@tensorfeed/mcp-server 1.27.0 → 1.29.0

package/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 All notable changes to the [TensorFeed.ai MCP server](https://github.com/RipperMercs/tensorfeed-mcp). Free tools work without configuration; premium tools require a bearer token via the `TENSORFEED_TOKEN` env var. Buy credits at [tensorfeed.ai/developers/agent-payments](https://tensorfeed.ai/developers/agent-payments).
 
+## 1.29.0 - 2026-05-13
+
+### Added
+- `get_honeypot_iocs` (free): wraps `/api/security/iocs.json`. First-party honeypot indicators-of-compromise observed against TensorFeed.ai trap endpoints over the last 30 days. Filter by `type` (ip / ua / path), cap with `limit` (default 50, max 500). License CC0; pure first-party observation, not a re-export. Pairs with `get_ai_supply_chain_iocs` (GHSA-derived) for a two-layer defender feed.
+- `check_afta_certification` (free): wraps `/api/afta-certify/check`. Runs 6 deterministic AFTA probes (well-known endpoints, x402 manifest, pricing transparency, free trial, federation membership, signed receipts) against any domain and returns score, verdict, and per-check pass/fail. Useful for federation prospects, agent governance audits, and demand-side trust signals.
+- `get_agent_reputation_card` (free): wraps `/api/agents/reputation/{wallet}` and `/api/agents/reputation/by-token/{prefix}`. Returns the Agent Reputation Bureau card for an EVM wallet or tf_live_ token prefix: reliability, activity, spend, streak, composite trust score, trust grade (S/A/B/C/D), flags, claim status, leaderboard ranks. Cards rebuild daily 04:50 UTC. Returns a helpful 404 hint when no card exists yet.
+
+### Added (MCP primitive)
+- `tensorfeed://news/latest` resource: latest 20 AI news articles as a JSON resource. First TF use of the MCP `resources` primitive, exposed alongside the existing `get_ai_news` tool. Hosts that prefer data-shaped surfaces (Claude Desktop, some agent frameworks) can attach the news feed directly without going through tool-call decision loops.
+
+### Fixed
+- `registerTool` now auto-infers `PREMIUM_READ_TOOL` annotations (`idempotentHint: false`) for any tool whose description includes "Costs N credit". Previously all read tools defaulted to `idempotentHint: true`, which meant agents that retried paid calls on transient failure could double-charge users. Affects every paid read tool (premium_routing, pricing_series, benchmark_series, status_uptime, status_leaderboard, premium_agents_directory, whats_new, compare_models, provider_deepdive, cost_projection, news_search, probe_series_premium). Write tools (create_*_watch / delete_watch) keep their explicit CREATE_TOOL / DELETE_TOOL annotations and bypass the inference.
+
+Tool count: 46 -> 49. First MCP resource live. Annotations now spec-honest about retry semantics.
+
+## 1.28.0 - 2026-05-13
+
+### Added
+- `get_ai_supply_chain_iocs` (free): wraps `/api/security/ai-supply-chain-iocs.json`. Daily-refreshed list of GitHub Security Advisory entries filtered by AI/ML/LLM/MCP keyword vocabulary across npm, PyPI, Go, Maven, and other package ecosystems. Each row carries the package name, ecosystem, GHSA advisory ID, severity, summary, vulnerable version range, publication date, and the canonical GHSA URL. Optional `severity` and `ecosystem` filters; `limit` caps result count (default 25, max 100). Republish posture: TensorFeed re-publishes already-public advisories; the linked GHSA record is authoritative. Useful for MCP-server reviewers, AI-tool maintainers, and supply-chain monitors that want a single AI-relevant feed rather than parsing all of GHSA.
+
+Tool count: 45 -> 46. Lands the same security feed that caught the @mistralai npm worm on day 1, now reachable as an MCP tool for defenders running agentic supply-chain audits.
+
 ## 1.27.0 - 2026-05-09
 
 ### Added

package/dist/index.js

@@ -78,6 +78,16 @@ const READ_TOOL = {
     idempotentHint: true,
     openWorldHint: true,
 };
+// Paid read tools: same as READ_TOOL but idempotentHint: false because each
+// call burns a credit. Agents that retry on transient failure under
+// READ_TOOL semantics would double-charge users on flaky networks. Applied
+// automatically below when a tool's description includes "Costs N credit".
