
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@three-ws/pumpfun-mcp
Advanced tools
Free, read-only pump.fun + Solana MCP server — token discovery, on-chain bonding-curve & holder analysis, creator fee-claim tracking, SNS resolution, KOL signals, and swap quotes. No API keys.
Free, read-only pump.fun + Solana MCP server — token discovery, on-chain analysis, and live 3D snapshots. No API keys.
Install · Quick start · Tools · Configuration · three.ws
A free, read-only Model Context Protocol server for pump.fun and Solana. It gives Claude — or any MCP client — live token discovery, on-chain bonding-curve and holder analysis, creator fee-claim tracking, Solana Name Service resolution, KOL signals, read-only swap quotes, and shareable live 3D token snapshots. Every Solana RPC and pump.fun API call runs server-side on the canonical three.ws backend, so the data is live and on-chain while the client stays zero-config: no API keys, no RPC URL, no wallet.
claude mcp add pumpfun -- npx -y @three-ws/pumpfun-mcp
Add to your MCP config (claude_desktop_config.json, .cursor/mcp.json, .mcp.json, etc.):
{
"mcpServers": {
"pumpfun": {
"command": "npx",
"args": ["-y", "@three-ws/pumpfun-mcp"]
}
}
}
Restart the client and the pump.fun tools appear. No install step required.
npx -y @three-ws/pumpfun-mcp
# or install globally and run the bin
npm i -g @three-ws/pumpfun-mcp && pumpfun-mcp
The server speaks stdio JSON-RPC — your MCP client spawns it via the npx command above. Once configured, ask your client natural-language questions and it picks the right tool:
"What's trending on pump.fun right now?" → get_trending_tokens
"Show the bonding curve for <mint>" → get_bonding_curve
"Who are the top holders of <mint>?" → get_token_holders
"Resolve bonfida.sol" → sns_resolve
"Build a 3D snapshot for <mint>" → pumpfun_token_3d
All tools are read-only — nothing signs or sends a transaction. pumpfun_quote_swap only quotes; pumpfun_vanity_mint returns a keypair for you to use yourself.
Six tools are indexer-gated. search_tokens, get_trending_tokens, get_new_tokens, get_graduated_tokens, get_king_of_the_hill, and get_creator_profile need a pump.fun indexer (PUMPFUN_BOT_URL). The hosted endpoint at three.ws/api/pump-fun-mcp has none configured, so it filters those six out of tools/list and they will not appear when you connect to it; set the env var on your own deployment and they return with no code change. Everything else, including get_token_trades, works off on-chain data with no indexer. Call pumpfun_bot_status to see which side you are on. Note that without the indexer get_token_details returns SPL account facts only (name, symbol, and uri come back null).
The hosted endpoint also serves three tools the table below does not list: get_coin_intel, get_oracle_conviction, and pumpfun_upload_metadata.
| Tool | What it does |
|---|---|
search_tokens | Search pump.fun tokens by name, symbol, or mint. |
get_token_details | Full metadata for a mint. |
get_bonding_curve | Real/virtual reserves + graduation progress (on-chain). |
get_token_trades | Recent buy/sell history for a token. |
get_trending_tokens | Top tokens by market cap. |
get_new_tokens | Most recently launched tokens. |
get_graduated_tokens | Tokens that graduated to the Raydium AMM. |
get_king_of_the_hill | Highest-cap token still on the bonding curve. |
get_token_holders | Top holders with concentration analysis (on-chain). |
get_creator_profile | A creator's tokens with rug-pull risk flags. |
kol_leaderboard | Top KOL traders ranked by P&L for a 24h/7d/30d window. |
pumpfun_list_claims | Recent creator fee-claim events (on-chain). |
pumpfun_watch_claims | Fee claims for a creator within a look-back window. |
pumpfun_first_claims | First-ever creator claims — a cash-out signal. |
pumpfun_quote_swap | Read-only pump.fun AMM swap quote (no signing). |
pumpfun_watch_whales | Collect large trades on a token over a short window. |
pumpfun_vanity_mint | Grind a vanity Solana keypair (secret returned to caller, never stored). |
sns_resolve | Resolve a .sol domain to its owner wallet. |
sns_reverseLookup | Reverse-lookup a wallet to its primary .sol domain. |
social_cashtag_sentiment | Deterministic lexicon sentiment over supplied posts. |
social_x_post_impact | Correlate an X post to bonding-curve price impact. |
pumpfun_bot_status | Configuration + health of the pump.fun indexer backend — configured, healthy, and ping latency. Always available. |
pumpfun_token_3d | Live 3D snapshot of a token — composes metadata, holders, and graduation into a shareable three.ws/coin3d viewer (spinning coin medallion + holder galaxy + graduation ring) and returns the deep-link, an embeddable iframe, and the underlying data. |
The live tool list is fetched from the backend at startup; a bundled copy ships as an offline fallback so a fresh install always advertises a correct surface.
