# stillos-swap-mcp

Non-custodial Solana swap routing for agents. Best-price execution via Jupiter, a flat **0.25% router fee** (cheaper than Trojan/Photon/GMGN at 0.5–1%), and a **free on-chain scam-check** on every token you buy.

**You keep custody.** The tool returns an *unsigned* transaction — you sign it with your own key and broadcast. StillOS never touches your funds.

## MCP

```json
{
  "mcpServers": {
    "stillos-swap": { "command": "npx", "args": ["-y", "stillos-swap-mcp", "mcp"] }
  }
}
```

### Tools
- **`build_solana_swap`** — `{ userPublicKey, inputMint, outputMint, amount }` → `{ swapTransaction (base64, unsigned), expectedOut, route, routerFee, safety }`. Sign and send the transaction yourself. When buying a non-stablecoin, `safety` carries an on-chain verdict (`CLEAN` / `TRAP`) based on live mint & freeze authority.
- **`token_scam_check`** — `{ mint }` → `{ verdict (CLEAN/RISK/UNKNOWN), mintAuthority, freezeAuthority, flags }`. Established issuer tokens (USDC/USDT/SOL) are allowlisted. Read-only, no keys.

## CLI

```
npx stillos-swap-mcp check <mint>
npx stillos-swap-mcp swap <yourPubkey> SOL USDC 0.5
```

## Why the scam-check matters
A live **mint authority** means the dev can print unlimited supply and dilute you to zero. A live **freeze authority** means the dev can freeze your tokens so you can never sell. Both are the most common rug vectors on pump.fun. This checks them before you buy — free.

`SOLANA_RPC` env var overrides the default public RPC for the safety check.

MIT · StillOS / NolaWealth