vibeforge1111/dexscreener-cli-mcp-tool

Review signals: 1 connection review.

Reviewed as expected for a test run: a Python interpreter or package manager probed its own interpreter file under a system program folder; attempted writes that failed, so nothing was written; resolver address lookups that send no data.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 20 distinct locations. 71 attributed processes.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The MCP server search_pairs tool searches pairs by address: Real input produced the expected result: So11111111111111111111111111111111111111112

  Source: Search pairs by name, symbol, or address

  Input: {"tool": "search_pairs", "arguments": {"query": "So11111111111111111111111111111111111111112", "limit": 3}}

  Expected: matching pairs containing the wrapped SOL address

  Command: <guest-path> tools/call {"tool": "search_pairs", "arguments": {"query": "So11111111111111111111111111111111111111112", "limit": 3}}

  Observed: So11111111111111111111111111111111111111112\",\n \"tokenSymbol\": \"SOL\",\n \"dexId\": \"orca\",\n \"priceUsd\": 102.026,\n \"volumeH24\": 106598846.24,\n \"txnsH1\": 5191,\n \"liquidityUsd\": 29143515.62,\n \"pairUrl\": \"https://dexscreener.com/solana/czfq3xzzdmsdgduyrnltrhgc47cxcztlg4crryfu44ze\"\n}"}, {"type": "text", "text": "{\n \"chainId\": \"solana\",\n \"pairAddress\": \"8sLbNZoA1cfnvMJLPfp98ZLAnFSYCFApfJKMbiXNLwxj\",\n \"tokenAddress\": \"So11111111111111111111111111111111111111112\",\n \"tokenSymbol\": \"SOL\",\n \"dexId\": \"raydium\",\n \"priceUsd\": 102.073,\n \"vo

• CLI search finds tokens by address: Real input produced the expected result: So11111111111111111111111111111111111111112

  Source: Search tokens by name, symbol, or address

  Input: ds search So11111111111111111111111111111111111111112 --json

  Expected: JSON pairs containing the wrapped SOL address

  Command: ./ds search So11111111111111111111111111111111111111112 --json

  Observed: So11111111111111111111111111111111111111112", "tokenSymbol": "SOL", "tokenName": "Wrapped SOL", "quoteSymbol": "USDC", "priceUsd": 102.026, "priceChangeH1": 0.74, "priceChangeH24": 0.5, "volumeH24": 106598846.24, "volumeH6": 33058559.75, "volumeH1": 9154470.07, "volumeM5": 513705.32, "buysH1": 2425, "sellsH1": 2766, "buysH24": 35690, "sellsH24": 41641, "txnsH1": 5191, "txnsH24": 77331, "liquidityUsd": 29143515.62, "marketCap": 0.0, "fdv": 0.0, "holdersCount": null, "holdersSource": null, "pairCreatedAtMs":

Examples

• Inspect a token by address on a chain: command completed successfully

  Source: README.md

  Input: So11111111111111111111111111111111111111112 --chain solana --json

  Expected: JSON token details for wrapped SOL

  Command: ./ds inspect So11111111111111111111111111111111111111112 --chain solana --json

  Observed: , "sellsH1": 2775, "buysH24": 35694, "sellsH24": 41650, "txnsH1": 5204, "txnsH24": 77344, "liquidityUsd": 29160966.83, "marketCap": 0.0, "fdv": 0.0, "holdersCount": 8746986, "holdersSource": "geckoterminal", "pairCreatedAtMs": 1688106058000, "ageHours": 29144.889084961666 }, "distributionProxy": { "liquidity_to_market_cap": 0.0, "volume_to_liquidity_24h": 3.6556, "buy_sell_imbalance_1h": -0.0665, "status": "concentrated-liquidity" }, "boostTotal": 40.0, "boostCount": 4, "hasProfile": true, "additionalPairCount": 29 }

• Repository offline test suite (CI test job runs pytest tests/ -q): Ran pytest tests/ -q in the venv: 72 passed, 2 failed (tests/test_cli_json.py::test_search_json_output and test_inspect_json_output, JSONDecodeError). Not a README claim; the failures look related to the 'Tip: Run ds setup' line printed to stdout before JSON on a fresh install. Recorded as a finding, not a product success.

