
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
47620-solana-mcp
Advanced tools
MCP server for the 47620 Data API — pay-per-call x402 tools for AI agents: multichain onchain data (Solana/Base/Polygon), live crypto market data (price, OHLCV, RSI/EMA/SMA, funding, order book), CPU utilities (decode JWT, convert units, QR, unix timestam
Give any MCP-capable AI agent (Claude, Cursor, Windsurf, OpenClaw, …) native access to 47620 pay-per-call data settled over x402 (HTTP 402) in USDC — non-custodial, no signup, no API key. 26 tools across four lines:
Multichain. One endpoint serves Solana, Base and Polygon. Onchain tools take an explicit
chain param (solana | base | polygon). The chain you pay on is independent of the chain
you query — pay USDC on any of the three.
Remote (streamable HTTP):
https://47620.xyz/mcp/multichain(also/mcp). Legacysolana_*tool names keep working as aliases.
| Tool | chain | What it returns | Price |
|---|---|---|---|
health | solana · base · polygon | Network health: block/slot, gas, native token price | $0.001 |
balance | solana · base · polygon | Native + stablecoin balances for an address | $0.002 |
token | solana · base · polygon | Price, liquidity, 24h volume + DEX pairs | $0.002 |
tx | solana · base · polygon | Status + transfer summary (signature or 0x hash) | $0.003 |
gas | base · polygon | Current gas price + transfer cost | $0.001 |
contract | base · polygon | Is an address a contract? Bytecode size + ERC-20 metadata | $0.002 |
trending | solana · base · polygon | Trending DEX pairs by 24h volume | $0.005 |
trust_check | solana · base · polygon | Pre-payment payee verdict: safe | review | avoid, from re-verifiable on-chain facts | $0.02 |
| Tool | What it returns | Price |
|---|---|---|
solana_snapshot | Bundle: cluster health + slot + epoch + SOL/USD + top trending pairs, in ONE call | $0.01 |
solana_risk_check | Pre-payment risk check: account type, balance, activity, 0-100 risk score + verdict | $0.01 |
solana_token_report | Bundle: price + liquidity + volume + DEX pairs + on-chain supply + mint authority | $0.01 |
| Tool | What it returns | Price |
|---|---|---|
crypto_price | Live spot USD price (+24h change/high/low/volume) for btc, eth, sol, bnb, xrp, ada, doge, avax, link, matic, arb, op | $0.002 |
crypto_ohlcv | OHLCV candle history (interval 1m–1d, limit ≤500) — raw input for a trading agent | $0.003 |
crypto_indicators | RSI(14)+signal, EMA(20/50), SMA(20/50/200) — the exact "rsi ema" analysis agents ask for | $0.004 |
crypto_derivatives | Perp funding rate, mark vs index, next funding, open interest | $0.005 |
crypto_orderbook | Top-of-book: best bid/ask, mid, spread (bps), depth, book imbalance | $0.005 |
crypto_deep | One-call decision pack: spot + last candle + indicators + funding/OI + book | $0.02 |
| Tool | What it returns | Price |
|---|---|---|
jwt_decode | Decode a JWT → header/payload/claims (sub/iss/aud/exp+expired/iat/nbf, alg, kid). Signature NOT verified | $0.002 |
unit_convert | Length/mass/area/temperature — incl. Russian verst/sazhen/pood/funt | $0.001 |
qr_generate | QR code as inline SVG + base64 data URI (pure CPU) | $0.002 |
unix_timestamp | Unix ↔ ISO-8601, auto-detects s/ms, formats in a target timezone | $0.001 |
sha256_fingerprint | SHA-256: hex, colon-hex, short 16-char id, base64 | $0.001 |
| Tool | What it returns | Price |
|---|---|---|
x402_ecosystem_stats | Live, sourced x402 adoption: indexed services, networks, assets, categories, USD price points (min/median/mean/max). Every figure carries its source URL + fetchedAt; nothing fabricated | $0.01 |
x402_ecosystem_networks | Network/asset histogram of the live x402 ecosystem | $0.005 |
mcp_trust_check | Before connecting: an MCP server's reachability, handshake, HTTPS, tools, risky capabilities and prompt-injection exposure → safe | review | avoid | $0.02 |
npx -y 47620-solana-mcp
{
"mcpServers": {
"47620-data": {
"command": "npx",
"args": ["-y", "47620-solana-mcp"],
"env": {
"X402_BASE_URL": "https://47620.xyz",
"X402_WALLET_KEY": "<base58 Solana secret key>"
}
}
}
}
X402_WALLET_KEY — base58 secret key of a wallet that holds a little USDC + gas.
The server signs the payment and retries automatically. Fully autonomous (best for agents).X402_PAY_URL — an HTTP payment broker: POST { url, challenge } → { header }. For hosted /
MPC wallets where the key never touches the process.402 challenge plus a ready-to-run
npx awal x402 pay "<url>" command, so the agent (or its x402-aware runtime) pays.Each call is a standard x402 paid request. Funds go directly to the seller's wallet (non-custodial).
| Var | Default | Notes |
|---|---|---|
X402_BASE_URL | https://47620.xyz | API base |
X402_WALLET_KEY | — | base58 secret key (payment mode 1) |
X402_PAY_URL | — | payment broker (payment mode 2) |
X402_RPC_URL | mainnet-beta | RPC for settlement |
// agent prompt
"Use trending with chain=base to get the top Base DEX pairs right now."
npx -y 47620-solana-mcpGET https://47620.xyz/x/solana/trending → 402 (pay & retry)https://47620.xyz/mcpnpx skills add 47620-xyz/solana-data-skillsMIT
FAQs
MCP server for the 47620 Data API — pay-per-call x402 tools for AI agents: multichain onchain data (Solana/Base/Polygon), live crypto market data (price, OHLCV, RSI/EMA/SMA, funding, order book), CPU utilities (decode JWT, convert units, QR, unix timestam
The npm package 47620-solana-mcp receives a total of 0 weekly downloads. As such, 47620-solana-mcp popularity was classified as not popular.
We found that 47620-solana-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.