+const PREMIUM_READ_TOOL = {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: false,
+    openWorldHint: true,
+};
 const CREATE_TOOL = {
     readOnlyHint: false,
     destructiveHint: false,
@@ -90,15 +100,50 @@ const DELETE_TOOL = {
     idempotentHint: true,
     openWorldHint: true,
 };
-function registerTool(name, description, paramsSchema, cb, annotations = READ_TOOL) {
+const PAID_TOOL_RE = /Costs \d+ credit/i;
+function registerTool(name, description, paramsSchema, cb, annotations) {
+    // When no explicit annotation is passed, infer from the description.
+    // Free reads: READ_TOOL (idempotent). Paid reads (description mentions
+    // "Costs N credit"): PREMIUM_READ_TOOL (NOT idempotent, because each
+    // call burns a credit and naive retry would double-charge). Tools that
+    // mutate (create_*_watch / delete_watch) pass CREATE_TOOL / DELETE_TOOL
+    // explicitly and bypass this inference.
+    const finalAnnotations = annotations ?? (PAID_TOOL_RE.test(description) ? PREMIUM_READ_TOOL : READ_TOOL);
     const wrapped = (async (args, extra) => {
         const result = await cb(args, extra);
         return sanitizeToolResponse(result);
     });
     // Direct dispatch to the SDK's underlying registration. Do not call
     // registerTool() here or it will recurse forever.
-    return server.tool(name, description, paramsSchema, annotations, wrapped);
+    return server.tool(name, description, paramsSchema, finalAnnotations, wrapped);
 }
+// ── Resource: tensorfeed://news (latest 20 AI articles) ─────────────
+// MCP's `resources` primitive is a parallel surface to tools. Hosts can
+// list resources, subscribe to them, and fetch them by URI without going
+// through the tool-call decision loop. We expose the latest news as a
+// resource AS WELL AS the get_ai_news tool, so clients that prefer
+// data-shaped surfaces (Claude Desktop, some agent frameworks) can attach
+// the news feed directly. Same upstream endpoint; different MCP primitive.
+server.registerResource('latest_news', 'tensorfeed://news/latest', {
+    description: 'Latest 20 AI news articles aggregated by TensorFeed.ai. Refreshed every ~10 minutes from 15+ sources (Anthropic, OpenAI, Google, TechCrunch, The Verge, arXiv, and more). Each row carries title, source, URL, snippet, categories, and publication timestamp. JSON payload. Refresh on `resources/read`; no subscription required.',
+    mimeType: 'application/json',
+}, async (uri) => {
+    const data = (await fetchJSON('/news?limit=20'));
+    return {
+        contents: [
+            {
+                uri: uri.toString(),
+                mimeType: 'application/json',
+                text: JSON.stringify({
+                    source: 'TensorFeed.ai',
+                    fetched_at: new Date().toISOString(),
+                    count: data.articles.length,
+                    articles: data.articles,
+                }, null, 2),
+            },
+        ],
+    };
+});
 // ── Tool: get_ai_news ───────────────────────────────────────────────
 registerTool('get_ai_news', 'Get the latest AI news articles from TensorFeed.ai. Aggregates from 15+ sources including Anthropic, OpenAI, Google, TechCrunch, The Verge, arXiv, and more.', {
     category: z.string().optional().describe('Filter by category (e.g. "anthropic", "openai", "research", "tools")'),
@@ -267,6 +312,170 @@ registerTool('get_agent_activity', 'Get live AI bot traffic on TensorFeed.ai. Re
         ],
     };
 });
+// ── Tool: get_ai_supply_chain_iocs ──────────────────────────────────
+registerTool('get_ai_supply_chain_iocs', 'Get the latest AI/ML supply-chain indicators-of-compromise from the TensorFeed defender feed. Daily-refreshed list of GitHub Security Advisory entries filtered by AI/ML/LLM/MCP keyword vocabulary across npm, PyPI, Go, Maven, and other ecosystems. Each entry includes the package name, ecosystem, GHSA advisory ID, severity, summary, vulnerable version range, publication date, and a link to the authoritative GHSA record. Pure data feed: TensorFeed re-publishes already-public advisories, does not detect malware, and does not attribute it. Always treat the linked GHSA record as authoritative. Useful for AI-tool maintainers, MCP-server reviewers, and supply-chain monitors that want a single feed of AI-relevant advisories rather than parsing all of GHSA.', {
+    severity: z
