$MCP: the first memecoin inside your AI

An NFT market that lives inside Claude and ChatGPT. You add one connector, sign in with X, and then just talk: "mint me an MCP", "what's on the market under 10?", "buy #0042", "list my Scarf for 9", "top up my balance"

The website only shows the collection, prices and owners. Every action happens in your AI chat.

This repository is the whole server, so you can read exactly what the connector does before you plug it in.

Status: public test. Sign in with X. Balances are in $MCP (1 $MCP = $1): free test $MCP from the faucet, or free devnet USDC deposited on Solana devnet. Nothing here is real money yet.

Connect

➕ Add to Claude opens Claude with the connector filled in: check the URL, press Continue → Add → Connect, sign in. Works on every Claude plan (the free plan allows one custom connector).

Connector URL: https://mcp-market.netlify.app/mcp

• Claude, by hand: Customize → Connectors → Add custom connector → paste the URL → Connect → sign in.

• ChatGPT: Settings → Apps & Connectors → add a connector with the same URL → sign in.

Then ask for faucet to get test $MCP, or "top up" to get your deposit address, and start trading.

Related MCP server: Crypto Trading Agent MCP Server

What the connector can and can't do

These are all the tools the server exposes (server/src/mcp.js):

Withdrawals happen in a form, not by the AI. The AI only opens the form (MCP Apps, an interactive card inside Claude and ChatGPT). In it you paste your Solana wallet address and bind it once, enter the amount and press Withdraw, then Confirm: it arrives as USDC (1:1), the 0.5 $MCP fee is charged on top.

• The form's buttons are tools of their own (withdraw_form_state, withdraw_form_bind, withdraw_form_submit) marked visibility: ["app"]: apps that follow the MCP Apps spec keep them out of the AI's tool list, so the AI can't withdraw or bind an address, even if a web page or file tries to talk it into it.

• For apps that ignore that, the buttons also need the form's pass: a short-lived signed token that comes with the form in the tool result's _meta, which is for the form and not for the AI's context. The AI can't pre-fill an address either.

• Apps that can't show forms can't withdraw; use Claude (web, desktop, mobile) or ChatGPT.

It can't:

• see your chats, files, other connectors or anything outside this market;

• post on X, read your DMs or follow anyone: the X login asks only for users.read tweet.read, to learn your handle and avatar;

• send money at all: withdrawals need your click in the withdrawal form, and go only to the one address you bound there yourself. Changing it needs support.

What the server stores: your X id, handle, name and avatar; your balance, NFTs and a ledger of every balance change. OAuth codes and tokens are kept only as sha256 hashes. See SECURITY.md for the full list of protections.

How it works

Claude / ChatGPT ──MCP over HTTPS──▶ /mcp ─┐
Your browser ──sign in──▶ /authorize, /login ─┤  one serverless function (Express)  ──▶  Postgres (Supabase)
Preview site ──▶ /api/* ───────────────────────┘
NFT images, site ──▶ CDN (static)

• No blockchain for NFTs. They are images on this server plus an owner row in the database. The chain is only the way in and out: deposit USDC or USDT on Solana, withdraw USDC back.

• Balances are in $MCP, and 1 $MCP = $1. You top up with USDC or USDT (1 token = 1 $MCP) and withdraw USDC. Amounts are stored as integer micro-units (6 decimals, exactly like USDC/USDT), so deposits are credited to the last unit.

• Every balance change writes a ledger row in the same database transaction, so balances always add up. The tests check this.

• Market fee: 2.5% of each sale goes to the treasury.

Deposits

Every account gets its own Solana deposit address. Send USDC or USDT there from any wallet or exchange; no memo, no extra step. 1 USDC = 1 USDT = 1 $MCP on your balance.

owner's computer, offline:  seed phrase (on paper) ──npm run deposit-pool──▶ 10,000 public addresses (CSV)
                                                                                    │ import
user's wallet / exchange ──USDC/USDT──▶ their address from the pool ◀── deposit_pool table
                                              │
     Helius webhook ──▶ /hooks/helius ────────┤   each one fetches the transaction from the chain itself,
     "check my deposit" ──▶ deposit tool ─────┤   checks mint, owner and amount, and credits it once
     every 5 min ──▶ scheduled function ──────┘

• The server can't move deposits. Addresses are made in advance on the owner's computer from a seed phrase that stays on paper (server/scripts/deposit-pool.js). The server only gets public addresses, hands one to each user and watches them. There is no key on the server to sign a transfer with, so even a full takeover of the server and the database can't take deposited funds. Wallet n is m/44'/501'/n'/0', the path Phantom and Solflare use, so the phrase alone recovers everything.