  Source: .github/workflows/ci.yml

  Expected: documented command completes successfully

  Observed: Ran pytest tests/ -q in the venv: 72 passed, 2 failed (tests/test_cli_json.py::test_search_json_output and test_inspect_json_output, JSONDecodeError). Not a README claim; the failures look related to the 'Tip: Run ds setup' line printed to stdout before JSON on a fresh install. Recorded as a finding, not a product success.

Cycles

• ds task daemon --once runs one due scan cycle and exits: Triggered one cycle by hand (run-once: daemon --once with --no-alerts so no external webhook is contacted; normal trigger: ds task daemon polling loop (poll_seconds default 5.0)): Tip: Run ds setup to pick your chains and preferences (takes 30 seconds). task=cycle-check results=3 top=ANT alerts=disabled

  Source: dexscreener_cli/cli.py

  Input: task cycle-check (created with --chains solana --limit 3)

  Expected: one cycle scans the task and prints its summary

  Command: ./ds task daemon --task cycle-check --once --no-alerts

  Observed: Tip: Run ds setup to pick your chains and preferences (takes 30 seconds). task=cycle-check results=3 top=ANT alerts=disabled

Local or hosted: both

Search Dexscreener tokens through the dexscreener-mcp stdio server (search_pairs) and the ds CLI, and run one scheduler cycle (ds task daemon --once)

