Is Clawswap Mcp safe to install?

SaferSkills independently audited Clawswap Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md4.8 KB · Markdown

@clawswap/mcp-server

Send, swap, and bridge tokens cross-chain between Solana and Base — gasless, in one tool call. Built for AI agents using the Model Context Protocol (MCP).

What can it do?

Ask your AI agent any of these:

"Send 10 USDC from Solana to Base"
"How much would it cost to bridge 100 USDC to Base?"
"Transfer my SOL to Base as ETH"
"Swap 50 USDT from Base to Solana"
"Move my stablecoins cross-chain"

The server handles the entire flow: quote → payment → signing → submission → settlement.

Installation

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "clawswap": {
      "command": "npx",
      "args": ["-y", "@clawswap/mcp-server"],
      "env": {
        "SOLANA_PRIVATE_KEY": "your-base58-solana-private-key",
        "BASE_PRIVATE_KEY": "0x-your-hex-base-private-key"
      }
    }
  }
}

Claude Code

claude mcp add clawswap -- npx -y @clawswap/mcp-server

Then set environment variables:

export SOLANA_PRIVATE_KEY="your-base58-solana-private-key"
export BASE_PRIVATE_KEY="0x-your-hex-base-private-key"

Cursor

Add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):

{
  "mcpServers": {
    "clawswap": {
      "command": "npx",
      "args": ["-y", "@clawswap/mcp-server"],
      "env": {
        "SOLANA_PRIVATE_KEY": "your-base58-solana-private-key",
        "BASE_PRIVATE_KEY": "0x-your-hex-base-private-key"
      }
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "clawswap": {
      "command": "npx",
      "args": ["-y", "@clawswap/mcp-server"],
      "env": {
        "SOLANA_PRIVATE_KEY": "your-base58-solana-private-key",
        "BASE_PRIVATE_KEY": "0x-your-hex-base-private-key"
      }
    }
  }
}

OpenAI Codex

codex mcp add clawswap -- npx -y @clawswap/mcp-server

Or add to ~/.codex/config.toml:

[mcp_servers.clawswap]
command = "npx"
args = ["-y", "@clawswap/mcp-server"]
env = { SOLANA_PRIVATE_KEY = "your-base58-solana-private-key", BASE_PRIVATE_KEY = "0x-your-hex-base-private-key" }

Antigravity

Add to ~/.gemini/antigravity/mcp_config.json:

{
  "mcpServers": {
    "clawswap": {
      "command": "npx",
      "args": ["-y", "@clawswap/mcp-server"],
      "env": {
        "SOLANA_PRIVATE_KEY": "your-base58-solana-private-key",
        "BASE_PRIVATE_KEY": "0x-your-hex-base-private-key"
      }
    }
  }
}

Smithery

npx -y @smithery/cli install @clawswap/mcp-server --client claude

Supports multiple clients: claude, cursor, windsurf, cline, vscode, and more.

Tools

`clawswap_bridge`

Bridge tokens between Solana and Base. Handles the entire flow automatically.

Parameter	Type	Required	Description
`amount`	string	yes	Human-readable amount, e.g. "100", "0.5"
`token`	string	yes	Token symbol: USDC, USDT, SOL, ETH, WETH
`from`	"solana" \	"base"	yes	Source chain
`to`	"solana" \	"base"	yes	Destination chain
`recipient`	string	no	Destination address (defaults to agent's own)
`destinationToken`	string	no	Destination token (defaults to same or USDC)
`slippage`	number	no	Slippage tolerance 0-1 (default 0.01)

`clawswap_quote`

Preview a bridge quote without executing. Free, no payment required.

Same parameters as clawswap_bridge minus recipient.

`clawswap_status`

Check the status of a previously initiated bridge.

Parameter	Type	Required	Description
`requestId`	string	yes	The requestId from `clawswap_bridge`

Environment Variables

Variable	Required	Description
`SOLANA_PRIVATE_KEY`	For Solana→Base	Base58-encoded Solana private key
`BASE_PRIVATE_KEY`	For Base→Solana	0x-prefixed hex Base/EVM private key
`SOLANA_RPC_URL`	No	Solana RPC (default: `https://api.mainnet-beta.solana.com`)
`BASE_RPC_URL`	No	Base RPC (default: `https://mainnet.base.org`)

You only need keys for the direction(s) you want to bridge. The server starts with whatever is configured.

Fees

Solana → Base: $0.50 USDC (paid automatically via x402 protocol, gas sponsored by ClawSwap)
Base → Solana: Free (agent pays ~$0.001 Base gas directly)

Supported Tokens

Solana: USDC, USDT, SOL
Base: USDC, USDT, ETH, WETH

License

MIT

Clawswap Mcp— agent skill

Is Clawswap Mcp safe to install?

@clawswap/mcp-server

What can it do?

Installation

Claude Desktop

Claude Code

Cursor

Windsurf

OpenAI Codex

Antigravity

Smithery

Tools

`clawswap_bridge`

`clawswap_quote`

`clawswap_status`

Environment Variables

Fees

Supported Tokens

License

Audit the pieces. Scan the whole. Decide.