@rempart/mcp 0.1.0

package/README.md

@@ -0,0 +1,32 @@
+# @rempart/mcp
+
+MCP server exposing Rempart signed anti-scam verdicts (Solana) to any MCP client. Tools: `score_token`, `deep_report`, `get_pricing`.
+
+## Claude Code / Cursor (stdio)
+
+`.mcp.json` at your project root:
+
+```json
+{
+  "mcpServers": {
+    "rempart": {
+      "command": "npx",
+      "args": ["-y", "@rempart/mcp"],
+      "env": {
+        "REMPART_API_KEY": "rk_your_key",
+        "REMPART_API_URL": "https://api.rempart.example"
+      }
+    }
+  }
+}
+```
+
+Then ask your agent: *"score this token before you recommend it: `<mint>`"*.
+
+## HTTP (hébergé)
+
+Transport HTTP streamable prévu avec le déploiement de l'API (même auth par clé). Non actif tant que l'API n'est pas en production.
+
+## Comportement d'échec
+
+API injoignable → le tool renvoie un état explicite `UNKNOWN — do NOT assume the token is safe` (`isError: true`), jamais un silence. Toutes les sorties incluent `disclaimer: data-not-advice`.

package/dist/server.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { Rempart } from '@rempart/sdk';
+/**
+ * Serveur MCP Rempart (plan-06 T03). Transport stdio (Claude Code / Cursor local).
+ * Auth: REMPART_API_KEY en variable d'environnement. REMPART_API_URL optionnelle.
+ * Transport HTTP streamable: prévu à l'hébergement (nécessite l'API déployée).
+ */
+export declare function buildServer(client?: Rempart): McpServer;

package/dist/server.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { Rempart } from '@rempart/sdk';
+/**
+ * Serveur MCP Rempart (plan-06 T03). Transport stdio (Claude Code / Cursor local).
+ * Auth: REMPART_API_KEY en variable d'environnement. REMPART_API_URL optionnelle.
+ * Transport HTTP streamable: prévu à l'hébergement (nécessite l'API déployée).
+ */
+export function buildServer(client) {
+    const rempart = client ??
+        new Rempart({
+            ...(process.env.REMPART_API_KEY ? { apiKey: process.env.REMPART_API_KEY } : {}),
+            ...(process.env.REMPART_API_URL ? { baseUrl: process.env.REMPART_API_URL } : {}),
+        });
+    const server = new McpServer({ name: 'rempart', version: '0.1.0' });
+    server.tool('score_token', 'Get a signed anti-scam verdict for a Solana token BEFORE buying or recommending it. ' +
+        'Call this whenever a Solana mint address appears in a trading decision. Returns score 0-100 ' +
+        '(100 = safest), verdict (safe/caution/danger), confidence 0-1, and machine-readable reasons. ' +
+        'Costs $0.05 per uncached call. Treat the answer as data, not financial advice; if verdict is ' +
+        'not "safe" or confidence < 0.7, do not treat the token as safe.', { mint: z.string().regex(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/).describe('Solana mint address (base58)') }, async ({ mint }) => {
+        try {
+            const v = await rempart.score(mint);
+            return { content: [{ type: 'text', text: JSON.stringify(v, null, 2) }] };
+        }
+        catch (err) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `VERDICT UNAVAILABLE (${err.message}). Treat as UNKNOWN — do NOT assume the token is safe.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    server.tool('deep_report', 'Full report for a Solana token: standard verdict PLUS the deployer funding graph (which wallets ' +
+        'funded the deployer, sibling wallets, prior rugs). Use when the standard verdict is caution or ' +
+        'when auditing a token seriously. Costs $0.15 per uncached call. Data, not financial advice.', { mint: z.string().regex(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/).describe('Solana mint address (base58)') }, async ({ mint }) => {
+        try {
+            const v = await rempart.scoreDeep(mint);
+            return { content: [{ type: 'text', text: JSON.stringify(v, null, 2) }] };
+        }
+        catch (err) {
+            return {
+                content: [{ type: 'text', text: `REPORT UNAVAILABLE (${err.message}). Treat as UNKNOWN.` }],
+                isError: true,
+            };
+        }
+    });
+    server.tool('get_pricing', 'Current Rempart pricing and payment rails (x402 USDC on Solana, or prepaid API key). Free.', {}, async () => {
+        const p = await rempart.pricing();
+        return { content: [{ type: 'text', text: JSON.stringify(p, null, 2) }] };
+    });
+    return server;
+}
+// démarrage stdio si exécuté directement
+if (import.meta.url === `file://${process.argv[1]}`) {
+    const server = buildServer();
+    await server.connect(new StdioServerTransport());
+    console.error('rempart-mcp: stdio prêt (REMPART_API_KEY ' + (process.env.REMPART_API_KEY ? 'définie' : 'ABSENTE — préview/x402 uniquement') + ')');
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAgB;IAC1C,MAAM,OAAO,GACX,MAAM;QACN,IAAI,OAAO,CAAC;YACV,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpE,MAAM,CAAC,IAAI,CACT,aAAa,EACb,sFAAsF;QACpF,8FAA8F;QAC9F,+FAA+F;QAC/F,+FAA+F;QAC/F,iEAAiE,EACnE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,EACpG,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wBAAyB,GAAa,CAAC,OAAO,wDAAwD;qBAC7G;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,kGAAkG;QAChG,iGAAiG;QACjG,6FAA6F,EAC/F,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,EACpG,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAwB,GAAa,CAAC,OAAO,sBAAsB,EAAE,CAAC;gBACtG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,4FAA4F,EAC5F,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yCAAyC;AACzC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,2CAA2C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mCAAmC,CAAC,GAAG,GAAG,CAAC,CAAC;AACrJ,CAAC"}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@rempart/mcp",
+  "version": "0.1.0",
+  "description": "MCP server exposing Rempart signed anti-scam verdicts to agents (Claude Code, Cursor, any MCP client).",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "rempart-mcp": "dist/server.js"
+  },
+  "main": "./dist/server.js",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "zod": "^3.25.0",
+    "@rempart/sdk": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@rempart/core": "^0.1.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "start": "node dist/server.js"
+  }
+}