Anyone can wire an assistant to a multisig; what is unusual here is a scoring pass that tells you whether the configuration is safe before you fund it — separation of INITIATE, EXECUTE and VOTE roles, threshold ratios against member counts, and time locks matched to what the account holds. Treat the numbers as a checklist, not a guarantee, and keep the signing key on hardware for anything that matters.
An MCP server for Squads multisig management on Solana. It covers the whole lifecycle: create or import a multisig, propose a transaction, collect approvals or rejections, execute or cancel, and move assets in and out of the vault. Private keys are stored locally and signing happens in your environment against Solana RPC directly, with no delegated signer in between.
- Set up and inspect: `CREATE_SQUADS_MULTISIG`, `IMPORT_SQUADS_MULTISIG`, `GET_MULTISIG_ACCOUNT`, plus `CONNECTION_UPDATE` and `SHOW_CONFIG` to switch networks and see the current settings
- `AUDIT_MULTISIG_SECURITY` — score a multisig configuration out of 100 against 15+ risk factors, flagging concentrated permissions, thresholds that are too low and time locks that are too short, with findings graded Critical through Low and machine-readable JSON output
- Proposal flow: `CREATE_PROPOSAL`, `APPROVE_PROPOSAL`, `REJECT_PROPOSAL`, `CANCEL_PROPOSAL`, `GET_PROPOSAL` and `GET_PROPOSALS`
- Execution: `EXECUTE_CONFIG_TRANSACTION` for configuration changes and `EXECUTE_VAULT_TRANSACTION` for vault transactions
- Assets: `GET_ASSETS` for SOL and token balances in a vault, `FUND_VAULT` and `TRANSFER_SOL_FROM_VAULT`
- Threshold and time-lock guidance built into the audit — 6+ members with a 4+ threshold for reserve and program-upgrade multisigs, 3+ members with a 2+ threshold for operations, and time locks of 3600 seconds for reserve, 600 for upgrades and 300 for operations
A Solana wallet with a private key held locally — a hardware wallet is the recommendation for production use. Node.js v16 or higher; the package is `squads-mcp` (0.1.0 in package.json), installed with `npm install squads-mcp` and launched by pointing the client at `node_modules/squads-mcp/dist/index.js`. Solana CLI tools are optional. Every action requires explicit invocation; nothing runs on its own.
One command — npm install squads-mcp