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat README.md 2>/dev/null | head -200
cd <guest-path> && sed -n 200,420p README.md
cd <guest-path> && cat install.sh; echo ---; cat ds dexscreener-mcp; echo ---; cat pyproject.toml | head -60; ls .coldpass tests docs; cat .env.example
cd <guest-path> && sed -n 420,520p README.md | cut -c1-300
cd <guest-path> && chmod +x install.sh && ./install.sh 2>&1 | tail -60
cd <guest-path> && ./ds search solana --json 2>&1 | head -c 1200; echo; echo "rc=$?"; ls -la <guest-path> /inputs 2>&1 | head
cd <guest-path> && grep -n "def search_pairs\|def inspect_token\|def save_preset\|def get_cli_quickstart" -A12 dexscreener_cli/mcp_server.py | head -90
cd <guest-path> && grep -n "argv\|stays_running\|expected_file\|source_file\|README" check.py | head -80
cd <guest-path> && ./ds search So11111111111111111111111111111111111111112 --json 2>/dev/null | grep -c "So11111111111111111111111111111111111111112"; mkdir -p .coldpass && ls -la .coldpass
cd <guest-path> && cat > probe.json <<'EOF'
{"kind":"mcp","argv":["<guest-path>"],"cwd":"<guest-path>","tool":"search_pairs","arguments":{"query":"So11111111111111111111111111111111111111112","limit":3},"expected_text":"So11111111111111111111111111111111111111112"}
EOF
cat > claims.json <<'EOF'
[{"kind":"claim","claim":"The MCP server exposes search_pairs, which searches pairs by name, symbol, or address","source":"README.md","input":"query So11111111111111111111111111111111111111112","expected":"matching pairs containing the wrapped SOL address","probe_kind":"mcp","argv":["<guest-path>"],"tool":"search_pairs","arguments":{"query":"So11111111111111111111111111111111111111112","limit":3},"expected_text":"So11111111111111111111111111111111111111112","cwd":"<guest-path>"},
{"kind":"claim","claim":"CLI search finds tokens by address","source":"README.md","input":"ds search So11111111111111111111111111111111111111112 --json","expected":"JSON pairs containing the wrapped SOL address","probe_kind":"cli","argv":["./ds","search","So11111111111111111111111111111111111111112","--json"],"expected_text":"So11111111111111111111111111111111111111112","cwd":"<guest-path>"}]
EOF
python3 -I -c "import json;json.load(open('probe.json'));json.load(open('claims.json'));print('ok')"
cd <guest-path> && cat > claims.json <<'EOF'
[{"kind":"claim","claim":"The MCP server search_pairs tool searches pairs by address","source":"Search pairs by name, symbol, or address","input":"query So11111111111111111111111111111111111111112","expected":"matching pairs containing the wrapped SOL address","probe_kind":"mcp","argv":["<guest-path>"],"tool":"search_pairs","arguments":{"query":"So11111111111111111111111111111111111111112","limit":3},"expected_text":"So11111111111111111111111111111111111111112","cwd":"<guest-path>"},
{"kind":"claim","claim":"CLI search finds tokens by address","source":"Search tokens by name, symbol, or address","input":"ds search So11111111111111111111111111111111111111112 --json","expected":"JSON pairs containing the wrapped SOL address","probe_kind":"cli","argv":["./ds","search","So11111111111111111111111111111111111111112","--json"],"expected_text":"So11111111111111111111111111111111111111112","cwd":"<guest-path>"}]
EOF
cd <guest-path> && <env-var>=<guest-path> timeout 600 python3 -I <guest-path> --validate --replay 2>&1 | tail -60
cd <guest-path> && .venv/bin/pip show mcp 2>/dev/null | head -2; .venv/bin/pip install "mcp>=1.23.0,<2" -q 2>&1 | tail -5; .venv/bin/pip show mcp | head -2; .venv/bin/python -I -c "import mcp.server.fastmcp as f; print('fastmcp ok')"
cd <guest-path> && <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay 2>&1 | head -c 4000
cd <guest-path> && grep -n "def task_daemon\|def task_run\|once\|def task_create" -A6 dexscreener_cli/cli.py | head -80; ./ds task --help 2>&1 | tail -25
cd <guest-path> && ./ds task create cycle-check --chains solana --limit 3 2>&1 | tail -5; timeout 120 ./ds task daemon --task cycle-check --once --no-alerts 2>&1 | tail -15; echo "rc=${PIPESTATUS[0]}"; ./ds task runs 2>&1 | tail -8
cd <guest-path> && ls .github/workflows && grep -n "run:" -A3 .github/workflows/*.yml | head -40
cd <guest-path> && .venv/bin/pip install -q pytest 2>&1 | tail -3; timeout 600 .venv/bin/pytest tests/ -q 2>&1 | tail -8; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && sed -n 1,40p tests/test_cli_json.py; ./ds search pepe --json 2>/dev/null | head -2; echo ---; ./ds search pepe --json 2>&1 >/dev/null | head -3
cd <guest-path> && cat > cycles.json <<'EOF'
