@guiie/buda-mcp 1.5.0 → 1.5.2

package/marketplace/claude-listing.md

@@ -14,7 +14,7 @@ Real-time market data from [Buda.com](https://www.buda.com/), the leading crypto
 
 Use this server to query live prices, spreads, order books, OHLCV candles, trade history, volume, and cross-market arbitrage opportunities for all BTC, ETH, and altcoin markets quoted in CLP, COP, PEN, and USDC. Optional API credentials unlock account tools for balances, order management, withdrawals, deposits, and Lightning Network payments.
 
-**v1.5.0** adds 8 new authenticated tools: `cancel_all_orders`, `cancel_order_by_client_id`, `place_batch_orders`, extended `place_order` (TIF + stop), `create_withdrawal`, `create_fiat_deposit`, `lightning_withdrawal`, and `create_lightning_invoice`. All response schemas are flat and fully typed.
+**v1.5.1** is a security hardening release: HTTP startup guard for missing `MCP_AUTH_TOKEN`, rate limiting on `/mcp`, crypto address format validation in `create_withdrawal`, BOLT-11 invoice validation in `lightning_withdrawal`, dead man's switch blocked on HTTP transport, and optional `max_notional` cap for `place_batch_orders`.
 
 ---
 
@@ -78,13 +78,28 @@ Composite sentiment score (−100 to +100) from three components: 24h price vari
 RSI (14), MACD (12/26/9), Bollinger Bands (20, 2σ), SMA 20, and SMA 50 — computed server-side from Buda trade history (no external libraries). Returns latest values + signal interpretations. Returns a structured warning if fewer than 50 candles are available after aggregation. Includes `disclaimer`.  
 **Parameters:** `market_id` *(required)*, `period` (`1h`/`4h`/`1d`, default `1h`), `limit` *(optional, 500–1000)*.
 
+### `get_available_banks`
+Banks available for deposits and withdrawals for a given fiat currency. Returns an array of `{ id, name, country }` objects, or an empty array if none are available. Cached 60 s.  
+**Parameters:** `currency` *(required)* — e.g. `CLP`, `COP`, `PEN`.
+
+### `get_real_quotation`
+Server-side buy or sell quotation from Buda using the live order book. Returns the exact fill price, total cost with fees, and applied fee rate. Does not place an order.  
+**Parameters:** `market_id` *(required)*, `type` (`Bid`/`Ask`) *(required)*, `amount` *(required)*, `limit` *(optional — limit price in quote currency)*.
+
 ### Authenticated tools (require `BUDA_API_KEY` + `BUDA_API_SECRET`)
 
 > **Important:** Authenticated instances must run locally only — never expose a server with API credentials publicly.
 
+### `get_account_info`
+Returns the authenticated user's profile: email, display name, pubsub key, and monthly transacted amounts. Read-only.
+
 ### `get_balances`
 All currency balances as flat typed objects: total, available, frozen, and pending withdrawal amounts as floats with `_currency` suffix fields.
 
+### `get_balance`
+Balance for a single currency: total, available, frozen, and pending withdrawal amounts as floats with `_currency` fields. Use when you only need one currency instead of fetching all.  
+**Parameters:** `currency` *(required)* — e.g. `BTC`, `CLP`, `USDC`.
+
 ### `get_orders`
 Orders for a given market as flat typed objects. All monetary amounts are floats with `_currency` fields. Filterable by state (`pending`, `active`, `traded`, `canceled`).  
 **Parameters:** `market_id` *(required)*, `state` *(optional)*, `per` *(optional)*, `page` *(optional)*.
@@ -105,14 +120,34 @@ Cancel all open orders in a specific market or across all markets (`market_id="*
 Cancel an open order by its client-assigned string ID. Requires `confirmation_token="CONFIRM"`. Returns the same flat order shape as `get_order`.  
 **Parameters:** `client_id`, `confirmation_token`.
 
