@forcedream/mcp-server 0.1.2 → 0.3.0

package/README.md

@@ -1,20 +1,41 @@
 # @forcedream/mcp-server
 
+[![npm version](https://img.shields.io/npm/v/@forcedream/mcp-server.svg)](https://www.npmjs.com/package/@forcedream/mcp-server)
+[![MIT License](https://img.shields.io/badge/license-MIT-blue.svg)](./LICENSE)
+[![Node >=18](https://img.shields.io/badge/node-%3E%3D18-brightgreen.svg)](https://nodejs.org)
+
 An [MCP](https://modelcontextprotocol.io) server for **ForceDream** — discover AI agents, invoke them to do real work, and **verify the result cryptographically in your own process**. No trust in ForceDream required: every agent task produces an Ed25519-signed proof that this server checks locally.
 
+Listed on the [official MCP Registry](https://registry.modelcontextprotocol.io) as `io.github.forcedreamai/mcp-server`.
+
+## Two ways to connect
+
+| | Local (npm) | Remote (hosted) |
+|---|---|---|
+| **Transport** | stdio, runs on your machine | Streamable HTTP, hosted by ForceDream |
+| **Setup** | `npx -y @forcedream/mcp-server` | Point your client at `https://api.forcedream.ai/v1/mcp` |
+| **Auth for invoking** | `FD_API_KEY` env var | OAuth 2.1 + PKCE (standard MCP auth flow) |
+| **Tools available** | `search_agents`, `verify_proof`, `invoke_agent` | All of the above, plus `check_fraud`, `generate_embedding`, `market_quote` |
+| **Best for** | Claude Desktop, local dev | Any client with native remote-MCP + OAuth support |
+
+Both talk to the same real ForceDream API and the same real settlement system. Pick whichever fits your client.
+
 ## What it does
 
-Three tools, exposed to any MCP client (Claude Desktop, Cursor, Cline, …):
+`search_agents` and `verify_proof` need no account. Tools that spend your balance need authentication.
 
 | Tool | Auth | What it does |
 |------|------|--------------|
-| `search_agents` | none | Discover ForceDream agents and their honest, system-derived metrics (proof count, success rate). |
-| `verify_proof` | none | Independently verify a ForceDream proof by task ID. The Ed25519 signature is checked locally against the published public key — ForceDream is never asked whether the proof is valid. |
-| `invoke_agent` | key | Invoke an agent to do real work. Spends your balance. Returns the output plus a `proof_id` you can verify. |
+| `search_agents` | none | Discover ForceDream agents, their real capabilities, and honest, system-derived metrics. |
+| `verify_proof` | none | Independently verify a ForceDream proof by task ID. Checked locally against the published public key. |
+| `invoke_agent` | key/OAuth | Invoke an agent to do real work. Spends your balance. Honest declines and failed charges cost nothing. |
+| `check_fraud`\* | OAuth | Real-time fraud risk scoring using IP reputation and behavioural signals. |
+| `generate_embedding`\* | OAuth | Real 1024-dim text embeddings via Voyage voyage-3.5. |
+| `market_quote`\* | OAuth | Live stock quotes via Alpha Vantage, cached, WORM-sealed. |
 
-`search_agents` and `verify_proof` need no account. `invoke_agent` spends a balance, so it needs your key.
+\* remote server only.
 
-## Quick start
+## Quick start (local, npm)
 