• Addresses can't be swapped. Every address in the pool is signed (HMAC) with DEPOSIT_POOL_KEY, which the script derives from the phrase. The server shows and credits only addresses whose signature checks out, so someone who can write to the database can't slip in an address of their own.

• What gets credited. Only the real USDC and USDT mints, only into the token account of the user's own pool address, only successful transactions, only the amount the chain shows. The webhook payload is never trusted: it only says which transaction to look at. Each (transaction, token account) pair is credited at most once, enforced by a unique key. Amounts below 0.01 (spam "dust") are recorded and not credited.

• Not lost if something fails. Helius retries a webhook only three times, so the deposit tool checks on demand and a scheduled function (every 5 minutes, netlify/functions/deposits.mjs) scans everyone who asked for an address in the last 2 hours, plus a rotating slice of everyone else.

• Test server = devnet. With TEST_MODE=1 deposits are Solana devnet only (free USDC at faucet.circle.com); the real server takes mainnet only. Mixing free test money with real money is refused at startup. Use different phrases for the two.

• The webhook sets itself up. The scheduled function creates one Helius webhook pointing at /hooks/helius and keeps its address list in sync.

Making the address pool

On your own computer, with the repo cloned and npm install done (Wi-Fi can be off):

npm run deposit-pool -- --network mainnet          # new 24-word phrase, addresses #0..#9999
npm run deposit-pool -- --network mainnet --start 10000   # later: the next 10,000, same phrase

1. Write the 24 words on paper. They never go into a chat, a website, Netlify or the cloud.

2. Put the printed DEPOSIT_POOL_KEY into Netlify (it can't move money; it only signs the list).

3. Supabase → Table Editor → deposit_pool → Insert → Import data from CSV → the file the script wrote.

The scheduled function reports how many free addresses are left and warns when the pool runs low.

Code: server/src/deposits.js, server/src/solana.js.

Withdrawals

"Bind my withdrawal address 7xKX…" once, then "withdraw 50": 50 USDC arrive at that address, usually within a minute, and the chat shows the transaction. The fee is 0.5 $MCP on top; the minimum is 5 $MCP.

deposit addresses (offline phrase) ──npm run sweep, on the owner's computer──▶ hot wallet ──USDC──▶ user's bound address
                                                                                  ▲ the only key on the server

• Two wallets. Deposits stay in the pool addresses, which only the paper phrase controls. Payouts come from a separate hot wallet whose key is in WITHDRAW_WALLET_KEY, holding a small float (say 500 USDC and 0.1 SOL for fees). A full server takeover can take at most what is on the hot wallet. The owner tops it up with npm run sweep (server/scripts/sweep.js), which moves deposits to any address and pays network fees from a "fees wallet" made from the same phrase.

• Limits. Paid automatically up to 100 $MCP per withdrawal, 300 per user per day and 1,000 per day in total. Anything above waits for the owner (status = 'review'). On top of that, a hard cap (2,000 a day by default) holds for everything, approved or not.

• Never twice. Every signed transaction is stored (withdrawal_attempts) before it is broadcast and can't be changed or deleted afterwards. A new one is made only when every earlier one is dead: the finalized block height is past its last valid height plus a margin, and a status lookup from a node at least that current shows it never landed. Until then the same bytes are rebroadcast, and those can land only once. Any error from the network counts as "maybe received", and every decision is re-checked under a row lock. Only signatures the server stored itself are trusted; the memo mcp:w:<network>:<id> on each payout is just for people reading the chain.

• Safe to edit by hand. In the table editor, sent and refunded are final, and amount, fee, address and user of a withdrawal can't be changed (database triggers).

• Signed rows. Withdrawal rows and address bindings are signed (HMAC, key derived from DEPOSIT_POOL_KEY), and a withdrawal needs the user's balance to match their ledger. A row created or changed straight in the database is not paid, and replacing the hot wallet invalidates nothing. Someone with full control of the database could still inflate the balance of an account of their own and withdraw it; the hard daily cap and the hot wallet float limit that.

