@forgemeshlabs/anomaly-mcp 0.2.0 → 0.4.0

package/README.md

@@ -1,8 +1,8 @@
 # Anomaly Tracker MCP
 
-Blockchain event sequence anomaly detection for AI agents. Detects unusual financial event patterns across Ethereum, Base, and Arbitrum using NASA-derived sequence mining. Returns a story label and anomaly score, not just a number.
+Multi-domain sequence anomaly detection for AI agents. Detects unusual event patterns across blockchain markets, live airspace, and GitHub repositories using NASA-derived sequence mining. Returns a story label and anomaly score, not just a number.
 
-This MCP server gives AI agents access to the ForgeMesh Anomaly Tracker API via 5 tools — chain-wide anomaly scanning, single-token analysis, whale alerts, model health, and API status.
+This MCP server gives AI agents access to the ForgeMesh Anomaly Tracker API via 14 tools spanning blockchain, aviation, and GitHub domains.
 
 Thin client architecture:
 
@@ -43,44 +43,79 @@ npx -y @forgemeshlabs/anomaly-mcp
 | Tool | Description | Cost |
 | --- | --- | --- |
 | `health_check` | API health and uptime | Free |
-| `anomaly_scan` | Chain-wide sequence anomaly scan — scores event windows for unusual patterns | $0.05 USDC |
-| `token_scan` | Single-token anomaly scan — scores transfer patterns for one token | $0.03 USDC |
-| `whale_alerts` | Recent whale movements, CEX flows, bridge activity, stablecoin mints/burns | $0.02 USDC |
-| `model_status` | SequenceMiner model health and training stats per chain | $0.01 USDC |
-
-### anomaly_scan
-
-Scan a blockchain for sequence anomalies across all monitored addresses.
+| `anomaly_scan` | Chain-wide sequence anomaly scan | $0.05 USDC |
+| `token_scan` | Single-token transfer pattern anomalies | $0.03 USDC |
+| `whale_alerts` | Whale movements, CEX flows, bridge activity | $0.02 USDC |
+| `address_scan` | Wallet transaction pattern anomalies | $0.03 USDC |
+| `model_status` | SequenceMiner model health per chain | $0.01 USDC |
+| `nft_scan` | NFT collection anomalies (sweeps, wash trading) | $0.03 USDC |
+| `defi_scan` | DeFi protocol flow anomalies | $0.03 USDC |
+| `squawk_alerts` | Live aviation emergency squawk codes | $0.02 USDC |
+| `flight_scan` | Airspace region anomaly analysis | $0.03 USDC |
+| `trending_signal` | GitHub repos with anomalous star velocity | $0.02 USDC |
+| `repo_scan` | Deep repo velocity/fork anomaly scan | $0.03 USDC |
+| `github_watch` | Repo activity stream anomalies | $0.03 USDC |
+| `claude_feature_watch` | Anthropic/Claude merged feature alerts | $0.02 USDC |
+
+### Blockchain Tools
+
+**anomaly_scan** — Scan a blockchain for sequence anomalies across all monitored addresses.
+- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
+- **window**: `1h`, `4h`, `24h`, or `168h` (default: 24h)
+- Returns: `sequence_score` (0-100), `story` (human label), `novelty`, `peak_window`, `possible_failure_modes`
 
+**token_scan** — Anomaly scan for a single token's recent transfer patterns.
+- **token** (required): Contract address (`0x...`) or symbol — `usdt`, `usdc`, `weth`, `wbtc`, `link`, `uni`, `aave`, `steth`, `pepe`, `dai`, `cbeth`, `arb`
 - **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
 - **window**: `1h`, `4h`, `24h`, or `168h` (default: 24h)
 
-Returns: `sequence_score` (0-100), `story` (human label), `novelty`, `peak_window`, `possible_failure_modes`
+**whale_alerts** — Recent whale movements from 12+ monitored addresses: Binance, Coinbase, Kraken, OKX, Bybit, major bridges, Tether, Circle.
+- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
+- **hours**: 1-168 (default: 4)
 