+        .enum(['critical', 'high', 'moderate', 'low'])
+        .optional()
+        .describe('Filter to a single GHSA severity tier'),
+    ecosystem: z
+        .string()
+        .optional()
+        .describe('Filter to a single package ecosystem (e.g. "npm", "pypi", "go", "maven")'),
+    limit: z
+        .number()
+        .min(1)
+        .max(100)
+        .optional()
+        .describe('Maximum number of advisories to return (default 25, max 100)'),
+}, async ({ severity, ecosystem, limit }) => {
+    const data = (await fetchJSON('/security/ai-supply-chain-iocs.json'));
+    const sevWanted = severity?.toLowerCase();
+    const ecoWanted = ecosystem?.toLowerCase();
+    const filtered = data.entries.filter((e) => {
+        if (sevWanted && e.severity.toLowerCase() !== sevWanted)
+            return false;
+        if (ecoWanted && e.package.ecosystem.toLowerCase() !== ecoWanted)
+            return false;
+        return true;
+    });
+    const cap = Math.min(limit ?? 25, 100);
+    const rows = filtered.slice(0, cap);
+    if (rows.length === 0) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `No AI supply-chain IOCs matched (total in feed: ${data.total}, generated ${data.generated_at}).`,
+                },
+            ],
+        };
+    }
+    const body = rows
+        .map((e, i) => {
+        const kw = e.ai_relevance?.matched_keywords?.length
+            ? ` [matched: ${e.ai_relevance.matched_keywords.join(', ')}]`
+            : '';
+        return [
+            `${i + 1}. ${e.package.ecosystem}: ${e.package.name} (${e.severity.toUpperCase()})`,
+            `   ${e.summary}`,
+            `   GHSA: ${e.advisory_id}  ${e.url}`,
+            `   Affected: ${e.vulnerable_version_range}  Published: ${e.published_at}${kw}`,
+        ].join('\n');
+    })
+        .join('\n\n');
+    const header = `AI supply-chain IOCs (${rows.length} of ${filtered.length} matched, ${data.total} in feed, generated ${data.generated_at}):`;
+    const footer = `\n\nPosture: ${data.posture}`;
+    return { content: [{ type: 'text', text: `${header}\n\n${body}${footer}` }] };
+});
+// ── Tool: get_honeypot_iocs ─────────────────────────────────────────
+registerTool('get_honeypot_iocs', 'Get the TensorFeed honeypot indicators-of-compromise feed. Returns attacker IP addresses, user agents, and target paths observed against TensorFeed.ai trap endpoints over the last 30 days. Pure first-party observation; not a re-export of upstream threat intel. License CC0; downstream defenders may ingest and pre-block at their edge. Each row: ioc value, ioc type (ip / ua / path), first_seen, last_seen, hit_count. Useful as a low-noise honeypot signal layered on top of public IOC feeds.', {
+    type: z
+        .enum(['ip', 'ua', 'path'])
+        .optional()
+        .describe('Filter to one IOC type. Omit to return all types.'),
+    limit: z
+        .number()
+        .min(1)
+        .max(500)
+        .optional()
+        .describe('Maximum number of IOCs to return (default 50, max 500)'),
+}, async ({ type, limit }) => {
+    const data = (await fetchJSON('/security/iocs.json'));
+    const typeWanted = type?.toLowerCase();
+    const filtered = data.iocs.filter((e) => !typeWanted || e.type.toLowerCase() === typeWanted);
+    const cap = Math.min(limit ?? 50, 500);
+    const rows = filtered.slice(0, cap);
+    if (rows.length === 0) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `No honeypot IOCs matched (total in feed: ${data.total_iocs}, window ${data.window_hours}h, generated ${data.generated_at}).`,
+                },
+            ],
+        };
+    }
+    const body = rows
+        .map((e, i) => `${i + 1}. [${e.type}] ${e.ioc}\n   hits: ${e.hit_count}  first: ${e.first_seen}  last: ${e.last_seen}`)
+        .join('\n');
+    const header = `TensorFeed honeypot IOCs (${rows.length} of ${filtered.length} matched, ${data.total_iocs} in feed, ${data.window_hours}h window, generated ${data.generated_at}):`;
+    const footer = `\n\nLicense: ${data.policy.license}. ${data.policy.description}`;
+    return { content: [{ type: 'text', text: `${header}\n\n${body}${footer}` }] };
+});
+// ── Tool: check_afta_certification ──────────────────────────────────
