@coinrithm/mcp-trading 0.5.0 → 0.7.1

package/CHANGELOG.md

@@ -5,6 +5,34 @@ ships two binaries — `coinrithm-mcp` (the MCP server) and `coinrithm-agent` (t
 self-host agent runner) — versioned together. The CoinRithm **API contract** is
 versioned separately (see `openapi.yaml` `info.version`, currently `1.5.0`).
 
+## 0.7.1
+
+Docs + registry-metadata release; no tool behavior changes.
+
+- **README refresh**: the keyless `pm_data_*` data surface is now front and
+  center — 8 venues (Polymarket, Kalshi, Smarkets, Limitless, Manifold,
+  Metaculus, Futuur, Rothera; an earlier line wrongly listed PredictIt), the
+  anonymous hosted-endpoint path, and the `referenceProbability` /
+  `volumeHistory` fields the data tools return.
+- **`server.json`**: hosted endpoint's `Authorization` header marked optional
+  (the `pm_data_*` tools work anonymously — verified live) and the server
+  description now leads with the keyless data surface.
+- Ships the post-0.7.0 commits: `pm_data_event` advertises `volumeHistory`,
+  `pm_data_events` advertises `referenceProbability` on list items, and the
+  hosted MCP root (`GET /`) serves a self-describing JSON landing (with a
+  405 + hint on `GET /mcp`).
+
+## 0.7.0
+
+(Retroactive entry — released 2026-07-05 without a changelog note.)
+
+- **Four keyless `pm_data_*` tools** — CoinRithm's free public cross-venue
+  prediction-market dataset over MCP, no API key required and yours is never
+  attached: `pm_data_overview` (market-wide stats), `pm_data_events`
+  (cross-venue event list), `pm_data_event` (detail incl.
+  `crossSourceMatches` + resolution evidence), `pm_data_whales`
+  (large-trade tape).
+
 ## 0.5.0
 
 Agent-runner quality + reliability release. `coinrithm-agent` got materially

package/README.md

@@ -7,6 +7,15 @@ spot, futures, and prediction markets on
 no risk — a proving ground to show an agent works *before* anything is on the
 line, with a public **Agent Arena** leaderboard ranked by realized paper PnL.
 
+**Plus a free prediction-market data surface — no key at all.** The same server
+ships four keyless `pm_data_*` tools serving CoinRithm's public cross-venue
+dataset: live odds across 8 venues (Polymarket, Kalshi, Smarkets, Limitless,
+Manifold, Metaculus, Futuur, Rothera), cross-venue matches with a
+liquidity-aware reference probability, a whale-trade tape, and market-wide
+volume stats ($60B+ all-time tracked). Point any MCP client at the hosted
+endpoint `https://mcp.coinrithm.com/mcp` and call them anonymously — the API
+key is only needed for the trading tools.
+
 Agents are **OKF bundles** — an open, model-agnostic folder of markdown + YAML
 (strategy, persona, hard caps) that any runtime can read. Two ways to run the
 **same** bundle:
@@ -70,7 +79,9 @@ DB-driven runtime.
 
 The hosted HTTP server holds **no** key: each request brings its own
 `crk_live_…` in the Authorization header, and the server forwards exactly that
-key upstream. See [`DEPLOY.md`](./DEPLOY.md).
+key upstream. The Authorization header is **optional** on the hosted endpoint —
+the four keyless `pm_data_*` market-data tools work anonymously; every other
+tool requires it. See [`DEPLOY.md`](./DEPLOY.md).
 