-### token_scan
+**address_scan** — Scan any wallet address for anomalous transaction patterns.
+- **address** (required): Wallet address (`0x...`)
+- **chain**: `ethereum`, `base`, or `arbitrum`
+- **window**: `1h`, `4h`, `24h`, or `168h`
 
-Anomaly scan for a single token's recent transfer patterns.
+**nft_scan** — Anomaly scan for an NFT collection — sweep accumulation, wash trading, mint surges.
+- **token** (required): ERC-721/ERC-1155 contract address
 
-- **token** (required): Contract address (`0x...`) or symbol — `usdt`, `usdc`, `weth`, `wbtc`, `link`, `uni`, `aave`, `steth`, `pepe`, `dai`, `cbeth`, `arb`
-- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
-- **window**: `1h`, `4h`, `24h`, or `168h` (default: 24h)
+**defi_scan** — Anomaly scan for DeFi protocols — unusual flows through Uniswap, Aave, Curve, Compound.
+- **protocol** (required): Protocol name or `0x` address
 
-Returns: `sequence_score`, `story`, `novelty`, `peak_window`, `transfers` (recent transfer events with source/direction)
+### Aviation Tools
 
-### whale_alerts
+**squawk_alerts** — Live global sweep of aircraft squawking 7700 (emergency), 7600 (radio failure), or 7500 (hijack).
 
-Recent whale movements from 12+ monitored addresses: Binance, Coinbase, Kraken, OKX, Bybit, Arbitrum/Optimism/Polygon bridges, Tether Treasury, Circle.
+**flight_scan** — Sequence anomaly analysis for a named airspace region.
+- **region**: `north_atlantic`, `europe`, `north_america`, `asia_pacific`, `middle_east`, `africa`, or `global`
 
-- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
-- **hours**: 1-168 (default: 4)
+### GitHub Tools
+
+**trending_signal** — GitHub repos with anomalous star velocity — early signals before mainstream discovery.
+- **days**: `3`, `7`, `14`, or `30` (default: 7)
+
+**repo_scan** — Deep anomaly scan for a single repository — star velocity, fork ratio, overnight explosion signals.
+- **repo** (required): `owner/repo` format
+
+**github_watch** — Watch a repo's activity stream for anomalous development patterns — commit bursts, force pushes, issue floods, merge rushes, bot takeovers.
+- **repo** (required): `owner/repo` format
+
+**claude_feature_watch** — Watch Anthropic/Claude repos for recently merged features. Scans anthropic-sdk-python, anthropic-sdk-typescript, claude-code, courses, and anthropic-cookbook.
+- **days**: 1-30 (default: 7)
+
+## Symbol Alphabets
+
+**Financial**: `WHALE_BUY`, `WHALE_SELL`, `CEX_INFLOW`, `CEX_OUTFLOW`, `BRIDGE_IN`, `BRIDGE_OUT`, `DEX_SWAP`, `DEX_LIQUIDITY_ADD`, `DEX_LIQUIDITY_REMOVE`, `STABLECOIN_MINT`, `STABLECOIN_REDEEM`, `STABLECOIN_BURN`, `TOKEN_MINT`, `TOKEN_BURN`, `FUNDING_SPIKE`, `LIQUIDATION`
 
-Returns: `alerts` array with `symbol`, `source`, `amount_eth`/`amount_usd`, `timestamp`
+**NFT**: `NFT_MINT`, `NFT_BURN`, `NFT_SALE`, `NFT_SWEEP`, `NFT_WASH_TRADE`
 
-## Symbol Alphabet
+**Aviation**: `ENROUTE`, `SQUAWK_7700`, `SQUAWK_7600`, `SQUAWK_7500`, `RAPID_DESCENT`, `RAPID_CLIMB`, `HIGH_SPEED`, `NEAR_STALL`
 