+registerTool('check_afta_certification', 'Check whether a domain is AFTA-certified (Agent Fair-Trade Agreement). AFTA is an open standard: cryptographically-signed receipts, transparent pricing, no-charge guarantees for failed responses, on-chain settlement, and federated trust between participating sites. The check runs 6 deterministic probes against the target domain (e.g. tensorfeed.ai, terminalfeed.io): well-known endpoint, receipts endpoint, x402 payment manifest, pricing transparency, free trial availability, federation membership. Returns score, verdict, and which checks passed/failed.', {
+    domain: z
+        .string()
+        .describe('Domain to certify (e.g. "tensorfeed.ai", "terminalfeed.io"). Bare host, no protocol.'),
+}, async ({ domain }) => {
+    const data = (await fetchJSON(`/afta-certify/check?domain=${encodeURIComponent(domain)}`));
+    const lines = data.checks.map((c) => `  ${c.passed ? 'PASS' : 'FAIL'}  ${c.name}${c.details ? ` (${c.details})` : ''}`);
+    const certified = data.afta_certified ? 'AFTA-CERTIFIED' : 'NOT certified';
+    const next = data.next_step ? `\nNext step: ${data.next_step}` : '';
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Domain: ${data.domain}\nScore: ${data.score}/${data.max}\nVerdict: ${data.verdict} (${certified})\nChecked: ${data.checked_at}\n\nChecks:\n${lines.join('\n')}${next}`,
+            },
+        ],
+    };
+});
+// ── Tool: get_agent_reputation_card ─────────────────────────────────
+registerTool('get_agent_reputation_card', 'Get a TensorFeed Agent Reputation Bureau card for an EVM wallet address or a tf_live_ token prefix. Cards rebuild daily at 04:50 UTC from on-chain receipts plus TF telemetry. Includes reliability score, paid-call activity, total USDC spent, longest paid streak, composite trust score (0-1), trust grade (S/A/B/C/D), flags (sybil_risk, abuse, paid_free_ratio_low), operator-claim status (wallet -> display name signed by EOA), and per-metric leaderboard ranks. Returns null/404 for unknown agents (TF only builds cards for wallets observed in production). Useful for assessing third-party agent trustworthiness before delegating high-value work.', {
+    wallet: z
+        .string()
+        .optional()
+        .describe('EVM wallet address (0x... 42 chars). Provide either this OR token_prefix.'),
+    token_prefix: z
+        .string()
+        .optional()
+        .describe('First N chars of an agent\'s tf_live_ bearer token. Useful when the agent has not signed an operator-claim yet.'),
+}, async ({ wallet, token_prefix }) => {
+    if (!wallet && !token_prefix) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: 'Provide either `wallet` (0x... EVM address) or `token_prefix` (tf_live_... token prefix). Both are accepted, one is required.',
+                },
+            ],
+        };
+    }
+    const path = wallet
+        ? `/agents/reputation/${encodeURIComponent(wallet)}`
+        : `/agents/reputation/by-token/${encodeURIComponent(token_prefix)}`;
+    let data;
+    try {
+        data = await fetchJSON(path);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (msg.includes('404') || msg.toLowerCase().includes('not_found')) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No reputation card for ${wallet ?? token_prefix}. TF only builds cards for wallets observed in production; if this is a real agent that has paid TF before, it should appear in the next daily rebuild (04:50 UTC).`,
+                    },
+                ],
+            };
+        }
+        throw e;
+    }
+    // The card schema is rich; render the highlights deterministically and
+    // include the raw JSON so the agent can reason over any field it needs.
+    const card = data.card ?? data;
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Agent reputation card for ${wallet ?? `token_prefix=${token_prefix}`}:\n\n${JSON.stringify(card, null, 2)}`,
+            },
+        ],
+    };
+});
 // ════════════════════════════════════════════════════════════════════
 // PREMIUM TOOLS (require TENSORFEED_TOKEN env var, paid in USDC on Base)
 // ════════════════════════════════════════════════════════════════════

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tensorfeed/mcp-server",
-  "version": "1.27.0",
+  "version": "1.29.0",
   "mcpName": "ai.tensorfeed/mcp-server",
   "description": "MCP server for TensorFeed.ai - AI news, status, model data, and premium endpoints (routing, cost projection, forecast, history series, news search, webhook watches with digest tier, enriched directory) for AI agents",
   "main": "dist/index.js",