+### `get_order`
+Fetch a single order by its numeric ID with full detail. All monetary amounts are floats with `_currency` fields.  
+**Parameters:** `order_id` *(required)*.
+
+### `get_order_by_client_id`
+Fetch a single order by the client-assigned string ID set at placement time.  
+**Parameters:** `client_id` *(required)*.
+
 ### `place_batch_orders`
-Place up to 20 orders sequentially. All orders are pre-validated before any API call. Partial failures do not roll back placed orders; a `warning` field surfaces this. Returns `{ results, total, succeeded, failed }`.  
-**Parameters:** `orders` (array of 1–20 order objects), `confirmation_token`.
+Place up to 20 orders sequentially. All orders are pre-validated before any API call. Partial failures do not roll back placed orders; a `warning` field surfaces this. Use `max_notional` to cap total exposure (sum of `amount × limit_price` for limit orders; market orders contribute 0). Returns `{ results, total, succeeded, failed }`.  
+**Parameters:** `orders` (array of 1–20 order objects), `max_notional` *(optional cap)*, `confirmation_token`.
+
+### `get_network_fees`
+Fee schedule for deposits or withdrawals of a given currency (name, flat fee, minimum, maximum, and whether the fee is a percentage). Useful before initiating a withdrawal.  
+**Parameters:** `currency` *(required)* — e.g. `BTC`, `ETH`, `CLP`. `type` *(required)* — `deposit` or `withdrawal`.
+
+### `get_withdrawal_history`
+Withdrawal history for a currency, optionally filtered by state and paginated. Amounts are floats with `_currency` fields.  
+**Parameters:** `currency` *(required)*, `state` *(optional: `pending_signature`/`pending`/`confirmed`/`rejected`/`anulled`)*, `per` *(optional)*, `page` *(optional)*.
 
 ### `create_withdrawal`
-Create a crypto or fiat withdrawal. Exactly one of `address` (crypto) or `bank_account_id` (fiat) must be provided. Requires `confirmation_token="CONFIRM"`.  
+Create a crypto or fiat withdrawal. Exactly one of `address` (crypto) or `bank_account_id` (fiat) must be provided. **WARNING: Crypto withdrawals are irreversible — verify the destination address carefully before confirming.** Requires `confirmation_token="CONFIRM"`.  
 **Parameters:** `currency`, `amount`, `address` *(crypto)*, `network` *(optional)*, `bank_account_id` *(fiat)*, `confirmation_token`.
 
+### `get_deposit_history`
+Deposit history for a currency, optionally filtered by state and paginated. Amounts are floats with `_currency` fields.  
+**Parameters:** `currency` *(required)*, `state` *(optional: `pending_info`/`pending`/`confirmed`/`anulled`/`retained`)*, `per` *(optional)*, `page` *(optional)*.
+
 ### `create_fiat_deposit`
 Record a fiat deposit. Guard is critical — calling twice creates duplicates. Requires `confirmation_token="CONFIRM"`.  
 **Parameters:** `currency`, `amount`, `bank` *(optional)*, `confirmation_token`.
@@ -125,6 +160,42 @@ Pay a BOLT-11 Lightning invoice from the LN-BTC reserve. Requires `confirmation_
 Create a Lightning receive invoice. No confirmation required. Returns `{ id, payment_request, amount_satoshis, description, expires_at, state, created_at }`.  
 **Parameters:** `amount_satoshis`, `description` *(optional, max 140 chars)*, `expiry_seconds` *(optional, 60–86400)*.
 
+### `create_receive_address`
+Generate a new crypto deposit address for a currency. Not idempotent — each call creates a new address. Crypto only. Requires `confirmation_token="CONFIRM"`.  
+**Parameters:** `currency` *(required)* — e.g. `BTC`, `ETH`. `confirmation_token` *(required)*.
+
+### `list_receive_addresses`
+List all receive (deposit) addresses for a currency.  
+**Parameters:** `currency` *(required)*.
+
+### `get_receive_address`
+Fetch a specific receive address by its numeric ID.  
+**Parameters:** `currency` *(required)*, `id` *(required)*.
+
+### `list_remittance_recipients`
+List saved remittance recipients (bank accounts) for fiat transfers, with pagination.  
+**Parameters:** `per` *(optional)*, `page` *(optional)*.
+
+### `get_remittance_recipient`
+Fetch a single saved remittance recipient by ID.  
+**Parameters:** `id` *(required)*.
+
+### `list_remittances`
+List past fiat remittance transfers with pagination. Amounts are floats with `_currency` fields.  
+**Parameters:** `per` *(optional)*, `page` *(optional)*.
+
+### `quote_remittance`
+Create a time-limited remittance quote (does not transfer funds). Follow with `accept_remittance_quote` to execute. Not idempotent — each call creates a new remittance record. Requires `confirmation_token="CONFIRM"`.  
+**Parameters:** `currency` *(required)*, `amount` *(required)*, `recipient_id` *(required)*, `confirmation_token` *(required)*.
+
+### `accept_remittance_quote`
+Accept and execute a remittance quote. **Irreversible.** Requires `confirmation_token="CONFIRM"`.  
+**Parameters:** `id` *(required — quote ID)*, `confirmation_token`.
+
+### `get_remittance`
+Fetch the status and details of a single remittance by ID.  
+**Parameters:** `id` *(required)*.
+
 ### `schedule_cancel_all`
 **WARNING: timer state is lost on server restart. Use only on locally-run instances.**  
 Arms an in-memory dead man's switch: if not renewed within `ttl_seconds`, all open orders for the market are automatically cancelled. Requires `confirmation_token="CONFIRM"`.  