-The financial domain tracks 16 event types:
+**Creator**: `VIRAL_REPO`, `HOT_REPO`, `EMERGING_REPO`, `STEADY_REPO`, `QUIET_REPO`, `FORK_SURGE`, `BOOKMARK_ONLY`, `ISSUE_FLOOD`, `OVERNIGHT_STAR`, `RAPID_GROWTH`
 
-`WHALE_BUY`, `WHALE_SELL`, `CEX_INFLOW`, `CEX_OUTFLOW`, `BRIDGE_IN`, `BRIDGE_OUT`, `DEX_SWAP`, `DEX_LIQUIDITY_ADD`, `DEX_LIQUIDITY_REMOVE`, `STABLECOIN_MINT`, `STABLECOIN_REDEEM`, `STABLECOIN_BURN`, `TOKEN_MINT`, `TOKEN_BURN`, `FUNDING_SPIKE`, `LIQUIDATION`
+**GitHub Watch**: `COMMIT_PUSH`, `COMMIT_BURST`, `FORCE_PUSH`, `ISSUE_OPEN`, `ISSUE_CLOSE`, `ISSUE_COMMENT`, `ISSUE_FLOOD`, `PR_OPEN`, `PR_MERGE`, `PR_CLOSE`, `PR_REVIEW`, `MERGE_RUSH`, `BRANCH_CREATE`, `BRANCH_DELETE`, `TAG_CREATE`, `RELEASE_PUBLISH`, `FORK_EVENT`, `STAR_EVENT`, `BOT_DOMINATED`, `SOLO_OPERATOR`
 
 ## Payment
 

package/dist/index.js

@@ -5,7 +5,7 @@ import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprot
 import { callTool, tools } from "./tools.js";
 const server = new Server({
     name: "anomaly-mcp",
-    version: "0.2.0"
+    version: "0.4.0"
 }, {
     capabilities: {
         tools: {}

package/dist/tools.d.ts

@@ -9,6 +9,10 @@ export declare const tools: ({
             token?: undefined;
             hours?: undefined;
             address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
         };
         required?: undefined;
     };
@@ -31,6 +35,10 @@ export declare const tools: ({
             token?: undefined;
             hours?: undefined;
             address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
         };
         required?: undefined;
     };
@@ -56,6 +64,10 @@ export declare const tools: ({
             };
             hours?: undefined;
             address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
         };
         required: string[];
     };
@@ -77,6 +89,10 @@ export declare const tools: ({
             window?: undefined;
             token?: undefined;
             address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
         };
         required?: undefined;
     };
@@ -102,8 +118,128 @@ export declare const tools: ({
             };
             token?: undefined;
             hours?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
         };
         required: string[];
     };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            protocol: {
+                type: string;
+                description: string;
+            };
+            chain: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            window: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            region: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            chain?: undefined;
+            window?: undefined;
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            protocol?: undefined;
+            days?: undefined;
+            repo?: undefined;
+        };
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            days: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            chain?: undefined;
+            window?: undefined;
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            repo?: undefined;
+        };
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            repo: {
+                type: string;
+                description: string;
+            };
+            chain?: undefined;
+            window?: undefined;
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            days: {
+                type: string;
+                description: string;
+                enum?: undefined;
+            };
+            chain?: undefined;
+            window?: undefined;
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            repo?: undefined;
+        };
+        required?: undefined;
+    };
 })[];
 export declare function callTool(name: string, args: Record<string, unknown>): Promise<unknown>;

