Pre-trade safety check for Solana AI agents — cabal/coordination, honeypot and serial-launcher deployer history in one MCP call, with the transactions behind every wallet cluster. 5 free scans/month, or 250 with a free key. Then $9/mo unlimited. Card, USDC or x402.
Solana Safe Sniper — MCP Template
以下摘录自该仓库的 README(片段) · 在 GitHub 读完整 README →
> 🌐 **Available in 9 languages:** English · Español · Português · Français · Deutsch · Nederlands · 中文 · 日本語 · 한국어
> Stop your AI trading agents getting rugged by coordinated wallet cabals.
> Drop-in template for Claude Code, Cursor, and ElizaOS.
**▶ Try it now: live 3D holder map of any Solana token →** — no signup.
**Cabal-Hunter is a free on-chain Solana token safety scanner and rug checker.** It detects coordinated wallet cabals, same-block bundle buys, serial-launcher deployers and same-block coordinated selling on any Solana mint (pump.fun, PumpSwap, Raydium, Orca, Meteora) — and answers the one question that matters before you ape: *are you the exit liquidity?* Use it via **MCP** (Claude, Cursor, ElizaOS), a **REST API**, or a free **interactive 3D holder map**.
---
The Problem
Your autonomous trading agent is reading rug.check scores, liquidity locks, and contract audits.
**None of that catches a cabal.**
A handful of wallets take the bottom of a launch, the chart looks clean — contract fine, LP burned, everything green — and then they sell into whoever bought after them. You are the exit liquidity.
This template integrates **Cabal-Hunter** as a pre-trade safety check, so your agent can see who is holding and who has already positioned to sell before it signs a swap.
> **A note on what we do and don't claim.** This README used to open with "15 fresh wallets funded from the same master wallet, accumulating 25-40% of supply." We went looking for that pattern and could not find it. Tracing 323 pump.fun launches at the bonding curve turned up **zero coordinated funding clusters**, and showed why: the median launch has about **five successful buyers**, because on one representative token **1,260 of the curve's 1,266 transactions failed**. Launch capture is a sniper *race* between competing bots, not a quiet cabal. The detection layers below are the ones we can actually evidence — holder concentration, same-block bundles, coordinated selling and deployer history. The pre-launch funding tracer was withdrawn; the full write-up is here.
---
The one question it answers: are YOU the exit liquidity?
The classic pump.fun exit-liquidity setup: wallets positioned before the crowd take the bottom of a launch, then dump on the retail (and bots) that pile in after. Cabal-Hunter's headline output is a single **Exit-Liquidity Risk** verdict — risk_level, one of LOW_SIGNAL | ELEVATED | HIGH that synthesises every signal below into the only thing that matters before you sign a swap: *are the insiders positioned to dump on you?*
What Cabal-Hunter Does
The deployer layer is the one cabals can't dodge: **wallets rotate, deployers leave a paper trail.** A response of "deployer": {"reputation": "SERIAL_RUGGER", "tokens_launched": 22, "best_peak_usd": 728432, "pump_and_dumps": 2} shows the dev's full track record before the first candle — including whether this "dead" dev has quietly run tokens to six figures and dumped them on holders before. (Honest context: most prolific pump.fun creators have high dead-token rates, so this signal is capped — it flags a token for review but never drives a HIGH verdict on its own.)
**FIRST_LAUNCH and UNKNOWN are not the same answer.** deployer.verdict of
FIRST_LAUNCH means we walked this creator's history and found no earlier tokens.
UNKNOWN means the history could not be established at all — that is an absence of
evidence, not a clean record, and an agent must not treat it as one. Where a deployer
cannot be resolved the scan says so in words rather than returning a confident silence.
**Receipts, not magic.** Every wallet cluster carries evidence_txs[] — the raw signatures behind that cluster, checkable on Solscan, and holders carry funding_tx where we resolved one. Holder concentration, deployer history and the honeypot checks are read from chain state, so they carry no transaction of their own: a token can come back HIGH with no clusters at all. Verify what is there rather than trusting a score.