@forgemeshlabs/anomaly-mcp 0.3.0 → 0.5.0

package/README.md

@@ -1,8 +1,8 @@
 # Anomaly Tracker MCP
 
-Blockchain event sequence anomaly detection for AI agents. Detects unusual financial event patterns across Ethereum, Base, and Arbitrum using NASA-derived sequence mining. Returns a story label and anomaly score, not just a number.
+Multi-domain sequence anomaly detection for AI agents. Detects unusual event patterns across blockchain markets, live airspace, and GitHub repositories using NASA-derived sequence mining. Returns a story label and anomaly score, not just a number.
 
-This MCP server gives AI agents access to the ForgeMesh Anomaly Tracker API via 5 tools — chain-wide anomaly scanning, single-token analysis, whale alerts, model health, and API status.
+This MCP server gives AI agents access to the ForgeMesh Anomaly Tracker API via 14 tools spanning blockchain, aviation, and GitHub domains.
 
 Thin client architecture:
 
@@ -43,44 +43,79 @@ npx -y @forgemeshlabs/anomaly-mcp
 | Tool | Description | Cost |
 | --- | --- | --- |
 | `health_check` | API health and uptime | Free |
-| `anomaly_scan` | Chain-wide sequence anomaly scan — scores event windows for unusual patterns | $0.05 USDC |
-| `token_scan` | Single-token anomaly scan — scores transfer patterns for one token | $0.03 USDC |
-| `whale_alerts` | Recent whale movements, CEX flows, bridge activity, stablecoin mints/burns | $0.02 USDC |
-| `model_status` | SequenceMiner model health and training stats per chain | $0.01 USDC |
-
-### anomaly_scan
-
-Scan a blockchain for sequence anomalies across all monitored addresses.
+| `anomaly_scan` | Chain-wide sequence anomaly scan | $0.05 USDC |
+| `token_scan` | Single-token transfer pattern anomalies | $0.03 USDC |
+| `whale_alerts` | Whale movements, CEX flows, bridge activity | $0.02 USDC |
+| `address_scan` | Wallet transaction pattern anomalies | $0.03 USDC |
+| `model_status` | SequenceMiner model health per chain | $0.01 USDC |
+| `nft_scan` | NFT collection anomalies (sweeps, wash trading) | $0.03 USDC |
+| `defi_scan` | DeFi protocol flow anomalies | $0.03 USDC |
+| `squawk_alerts` | Live aviation emergency squawk codes | $0.02 USDC |
+| `flight_scan` | Airspace region anomaly analysis | $0.03 USDC |
+| `trending_signal` | GitHub repos with anomalous star velocity | $0.02 USDC |
+| `repo_scan` | Deep repo velocity/fork anomaly scan | $0.03 USDC |
+| `github_watch` | Repo activity stream anomalies | $0.03 USDC |
+| `claude_feature_watch` | Anthropic/Claude merged feature alerts | $0.02 USDC |
+
+### Blockchain Tools
+
+**anomaly_scan** — Scan a blockchain for sequence anomalies across all monitored addresses.
+- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
+- **window**: `1h`, `4h`, `24h`, or `168h` (default: 24h)
+- Returns: `sequence_score` (0-100), `story` (human label), `novelty`, `peak_window`, `possible_failure_modes`
 
+**token_scan** — Anomaly scan for a single token's recent transfer patterns.
+- **token** (required): Contract address (`0x...`) or symbol — `usdt`, `usdc`, `weth`, `wbtc`, `link`, `uni`, `aave`, `steth`, `pepe`, `dai`, `cbeth`, `arb`
 - **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
 - **window**: `1h`, `4h`, `24h`, or `168h` (default: 24h)
 
-Returns: `sequence_score` (0-100), `story` (human label), `novelty`, `peak_window`, `possible_failure_modes`
+**whale_alerts** — Recent whale movements from 12+ monitored addresses: Binance, Coinbase, Kraken, OKX, Bybit, major bridges, Tether, Circle.
+- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
+- **hours**: 1-168 (default: 4)
 