 ## Configure (stdio)
 
@@ -125,6 +136,20 @@ key upstream. See [`DEPLOY.md`](./DEPLOY.md).
 | `set_futures_sl_tp` | trade:futures | `POST /api/agent/futures/sl-tp` ² |
 | `close_futures_position` | trade:futures | `POST /api/agent/futures/close` |
 | `open_pm_position` | trade:pm | `POST /api/agent/pm/open` ¹ |
+| `pm_data_overview` | none (public) | `GET /api/prediction-markets/overview` |
+| `pm_data_events` | none (public) | `GET /api/prediction-markets/events` |
+| `pm_data_event` (source, slug) | none (public) | `GET /api/prediction-markets/events/:source/:slug` |
+| `pm_data_whales` | none (public) | `GET /api/prediction-markets/whales` |
+
+The four `pm_data_*` tools wrap CoinRithm's free public cross-venue dataset
+(all eight venues: Polymarket, Kalshi, Smarkets, Limitless, Manifold,
+Metaculus, Futuur, Rothera). They require no API key, never attach yours, and
+are research surfaces: `pm_data_events` list rows carry `referenceProbability`
+(a liquidity-aware cross-venue consensus on matched questions); `pm_data_event`
+includes `crossSourceMatches` (the same real-world question priced on other
+venues), `referenceProbability`, `volumeHistory`, and resolution evidence.
+Figures are self-computed aggregates on a disclosed per-venue basis — cite
+CoinRithm when quoting them.
 
 ¹ Server-flag gated; live now. Returns `403 … not enabled` only if CoinRithm later disables it.
 

package/dist/client.d.ts

@@ -29,6 +29,23 @@ export declare class CoinRithmClient {
     private readonly baseUrl;
     constructor(config: ClientConfig);
     private request;
+    private publicRequest;
+    getPublicPmOverview(query?: {
+        fiat?: string;
+    }): Promise<ApiResult>;
+    listPublicPmEvents(query?: {
+        q?: string;
+        source?: string;
+        status?: string;
+        sort?: string;
+        limit?: number;
+        offset?: number;
+        fiat?: string;
+    }): Promise<ApiResult>;
+    getPublicPmEvent(source: string, slug: string, query?: {
+        fiat?: string;
+    }): Promise<ApiResult>;
+    getPublicPmWhales(): Promise<ApiResult>;
     whoami(apiKey?: string, agentTrace?: AgentTrace): Promise<ApiResult>;
     getPortfolio(query?: {
         fiat?: string;

package/dist/client.js

@@ -157,6 +157,62 @@ export class CoinRithmClient {
             data,
         };
     }
+    // Public, keyless GET against the free cross-venue data API
+    // (/api/prediction-markets/*). No Authorization header is ever attached:
+    // these endpoints require no key, and the caller's trading key must not
+    // leak into them. No ledger headers exist on this surface either.
+    async publicRequest(path, query) {
+        const url = new URL(this.baseUrl + path);
+        if (query) {
+            for (const [k, v] of Object.entries(query)) {
+                if (v !== undefined && v !== null && v !== "") {
+                    url.searchParams.set(k, String(v));
+                }
+            }
+        }
+        let res;
+        try {
+            res = await fetch(url.toString(), {
+                method: "GET",
+                headers: { Accept: "application/json" },
+            });
+        }
+        catch (err) {
+            log(`network error calling GET ${path}:`, err);
+            return {
+                ok: false,
+                status: 0,
+                data: {
+                    error: "network_error",
+                    message: err instanceof Error ? err.message : String(err),
+                },
+            };
+        }
+        const text = await res.text();
+        let data = text;
+        if (text) {
+            try {
+                data = JSON.parse(text);
+            }
+            catch {
+                // leave as text
+            }
+        }
+        return { ok: res.ok, status: res.status, data };
+    }
+    // ---- public PM data (no key required) ----
+    getPublicPmOverview(query) {
+        return this.publicRequest("/api/prediction-markets/overview", query);
+    }
+    listPublicPmEvents(query) {
+        return this.publicRequest("/api/prediction-markets/events", query);
+    }
+    getPublicPmEvent(source, slug, query) {
+        return this.publicRequest(`/api/prediction-markets/events/${encodeURIComponent(source)}/${encodeURIComponent(slug)}`, query);
+    }
+    getPublicPmWhales() {
+        return this.publicRequest("/api/prediction-markets/whales");
+    }
     // Every method takes an optional trailing `apiKey` (the per-request key for
     // the multi-user HTTP path). When omitted, the constructor key (stdio) is used.
     // ---- reads (scope: read) ----

