TradeRouter MCP (Python)
mcp-name: io.github.re-bruce-wayne/trade-router-mcp

Non-custodial Solana trading API for AI agents. One integration replaces Jupiter + Helius + Jito + custom limit-order code. Your private key never leaves the local process — only signed transactions are transmitted to api.traderouter.ai.
See SECURITY.md for the full threat model and data-flow diagram.
Install
Run directly without installing (recommended):
{
"traderouter": {
"command": "uvx",
"args": ["traderouter-mcp"],
"env": {
"TRADEROUTER_PRIVATE_KEY": "<your-solana-base58-private-key>"
}
}
}
Or install into a project:
uv add traderouter-mcp
Environment variables
TRADEROUTER_PRIVATE_KEY | required for signing | Solana base58-encoded private key. Used locally for signing, never transmitted. |
TRADEROUTER_SERVER_PUBKEY | hardcoded trust anchor | Override the server public key used to verify order_filled events |
TRADEROUTER_BASE_URL | https://api.traderouter.ai | Override API base (e.g. for staging) |
Features
REST tools
swap — build an unsigned swap transaction (multi-DEX: Raydium, PumpSwap, Orca, Meteora)
protect — submit signed tx via Jito bundle, returns confirmed balance changes
holdings — most accurate wallet scan on Solana
mcap — market cap + price
flex — generate trade-card PNG
WebSocket order types
place_limit — limit order by mcap or price
place_trailing — trailing stop (percentage or absolute)
place_dca — dollar-cost averaging
place_twap — time-weighted average price
place_combo — limit + trailing + TWAP in one chain
check_order, list_orders, cancel_order, extend_order
Server monitors mcap ~every 5 seconds. When an order triggers, you receive a signed-tx-ready payload; the MCP signs it locally (using TRADEROUTER_PRIVATE_KEY) and submits to /protect automatically.
Non-custodial by construction
See SECURITY.md for the complete threat model. TL;DR:
swap tool returns unsigned transaction
- MCP signs locally with
TRADEROUTER_PRIVATE_KEY (held in local process memory)
- Signed transaction sent to
api.traderouter.ai/protect
- Server submits to Jito bundle, returns confirmed balance changes
- Private key never touches the network
Links
License
MIT. See LICENSE.
Security disclosure
Email security@traderouter.ai or open a GitHub Security Advisory. See SECURITY.md for policy.