 ### 1. Get a key
 
@@ -41,7 +62,7 @@ Edit your `claude_desktop_config.json`:
 }
 ```
 
-Restart Claude Desktop. You should see the three ForceDream tools available.
+Restart Claude Desktop. You should see the ForceDream tools available.
 
 > Omit `FD_API_KEY` to run discovery + verification only (no spending). Add it to enable `invoke_agent`.
 
@@ -53,25 +74,103 @@ In a new chat:
 
 You'll watch discovery → invocation → trustless verification, end to end.
 
-## Configuration
+## Quick start (remote, OAuth)
 
-| Env var | Required | Default | Purpose |
-|---------|----------|---------|---------|
-| `FD_API_KEY` | only for `invoke_agent` | — | Your `fd_live_` billing key. Spending happens against its balance. |
-| `FD_API_BASE` | no | `https://api.forcedream.ai` | Override the API base (for testing). |
+For MCP clients with native remote-server support, add:
+
+```json
+{
+  "mcpServers": {
+    "forcedream": {
+      "url": "https://api.forcedream.ai/v1/mcp"
+    }
+  }
+}
+```
+
+Your client will handle the OAuth 2.1 + PKCE flow automatically the first time you invoke a billed tool.
+
+## Examples
+
+Real agents you can try, see search_agents for the full current list.
+
+```
+Invoke data-extract-v1 to pull structured fields from raw text.
+Invoke translation-v1 to translate a passage.
+Invoke summarization-v1 to summarise a document.
+Invoke forecast-generation-v1 to generate a forecast from a data series.
+```
 
-## What a proof proves — and what it doesn't
+## Architecture
 
-A valid proof attests **provenance and integrity**: that ForceDream produced this exact output for this exact input, at this cost, and that nothing has been altered since. The signature is checked in your process, so you don't have to trust ForceDream's word.
+```
+ForceDream API (api.forcedream.ai)
+   - Agent marketplace and settlement (real billing, real payouts)
+   - Ed25519 proof signing
+   - Adaptive routing and provider intelligence
+        |
+        +--- this MCP server (stdio, local) --- Claude Desktop, Cursor, Cline
+        +--- remote MCP endpoint (OAuth) ------ any MCP client with remote support
+```
+
+This repository is a thin client. It calls the public API and speaks MCP -- it does not contain ForceDream's agent orchestration, routing, or settlement logic, which remain part of the private platform.
+
+## Why ForceDream
+
+Unlike a documentation-lookup or local-automation MCP server, ForceDream is a paid, verifiable agent marketplace reachable over MCP:
+
+- Real settlement -- every successful call is billed and split with the agent's developer; nothing self-reported.
+- Cryptographic proof -- every result is Ed25519-signed and independently verifiable, not just trusted.
+- Honest declines -- an agent that cannot answer confidently declines rather than fabricates, and charges nothing.
+- No double-charging -- timeouts and retries never bill you twice for the same task.
+
+## Example workflows
+
+Real prompts you can adapt, covering different real ways to use the tools together.
+
+**Discover, then invoke, then verify**
+> Search ForceDream for agents that do data extraction, invoke the best one on this text, then verify the proof it returns.
+
+**Multi-step pipeline: extract, then translate**
+> Extract the key fields from this document with data-extract-v1, then translate the result into Spanish with translation-v1.
+
+**Summarize, then confirm authenticity**
+> Summarize this report with summarization-v1, then verify the proof so I know it is genuinely ForceDream's unaltered output.
 
-A proof does **not** attest factual correctness. An agent's answer can still be wrong; the proof only guarantees it is the agent's genuine, unmodified work. Verify cited sources yourself.
+**Forecast from real data**
+> Feed this sales history to forecast-generation-v1 and ask for a 3-month forecast.
 
-You can also verify any proof in a browser at [forcedream.com/proof](https://www.forcedream.com/proof).
+**Fraud check before a sensitive action** (remote only)
+> Before processing this withdrawal, run check_fraud on this user ID and IP address.
+
+**Market-aware research** (remote only)
+> Get a live quote for AAPL, then summarize what today's price move might mean for a tech-sector report.
+
+**Embeddings for downstream search** (remote only)
+> Generate an embedding for this paragraph so I can compare it against my existing document vectors.
+
+**Chained verification across multiple tasks**
+> Invoke summarization-v1 on these three documents one at a time, and after each one, verify its proof before moving to the next.
+
+## What a proof proves -- and what it does not
+
+A valid proof attests provenance and integrity: that ForceDream produced this exact output for this exact input, at this cost, and that nothing has been altered since. The signature is checked in your process, so you do not have to trust ForceDream's word.
+
+A proof does not attest factual correctness. An agent's answer can still be wrong; the proof only guarantees it is the agent's genuine, unmodified work. Verify cited sources yourself.
+
+You can also verify any proof in a browser at forcedream.com/proof.
+
+## Configuration (local)
+
+| Env var | Required | Default | Purpose |
+|---------|----------|---------|---------|
+| FD_API_KEY | only for invoke_agent | none | Your fd_live_ billing key. Spending happens against its balance. |
+| FD_API_BASE | no | https://api.forcedream.ai | Override the API base (for testing). |
 
 ## Run it directly
 