-### token_scan
+**address_scan** — Scan any wallet address for anomalous transaction patterns.
+- **address** (required): Wallet address (`0x...`)
+- **chain**: `ethereum`, `base`, or `arbitrum`
+- **window**: `1h`, `4h`, `24h`, or `168h`
 
-Anomaly scan for a single token's recent transfer patterns.
+**nft_scan** — Anomaly scan for an NFT collection — sweep accumulation, wash trading, mint surges.
+- **token** (required): ERC-721/ERC-1155 contract address
 
-- **token** (required): Contract address (`0x...`) or symbol — `usdt`, `usdc`, `weth`, `wbtc`, `link`, `uni`, `aave`, `steth`, `pepe`, `dai`, `cbeth`, `arb`
-- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
-- **window**: `1h`, `4h`, `24h`, or `168h` (default: 24h)
+**defi_scan** — Anomaly scan for DeFi protocols — unusual flows through Uniswap, Aave, Curve, Compound.
+- **protocol** (required): Protocol name or `0x` address
 
-Returns: `sequence_score`, `story`, `novelty`, `peak_window`, `transfers` (recent transfer events with source/direction)
+### Aviation Tools
 
-### whale_alerts
+**squawk_alerts** — Live global sweep of aircraft squawking 7700 (emergency), 7600 (radio failure), or 7500 (hijack).
 
-Recent whale movements from 12+ monitored addresses: Binance, Coinbase, Kraken, OKX, Bybit, Arbitrum/Optimism/Polygon bridges, Tether Treasury, Circle.
+**flight_scan** — Sequence anomaly analysis for a named airspace region.
+- **region**: `north_atlantic`, `europe`, `north_america`, `asia_pacific`, `middle_east`, `africa`, or `global`
 
-- **chain**: `ethereum`, `base`, or `arbitrum` (default: ethereum)
-- **hours**: 1-168 (default: 4)
+### GitHub Tools
+
+**trending_signal** — GitHub repos with anomalous star velocity — early signals before mainstream discovery.
+- **days**: `3`, `7`, `14`, or `30` (default: 7)
+
+**repo_scan** — Deep anomaly scan for a single repository — star velocity, fork ratio, overnight explosion signals.
+- **repo** (required): `owner/repo` format
+
+**github_watch** — Watch a repo's activity stream for anomalous development patterns — commit bursts, force pushes, issue floods, merge rushes, bot takeovers.
+- **repo** (required): `owner/repo` format
+
+**claude_feature_watch** — Watch Anthropic/Claude repos for recently merged features. Scans anthropic-sdk-python, anthropic-sdk-typescript, claude-code, courses, and anthropic-cookbook.
+- **days**: 1-30 (default: 7)
+
+## Symbol Alphabets
+
+**Financial**: `WHALE_BUY`, `WHALE_SELL`, `CEX_INFLOW`, `CEX_OUTFLOW`, `BRIDGE_IN`, `BRIDGE_OUT`, `DEX_SWAP`, `DEX_LIQUIDITY_ADD`, `DEX_LIQUIDITY_REMOVE`, `STABLECOIN_MINT`, `STABLECOIN_REDEEM`, `STABLECOIN_BURN`, `TOKEN_MINT`, `TOKEN_BURN`, `FUNDING_SPIKE`, `LIQUIDATION`
 
-Returns: `alerts` array with `symbol`, `source`, `amount_eth`/`amount_usd`, `timestamp`
+**NFT**: `NFT_MINT`, `NFT_BURN`, `NFT_SALE`, `NFT_SWEEP`, `NFT_WASH_TRADE`
 
-## Symbol Alphabet
+**Aviation**: `ENROUTE`, `SQUAWK_7700`, `SQUAWK_7600`, `SQUAWK_7500`, `RAPID_DESCENT`, `RAPID_CLIMB`, `HIGH_SPEED`, `NEAR_STALL`
 
-The financial domain tracks 16 event types:
+**Creator**: `VIRAL_REPO`, `HOT_REPO`, `EMERGING_REPO`, `STEADY_REPO`, `QUIET_REPO`, `FORK_SURGE`, `BOOKMARK_ONLY`, `ISSUE_FLOOD`, `OVERNIGHT_STAR`, `RAPID_GROWTH`
 