• Address safety. The bound address can't be changed by the user, can't be a token account (funds sent "to" one would be lost) or one of the market's own addresses, and on the real server the first withdrawal opens 24 hours after binding.

• If the hot wallet runs low, withdrawals wait in the queue and the scheduled run logs an alert; nothing is lost.

For the owner, in Supabase → Table Editor → withdrawals:

• approve a withdrawal waiting for review: set status to pending (it goes out within 5 minutes);

• refuse it: set status to rejected; within 5 minutes (or once a transaction already sent for it can no longer land) amount and fee go back to the user and the status becomes refunded;

• a payout that gave up after 5 tries shows status = 'review' with the reason in error; to try again set status to pending and attempts to 0;

• replace the hot wallet: put the new key in WITHDRAW_WALLET_KEY and redeploy; queued withdrawals are paid from the new one;

• emergency stop: set WITHDRAWALS_PAUSED=1 in Netlify and redeploy.

npm run sweep -- --network mainnet --to <hot wallet or your own wallet>          # look: what is where
npm run sweep -- --network mainnet --to <hot wallet or your own wallet> --send   # move it

The destination can't be one of the pool's own addresses (Phantom's "Account 1, 2…" of the deposit phrase) or the fees wallet; the script refuses them.

Code: server/src/withdrawals.js, server/src/tx.js (Solana transactions without an SDK, checked against @solana/web3.js).

server/src/
  app.js      HTTP routes: /mcp, OAuth, public API, Helius webhook, manual credit
  mcp.js      the tools listed above
  market.js   rules: balances, mint, listings, buys
  withdrawals.js payouts: limits, hot wallet, never-twice sending, refunds
  tx.js       Solana transaction building and signing
  money.js    $MCP amounts <-> micro-units
  deposits.js USDC/USDT deposits: address assignment, chain checks, webhook, scheduled scan
  pool.js     the offline-made deposit address pool and its HMAC
  solana.js   address derivation, token accounts, Solana RPC, Helius webhook API
  auth.js     OAuth for the connector + X sign-in
  schema.js   database tables and one-time data migrations
  lambda.js   serverless entry (Netlify Functions)
  cron.js     scheduled entry (deposit scan every 5 minutes)
  index.js    plain Node entry (npm start)
site/         the preview website
collection/   NFT images and traits
netlify/      Netlify function wrapper

Run it locally

Node 22+.

npm install
cp .env.example .env      # test mode, embedded database, no setup needed
npm run demo              # optional: 8 fake traders so the site has something to show
npm start                 # http://localhost:3000, connector at http://localhost:3000/mcp (also runs the 5-minute deposit/payout job)
npm test                  # end-to-end tests: real OAuth, real MCP client, two users trading

Deploy your own

1. Database: create a Supabase project. Copy Connect → Transaction pooler URI (port 6543). Tables are created on first start.

2. Netlify: import this repo. Build settings come from netlify.toml. Set the environment variables:

Deposits start working once HELIUS_API_KEY and DEPOSIT_POOL_KEY are set (and deployed) and the pool CSV is imported; the scheduled function registers the Helius webhook within 5 minutes of the first address handed out.

3. Smoke-test it: npm run smoke -- https://<your-site>.netlify.app

Roadmap

• Market, mint, OAuth connector, preview site, test server

• Real X sign-in on the public server

• Balances in $MCP, 1 $MCP = $1

• Deposits: USDC/USDT on Solana to personal addresses, Helius webhook + scheduled scan

• Withdrawals: hot wallet with limits, review queue, sweep script for the owner

• Final collection

Honest risks

• Custodial. Deposited tokens sit in addresses the project controls through one offline seed phrase, and the database is the source of truth for balances. Whoever holds the paper holds the funds.

• Whoever controls the deployed code (Netlify or GitHub accounts) could show users a different deposit address for new deposits. Those accounts need two-factor sign-in.

• NFTs live on this server. They exist as long as the server does.

• Bots. A server can't prove a request came from a human in Claude. Defenses: X sign-in, minimum account age, per-account mint limits.

License

MIT