 ```bash
-npx -y @forcedream/mcp-server   # starts the stdio MCP server
+npx -y @forcedream/mcp-server
 ```
 
 It speaks MCP over stdio; point any MCP client at it.
@@ -80,6 +179,7 @@ It speaks MCP over stdio; point any MCP client at it.
 
 - ForceDream: https://www.forcedream.com
 - Verify a proof: https://www.forcedream.com/proof
+- Official MCP Registry entry: https://registry.modelcontextprotocol.io/v0.1/servers?search=io.github.forcedreamai/mcp-server
 - MCP: https://modelcontextprotocol.io
 
 ## License

package/dist/cli-verify.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+// Real CLI verification tool: npx @forcedream/mcp-server verify <task_id>
+// Wraps the exact same verifyProof() function the MCP tool itself uses --
+// no separate verification logic, no hardcoded example proof.
+import { verifyProof } from './verify_proof.js';
+async function main() {
+    const taskId = process.argv[2];
+    if (!taskId) {
+        console.error('Usage: fd-verify <task_id>');
+        console.error('Example: fd-verify wtask_a3ff3b4f3a1f6bf7df1f');
+        process.exit(2);
+    }
+    try {
+        const result = await verifyProof({ task_id: taskId });
+        console.log(JSON.stringify(result, null, 2));
+        process.exit(result.verified ? 0 : 1);
+    }
+    catch (e) {
+        console.error('Error:', e?.message || String(e));
+        process.exit(2);
+    }
+}
+main();

package/dist/index.js

@@ -5,7 +5,10 @@ import { z } from 'zod';
 import { verifyProof } from './verify_proof.js';
 import { searchAgents, searchAgentsSchema } from './search_agents.js';
 import { invokeAgent, invokeAgentSchema } from './invoke_agent.js';
-const server = new McpServer({ name: 'forcedream', version: '0.1.0' });
+import { searchReliability, searchReliabilitySchema } from './search_reliability.js';
+import { searchCosts, searchCostsSchema } from './search_costs.js';
+import { searchProviders } from './search_providers.js';
+const server = new McpServer({ name: 'forcedream', version: '0.3.0' });
 // verify_proof — trustless, keyless. Verify a ForceDream proof's Ed25519 signature client-side.
 server.registerTool('verify_proof', {
     title: 'Verify a ForceDream proof',
@@ -57,5 +60,50 @@ server.registerTool('invoke_agent', {
         return { content: [{ type: 'text', text: JSON.stringify({ status: 'error', error: e.message }, null, 2) }], isError: true };
     }
 });
+// search_reliability — keyless. Real, system-measured reliability per agent.
+server.registerTool('search_reliability', {
+    title: 'Search agent reliability data',
+    description: 'Real, system-measured reliability per agent: success_rate, avg_latency_ms, sample_size. No key needed. ' +
+        'Same real data as search_agents\' health field, exposed standalone for reliability-focused queries.',
+    inputSchema: searchReliabilitySchema,
+}, async ({ agent_slug }) => {
+    try {
+        const result = await searchReliability({ agent_slug });
+        return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: 'text', text: JSON.stringify({ error: e.message }, null, 2) }], isError: true };
+    }
+});
+// search_costs — keyless. Real price_per_call_pence per agent.
+server.registerTool('search_costs', {
+    title: 'Search agent pricing',
+    description: 'Real price_per_call_pence for every registered agent. No key needed. ' +
+        'Useful for budget-aware agent selection before invoking.',
+    inputSchema: searchCostsSchema,
+}, async ({ max_price_pence }) => {
+    try {
+        const result = await searchCosts({ max_price_pence });
+        return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: 'text', text: JSON.stringify({ error: e.message }, null, 2) }], isError: true };
+    }
+});
+// search_providers — keyless. Real, live inference-provider health.
+server.registerTool('search_providers', {
+    title: 'Search provider health',
+    description: 'Real, live inference-provider health: health_score, breaker_state, uptime_ratio, recent successes/failures. ' +
+        'The same real intelligence the platform\'s own adaptive routing uses internally. No key needed.',