package/dist/tools.js

@@ -97,6 +97,135 @@ export const tools = [
             type: "object",
             properties: {}
         }
+    },
+    // ── NFT & DeFi ────────────────────────────────────────────────────────────
+    {
+        name: "nft_scan",
+        description: "Anomaly scan for an NFT collection — detects sweep accumulation, wash trading patterns, and mint surges before they're obvious. Pass a contract address. Returns a story label (e.g. 'Sweep Accumulation', 'Wash Trading Detected') and anomaly score. Costs $0.03 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                token: {
+                    type: "string",
+                    description: "NFT contract address (ERC-721 or ERC-1155), e.g. 0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d"
+                },
+                chain: {
+                    type: "string",
+                    enum: ["ethereum", "base", "arbitrum"],
+                    description: "Blockchain (default: ethereum)"
+                },
+                window: {
+                    type: "string",
+                    enum: ["1h", "4h", "24h", "168h"],
+                    description: "Lookback window (default: 24h)"
+                }
+            },
+            required: ["token"]
+        }
+    },
+    {
+        name: "defi_scan",
+        description: "Anomaly scan for a DeFi protocol — detects unusual flows through major lending and DEX contracts (Uniswap, Aave, Curve, Compound). Pass a protocol name or contract address. Returns a story label and anomaly score. Costs $0.03 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                protocol: {
+                    type: "string",
+                    description: "Protocol name (uniswap_v3, uniswap_v3_r2, aave_v3, aave_v2, curve_3pool, compound_v3) or a 0x contract address"
+                },
+                chain: {
+                    type: "string",
+                    enum: ["ethereum", "base", "arbitrum"],
+                    description: "Blockchain (default: ethereum)"
+                },
+                window: {
+                    type: "string",
+                    enum: ["1h", "4h", "24h", "168h"],
+                    description: "Lookback window (default: 24h)"
+                }
+            },
+            required: ["protocol"]
+        }
+    },
+    // ── Aviation ──────────────────────────────────────────────────────────────
+    {
+        name: "squawk_alerts",
+        description: "Live global sweep of active aviation emergency squawk codes via OpenSky Network. Returns all aircraft currently squawking 7700 (general emergency), 7600 (radio failure), or 7500 (hijack) with position, altitude, and velocity. Costs $0.02 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {}
+        }
+    },
+    {
+        name: "flight_scan",
+        description: "Sequence anomaly analysis for a named airspace region — detects unusual clustering of emergency squawks, rapid descents, or speed anomalies using the SequenceMiner engine. Costs $0.03 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                region: {
+                    type: "string",
+                    enum: ["north_atlantic", "europe", "north_america", "asia_pacific", "middle_east", "africa", "global"],
+                    description: "Airspace region to analyze (default: global)"
+                }
+            }
+        }
+    },
+    // ── Creator signals ───────────────────────────────────────────────────────
+    {
+        name: "trending_signal",
+        description: "GitHub repos with anomalous star velocity right now — early signals before mainstream discovery. Detects repos going viral (200+ stars/day), overnight explosions, fork surges, and issue floods. Useful for trend hunting, VC scouting, developer tool discovery. Costs $0.02 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                days: {
+                    type: "string",
+                    enum: ["3", "7", "14", "30"],
+                    description: "Search repos created in the last N days (default: 7)"
+                }
+            }
+        }
+    },
+    {
+        name: "repo_scan",
+        description: "Deep anomaly scan for a single GitHub repository — scores star velocity, fork ratio, overnight explosion signals, and issue flood patterns. Returns a story label (e.g. 'Breakout Signal', 'Viral Activity') and anomaly score. Costs $0.03 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                repo: {
+                    type: "string",
+                    description: "GitHub repo in owner/repo format, e.g. vercel/ai or microsoft/vscode"
+                }
+            },
+            required: ["repo"]
+        }
+    },
+    // ── GitHub activity watch ─────────────────────────────────────────────────
+    {
+        name: "github_watch",
+        description: "Watch a GitHub repo's activity stream for anomalous development patterns — commit bursts, force pushes, issue floods, merge rushes, bot takeovers. Returns a story label (e.g. 'History Rewrite', 'Merge Sprint', 'Bot Takeover') and anomaly score. Costs $0.03 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                repo: {
+                    type: "string",
+                    description: "GitHub repo in owner/repo format, e.g. vercel/ai"
+                }
+            },
+            required: ["repo"]
+        }
+    },
+    {
+        name: "claude_feature_watch",
+        description: "Watch Anthropic/Claude repos for recently merged features — SDK changes, Claude Code updates, new capabilities. Scans anthropic-sdk-python, anthropic-sdk-typescript, claude-code, courses, and anthropic-cookbook. Costs $0.02 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                days: {
+                    type: "integer",
+                    description: "Lookback window in days, 1-30 (default: 7)"
+                }
+            }
+        }
     }
 ];
 async function apiGet(path) {
@@ -170,6 +299,40 @@ export async function callTool(name, args) {
             });
         case "model_status":
             return apiGet("/api/sequence-anomaly/status");
+        case "nft_scan":
+            return apiPost("/api/nft-scan", {
+                token: args.token,
+                chain: args.chain || "ethereum",
+                window: args.window || "24h"
+            });
+        case "defi_scan":
+            return apiPost("/api/defi-scan", {
+                protocol: args.protocol,
+                chain: args.chain || "ethereum",
+                window: args.window || "24h"
+            });
+        case "squawk_alerts":
+            return apiGet("/api/squawk-alerts");
+        case "flight_scan":
+            return apiPost("/api/flight-scan", {
+                region: args.region || "global"
+            });
+        case "trending_signal": {
+            const days = args.days || "7";
+            return apiGet(`/api/trending-signal?days=${days}`);
+        }
+        case "repo_scan":
+            return apiPost("/api/repo-scan", {
+                repo: args.repo
+            });
+        case "github_watch":
+            return apiPost("/api/github-watch", {
+                repo: args.repo
+            });
+        case "claude_feature_watch": {
+            const cfDays = args.days || 7;
+            return apiGet(`/api/claude-feature-watch?days=${cfDays}`);
+        }
         default:
             return { error: `Unknown tool: ${name}` };
     }