package/marketplace/gemini-tools.json

@@ -307,6 +307,325 @@
         "required": ["market_id"]
       }
     },
+    {
+      "name": "get_available_banks",
+      "description": "Returns banks available for deposits and withdrawals for a given fiat currency as an array of {id, name, country} objects. Returns an empty array if none are available. Cached 60s. Example: 'Which banks can I use to deposit CLP on Buda?'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Fiat currency code (e.g. 'CLP', 'COP', 'PEN'). Case-insensitive."
+          }
+        },
+        "required": ["currency"]
+      }
+    },
+    {
+      "name": "get_real_quotation",
+      "description": "Server-side buy or sell quotation from Buda using the live order book. Returns exact fill price, total cost with fees, and applied fee rate. Does not place an order. Example: 'What would it cost to buy 0.1 BTC on BTC-CLP right now including fees?'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "market_id": {
+            "type": "STRING",
+            "description": "Market identifier (e.g. 'BTC-CLP', 'ETH-BTC'). Case-insensitive."
+          },
+          "type": {
+            "type": "STRING",
+            "description": "Order side: 'Bid' to buy base currency, 'Ask' to sell base currency."
+          },
+          "amount": {
+            "type": "NUMBER",
+            "description": "Order size in the base currency (e.g. BTC for BTC-CLP)."
+          },
+          "limit": {
+            "type": "NUMBER",
+            "description": "Optional limit price in quote currency."
+          }
+        },
+        "required": ["market_id", "type", "amount"]
+      }
+    },
+    {
+      "name": "get_account_info",
+      "description": "Returns the authenticated user's profile on Buda.com: email, display name, pubsub key, and monthly transacted amounts. Read-only. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {},
+        "required": []
+      }
+    },
+    {
+      "name": "get_balance",
+      "description": "Returns the balance for a single currency for the authenticated Buda.com account as a flat typed object. Includes total, available, frozen, and pending withdrawal amounts as floats with separate _currency fields. More efficient than get_balances when only one currency is needed. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated. Example: 'How much ETH do I have available?'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Currency code (e.g. 'BTC', 'ETH', 'CLP', 'USDC'). Case-insensitive."
+          }
+        },
+        "required": ["currency"]
+      }
+    },
+    {
+      "name": "get_order",
+      "description": "Fetch a single order by its numeric ID with full detail. All monetary amounts are floats with separate _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated. Example: 'What is the status of order 12345?'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "order_id": {
+            "type": "INTEGER",
+            "description": "Numeric order ID."
+          }
+        },
+        "required": ["order_id"]
+      }
+    },
+    {
+      "name": "get_order_by_client_id",
+      "description": "Fetch a single order by the client-assigned string ID set at placement time. All monetary amounts are floats with _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "client_id": {
+            "type": "STRING",
+            "description": "Client-assigned string ID used when placing the order."
+          }
+        },
+        "required": ["client_id"]
+      }
+    },
+    {
+      "name": "get_network_fees",
+      "description": "Returns the deposit or withdrawal fee schedule for a given currency: fee name, flat amount, minimum, maximum, and percentage flag. Useful before initiating a withdrawal. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated. Example: 'What is the fee to withdraw ETH from Buda?'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Currency code (e.g. 'BTC', 'ETH', 'CLP'). Case-insensitive."
+          },
+          "type": {
+            "type": "STRING",
+            "description": "Fee direction: 'deposit' or 'withdrawal'."
+          }
+        },
+        "required": ["currency", "type"]
+      }
+    },
+    {
+      "name": "get_deposit_history",
+      "description": "Deposit history for a currency, optionally filtered by state and paginated. Amounts are floats with _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated. Example: 'Show my confirmed BTC deposits.'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Currency code (e.g. 'BTC', 'CLP'). Case-insensitive."
