How to Revoke Mint Authority on Solana: Fixed Supply Guide 2026

What Is Mint Authority on Solana?

Every Solana SPL token has a mint account — the on-chain record that defines the token's supply, decimals, and authorities. One of those authorities is the mint authority: a wallet address that holds the exclusive right to create (mint) new tokens at any time.

When you first deploy a token, the wallet you use to create it automatically becomes the mint authority. This means you can call spl-token mint at any time to increase the total supply — sending new tokens to any address you choose. No community vote, no smart contract logic, no on-chain governance required. If you hold mint authority, you can inflate the supply the moment your token hits a DEX.

Revoking mint authority means setting this authority to null permanently. Once revoked, nobody — including you — can ever mint additional tokens. The supply displayed on Solscan becomes immutable. This is what "fixed supply" means in practice.

Why You Should Revoke Mint Authority

Most new token creators underestimate how much active mint authority damages their project. Here's the reality: every experienced crypto trader checks mint authority before buying an unknown token. An active mint authority is the clearest possible signal that the team can rug at any time. Even if you have no intention of inflating the supply, the possibility alone suppresses buying confidence.

Top reasons to revoke immediately after launch

• Eliminates the #1 rug-check red flag. RugCheck, Birdeye, and DEXScreener all flag active mint authority prominently. Traders who use these tools (most of them) will see a red warning on your token until you revoke.
• Enables CoinGecko and CoinMarketCap listings. Both platforms consider supply credibility when evaluating listing applications. An unrevoked mint authority raises immediate questions about your tokenomics integrity.
• Unlocks community trust. In Telegram groups, Discord servers, and Twitter, the first question skeptics ask is "is mint revoked?" Being able to answer yes — with a Solscan link as proof — ends the debate instantly.
• Protects you from your own wallet being compromised. If your mint authority wallet is ever hacked, the attacker can flood the market with billions of new tokens. Revoking removes this attack vector permanently.
• Required by most launchpads. Reputable Solana launchpads (Magic Eden, Meteora, others) require revoked mint authority as part of their token due diligence process.

How It Affects Rug Checks & Scanner Scores

Security scanners are the first stop for any trader considering your token. Here's exactly what each major tool shows — and how revoking changes your score:

When to Revoke: Before or After Launch?

Timing your revocation correctly matters. Here's the recommended sequencing for a typical token launch:

Recommended order: Deploy token → Distribute team/marketing allocations → Add liquidity → Revoke mint authority → Lock liquidity → Announce publicly

The critical rule: revoke only after you have completed all token distributions that require minting. Once you revoke, you can never mint again. If you have a team allocation, ecosystem fund, or vesting pool that hasn't been minted yet, mint those tokens first.

Before revocation checklist

• All planned token allocations have been minted and distributed
• Team, advisor, and investor wallets have received their tokens
• Liquidity pool tokens have been minted
• Marketing/airdrop reserves are in your wallet
• You have confirmed the total supply matches your published tokenomics
• Liquidity has been added (or you are ready to add it right after)

How to Revoke Mint Authority Without Code (CreateMyCoin)

CreateMyCoin lets you revoke mint authority directly from the dashboard — no CLI, no TypeScript, no terminal. You can do it at token creation time or after launch from your token management panel.

Option A: Revoke during token creation

1. Open the token creator. Go to createmycoin.app/solana-token and connect your wallet.
2. Fill in your token details. Enter name, symbol, supply, decimals, and upload your logo as normal.
3. Enable "Revoke Mint Authority" in token options. In the authorities section, toggle on "Revoke Mint Authority". This queues the revocation to happen atomically in the same transaction as the mint creation.
4. Confirm and deploy. Approve the transaction in your wallet. Your token is created and mint authority is revoked in a single on-chain transaction.

Option B: Revoke after launch from your dashboard

1. Go to your token management page. Connect the wallet that created the token (the current mint authority) and open the manage section for your token.
2. Locate "Revoke Mint Authority". Under token authorities, you will see the current mint authority address with a Revoke button.
3. Click Revoke and confirm. Review the warning — this action is permanent. Approve the transaction in your wallet.
4. Verify on Solscan. Open your token's Solscan page and confirm the Mint Authority field now shows null.

How to Revoke Mint Authority Using the SPL CLI

If you prefer to work directly with the Solana CLI, revoking mint authority is a single command. The wallet executing this command must be the current mint authority.

