Squads MCP MCP Server

Squads MCP: Secure Multisig Management for Solana

A secure Model Context Protocol (MCP) implementation for Squads multisig management on Solana blockchain. This toolkit prioritizes security at every step while enabling LLMs to safely interact with multisig accounts.

🔐 Security-First Design

Squads MCP implements multiple security layers to protect your assets and multisig operations:

• Local Private Key Storage: Keys never leave your device, unlike web wallets or browser extensions
• Permission Separation: Distinct INITIATE, EXECUTE, and VOTE roles prevent single-point compromise
• Time Lock Support: Configure mandatory waiting periods before sensitive transactions execute
• Comprehensive Security Auditing: Built-in AUDIT_MULTISIG_SECURITY tool scores your configuration
• Security-Focused Schemas: Every tool includes explicit security warnings and verification steps
• Threshold Recommendations: Smart defaults for different multisig types (Reserve, Operations, etc.)
• Secure Connection Management: Easily switch between networks for testing and production

📋 Features

Multisig Management

• Create new multisig accounts with customizable permissions
• Import existing multisig accounts
• Audit multisig security with detailed recommendations
• Configure thresholds, permissions, and time locks

Transaction Handling

• Create and manage proposals
• Vote on proposals (approve/reject)
• Execute approved transactions
• Cancel pending proposals

Asset Management

• View SOL and token balances in vaults
• Transfer SOL from vaults
• Fund vaults

🛡️ Security Best Practices

The implementation promotes Squads security best practices:

1. Separation of Duties:

   • Keep INITIATE and EXECUTE roles separate
   • Avoid giving ALL permissions to any member

2. Proper Thresholds:

   • For Reserve multisigs: 6+ members, 4+ threshold
   • For Program Upgrade multisigs: 6+ members, 4+ threshold
   • For Operations multisigs: 3+ members, 2+ threshold

3. Time Locks:

   • Reserve: 3600+ seconds (1 hour)
   • Program Upgrade: 600+ seconds (10 minutes)
   • Operations: 300+ seconds (5 minutes)

🔧 How It Works

This project leverages the Model Context Protocol (MCP) to enable secure interaction between LLMs and Squads multisig functionality. MCP provides a standardized way for AI models to use external tools while maintaining security and context.

┌─────────┐    ┌──────────────┐    ┌────────────┘    ┌────────┐
│   LLM   │<-->│ MCP Protocol │<-->│ Squads MCP │<-->│ Solana │
└─────────┘    └──────────────┘    └────────────┘    └────────┘

🚀 Getting Started

Prerequisites

• Node.js v16+
• Solana CLI tools (optional)
• A Solana wallet (preferably a hardware wallet for production use)

Installation

Option 1: From NPM (Recommended)

# Using npm
npm install squads-mcp

# Using yarn
yarn add squads-mcp

# Using pnpm
pnpm add squads-mcp

Option 2: From Source

git clone https://github.com/dorkydhruv/squads-mcp.git
cd squads-mcp
pnpm install
pnpm build

Configuration for `claude_desktop_config.json`

{
  "mcpServers": {
    "squads-mcp": {
      "command": "node",
      "args": [
        "node_modules/squads-mcp/dist/index.js" // If installed from npm
        // OR use "/ABSOLUTE/PATH/TO/YOUR/MCP/PROJECT/FILE" if built from source
      ]
    }
  }
}

📚 Available Tools

Configuration Tools

• CONNECTION_UPDATE: Set Solana connection
• SHOW_CONFIG: Display current configuration

Squads Multisig Tools

• CREATE_SQUADS_MULTISIG: Create a new multisig
• IMPORT_SQUADS_MULTISIG: Import existing multisig
• GET_MULTISIG_ACCOUNT: View multisig details
• AUDIT_MULTISIG_SECURITY: Security audit with recommendations

Proposal Management

• CREATE_PROPOSAL: Create a new proposal
• APPROVE_PROPOSAL: Vote to approve a proposal
• REJECT_PROPOSAL: Vote to reject a proposal
• CANCEL_PROPOSAL: Cancel a pending proposal
• GET_PROPOSAL: View a specific proposal
• GET_PROPOSALS: List all proposals

Transaction Execution

• EXECUTE_CONFIG_TRANSACTION: Execute configuration changes
• EXECUTE_VAULT_TRANSACTION: Execute vault transactions

Asset Management

• GET_ASSETS: View assets in a multisig vault
• FUND_VAULT: Send SOL to a vault
• TRANSFER_SOL_FROM_VAULT: Send SOL from a vault

🛠️ Security Audit Tool: Technical Deep Dive

The AUDIT_MULTISIG_SECURITY tool provides enterprise-grade security analysis of Squads multisig configurations:

Technical Implementation

• Quantitative Security Scoring: Implements a