+          },
+          "state": {
+            "type": "STRING",
+            "description": "Filter by state: 'pending_info', 'pending', 'confirmed', 'anulled', 'retained'. Omit to return all."
+          },
+          "per": {
+            "type": "INTEGER",
+            "description": "Results per page (default 20, max 300)."
+          },
+          "page": {
+            "type": "INTEGER",
+            "description": "Page number (default 1)."
+          }
+        },
+        "required": ["currency"]
+      }
+    },
+    {
+      "name": "get_withdrawal_history",
+      "description": "Withdrawal history for a currency, optionally filtered by state and paginated. Amounts are floats with _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated. Example: 'Show my pending BTC withdrawals.'",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Currency code (e.g. 'BTC', 'CLP'). Case-insensitive."
+          },
+          "state": {
+            "type": "STRING",
+            "description": "Filter by state: 'pending_signature', 'pending', 'confirmed', 'rejected', 'anulled'. Omit to return all."
+          },
+          "per": {
+            "type": "INTEGER",
+            "description": "Results per page (default 20, max 300)."
+          },
+          "page": {
+            "type": "INTEGER",
+            "description": "Page number (default 1)."
+          }
+        },
+        "required": ["currency"]
+      }
+    },
+    {
+      "name": "create_receive_address",
+      "description": "Generate a new crypto deposit (receive) address for a currency. Not idempotent — each call creates a new address. Crypto only. IMPORTANT: Requires confirmation_token='CONFIRM'. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Crypto currency code (e.g. 'BTC', 'ETH'). Case-insensitive."
+          },
+          "confirmation_token": {
+            "type": "STRING",
+            "description": "Must equal exactly 'CONFIRM' (case-sensitive) to generate a new address."
+          }
+        },
+        "required": ["currency", "confirmation_token"]
+      }
+    },
+    {
+      "name": "list_receive_addresses",
+      "description": "List all receive (deposit) addresses for a currency. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Crypto currency code (e.g. 'BTC', 'ETH'). Case-insensitive."
+          }
+        },
+        "required": ["currency"]
+      }
+    },
+    {
+      "name": "get_receive_address",
+      "description": "Fetch a specific receive (deposit) address by its numeric ID. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Crypto currency code (e.g. 'BTC', 'ETH'). Case-insensitive."
+          },
+          "id": {
+            "type": "INTEGER",
+            "description": "Numeric receive address ID."
+          }
+        },
+        "required": ["currency", "id"]
+      }
+    },
+    {
+      "name": "list_remittance_recipients",
+      "description": "List saved remittance recipients (bank accounts) for fiat transfers, with optional pagination. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "per": {
+            "type": "INTEGER",
+            "description": "Results per page (default 20, max 300)."
+          },
+          "page": {
+            "type": "INTEGER",
+            "description": "Page number (default 1)."
+          }
+        },
+        "required": []
+      }
+    },
+    {
+      "name": "get_remittance_recipient",
+      "description": "Fetch a single saved remittance recipient by ID. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "id": {
+            "type": "INTEGER",
+            "description": "Numeric recipient ID."
+          }
+        },
+        "required": ["id"]
+      }
+    },
+    {
+      "name": "list_remittances",
+      "description": "List past fiat remittance transfers with optional pagination. Amounts are floats with _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "per": {
+            "type": "INTEGER",
+            "description": "Results per page (default 20, max 300)."
+          },
+          "page": {
+            "type": "INTEGER",
+            "description": "Page number (default 1)."
+          }
+        },
+        "required": []
+      }
+    },
+    {
+      "name": "quote_remittance",