{"detected":true,"checks":[{"claim":"ds task daemon --once runs one due scan cycle and exits","source":"dexscreener_cli/cli.py","quote":"Run one due cycle and exit","schedule":"ds task daemon polling loop (poll_seconds default 5.0)","method":"run-once: daemon --once with --no-alerts so no external webhook is contacted","input":"task cycle-check (created with --chains solana --limit 3)","expected":"one cycle scans the task and prints its summary","kind":"cli","argv":["./ds","task","daemon","--task","cycle-check","--once","--no-alerts"],"cwd":"<guest-path>","expected_text":"task=cycle-check results=3"}]}
EOF
cat > examples.json <<'EOF'
[{"kind":"example","claim":"Inspect a token by address on a chain","source":"README.md","input":"So11111111111111111111111111111111111111112 --chain solana --json","expected":"JSON token details for wrapped SOL","argv":["./ds","inspect","So11111111111111111111111111111111111111112","--chain","solana","--json"],"cwd":"<guest-path>","env":{},"expected_text":"So11111111111111111111111111111111111111112"},
{"kind":"example","claim":"Repository offline test suite (CI test job runs pytest tests/ -q)","source":".github/workflows/ci.yml","reason":"Ran pytest tests/ -q in the venv: 72 passed, 2 failed (tests/test_cli_json.py::test_search_json_output and test_inspect_json_output, JSONDecodeError). Not a README claim; the failures look related to the 'Tip: Run ds setup' line printed to stdout before JSON on a fresh install. Recorded as a finding, not a product success."}]
EOF
python3 -I -c "import json;[json.load(open(f)) for f in ['cycles.json','examples.json']];print('ok')"; cd <guest-path> && ./ds inspect So11111111111111111111111111111111111111112 --chain solana --json 2>/dev/null | grep -c So11111111111111111111111111111111111111112
cd <guest-path> && cat > report.json <<'EOF'
{"outcome":"working","fault_owner":"repo","operation":"Search Dexscreener tokens through the dexscreener-mcp stdio server (search_pairs) and the ds CLI, and run one scheduler cycle (ds task daemon --once)","operation_scope":"Linux guest, Python 3.12.3 (README needs 3.11+), no API keys; public Dexscreener API reachable (HTTP 200). MORALIS_API_KEY optional and unset.","steps":["git clone is replaced by the pinned snapshot already in <guest-path>","./install.sh (README Mac/Linux installer: creates .venv, pip install -e ., runs ds doctor)","./ds search So11111111111111111111111111111111111111112 --json","./dexscreener-mcp (stdio MCP) tools/call search_pairs {query, limit:3}","./ds inspect So11111111111111111111111111111111111111112 --chain solana --json","./ds task create cycle-check --chains solana --limit 3","./ds task daemon --task cycle-check --once --no-alerts","pytest tests/ -q (repo test suite from CI)"],"deviations":["install.sh with unpinned mcp>=1.23.0 installed mcp 2.3.0, which removed mcp.server.fastmcp; dexscreener-mcp crashed on start (ModuleNotFoundError). Fixed by running .venv/bin/pip install 'mcp>=1.23.0,<2' (installed mcp 1.30.0). Product source not edited.","pip install -q pytest added to the venv to run the repo's CI test command.","Test suite: 2 of 74 failed (tests/test_cli_json.py search/inspect JSON tests, JSONDecodeError); not fixed, recorded as a finding.","README 'ds setup' was not run (interactive); a non-interactive 'Tip' line is printed on stdout before JSON output on a fresh install."],"stuck_step":null,"main_blocker":null,"plain_failure":"On a fresh install the MCP server does not start unless the mcp library is pinned below version 2, because the project's dependency range allows mcp 2.x, which removed the API the server uses. Separately, two of the project's JSON-output tests fail on a fresh install. After the pin, the MCP search, CLI search and inspect, and the one-cycle scheduler run all worked.","suggested_fix":"Pin mcp<2 in pyproject.toml dependencies (or migrate dexscreener_cli/mcp_server.py to the mcp 2.x MCPServer API). Send the 'Tip: Run ds setup' message to stderr, or skip it when --json is used, so JSON stdout parses; then re-run tests/test_cli_json.py."}
EOF
python3 -I -c "import json;json.load(open('report.json'));print('ok')"; cd <guest-path> && <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay 2>&1 | head -c 2500
cd <guest-path> && ./ds task configure --help 2>/dev/null | grep -i interval | head -3; ./ds task configure cycle-check --interval-seconds 1 2>&1 | tail -2; sleep 3; timeout 120 ./ds task daemon --task cycle-check --once --no-alerts 2>&1 | tail -4
cd <guest-path> && <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay > <guest-path> 2>&1; echo "rc=$?"; python3 -I -c "
import json,sys
d=json.loads(open('<guest-path>').read().strip().splitlines()[-1]) if False else None
" ; head -c 600 <guest-path>; echo; grep -o '"valid": [a-z]*' <guest-path>; grep -o '"problems": \[[^]]*\]' <guest-path> | head -c 800; echo; grep -o '"status": "[A-Z]*"' <guest-path>
pgrep -fa "dexscreener-mcp|ds task daemon" || echo "no background processes"; ls -la <guest-path>