-`WHALE_BUY`, `WHALE_SELL`, `CEX_INFLOW`, `CEX_OUTFLOW`, `BRIDGE_IN`, `BRIDGE_OUT`, `DEX_SWAP`, `DEX_LIQUIDITY_ADD`, `DEX_LIQUIDITY_REMOVE`, `STABLECOIN_MINT`, `STABLECOIN_REDEEM`, `STABLECOIN_BURN`, `TOKEN_MINT`, `TOKEN_BURN`, `FUNDING_SPIKE`, `LIQUIDATION`
+**GitHub Watch**: `COMMIT_PUSH`, `COMMIT_BURST`, `FORCE_PUSH`, `ISSUE_OPEN`, `ISSUE_CLOSE`, `ISSUE_COMMENT`, `ISSUE_FLOOD`, `PR_OPEN`, `PR_MERGE`, `PR_CLOSE`, `PR_REVIEW`, `MERGE_RUSH`, `BRANCH_CREATE`, `BRANCH_DELETE`, `TAG_CREATE`, `RELEASE_PUBLISH`, `FORK_EVENT`, `STAR_EVENT`, `BOT_DOMINATED`, `SOLO_OPERATOR`
 
 ## Payment
 

package/dist/index.js

@@ -5,7 +5,7 @@ import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprot
 import { callTool, tools } from "./tools.js";
 const server = new Server({
     name: "anomaly-mcp",
-    version: "0.2.0"
+    version: "0.5.0"
 }, {
     capabilities: {
         tools: {}

package/dist/tools.d.ts

@@ -219,5 +219,49 @@ export declare const tools: ({
         };
         required: string[];
     };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            days: {
+                type: string;
+                description: string;
+                enum?: undefined;
+            };
+            chain?: undefined;
+            window?: undefined;
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            repo?: undefined;
+        };
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            chain: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            window?: undefined;
+            token?: undefined;
+            hours?: undefined;
+            address?: undefined;
+            protocol?: undefined;
+            region?: undefined;
+            days?: undefined;
+            repo?: undefined;
+        };
+        required?: undefined;
+    };
 })[];
 export declare function callTool(name: string, args: Record<string, unknown>): Promise<unknown>;

package/dist/tools.js

@@ -198,6 +198,63 @@ export const tools = [
             },
             required: ["repo"]
         }
+    },
+    // ── GitHub activity watch ─────────────────────────────────────────────────
+    {
+        name: "github_watch",
+        description: "Watch a GitHub repo's activity stream for anomalous development patterns — commit bursts, force pushes, issue floods, merge rushes, bot takeovers. Returns a story label (e.g. 'History Rewrite', 'Merge Sprint', 'Bot Takeover') and anomaly score. Costs $0.03 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                repo: {
+                    type: "string",
+                    description: "GitHub repo in owner/repo format, e.g. vercel/ai"
+                }
+            },
+            required: ["repo"]
+        }
+    },
+    {
+        name: "claude_feature_watch",
+        description: "Watch Anthropic/Claude repos for recently merged features — SDK changes, Claude Code updates, new capabilities. Scans anthropic-sdk-python, anthropic-sdk-typescript, claude-code, courses, and anthropic-cookbook. Costs $0.02 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                days: {
+                    type: "integer",
+                    description: "Lookback window in days, 1-30 (default: 7)"
+                }
+            }
+        }
+    },
+    // ── Real-time polling endpoints ──────────────────────────────────────────
+    {
+        name: "mempool_anomaly",
+        description: "Real-time mempool anomaly score — detects gas spikes, MEV signals, pending whale swaps, contract deploy bursts, and priority fee wars. Designed for 5-second polling. Returns a story label (e.g. 'MEV Attack', 'Gas Surge', 'Priority Fee War') and anomaly score. Costs $0.01 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                chain: {
+                    type: "string",
+                    enum: ["ethereum", "base"],
+                    description: "Blockchain (default: ethereum). Only Ethereum and Base have RPC mempool access."
+                }
+            }
+        }
+    },
+    {
+        name: "depeg_monitor",
+        description: "Real-time stablecoin depeg detector — monitors USDC, USDT, DAI prices for micro-deviations from $1.00 peg, spread between stables, and volume spikes. Catches depegs before they become crises. Designed for 1-minute polling. Returns a story label (e.g. 'Single Coin Drift', 'Multi-Stablecoin Crisis', 'Depeg Event') and anomaly score. Costs $0.01 USDC on Base mainnet.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                chain: {
+                    type: "string",
+                    enum: ["ethereum", "base", "arbitrum"],
+                    description: "Blockchain (default: ethereum)"
+                }
+            }
+        }
     }
 ];
 async function apiGet(path) {
@@ -297,6 +354,22 @@ export async function callTool(name, args) {
             return apiPost("/api/repo-scan", {
                 repo: args.repo
             });
+        case "github_watch":
+            return apiPost("/api/github-watch", {
+                repo: args.repo
+            });
+        case "claude_feature_watch": {
+            const cfDays = args.days || 7;
+            return apiGet(`/api/claude-feature-watch?days=${cfDays}`);
+        }
+        case "mempool_anomaly": {
+            const mpChain = args.chain || "ethereum";
+            return apiGet(`/api/mempool-anomaly?chain=${mpChain}`);
+        }
+        case "depeg_monitor": {
+            const dpChain = args.chain || "ethereum";
+            return apiGet(`/api/depeg-monitor?chain=${dpChain}`);
+        }
         default:
             return { error: `Unknown tool: ${name}` };
     }

