_sol executes.dist/index.js exists (npm run build) and path is absolute.SOLANA_KEYPAIR_PATH (or SOLANA_PRIVATE_KEY) is set.| Variable | Required | Description |
|---|---|---|
UNCLAIMED_SOL_API_URL | No | Backend API URL. Defaults to https://unclaimedsol.com. |
UNCLAIMED_SOL_API_KEY | No | API key sent as Authorization: Bearer header. |
SOLANA_KEYPAIR_PATH | No | Path to Solana keypair JSON file. Enables Vibe Claiming. |
SOLANA_PRIVATE_KEY | No | Private key as base58 string or JSON byte array. Use SOLANA_KEYPAIR_PATH instead when possible. |
SOLANA_RPC_URL | No | Solana RPC endpoint. Defaults to https://api.mainnet-beta.solana.com. A dedicated RPC is recommended for claiming. |
SOLANA_PRIORITY_FEE | No | Priority fee in microlamports per compute unit. Default: 1,000. Max: 200,000. |
unclaimedsol.com, localhost, or 127.0.0.1.maxClaimMode: false) to exclude valuable tokens and NFTs. Frozen accounts are skipped.claim_sol)@unclaimedsol/spl-burn-close-sdk — token balances are burned and accounts are closed via the UnclaimedSOL on-chain program.claim_rewards)claim_stakes)The pre-sign validator (validateTransactionPrograms) provides different levels of protection depending on the claim type:
/scan call, which protects against accidental drift between backend endpoints but not against a fully compromised backend.In all cases: instruction shapes are pinned exactly (every account position verified against locally-derived PDAs, exact account counts, known discriminators only).
src/
index.ts MCP server entry point (stdio transport)
constants.ts Program IDs, fee vault, fee caps, batching limits
config.ts Environment variable loading and validation
validation.ts Wallet address validation
formatter.ts SOL display formatting
cache.ts In-memory scan cache (60s TTL)
execution-token-store.ts Generic two-step dry-run/execute token management
tools/
scan.ts scan_claimable_sol tool handler
claim.ts claim_sol tool handler (tokens + buffers)
claim-rewards.ts claim_rewards tool handler (DeFi rewards)
claim-stakes.ts claim_stakes tool handler (deactivated stakes)
services/
scanner.ts Backend API client (scan, tokens, buffers, rewards, stakes)
transaction.ts Transaction building + pre-sign validation
signer.ts Batch sign, send, confirm with retryMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.