+      "description": "Create a time-limited remittance quote using the live FX rate. Does not transfer funds. Follow with accept_remittance_quote to execute. Not idempotent — each call creates a new remittance record. IMPORTANT: Requires confirmation_token='CONFIRM'. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "currency": {
+            "type": "STRING",
+            "description": "Fiat currency to remit (e.g. 'CLP', 'COP', 'PEN')."
+          },
+          "amount": {
+            "type": "NUMBER",
+            "description": "Amount to remit (positive number)."
+          },
+          "recipient_id": {
+            "type": "INTEGER",
+            "description": "Saved remittance recipient ID."
+          },
+          "confirmation_token": {
+            "type": "STRING",
+            "description": "Must equal exactly 'CONFIRM' (case-sensitive) to create the quote."
+          }
+        },
+        "required": ["currency", "amount", "recipient_id", "confirmation_token"]
+      }
+    },
+    {
+      "name": "accept_remittance_quote",
+      "description": "Accept and execute a previously quoted remittance. IMPORTANT: Irreversible — funds are transferred immediately. Requires confirmation_token='CONFIRM'. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "id": {
+            "type": "INTEGER",
+            "description": "Remittance quote ID to accept."
+          },
+          "confirmation_token": {
+            "type": "STRING",
+            "description": "Must equal exactly 'CONFIRM' (case-sensitive) to execute the remittance."
+          }
+        },
+        "required": ["id", "confirmation_token"]
+      }
+    },
+    {
+      "name": "get_remittance",
+      "description": "Fetch the status and details of a single remittance by ID. Amounts are floats with _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated.",
+      "parameters": {
+        "type": "OBJECT",
+        "properties": {
+          "id": {
+            "type": "INTEGER",
+            "description": "Remittance ID."
+          }
+        },
+        "required": ["id"]
+      }
+    },
     {
       "name": "get_balances",
       "description": "Returns all currency balances for the authenticated Buda.com account as flat typed objects. Each currency entry includes total amount, available amount (not frozen), frozen amount, and pending withdrawal amount — all as floats with separate _currency fields. Requires BUDA_API_KEY and BUDA_API_SECRET. Auth-gated. Example: 'How much BTC do I have available to trade right now?'",
@@ -432,7 +751,7 @@
     },
     {
       "name": "place_batch_orders",
-      "description": "Places up to 20 orders sequentially on Buda.com. All orders are pre-validated before any API call. Partial failures do not roll back placed orders. IMPORTANT: Requires confirmation_token='CONFIRM'. Auth-gated.",
+      "description": "Places up to 20 orders sequentially on Buda.com. All orders are pre-validated before any API call. Partial failures do not roll back placed orders. Use max_notional to cap total exposure (sum of amount x limit_price for limit orders; market orders contribute 0). IMPORTANT: Requires confirmation_token='CONFIRM'. Auth-gated.",
       "parameters": {
         "type": "OBJECT",
         "properties": {
@@ -440,6 +759,10 @@
             "type": "ARRAY",
             "description": "Array of 1–20 orders to place. Each order: market_id, type (Bid/Ask), price_type (limit/market), amount, optional limit_price."
           },
+          "max_notional": {
+            "type": "NUMBER",
+            "description": "Optional spending cap: total notional (sum of amount x limit_price for limit orders). Batch is rejected before any API call if exceeded. Market orders contribute 0."
+          },
           "confirmation_token": {
             "type": "STRING",
             "description": "Safety confirmation. Must equal exactly 'CONFIRM' (case-sensitive) to execute."
@@ -450,7 +773,7 @@
     },
     {
       "name": "create_withdrawal",
-      "description": "Creates a crypto or fiat withdrawal on Buda.com. Exactly one of address (crypto) or bank_account_id (fiat) must be provided. IMPORTANT: Requires confirmation_token='CONFIRM'. Auth-gated.",
+      "description": "Creates a crypto or fiat withdrawal on Buda.com. Exactly one of address (crypto) or bank_account_id (fiat) must be provided. WARNING: Crypto withdrawals are irreversible — verify the destination address carefully. IMPORTANT: Requires confirmation_token='CONFIRM'. Auth-gated.",
       "parameters": {
         "type": "OBJECT",
         "properties": {

