three.ws pump.fun MCP

The materials explicitly state that no keys or environment variables are required, and there is no request for API tokens, wallet private keys, or other sensitive credentials, so credential exposure and abuse risk appears low.

It is known to access the remote endpoint three.ws, which is consistent with its stated pump.fun/Solana discovery and analysis function. However, the materials do not specify exactly what query or context data is sent, so normal outbound transmission of user request content to that declared endpoint should be assumed.

The system checks indicate that the tool executes code / runs a local process, which is a standard MCP behavior. The provided materials do not show requests for elevated system privileges or execution capabilities clearly unrelated to its stated function, so this is caution rather than high risk.

The description only presents it as a 'read-only' pump.fun and on-chain analysis tool, with no stated need to read/write local files, access wallets, modify on-chain state, or request broad data permissions. Based on the available materials, there is no sign of excessive data access.

The source is an official registry entry and an open-source repository is provided, with updates within the last year—these are strong risk-reducing signals. Although community stars are low and no license is declared, which slightly limits ecosystem validation and governance clarity, there is no sign of a closed-source, obscure distribution path, or other clear supply-chain red flags.