Use Vanna from Claude, Cursor or any MCP-compatible AI assistant. Log in with your wallet; every transaction is still signed by you.
The Vanna MCP is a server that gives any AI assistant (Claude, Cursor, Windsurf, or anything that speaks the Model Context Protocol) the same abilities as the Copilot: read your account, answer with live figures, and prepare Earn, Margin, Trade, Farm and Predict transactions for your wallet to sign.It is also the engine behind the Copilot itself. Every transaction the Copilot shows you is built and simulated by this server.
The server never holds a key and never signs. Your AI assistant gets a link, you open it, review the plan and sign in your own wallet.
claude mcp add --transport http vanna-solana https://vanna-mcp-solana-public-398807408840.us-central1.run.app/mcp
Claude (desktop or web): add a custom connector with the URL above.Cursor, Windsurf and others: add a remote MCP server with the URL above in the app’s MCP settings, for example:
The first time, your browser opens Vanna’s Connect your wallet page. It shows which app is asking and where it will return, and what it will be able to do: Read your balances, positions and market data, and Prepare transactions for you to review and sign. Untick the second to give read-only access. Click Connect wallet and approve, and your wallet asks you to sign a login message. No transaction, no fee. There is no separate account: your wallet is the login.
The Connect page, with the wallet asking to sign the login message. Click the image to zoom.
3
Ask
Your assistant now lists the Vanna server as connected, with its 20 tools. Talk to it as you would to the Copilot: “Show my Vanna portfolio”, “Supply 100 USDC to Earn”.
Claude Code's MCP list with the Vanna server connected. Click the image to zoom.
After you log in, every call acts as your wallet. The server refuses any write for another wallet.
When you ask for a change, the assistant gets a link to a signing page served by Vanna. Nothing has been sent at this point.
Claude prepares an Earn supply and gives the signing link. Click the image to zoom.
Review. The page shows the plan the server drew: each step, amounts, warnings, and your worst-case health factor.
Approve. Click Approve plan with wallet and sign the approval message, which names exactly that plan. A plan must be approved within 5 minutes. Cancel plan stops it without any signature.
Sign each step. For each step the server checks live data again, builds and simulates the transaction, and your wallet shows it to you to sign. A Predict trade with several transactions is signed in one approval.
Confirmed. The server checks that what you signed is exactly what it built, sends it and waits for the chain. Your assistant can then report the result.
The signing page awaiting approval, with the wallet showing the plan approval message. Click the image to zoom.
A copied link only lets someone see the plan. It can’t run it: running needs the approval made in your browser.
Use the same wallet in your browser extension as the one you logged in with. The signing page checks it.
These are enforced by the server, so no wording can talk the AI past them:
Health floor. Anything that can lower your health (borrow, withdraw, margin swap) must keep it at 1.15 or above. Liquidation is at 1.10. Adding collateral and repaying are never blocked.
Limits per wallet.5,000peractionand25,000 per day, 6 transaction builds a minute, 8 steps per plan.
Exact amounts. Zero, negative or unclear amounts, or more decimals than the token has, are refused, never rounded.
What you approved is what runs. The plan is frozen with exact amounts; your approval signs it; the transaction you sign must match the server’s own build byte for byte.
Exactly once. Each step is sent one time. An unclear result is never retried automatically.
Your wallet only. No transfers to other addresses, no arbitrary programs, no admin actions, no liquidating others.
The assistant is also told the Copilot’s rules: stay on Vanna, never invent a number, refuse orders for later (stop-loss, limit, DCA), never say a Predict outcome will win, and never say something happened before the chain confirms it.
An AI assistant can misread a request. Always check the signing page (asset, amount, direction and health factor after) before you approve.
Untick Prepare transactions for you to review and sign on the Connect page if you only want your assistant to see your account. It can answer questions about positions, prices and risk, but can’t prepare any transaction.