MCP.Market

BagOS MCP server

by edycutjong·io.github.edycutjong/bagos·v3.0.7·1 stars
No reviews yet

MCP server for Bags on Solana: token analytics, trade quotes, and gated write operations.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

1 stars206 downloads/wk

Reviews

Write one

Nobody has reviewed BagOS yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

BagOS tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan60 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How BagOS compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
206
more than 76% of 12,191 servers with a package

Release history: 6 versions in the registry since 2026-08-16, latest 2026-09-26, typically several a day.

Install BagOS in Claude Code, Cursor or VS Code

Runs npx -y bagos-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add bagos -- npx -y bagos-mcp-server
Add to Cursor

What the publisher says

From the BagOS repository's README, as published. We do not edit it. Read it on GitHub

BagOS 🚦 An MCP server that lets an AI assistant trade on Solana — and signs nothing until you say so.

🚀 Install

npx bagos-mcp-server

Claude Desktop — ~/Library/Application Support/Claude/claudedesktopconfig.json (macOS) or %APPDATA%\Claude\claudedesktopconfig.json (Windows):

{
  "mcpServers": {
    "bagos": {
      "command": "npx",
      "args": ["-y", "bagos-mcp-server"],
      "env": {
        "BAGS_API_KEY": "your-key-here"
      }
    }
  }
}

Claude Code:

claude mcp add bagos --env BAGS_API_KEY=your-key-here -- npx -y bagos-mcp-server

Restart the client, then ask it: "show me the top Bags creators". The server prints a configuration report to stderr on startup; if something is missing it tells you which variable and why.

An API key alone gives you 8 of the 11 read tools. Three of them — bagsheartbeat, bagsgetclaimablefees and bagsauthenticate — report on your wallet, so they also need BAGSKEYPAIR_PATH and will error without it. Writes stay off until you configure them (Getting Started).

🔒 Why this is safe to hand an assistant

single-use token fingerprinted to those exact arguments; nothing reaches the chain until you call again with it.

  • Nothing signs on the first call. A write tool answers with a preview and a

the Bags SDK is called.

  • Hard SOL caps. 0.1 per transaction and 1 per session by default, refused before

spend real money.

  • Devnet by default. Writes are mainnet-only, so an unconfigured install cannot

Full threat model, disclosure policy and the limits of each control: .github/SECURITY.md.

⚠️ If you used 1.x — v2.0.0 corrected a serious defect

v2.0.0 corrects a serious defect. In 1.x the write tools built

transactions, discarded them, and reported success — nothing was ever signed

or submitted. If you used 1.x and believed a trade or claim executed, it did

not. See CHANGELOG.md.

2.x is live on npm and is what npx bagos-mcp-server installs — see the

latest release. Every release ships with

npm provenance —

the tarball is cryptographically attested to this repository and the commit that built it.

1.x is deprecated on npm. If you are still on it, upgrade.

📦 Where it's listed

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

BagOS: common questions

Is BagOS MCP server safe?
Mostly: it is graded B (83/100). Read the BagOS safety report
How do I install BagOS?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does BagOS need an API key?
Yes. The registry entry asks for BAGS_API_KEY, SOLANA_RPC_URL.
Is BagOS maintained?
The last commit was in the last day (2026-11-03). The latest release is v3.0.7.
How does BagOS compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 206 (more than 76% of 12,191 servers with a package). Full comparison.