MCP Server

Every tool in @solrouter/mcp-server 1.2.0 for Claude Code, Cursor, and Claude Desktop, and exactly what each one sends in plaintext.

Version 1.2.0 is on npm. Sealed chat and research tools are Live. Umbra swap execution tools are Soon. Read the status word beside each tool.

You already work inside Claude Code, Cursor, or Claude Desktop. The Solrouter MCP server (@solrouter/mcp-server, 1.2.0) lets you run sealed private chat, research tools, and Agent Privacy API tools right there.

MCP (Model Context Protocol, an open standard for connecting AI clients to tools) is the bridge. The server runs on your machine through npx. It holds your API key and seals prompts for encrypted_chat and for the model step of the research tools. Other calls leave your machine in plaintext. The tables below say which.

Configuration

Step-by-step setup for each client, with fixes for common failures:

Claude Code: one claude mcp add command, shown below
Cursor: the block below in ~/.cursor/mcp.json
Claude Desktop: the block below in claude_desktop_config.json

claude mcp add solrouter -e SOLROUTER_API_KEY=sk_solrouter_... -- npx -y @solrouter/mcp-server

{
  "mcpServers": {
    "solrouter": {
      "command": "npx",
      "args": ["-y", "@solrouter/mcp-server"],
      "env": { "SOLROUTER_API_KEY": "sk_solrouter_..." }
    }
  }
}

Variable	Required	Purpose
`SOLROUTER_API_KEY`	For Solrouter tools	Your `sk_solrouter_` key. Since 1.2.0 the server starts without it; tools that need it return an error.
`BRAVE_API_KEY`	For `private_research` and `private_token_analysis`	Brave Search key. Those two tools fail without it.
`HELIUS_RPC_URL`	No	Solana RPC for wallet lookups. Default `https://api.mainnet-beta.solana.com`.
`SOLROUTER_API_URL`	No	API base. Defaults to the production backend.

Restart the client after saving. The Solrouter tools appear in its tool list.

What a call costs

encrypted_chat and the model step of each research tool make one call to POST /tee/process with your API key. Each one draws one call from your plan. When the plan is used up, or you have none, it costs $0.02 from your USDC balance. With neither, the tool returns 402 insufficient_funds. The web chat's free messages do not apply to API key calls. A call that fails in the enclave is not charged. account_balance shows your USDC credit. See Pricing.

Privacy and research tools

Use these tools for encrypted AI inference or on-chain research from inside your client. Only the AI step is encrypted. The data-gathering steps call third parties directly from your machine in plaintext.

Tool	Description	Leaves your machine in plaintext
`encrypted_chat` (Live)	Sealed AI query through `/tee/process`. Optional `model`, default `gpt-oss-20b`	Nothing. The prompt is sealed on your machine
`private_research` (Live)	Web search, DEX data, and on-chain lookups, then an encrypted AI synthesis	Query to Brave; token symbols to DexScreener; wallet addresses to the Solana RPC
`private_token_analysis` (Live)	DEX data, price, and web results for one token, then an encrypted AI synthesis	The token to DexScreener, CoinGecko, and Brave
`private_wallet_audit` (Live)	Holdings of one wallet, then an encrypted AI synthesis	The wallet address to the Solana RPC and DexScreener
`list_models` (Live)	Models from `GET /api/v1/models`	Nothing sensitive
`account_balance` (Live)	Your credit balance from `GET /api/v1/balance`	Nothing sensitive

Agent and swap helper tools

These tools call the Solrouter backend in plaintext or return text without any network call.

Tool	Description	Leaves your machine in plaintext
`agent_run` (Live)	Tool-augmented agent completion through `POST /agent` (web search, Solana data, paid APIs)	Your prompt, to the Solrouter backend
`umbra_describe` (Live)	Explains private swaps. Makes no network call	Nothing
`umbra_anonymity_stats` (Soon)	Deposit count for one denomination bucket from `GET /umbra/anonymity-set`	The bucket and network
`umbra_initiate_private_swap_widget` (Soon)	Returns a directive that tells the Solrouter web chat to show the swap widget. Executes nothing	Suggested tokens and network

ReStock pool tools

New in 1.2.0. ReStock pools pair Solana tokens against tokenized stocks (for example NVDAx or SPYx) on Raydium CLMM. These tools quote and build trades straight against the pool. They call the ReStock indexer and API in plaintext, not Solrouter.

Tool	Description
`restock_list_pools` (Live)	List live pools with pair, mints, TVL, 24h volume, and fees
`restock_pool` (Live)	Full detail for one pool
`restock_quote` (Live)	Quote a swap through one pool: expected output, minimum received, price impact, fees
`restock_trade` (Live)	Build an unsigned swap transaction. Your wallet signs and sends it; the server holds no keys

Agent Privacy API tools

These tools wrap POST and GET /agents/v1/* over HTTPS with your API key. Swap parameters travel in plaintext to the Solrouter backend. Swap execution is Soon. Tools marked Soon can move real funds once they go live, so read the session state before you act on it.

Tool	Description
`umbra_quote` (Live)	Quote a private swap with anonymity-set sizing
`umbra_anonymity_set` (Live)	Inspect the current anonymity set for a mint pair
`umbra_swap_oneshot` (Soon)	Open a one-shot swap session. The agent signs the funding transaction
`umbra_swap_oneshot_execute` (Soon)	Submit the signed funding transaction to start execution
`umbra_session_status` (Soon)	Poll session state until `settled`
`umbra_create_wallet` (Soon)	Provision a managed wallet for an agent
`umbra_swap_managed` (Soon)	Run a swap from a managed wallet
`umbra_encrypt` (Soon)	Convert a balance to an encrypted balance on the same wallet
`umbra_shield` (Soon)	Mixer round trip, withdraw, then forward to a fresh address
`umbra_balance` (Soon)	Read the encrypted balance of a managed wallet
`umbra_attestation` (Soon)	Read the settlement record of a swap session (`GET /agents/v1/attestations/:sessionId`)
`private_inference_paid` (Live)	x402-paywalled sealed inference at $0.02 a call, no API key. You supply the encrypted prompt yourself

Not every request through the MCP server is sealed. encrypted_chat and the AI synthesis step of the three research tools use the Privacy SDK path: RescueCipher and Intel TDX. The Solrouter backend never sees that plaintext. Web search (Brave), DexScreener, CoinGecko, and Solana RPC lookups go from your machine to those third parties in plaintext. agent_run and the umbra_* tools send their inputs to the Solrouter backend in plaintext.