@traderouter/trade-router-mcp

A Model Context Protocol server for TradeRouter.ai — non-custodial Solana swap, limit, trailing, DCA, TWAP, and combo-order engine for AI agents.

Is this safe?

Yes, and here's exactly why. The private key is read once from TRADEROUTER_PRIVATE_KEY, used for local signing with @solana/web3.js + tweetnacl, and never transmitted, logged, or persisted. Only signed transactions leave your machine. Server messages are Ed25519-verified against a hard-coded trust anchor. See SECURITY.md for the full threat model, data-flow diagram, and permissions manifest.

Signing flow:

1. Agent calls build_swap → MCP sends wallet address (public key) to api.traderouter.ai
2. API returns an unsigned transaction
3. MCP signs the tx locally using TRADEROUTER_PRIVATE_KEY
4. The signed transaction is submitted to /protect (Jito MEV-protected bundle)
5. Server confirms and returns balance changes. The private key never crosses the network.

Requirements

• Node.js ≥ 18
• A Solana wallet private key in base58 format (use a dedicated trading wallet, not your main holdings)

Install

npx -y @traderouter/trade-router-mcp

Or wire it into an MCP client (Claude Desktop, Cursor, Cline, etc.):

{
  "mcpServers": {
    "traderouter": {
      "command": "npx",
      "args": ["-y", "@traderouter/trade-router-mcp"],
      "env": {
        "TRADEROUTER_PRIVATE_KEY": "your_base58_private_key"
      }
    }
  }
}

OS	Claude Desktop config path
macOS	~/Library/Application Support/Claude/claude_desktop_config.json
Windows	%APPDATA%\Claude\claude_desktop_config.json
Linux	~/.config/Claude/claude_desktop_config.json

Environment variables

Variable	Required	Default	Purpose
TRADEROUTER_PRIVATE_KEY	✅	—	Solana wallet private key (base58). Local use only.
SOLANA_RPC_URL	❌	https://api.mainnet-beta.solana.com	Custom RPC for reads
TRADEROUTER_SERVER_PUBKEY	❌	baked-in trust anchor	Override the server's Ed25519 trust anchor
TRADEROUTER_SERVER_PUBKEY_NEXT	❌	(unset)	Accept messages signed by this key in addition to the primary (key rotation)
TRADEROUTER_REQUIRE_SERVER_SIGNATURE	❌	true	Verify server signatures on order_filled / twap_execution
TRADEROUTER_REQUIRE_ORDER_CREATED_SIGNATURE	❌	true	Verify server signatures on order_created
TRADEROUTER_DRY_RUN	❌	false	When true, every write-action tool (submit_signed_swap, auto_swap, place_*_order, cancel_order, extend_order) returns { dry_run: true, tool, args } instead of calling the API. Read-only tools execute normally. Added in 1.0.9.

Tools

Tool	Purpose
get_wallet_address	Get the configured wallet's public address
build_swap	Build an unsigned swap transaction
submit_signed_swap	Submit a manually signed transaction
auto_swap	Build + sign + submit in one call
get_holdings	Get token holdings for a wallet
get_mcap	Market cap and price for a token
get_flex_card	Trade card PNG URL for wallet + token
place_limit_order	Limit buy/sell by price or market cap
place_trailing_order	Trailing stop buy/sell
place_twap_order	TWAP (time-weighted) buy/sell
`place_l

... View full README on GitHub