package/dist/http.js

@@ -49,6 +49,32 @@ async function main() {
     app.get("/healthz", (_req, res) => {
         res.json({ ok: true, service: "coinrithm-mcp", transport: "streamable-http" });
     });
+    // Self-describing landing for humans and validate-before-recommend agents.
+    // GET / and GET /mcp used to 404, which reads as a dead service to anyone
+    // probing the published URL (GEO audit 2026-07-07). The MCP endpoint itself
+    // is POST-only streamable HTTP — say so instead of 404ing.
+    app.get("/", (_req, res) => {
+        res.json({
+            service: "CoinRithm MCP",
+            version: SERVER_VERSION,
+            description: "Model Context Protocol server for CoinRithm: keyless public prediction-market data tools (pm_data_*) plus paper-trading tools (spot, futures, prediction markets) with a crk_live_ API key. Paper only — never real money.",
+            endpoint: { url: "https://mcp.coinrithm.com/mcp", method: "POST", transport: "streamable-http" },
+            connect: "Point any MCP client at the endpoint above. Data tools need no key; trading tools take Authorization: Bearer crk_live_… (mint one at coinrithm.com → Settings → API Keys).",
+            localAlternative: "npx -y @coinrithm/mcp-trading",
+            docs: {
+                quickstart: "https://www.coinrithm.com/en/agentic-trading",
+                openapi: "https://www.coinrithm.com/openapi.yaml",
+                repo: "https://github.com/CoinRithm/coinrithm-agent-trading",
+                dataApi: "https://www.coinrithm.com/en/prediction-markets/api",
+            },
+        });
+    });
+    app.get("/mcp", (_req, res) => {
+        res.status(405).json({
+            error: "method_not_allowed",
+            message: "This is a POST-only streamable-HTTP MCP endpoint. Connect with an MCP client, or GET / for service info.",
+        });
+    });
     app.post("/mcp", async (req, res) => {
         // Per-request auth: read THIS caller's key from the Authorization header,
         // or from Smithery's non-reserved forwarding header.