Prerequisites

• Solana CLI installed and configured (solana config get)
• Active keypair is the current mint authority wallet
• Enough SOL for the transaction fee (~0.000005 SOL)

Revoke mint authority (SPL Token program)

spl-token authorize YOUR_MINT_ADDRESS mint --disable

Replace YOUR_MINT_ADDRESS with your token's mint address (the address on Solscan). The --disable flag sets the mint authority to null rather than transferring it to another wallet.

Revoke mint authority (Token-2022 program)

If your token was created with the Token-2022 program, add the --program-id flag:

spl-token authorize YOUR_MINT_ADDRESS mint --disable \
  --program-id TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb

Revoke using TypeScript (@solana/spl-token)

import { setAuthority, AuthorityType, TOKEN_PROGRAM_ID } from "@solana/spl-token";
import { Connection, Keypair, PublicKey, clusterApiUrl } from "@solana/web3.js";

const connection = new Connection(clusterApiUrl("mainnet-beta"), "confirmed");
const payer = Keypair.fromSecretKey(/* your secret key */);
const mintAddress = new PublicKey("YOUR_MINT_ADDRESS");

await setAuthority(
  connection,
  payer,           // transaction fee payer
  mintAddress,     // token mint
  payer.publicKey, // current authority
  AuthorityType.MintTokens,
  null,            // new authority = null (revoke)
);

console.log("Mint authority revoked. Supply is now fixed.");

For Token-2022 tokens: Replace TOKEN_PROGRAM_ID with TOKEN_2022_PROGRAM_ID in your import and pass it as the programId option to setAuthority.

Freeze Authority: Should You Revoke That Too?

While you're revoking mint authority, you'll likely encounter another authority on your token: freeze authority. These are different powers and traders scrutinize both.

Freeze authority allows the authority wallet to call freeze-account on any token account — effectively locking a specific holder's tokens so they cannot transfer or sell them. This is useful for regulated securities tokens or stablecoins, but for a standard community or meme token it's a major red flag. Scanners flag active freeze authority almost as severely as active mint authority.

How to revoke freeze authority

The process is identical to revoking mint authority — just change the authority type:

spl-token authorize YOUR_MINT_ADDRESS freeze --disable

Or in TypeScript, use AuthorityType.FreezeAccount instead of AuthorityType.MintTokens. Both revocations can be done in separate transactions or sequentially right after token launch.

How to Verify Mint Authority Has Been Revoked

After revoking, always verify on-chain before announcing to your community. There are three ways to confirm:

Method 1: Solscan

1. Go to solscan.io and search for your mint address.
2. Open the token's overview page.
3. Under Token Info, find the Mint Authority field.
4. Confirm it shows null (not a wallet address). If it shows null, revocation is confirmed on-chain.

Method 2: Solana Explorer

1. Go to explorer.solana.com and paste your mint address.
2. On the token page, scroll to Token Extensions or Mint Info.
3. The Mint Authority field should read None.

Method 3: SPL CLI

spl-token display YOUR_MINT_ADDRESS

Look for the Mint authority line in the output. After a successful revoke it will read: Mint authority: (not set).

Method 4: RugCheck

Go to rugcheck.xyz, enter your mint address, and run a full scan. A clean token with revoked mint authority will no longer show the "Mint authority is enabled" risk item. Take a screenshot of your RugCheck score — share it in your community as social proof.

Best Practices & Timing Checklist

Complete post-launch authority checklist

• All token distributions (team, ecosystem, airdrop reserve) have been minted before revocation
• Mint authority revoked — verified as null on Solscan
• Freeze authority revoked (or confirmed as null from creation)
• Liquidity added to Raydium or Orca pool
• Liquidity locked (Streamflow or Raydium lock) — lock transaction shared publicly
• RugCheck scan run and screenshot saved for community sharing
• Solscan token page link shared in Telegram/Discord as verification

What to do if you need variable supply after launch

If your tokenomics genuinely require minting more tokens in the future (e.g., a staking rewards program, a DAO treasury that mints based on governance), you have two safer alternatives to retaining full mint authority:

• Pre-mint the full future allocation now. Calculate the maximum supply you will ever need (including future rewards), mint it all upfront, and revoke. Hold the future allocation in a locked multisig with a public unlock schedule. This is the most trusted approach.
• Use a Squads multisig as mint authority. Transfer mint authority to a Squads multisig requiring multiple signers (e.g., 3-of-5 team wallets). The public can verify the multisig configuration on Squads. Minting requires coordinated approval — not a single wallet. This is transparent and auditable even without full revocation.

FAQ