npx -y @modelcontextprotocol/inspector npx @three-ws/pumpfun-mcp
Runnable examples live in examples/:
node examples/list-tools.mjs # every tool the backend currently serves, with schemas
node examples/token-report.mjs # live on-chain report for one mint
Both spawn this server over stdio and read live Solana mainnet data. Every tool
here is free and read-only. See examples/README.md for
expected output, including why the advertised tool count depends on whether the
backend has an indexer configured.
No configuration is required. One optional override exists:
| Env var | Default | Purpose |
|---|---|---|
PUMPFUN_MCP_URL | https://three.ws/api/pump-fun-mcp | Backend endpoint. Override only to self-host the handler. |
This package is a small stdio ↔ HTTP bridge. It forwards MCP tools/call requests to the canonical three.ws pump.fun JSON-RPC backend, which performs the actual Solana RPC reads and pump.fun API queries. That keeps one authoritative implementation, ships no secrets to clients, and means the tool surface stays current automatically.
pumpfun_token_3d is a native tool: it runs in-process, orchestrating several backend reads (metadata + bonding curve + holders) and resolving the token logo from its on-chain metadata URI, then returns a deep-link into the three.ws 3D viewer. It needs no extra keys and adds no new backend dependency.
Failures surface as MCP tool errors (isError: true) with the real cause — never a silent empty result:
| Error text | Meaning | Recovery |
|---|---|---|
Backend request failed: … | The bridge could not reach the backend (network, non-2xx, bad JSON). | Check connectivity / PUMPFUN_MCP_URL; safe to retry. |
[-32602] … | Invalid argument (e.g. pumpfun_token_3d without a mint). | Fix the argument named in the message. |
[-32004] no on-chain data for <mint>: … | pumpfun_token_3d found no metadata, curve, or holder data for the mint. | Verify the mint address and network (mainnet/devnet). |
[<code>] <message> | Any other backend JSON-RPC error (unknown tool, indexer unavailable, on-chain read failure), passed through verbatim. | The message states the upstream cause; transient indexer errors are safe to retry. |
pumpfun_token_3d degrades gracefully: if only some of its three source reads succeed it still returns a snapshot, marking the missing parts (no holder data available, no bonding-curve data available) — it errors only when all three fail.
engines).PUMPFUN_MCP_URL).@three-ws/mcp-server — the paid, x402-settled three.ws MCP (text→3D mesh, avatars, pose seeds, ERC-8004 reputation, and a paid pump_snapshot).
Part of the three.ws SDK suite — 3D AI agents, on-chain identity, and agent payments.
Website · Changelog · GitHub
FAQs
Free, read-only pump.fun + Solana MCP server — token discovery, on-chain bonding-curve & holder analysis, creator fee-claim tracking, SNS resolution, KOL signals, and swap quotes. No API keys.
We found that @three-ws/pumpfun-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.