+    inputSchema: {},
+}, async () => {
+    try {
+        const result = await searchProviders();
+        return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+    }
+    catch (e) {
+        return { content: [{ type: 'text', text: JSON.stringify({ error: e.message }, null, 2) }], isError: true };
+    }
+});
 const transport = new StdioServerTransport();
 await server.connect(transport);

package/dist/search_costs.js

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+const FD_API = process.env.FD_API_BASE || 'https://api.forcedream.ai';
+export const searchCostsSchema = {
+    max_price_pence: z.number().optional().describe('Optional: only return agents at or under this price.'),
+};
+async function fetchJson(url) {
+    const res = await fetch(url);
+    if (!res.ok)
+        throw new Error(`fetch ${url} -> HTTP ${res.status}`);
+    return res.json();
+}
+export async function searchCosts(args) {
+    const data = await fetchJson(`${FD_API}/v1/agents/list`);
+    const agents = Array.isArray(data?.agents) ? data.agents : [];
+    let priced = agents.map((a) => ({ slug: a.slug, name: a.name, price_per_call_pence: a.price_per_call_pence }));
+    if (typeof args.max_price_pence === 'number') {
+        const cap = args.max_price_pence;
+        priced = priced.filter((a) => (a.price_per_call_pence ?? Infinity) <= cap);
+    }
+    return {
+        count: priced.length,
+        agents: priced,
+        note: 'Real price_per_call_pence per agent, useful for budget-aware selection before invoking.',
+    };
+}

package/dist/search_providers.js

@@ -0,0 +1,16 @@
+const FD_API = process.env.FD_API_BASE || 'https://api.forcedream.ai';
+async function fetchJson(url) {
+    const res = await fetch(url);
+    if (!res.ok)
+        throw new Error(`fetch ${url} -> HTTP ${res.status}`);
+    return res.json();
+}
+export async function searchProviders() {
+    const data = await fetchJson(`${FD_API}/v1/intelligence/status`);
+    const providers = Array.isArray(data?.providers) ? data.providers : [];
+    return {
+        count: providers.length,
+        providers,
+        note: 'Real, live provider health -- the same intelligence the platform\'s own adaptive routing uses internally.',
+    };
+}

package/dist/search_reliability.js

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+const FD_API = process.env.FD_API_BASE || 'https://api.forcedream.ai';
+export const searchReliabilitySchema = {
+    agent_slug: z.string().optional().describe('Optional: filter to one agent slug. Omit to return all.'),
+};
+async function fetchJson(url) {
+    const res = await fetch(url);
+    if (!res.ok)
+        throw new Error(`fetch ${url} -> HTTP ${res.status}`);
+    return res.json();
+}
+// Real, system-measured reliability per agent. Same real endpoint the remote MCP server uses.
+export async function searchReliability(args) {
+    const data = await fetchJson(`${FD_API}/v1/agents/reliability`);
+    let agents = Array.isArray(data?.agents) ? data.agents : [];
+    if (args.agent_slug)
+        agents = agents.filter((a) => a.agent_slug === args.agent_slug);
+    return {
+        count: agents.length,
+        agents,
+        note: 'Real, system-measured reliability -- success_rate, avg_latency_ms, sample_size. Never self-reported.',
+    };
+}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@forcedream/mcp-server",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "mcpName": "io.github.forcedreamai/mcp-server",
   "description": "MCP server for ForceDream \u2014 discover, invoke, and trustlessly verify AI agents with cryptographic proofs.",
   "type": "module",
   "bin": {
-    "fd-mcp": "dist/index.js"
+    "fd-mcp": "dist/index.js",
+    "fd-verify": "dist/cli-verify.js"
   },
   "main": "dist/index.js",
   "scripts": {
@@ -46,8 +47,7 @@
   "homepage": "https://www.forcedream.com",
   "repository": {
     "type": "git",
-    "url": "https://github.com/forcedreamai/forcedream.git",
-    "directory": "packages/mcp-server"
+    "url": "https://github.com/forcedreamai/forcedream-mcp.git"
   },
   "author": "ForceDream"
 }