package/glama.json

@@ -1,6 +1,17 @@
 {
   "$schema": "https://glama.ai/mcp/schemas/server.json",
+  "name": "@forgemeshlabs/anomaly-mcp",
+  "description": "Multi-domain sequence anomaly detection — blockchain, aviation, and GitHub. NASA-derived sequence mining returns story labels via x402 micropayments on Base mainnet.",
   "maintainers": [
     "clawdbotworker"
+  ],
+  "tags": [
+    "anomaly-detection",
+    "blockchain",
+    "aviation",
+    "github",
+    "x402",
+    "usdc",
+    "sequence-mining"
   ]
 }

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@forgemeshlabs/anomaly-mcp",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "mcpName": "io.github.forgemeshlabs/anomaly-mcp",
-  "description": "Blockchain event sequence anomaly detection MCP server. Detects unusual financial event patterns via x402 micropayments.",
+  "description": "Multi-domain sequence anomaly detection MCP server. Blockchain, aviation, and GitHub anomalies via x402 micropayments.",
   "type": "module",
   "bin": {
     "anomaly-mcp": "dist/index.js"
@@ -31,6 +31,9 @@
     "anomaly-detection",
     "sequence-mining",
     "blockchain",
+    "aviation",
+    "github",
+    "claude",
     "ethereum",
     "base",
     "arbitrum",

package/server.json

@@ -1,17 +1,17 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.forgemeshlabs/anomaly-mcp",
-  "description": "Blockchain event sequence anomaly detection. Detects unusual financial event patterns and returns story labels via x402 micropayments.",
+  "description": "Multi-domain sequence anomaly detection — blockchain, aviation, and GitHub. NASA-derived sequence mining returns story labels via x402 micropayments.",
   "repository": {
     "url": "https://github.com/forgemeshlabs/anomaly-mcp",
     "source": "github"
   },
-  "version": "0.2.0",
+  "version": "0.4.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@forgemeshlabs/anomaly-mcp",
-      "version": "0.2.0",
+      "version": "0.4.0",
       "transport": {
         "type": "stdio"
       },