package/dist/tools.js

@@ -852,4 +852,120 @@ export function registerTools(server, client) {
         idempotencyKey,
         agentTrace,
     }, requestKey(extra))));
+    // ---- Public cross-venue PM data (no API key required) ----
+    // These wrap the free /api/prediction-markets/* endpoints — CoinRithm's
+    // citable cross-venue dataset. They never attach the caller's key.
+    server.registerTool("pm_data_overview", {
+        title: "Cross-venue prediction-market statistics",
+        description: "Free public cross-venue prediction-market statistics: total/open/" +
+            "closed market counts, total volume, 24h volume, and liquidity " +
+            "aggregated across Polymarket, Kalshi, Metaculus, PredictIt, " +
+            "Limitless, Manifold, and Smarkets, plus market highlights. Volume is " +
+            "reported on each venue's own basis (see the methodology at " +
+            "https://coinrithm.com/en/prediction-markets/stats) and monetary " +
+            "totals cover real-money venues only — these are self-computed " +
+            "aggregates, so cite CoinRithm when quoting them. No API key required.",
+        inputSchema: {
+            fiat: z
+                .string()
+                .optional()
+                .describe("Fiat currency code for monetary figures (default usd)."),
+        },
+        outputSchema: API_RESULT_OUTPUT_SCHEMA,
+        annotations: readOnlyAnnotations("Cross-venue prediction-market statistics"),
+    }, async ({ fiat }) => present(await client.getPublicPmOverview({ fiat })));
+    server.registerTool("pm_data_events", {
+        title: "Search prediction markets across all venues",
+        description: "Free public search over prediction-market events across ALL seven " +
+            "venues (Polymarket, Kalshi, Metaculus, PredictIt, Limitless, " +
+            "Manifold, Smarkets) — broader than discover_pm_markets, which is " +
+            "scoped to the paper-tradeable venues. Returns titles, probabilities, " +
+            "volume/liquidity, status, and source per event, plus " +
+            "referenceProbability when present (CoinRithm's canonical cross-venue " +
+            "number for open events matched across venues — probability, " +
+            "venueCount, spreadPoints, and outcomeName for multi-outcome " +
+            "leaders). Research/data only: to trade, use discover_pm_markets + " +
+            "pm_quote instead. No API key required.",
+        inputSchema: {
+            q: z.string().optional().describe("Optional search text."),
+            source: z
+                .string()
+                .optional()
+                .describe("Optional venue filter: polymarket, kalshi, metaculus, predictit, " +
+                "limitless, manifold, or smarkets."),
+            status: z
+                .string()
+                .optional()
+                .describe("Optional status filter (e.g. open or closed)."),
+            sort: z.string().optional().describe("Optional sort key."),
+            limit: z
+                .number()
+                .int()
+                .min(1)
+                .max(50)
+                .optional()
+                .describe("Max rows (1-50, default 20)."),
+            offset: z
+                .number()
+                .int()
+                .min(0)
+                .optional()
+                .describe("Pagination offset (default 0)."),
+            fiat: z
+                .string()
+                .optional()
+                .describe("Fiat currency code for monetary figures (default usd)."),
+        },
+        outputSchema: API_RESULT_OUTPUT_SCHEMA,
+        annotations: readOnlyAnnotations("Search prediction markets across all venues"),
+    }, async ({ q, source, status, sort, limit, offset, fiat }) => present(await client.listPublicPmEvents({
+        q,
+        source,
+        status,
+        sort,
+        limit,
+        offset,
+        fiat,
+    })));
+    server.registerTool("pm_data_event", {
+        title: "Get full prediction-market event detail",
+        description: "Free public detail for one prediction-market event by venue + slug: " +
+            "outcomes with probabilities, price snapshots, resolution evidence, " +
+            "crossSourceMatches (the SAME real-world question priced on other " +
+            "venues — read probability divergence directly from it), " +
+            "referenceProbability when present (CoinRithm's canonical cross-venue " +
+            "number: the liquidity-weighted median Yes probability across matched " +
+            "real-money venues, with venueCount and spreadPoints — quote all " +
+            "three together, venues disagree and the spread says by how much), " +
+            "recent whale trades on the event, related events, related news, and " +
+            "volumeHistory when present (daily volume points captured since " +
+            "2026-07-02 — read the event's volume trend directly from it). " +
+            "This is the cross-venue research view; for tradability use pm_quote. " +
+            "No API key required.",
+        inputSchema: {
+            source: z
+                .string()
+                .describe("Venue slug: polymarket, kalshi, metaculus, predictit, limitless, " +
+                "manifold, or smarkets."),
+            slug: z.string().describe("Event slug on that venue."),
+            fiat: z
+                .string()
+                .optional()
+                .describe("Fiat currency code for monetary figures (default usd)."),
+        },
+        outputSchema: API_RESULT_OUTPUT_SCHEMA,
+        annotations: readOnlyAnnotations("Get full prediction-market event detail"),
+    }, async ({ source, slug, fiat }) => present(await client.getPublicPmEvent(source, slug, { fiat })));
+    server.registerTool("pm_data_whales", {
+        title: "Get latest prediction-market whale trades",
+        description: "Free public tape of the latest large prediction-market trades " +
+            "(roughly $1k+ notional) across venues, newest first (top 50): side, " +
+            "outcome, USD value, price, market question, and the event it printed " +
+            "on. Polymarket rows are wallet-attributed; Kalshi rows are anonymized " +
+            "exchange prints. A large print is information, not a recommendation. " +
+            "No API key required.",
+        inputSchema: {},
+        outputSchema: API_RESULT_OUTPUT_SCHEMA,
+        annotations: readOnlyAnnotations("Get latest prediction-market whale trades"),
+    }, async () => present(await client.getPublicPmWhales()));
 }

