BagOS MCP Server

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

               fs.writeFileSync(credPath, JSON.stringify(credentials, null, 2));

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add bagos -- npx -y bagos-mcp-server

{
  "mcpServers": {
    "bagos": {
      "args": [
        "-y",
        "bagos-mcp-server"
      ],
      "command": "npx"
    }
  }
}

[mcp_servers.bagos]
command = "npx"
args = ["-y", "bagos-mcp-server"]

{
  "mcpServers": {
    "bagos": {
      "args": [
        "-y",
        "bagos-mcp-server"
      ],
      "command": "npx"
    }
  }
}

{
  "mcpServers": {
    "bagos": {
      "args": [
        "-y",
        "bagos-mcp-server"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: BAGS_API_KEY (Bags API key from dev.bags.fm. Required for all tools.), BAGS_NETWORK (Solana cluster: devnet (default) or mainnet. Writes on mainnet move real funds.), SOLANA_RPC_URL (Custom Solana RPC endpoint. Defaults to the public RPC for BAGS_NETWORK.), BAGS_KEYPAIR_PATH (Path to a Solana keypair JSON file. Only required for write tools.), BAGS_MAX_SOL_PER_TX (Hard cap on SOL spent by any single transaction. Default 0.1.), BAGS_MAX_SOL_PER_SESSION (Hard cap on total SOL spent across one server session. Default 1.0.), BAGS_ALLOW_UNCONFIRMED (Set true to skip the two-step confirmation on writes. Default false.), BOS_TOKEN_MINT (Mint address of the BOS token used for gating write tools.), BOS_REQUIRED_BALANCE (Minimum BOS balance required to call write tools. Default 10000.), BAGS_ALLOW_UNCAPPED_TOKEN_SWAPS (Permit non-SOL-input swaps, which the SOL-denominated caps cannot limit.), USE_MOCK_DATA (Makes bags_get_claimable_fees return fabricated data instead of calling the API. Default false.). The author declared them in the registry entry; get the values from the project itself.