package/glama.json

@@ -1,6 +1,17 @@
 {
   "$schema": "https://glama.ai/mcp/schemas/server.json",
+  "name": "@forgemeshlabs/anomaly-mcp",
+  "description": "Multi-domain sequence anomaly detection — blockchain, aviation, and GitHub. NASA-derived sequence mining returns story labels via x402 micropayments on Base mainnet.",
   "maintainers": [
     "clawdbotworker"
+  ],
+  "tags": [
+    "anomaly-detection",
+    "blockchain",
+    "aviation",
+    "github",
+    "x402",
+    "usdc",
+    "sequence-mining"
   ]
 }

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@forgemeshlabs/anomaly-mcp",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "mcpName": "io.github.forgemeshlabs/anomaly-mcp",
-  "description": "Blockchain event sequence anomaly detection MCP server. Detects unusual financial event patterns via x402 micropayments.",
+  "description": "Multi-domain real-time anomaly detection MCP server. Mempool (5s polling), stablecoin depeg (1min polling), blockchain, aviation, and GitHub anomalies via x402 micropayments.",
   "type": "module",
   "bin": {
     "anomaly-mcp": "dist/index.js"
@@ -31,13 +31,20 @@
     "anomaly-detection",
     "sequence-mining",
     "blockchain",
+    "aviation",
+    "github",
+    "claude",
     "ethereum",
     "base",
     "arbitrum",
     "forgemesh",
     "usdc",
     "nasa",
-    "sequenceminer"
+    "sequenceminer",
+    "mempool",
+    "stablecoin",
+    "depeg",
+    "realtime"
   ],
   "author": "forgemeshlabs",
   "license": "MIT",

package/server.json

@@ -1,17 +1,17 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.forgemeshlabs/anomaly-mcp",
-  "description": "Blockchain event sequence anomaly detection. Detects unusual financial event patterns and returns story labels via x402 micropayments.",
+  "description": "Multi-domain real-time anomaly detection — mempool, stablecoin depeg, blockchain, aviation, and GitHub. NASA-derived sequence mining via x402 micropayments.",
   "repository": {
     "url": "https://github.com/forgemeshlabs/anomaly-mcp",
     "source": "github"
   },
-  "version": "0.2.0",
+  "version": "0.5.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@forgemeshlabs/anomaly-mcp",
-      "version": "0.2.0",
+      "version": "0.5.0",
       "transport": {
         "type": "stdio"
       },