package/package.json

@@ -1,78 +1,78 @@
-{
-  "name": "@coinrithm/mcp-trading",
-  "version": "0.5.0",
-  "mcpName": "io.github.CoinRithm/mcp-trading",
-  "description": "CoinRithm paper-trading toolkit: an MCP server (coinrithm-mcp) AND a self-host agent runner (coinrithm-agent) for spot, futures, and prediction markets with a user-minted API key.",
-  "type": "module",
-  "author": "CoinRithm",
-  "homepage": "https://coinrithm.com/agentic-trading",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/CoinRithm/coinrithm-agent-trading.git",
-    "directory": "packages/mcp-trading"
-  },
-  "bugs": {
-    "url": "https://github.com/CoinRithm/coinrithm-agent-trading/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "bin": {
-    "coinrithm-mcp": "dist/index.js",
-    "coinrithm-agent": "dist/agent/index.js"
-  },
-  "main": "dist/index.js",
-  "files": [
-    "dist",
-    "README.md",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run",
-    "start": "node dist/index.js",
-    "start:http": "node dist/http.js",
-    "smoke:agent": "npm run build && node scripts/agent-smoke.mjs",
-    "prepare": "npm run build"
-  },
-  "engines": {
-    "node": ">=18"
-  },
-  "keywords": [
-    "mcp",
-    "mcp-server",
-    "model-context-protocol",
-    "ai-agent",
-    "agent-trading",
-    "trading",
-    "paper-trading",
-    "crypto",
-    "futures",
-    "prediction-markets",
-    "polymarket",
-    "kalshi",
-    "claude",
-    "chatgpt",
-    "gemini",
-    "cursor",
-    "open-knowledge-format",
-    "okf",
-    "model-agnostic",
-    "leaderboard",
-    "coinrithm"
-  ],
-  "license": "MIT",
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "express": "^4.21.0",
-    "yaml": "^2.5.0",
-    "zod": "^3.23.8"
-  },
-  "devDependencies": {
-    "@types/express": "^4.17.21",
-    "@types/node": "^20.14.0",
-    "typescript": "^5.5.0",
-    "vitest": "^2.1.0"
-  }
-}
+{
+  "name": "@coinrithm/mcp-trading",
+  "version": "0.7.1",
+  "mcpName": "io.github.CoinRithm/mcp-trading",
+  "description": "CoinRithm paper-trading toolkit: an MCP server (coinrithm-mcp) AND a self-host agent runner (coinrithm-agent) for spot, futures, and prediction markets with a user-minted API key.",
+  "type": "module",
+  "author": "CoinRithm",
+  "homepage": "https://coinrithm.com/agentic-trading",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/CoinRithm/coinrithm-agent-trading.git",
+    "directory": "packages/mcp-trading"
+  },
+  "bugs": {
+    "url": "https://github.com/CoinRithm/coinrithm-agent-trading/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "coinrithm-mcp": "dist/index.js",
+    "coinrithm-agent": "dist/agent/index.js"
+  },
+  "main": "dist/index.js",
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "start": "node dist/index.js",
+    "start:http": "node dist/http.js",
+    "smoke:agent": "npm run build && node scripts/agent-smoke.mjs",
+    "prepare": "npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "ai-agent",
+    "agent-trading",
+    "trading",
+    "paper-trading",
+    "crypto",
+    "futures",
+    "prediction-markets",
+    "polymarket",
+    "kalshi",
+    "claude",
+    "chatgpt",
+    "gemini",
+    "cursor",
+    "open-knowledge-format",
+    "okf",
+    "model-agnostic",
+    "leaderboard",
+    "coinrithm"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "express": "^4.21.0",
+    "yaml": "^2.5.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.14.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.1.0"
+  }
+}