
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@rigel-protocol/solana-mcp
Advanced tools
Open-source MCP server that gives AI agents read-only eyes on Solana: wallet balances, pump.fun token data, and rug-risk checks.
Give your AI agent eyes on Solana. Rigel is an open-source MCP server that connects Claude Desktop, Claude Code, Cursor, and any stdio MCP client to the Solana blockchain and the pump.fun ecosystem.
Read-only by design. No private keys, no signing, no custody — the only configuration is which RPC to read from.
| Tool | Input | Returns |
|---|---|---|
rigel_get_wallet_balance | walletAddress | SOL balance + major SPL token holdings |
rigel_inspect_token_data | tokenAddress | Metadata, supply, bonding-curve SOL, curve completion % |
rigel_analyze_rug_risk | tokenAddress | Mint/freeze authority status, top-holder concentration, risk rating |
rigel_check_first_buyers | tokenAddress | Bundle detection: fresh-wallet holders, shared funding wallets, supply concentration |
rigel_deployer_history | tokenAddress | Deployer rap sheet: who launched it, wallet age, activity, remaining bag |
rigel_market_snapshot | tokenAddress | Live price, market cap, liquidity, volume, buys/sells flow, momentum read |
rigel_full_audit | tokenAddress | The whole battery in one call, with a combined verdict and top reasons |
Paste into claude_desktop_config.json and restart Claude:
{
"mcpServers": {
"rigel-solana": {
"command": "npx",
"args": ["-y", "@rigel-protocol/solana-mcp"],
"env": { "SOLANA_RPC_URL": "https://api.mainnet-beta.solana.com" }
}
}
}
Then ask your agent things like:
FC5i…"7xKq…"npm install
npm run build
node dist/index.js # speaks MCP over stdio
| Env var | Default | Purpose |
|---|---|---|
SOLANA_RPC_URL | https://api.mainnet-beta.solana.com | Any Solana RPC — public, Helius, Triton, or your own node |
The public mainnet RPC rate-limits aggressively; a free Helius key is recommended for heavy use.
Rigel reports on-chain facts. The rug-risk rating is a heuristic over public data (authority status, holder concentration) — it cannot detect every risk, and nothing it outputs is financial advice.
MIT
FAQs
Open-source MCP server that gives AI agents read-only eyes on Solana: wallet balances, pump.fun token data, and rug-risk checks.
We found that @rigel-protocol/solana-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.