package/marketplace/openapi.yaml

@@ -14,7 +14,7 @@ info:
     stdio server. Deploy locally with mcp-proxy:
       mcp-proxy --port 8000 -- npx -y @guiie/buda-mcp
     Or point `servers[0].url` at your hosted instance.
-  version: 1.5.0
+  version: 1.5.1
   contact:
     url: https://github.com/gtorreal/buda-mcp
 
@@ -488,6 +488,77 @@ paths:
         "404":
           $ref: "#/components/responses/NotFound"
 
+  /get_available_banks:
+    get:
+      operationId: getAvailableBanks
+      summary: Banks available for deposits and withdrawals of a fiat currency
+      description: |
+        Returns banks available for deposits and withdrawals of a given fiat currency on Buda.com.
+        Returns an empty banks array (not an error) if the currency has no associated banks
+        (e.g. crypto currencies or unsupported fiat currencies). Results are cached for 60 seconds.
+        Example: 'Which banks can I use for CLP deposits?'
+      parameters:
+        - name: currency
+          in: query
+          required: true
+          description: Fiat currency code (e.g. "CLP", "COP", "PEN"). Case-insensitive.
+          schema:
+            type: string
+            example: CLP
+      responses:
+        "200":
+          description: Available banks for the currency
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AvailableBanksResponse"
+        "404":
+          $ref: "#/components/responses/NotFound"
+
+  /get_real_quotation:
+    post:
+      operationId: getRealQuotation
+      summary: Server-side price quotation for a buy or sell
+      description: |
+        Calls the Buda quotation API to compute an accurate fill estimate including fees,
+        based on live order book state. Prefer this over simulate_order for accurate fee-tier-aware quotes.
+        This is a POST but does not place an order. Public endpoint — no API key required.
+        Example: 'Get an accurate quote to sell 0.05 BTC on BTC-CLP.'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [market_id, type, amount]
+              properties:
+                market_id:
+                  type: string
+                  description: Market identifier (e.g. "BTC-CLP", "ETH-BTC"). Case-insensitive.
+                  example: BTC-CLP
+                type:
+                  type: string
+                  enum: [Bid, Ask]
+                  description: "'Bid' to buy base currency, 'Ask' to sell base currency."
+                amount:
+                  type: number
+                  minimum: 0
+                  description: Order size in base currency (e.g. BTC for BTC-CLP).
+                  example: 0.05
+                limit:
+                  type: number
+                  minimum: 0
+                  description: Optional limit price in quote currency.
+      responses:
+        "200":
+          description: Quotation result with fill price, fees, and balance changes
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/QuotationResponse"
+        "404":
+          $ref: "#/components/responses/NotFound"
+
   /get_technical_indicators:
     get:
       operationId: getTechnicalIndicators
@@ -930,6 +1001,89 @@ components:
           type: string
           example: "Buda taker fee is 0.8% per leg. A round-trip arbitrage costs approximately 1.6% in fees."
 
+    BankEntry:
+      type: object
+      properties:
+        id:
+          type: string
+          example: banco_estado
+        name:
+          type: string
+          example: Banco Estado
+        country:
+          type: string
+          nullable: true
+          example: CL
+
+    AvailableBanksResponse:
+      type: object
+      properties:
+        currency:
+          type: string
+          example: CLP
+        banks:
+          type: array
+          description: Empty array if no banks are available for this currency.
+          items:
+            $ref: "#/components/schemas/BankEntry"
+
+    QuotationResponse:
+      type: object
+      properties:
+        id:
+          type: integer
+          nullable: true
+          example: 12345
+        type:
+          type: string
+          enum: [Bid, Ask]
+        market_id:
+          type: string
+          example: BTC-CLP
+        amount:
+          type: number
+          description: Requested order size in base currency.
+          example: 0.05
+        amount_currency:
+          type: string
+          example: BTC
+        limit:
+          type: number
+          nullable: true
+          description: Limit price in quote currency, if provided.
+        limit_currency:
+          type: string
+          nullable: true
+          example: CLP
+        base_balance_change:
+          type: number
+          description: Net change to base currency balance (negative for Ask).
+          example: -0.05
+        base_balance_change_currency:
+          type: string
+          example: BTC
+        quote_balance_change:
+          type: number
+          description: Net change to quote currency balance (negative for Bid).
+          example: 4000000
+        quote_balance_change_currency:
+          type: string
+          example: CLP
+        fee_amount:
+          type: number
+          description: Fee charged in quote currency.
+          example: 32000
+        fee_currency:
+          type: string
+          example: CLP
+        order_amount:
+          type: number
+          description: Gross order value before fees.
+          example: 4032000
+        order_amount_currency:
+          type: string
+          example: CLP
+
     SimulateOrderResponse:
       type: object
       properties:
@@ -1097,6 +1251,11 @@ components:
               type: number
             sma_50:
               type: number
+              nullable: true
+              description: "Null when fewer than 50 candles are available; check sma_50_warning."
+            sma_50_warning:
+              type: string
+              description: "Present only when sma_50 is null. Explains why SMA-50 could not be computed."
         signals:
           type: object
           properties:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guiie/buda-mcp",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "mcpName": "io.github.gtorreal/buda-mcp",
   "description": "MCP server for Buda.com's public cryptocurrency exchange API (Chile, Colombia, Peru)",
   "type": "module",
@@ -49,6 +49,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "express": "^5.2.1",
+    "express-rate-limit": "^8.3.2",
     "zod": "^4.3.6"
   },
   "devDependencies": {